./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor903353521 <...> pid 293] mkdir("./642", 0777 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... mkdir resumed>) = 0 [pid 291] umount2("./636/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./636/binderfs", [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3445 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./636/binderfs"./strace-static-x86_64: Process 3445 attached [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3444, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... unlink resumed>) = 0 [pid 289] umount2("./616", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3445] set_robust_list(0x5555700d1660, 24 [pid 292] umount2("./636", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./636") = 0 [pid 291] mkdir("./637", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3446 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./616", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./616/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./616/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./616/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./616") = 0 [pid 289] mkdir("./617", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3447 [ 63.012259][ T375] tty tty1: SAK: killed process 3438 (syz-executor903): by fd#3 [ 63.022115][ T375] tty tty1: SAK: killed process 3441 (syz-executor903): by fd#3 [ 63.035362][ T60] tty tty1: SAK: killed process 3442 (syz-executor903): by fd#3 [ 63.035384][ T60] tty tty1: SAK: killed process 3444 (syz-executor903): by fd#3 [ 63.051900][ T60] tty tty1: SAK: killed process 3442 (syz-executor903): by fd#3 [pid 3445] <... set_robust_list resumed>) = 0 [pid 3445] chdir("./642") = 0 ./strace-static-x86_64: Process 3447 attached ./strace-static-x86_64: Process 3446 attached [pid 3445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3442] +++ killed by SIGKILL +++ [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3447] set_robust_list(0x5555700d1660, 24 [pid 3446] set_robust_list(0x5555700d1660, 24 [pid 3445] <... prctl resumed>) = 0 [pid 292] openat(AT_FDCWD, "./636", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3447] <... set_robust_list resumed>) = 0 [pid 3446] <... set_robust_list resumed>) = 0 [pid 3445] setpgid(0, 0 [pid 292] <... openat resumed>) = 3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3442, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3447] chdir("./617" [pid 3446] chdir("./637" [pid 3445] <... setpgid resumed>) = 0 [pid 292] newfstatat(3, "", [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3447] <... chdir resumed>) = 0 [pid 3446] <... chdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] getdents64(3, [pid 3447] <... prctl resumed>) = 0 [pid 3446] <... prctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3447] setpgid(0, 0 [pid 3446] setpgid(0, 0 [pid 3445] <... openat resumed>) = 3 [pid 3447] <... setpgid resumed>) = 0 [pid 3446] <... setpgid resumed>) = 0 [pid 3445] write(3, "1000", 4 [pid 292] umount2("./636/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3445] <... write resumed>) = 4 [pid 3447] <... openat resumed>) = 3 [pid 3446] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3447] write(3, "1000", 4 [pid 3446] write(3, "1000", 4 [pid 3445] close(3 [pid 292] newfstatat(AT_FDCWD, "./636/binderfs", [pid 3447] <... write resumed>) = 4 [pid 3446] <... write resumed>) = 4 [pid 3445] <... close resumed>) = 0 [pid 3447] close(3 [pid 3446] close(3 [pid 3445] symlink("/dev/binderfs", "./binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3447] <... close resumed>) = 0 [pid 3446] <... close resumed>) = 0 [pid 3447] symlink("/dev/binderfs", "./binderfs" [pid 3446] symlink("/dev/binderfs", "./binderfs" [pid 3447] <... symlink resumed>) = 0 [pid 3446] <... symlink resumed>) = 0 [pid 3445] <... symlink resumed>) = 0 [pid 292] unlink("./636/binderfs"executing program executing program executing program [pid 3447] write(1, "executing program\n", 18 [pid 3446] write(1, "executing program\n", 18 [pid 3445] write(1, "executing program\n", 18 [pid 3447] <... write resumed>) = 18 [pid 3446] <... write resumed>) = 18 [pid 292] <... unlink resumed>) = 0 [pid 3447] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3446] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3445] <... write resumed>) = 18 [pid 3447] <... openat resumed>) = 3 [pid 3446] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 3447] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3446] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3445] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3447] <... ioctl resumed>) = 0 [pid 3446] <... ioctl resumed>) = 0 [pid 3446] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3445] <... openat resumed>) = 3 [pid 292] close(3 [pid 3447] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3446] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3446] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3447] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3445] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... close resumed>) = 0 [pid 3447] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3446] <... openat resumed>) = 4 [pid 3445] <... ioctl resumed>) = 0 [pid 292] rmdir("./636" [pid 3447] <... openat resumed>) = 4 [pid 3446] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3445] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3446] <... write resumed>) = ? [pid 3445] +++ killed by SIGKILL +++ [pid 292] <... rmdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3445, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] mkdir("./637", 0777 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./614", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3448 [pid 290] openat(AT_FDCWD, "./614", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./642", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] openat(AT_FDCWD, "./642", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./614/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3447] +++ killed by SIGKILL +++ [pid 293] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 290] newfstatat(AT_FDCWD, "./614/binderfs", [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3447, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] getdents64(3, [pid 290] unlink("./614/binderfs"executing program [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... unlink resumed>) = 0 [pid 293] umount2("./642/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] newfstatat(AT_FDCWD, "./642/binderfs", [pid 290] close(3 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... close resumed>) = 0 [pid 293] unlink("./642/binderfs" [pid 290] rmdir("./614" [pid 293] <... unlink resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 293] getdents64(3, [pid 290] mkdir("./615", 0777 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 293] close(3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./642" [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3449 [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./643", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3450 ./strace-static-x86_64: Process 3450 attached [pid 3450] set_robust_list(0x5555700d1660, 24) = 0 [pid 3450] chdir("./643") = 0 [pid 3450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3450] setpgid(0, 0) = 0 [pid 3450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3450] write(3, "1000", 4) = 4 [pid 3450] close(3) = 0 [pid 3450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3450] write(1, "executing program\n", 18) = 18 [pid 3450] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./617", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./617", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./617/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./617/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./617/binderfs"./strace-static-x86_64: Process 3449 attached ./strace-static-x86_64: Process 3448 attached ) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 289] close(3) = 0 [pid 289] rmdir("./617" [pid 3449] set_robust_list(0x5555700d1660, 24 [pid 3448] set_robust_list(0x5555700d1660, 24 [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./618", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3451 ./strace-static-x86_64: Process 3451 attached [pid 3451] set_robust_list(0x5555700d1660, 24) = 0 [pid 3451] chdir("./618") = 0 [pid 3451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3451] setpgid(0, 0) = 0 [pid 3451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3451] write(3, "1000", 4) = 4 [pid 3451] close(3) = 0 [pid 3451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3451] write(1, "executing program\n", 18) = 18 [pid 3451] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3449] <... set_robust_list resumed>) = 0 [pid 3449] chdir("./615") = 0 [pid 3449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3449] setpgid(0, 0) = 0 [pid 3449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3449] write(3, "1000", 4) = 4 [pid 3449] close(3 [pid 3448] <... set_robust_list resumed>) = 0 [pid 3448] chdir("./637" [pid 3446] +++ killed by SIGKILL +++ [pid 3448] <... chdir resumed>) = 0 [pid 3448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3448] setpgid(0, 0) = 0 [pid 3449] <... close resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3446, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3449] symlink("/dev/binderfs", "./binderfs" [pid 3448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3448] write(3, "1000", 4 [pid 3450] <... openat resumed>) = 3 [pid 3448] <... write resumed>) = 4 [pid 3448] close(3) = 0 [pid 3448] symlink("/dev/binderfs", "./binderfs" [pid 3451] <... openat resumed>) = 3 [pid 3450] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 3449] <... symlink resumed>) = 0 [pid 3448] <... symlink resumed>) = 0 [pid 3448] write(1, "executing program\n", 18 [pid 3450] <... ioctl resumed>) = 0 [pid 3450] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3448] <... write resumed>) = 18 [pid 3450] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3450] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3448] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3450] <... openat resumed>) = 4 [pid 3448] <... openat resumed>) = 3 executing program [pid 3450] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3448] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3450] <... write resumed>) = 8784 [pid 3448] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3448] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3451] +++ killed by SIGKILL +++ [pid 3449] write(1, "executing program\n", 18) = 18 [pid 3449] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3449] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3449] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3449] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3449] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3449] exit_group(0) = ? [pid 3449] +++ exited with 0 +++ [pid 3448] +++ killed by SIGKILL +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3448, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3449, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3451, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] umount2("./637", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./637", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./637/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./637/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./637/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./637") = 0 [pid 291] mkdir("./638", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3452 [ 63.051927][ T60] tty tty1: SAK: killed process 3444 (syz-executor903): by fd#3 [ 63.075900][ T60] tty tty1: SAK: killed process 3445 (syz-executor903): by fd#3 [ 63.075928][ T60] tty tty1: SAK: killed process 3446 (syz-executor903): by fd#3 [ 63.075950][ T60] tty tty1: SAK: killed process 3447 (syz-executor903): by fd#3 [ 63.104594][ T375] tty tty1: SAK: killed process 3448 (syz-executor903): by fd#3 [pid 290] umount2("./615", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./615", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./615/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./615/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./615/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./615") = 0 [pid 290] mkdir("./616", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3452 attached [pid 292] <... restart_syscall resumed>) = 0 [pid 289] umount2("./618", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3453 ./strace-static-x86_64: Process 3453 attached [pid 3453] set_robust_list(0x5555700d1660, 24) = 0 [pid 3453] chdir("./616") = 0 [pid 3453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3453] setpgid(0, 0) = 0 [pid 3453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3453] write(3, "1000", 4) = 4 [pid 3453] close(3) = 0 [pid 3453] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3453] write(1, "executing program\n", 18executing program ) = 18 [pid 3453] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3452] set_robust_list(0x5555700d1660, 24) = 0 [pid 3452] chdir("./638") = 0 [pid 3452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3452] setpgid(0, 0) = 0 [pid 3452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3452] write(3, "1000", 4) = 4 [pid 3452] close(3) = 0 [pid 3452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3452] write(1, "executing program\n", 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3452] <... write resumed>) = 18 [pid 3452] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] openat(AT_FDCWD, "./618", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3450] +++ killed by SIGKILL +++ [pid 292] umount2("./637", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... openat resumed>) = 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3450, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] openat(AT_FDCWD, "./637", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 289] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 289] umount2("./618/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./637/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./618/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./637/binderfs", [pid 289] unlink("./618/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3452] <... openat resumed>) = 3 [pid 292] unlink("./637/binderfs" [pid 289] <... unlink resumed>) = 0 [pid 3452] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3452] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 292] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 3452] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3452] <... openat resumed>) = 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 3452] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] close(3 [pid 3453] <... openat resumed>) = 3 [pid 3452] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3453] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] rmdir("./637" [pid 289] rmdir("./618" [pid 3453] <... ioctl resumed>) = 0 [pid 3452] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3452, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./638", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./638", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] umount2("./643", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... rmdir resumed>) = 0 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... rmdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] mkdir("./638", 0777 [pid 291] umount2("./638/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] mkdir("./619", 0777 [pid 293] openat(AT_FDCWD, "./643", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./638/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./638/binderfs" [pid 293] <... openat resumed>) = 3 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 293] newfstatat(3, "", [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] rmdir("./638" [pid 289] <... mkdir resumed>) = 0 [pid 3453] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3453] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] getdents64(3, [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3454 [pid 291] mkdir("./639", 0777 [pid 3453] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... mkdir resumed>) = 0 [pid 3453] <... openat resumed>) = 4 [pid 293] umount2("./643/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3455 ./strace-static-x86_64: Process 3455 attached ./strace-static-x86_64: Process 3454 attached [pid 3453] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3456 attached [pid 3455] set_robust_list(0x5555700d1660, 24 [pid 3454] set_robust_list(0x5555700d1660, 24 [pid 293] newfstatat(AT_FDCWD, "./643/binderfs", [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3456 [pid 3456] set_robust_list(0x5555700d1660, 24 [pid 3455] <... set_robust_list resumed>) = 0 [pid 3454] <... set_robust_list resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3456] <... set_robust_list resumed>) = 0 [pid 3455] chdir("./619" [pid 3454] chdir("./638" [pid 293] unlink("./643/binderfs" [pid 3456] chdir("./639" [pid 3455] <... chdir resumed>) = 0 [pid 3454] <... chdir resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 3456] <... chdir resumed>) = 0 [pid 3455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] getdents64(3, [pid 3456] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3455] <... prctl resumed>) = 0 [pid 3454] <... prctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3456] <... prctl resumed>) = 0 [pid 3455] setpgid(0, 0 [pid 3454] setpgid(0, 0 [pid 293] close(3 [pid 3456] setpgid(0, 0 [pid 3455] <... setpgid resumed>) = 0 [pid 3454] <... setpgid resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 3456] <... setpgid resumed>) = 0 [pid 3455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] rmdir("./643" [pid 3456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3455] <... openat resumed>) = 3 [pid 3454] <... openat resumed>) = 3 [pid 293] <... rmdir resumed>) = 0 [pid 3456] <... openat resumed>) = 3 [pid 3455] write(3, "1000", 4 [pid 3454] write(3, "1000", 4 [pid 3453] <... write resumed>) = ? [pid 293] mkdir("./644", 0777 [pid 3456] write(3, "1000", 4 [pid 3455] <... write resumed>) = 4 [pid 3454] <... write resumed>) = 4 [pid 3453] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3453, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3455] close(3 [pid 3454] close(3 [pid 293] <... mkdir resumed>) = 0 [pid 290] umount2("./616", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3455] <... close resumed>) = 0 [pid 3454] <... close resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3455] symlink("/dev/binderfs", "./binderfs" [pid 3454] symlink("/dev/binderfs", "./binderfs" [pid 290] openat(AT_FDCWD, "./616", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./616/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3454] <... symlink resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./616/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 3455] <... symlink resumed>) = 0 [pid 3454] write(1, "executing program\n", 18 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3457 [pid 290] unlink("./616/binderfs"executing program [pid 3455] write(1, "executing program\n", 18 [pid 3454] <... write resumed>) = 18 [pid 290] <... unlink resumed>) = 0 [pid 3455] <... write resumed>) = 18 [pid 3454] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] getdents64(3, [pid 3455] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 3455] <... openat resumed>) = 3 [pid 3454] <... openat resumed>) = 3 [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./616"./strace-static-x86_64: Process 3457 attached [pid 3456] <... write resumed>) = 4 [pid 3455] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3454] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... rmdir resumed>) = 0 [pid 3455] <... ioctl resumed>) = 0 [pid 3454] <... ioctl resumed>) = 0 [pid 290] mkdir("./617", 0777 [pid 3457] set_robust_list(0x5555700d1660, 24 [pid 3456] close(3 [pid 3455] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3454] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3455] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... mkdir resumed>) = 0 [pid 3455] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3454] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3457] <... set_robust_list resumed>) = 0 [pid 3456] <... close resumed>) = 0 [pid 3455] <... openat resumed>) = 4 [pid 3454] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 3458 attached [pid 3456] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 3455] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3458] set_robust_list(0x5555700d1660, 24 [pid 3454] <... openat resumed>) = 4 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3458 [pid 3458] <... set_robust_list resumed>) = 0 [pid 3455] <... write resumed>) = 8784 [pid 3458] chdir("./617") = 0 [pid 3458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3458] setpgid(0, 0) = 0 [pid 3458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3458] write(3, "1000", 4) = 4 [pid 3458] close(3) = 0 [pid 3458] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3458] write(1, "executing program\n", 18) = 18 [pid 3458] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3458] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3458] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3458] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3458] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3458] exit_group(0) = ? [pid 3457] chdir("./644") = 0 [pid 3457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3457] setpgid(0, 0) = 0 [pid 3457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3457] write(3, "1000", 4) = 4 [pid 3457] close(3) = 0 [pid 3457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3457] write(1, "executing program\n", 18) = 18 [pid 3457] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3457] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3457] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3457] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3457] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3457] exit_group(0) = ? [pid 3456] <... symlink resumed>) = 0 executing program [pid 3456] write(1, "executing program\n", 18) = 18 [ 63.104629][ T375] tty tty1: SAK: killed process 3450 (syz-executor903): by fd#3 [ 63.104646][ T375] tty tty1: SAK: killed process 3451 (syz-executor903): by fd#3 [ 63.132335][ T60] tty tty1: SAK: killed process 3452 (syz-executor903): by fd#3 [ 63.145719][ T60] tty tty1: SAK: killed process 3453 (syz-executor903): by fd#3 [pid 3456] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3458] +++ exited with 0 +++ [pid 3457] +++ exited with 0 +++ [pid 3456] <... openat resumed>) = 3 [pid 3456] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3455] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3458, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3456] <... ioctl resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3456] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3456] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 290] <... restart_syscall resumed>) = 0 [pid 3456] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3456] exit_group(0 [pid 290] umount2("./617", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3456] <... exit_group resumed>) = ? [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./617", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./617/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./617/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./617/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./617") = 0 [pid 290] mkdir("./618", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3459 ./strace-static-x86_64: Process 3459 attached [pid 3454] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3457, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3455, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3459] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3454, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3459] <... set_robust_list resumed>) = 0 [pid 3459] chdir("./618" [pid 3456] +++ exited with 0 +++ [pid 293] umount2("./644", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./638", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./619", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3459] <... chdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3456, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./644", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./638", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3459] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./619", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3459] setpgid(0, 0 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 3459] <... setpgid resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 3 [pid 3459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3459] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 3459] write(3, "1000", 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 3459] <... write resumed>) = 4 [pid 293] umount2("./644/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3459] close(3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3459] <... close resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./644/binderfs", [pid 289] getdents64(3, [pid 3459] symlink("/dev/binderfs", "./binderfs" [pid 292] umount2("./638/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3459] <... symlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3459] write(1, "executing program\n", 18executing program [pid 293] unlink("./644/binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3459] <... write resumed>) = 18 [pid 289] umount2("./619/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3459] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] <... unlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./638/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3459] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./619/binderfs", [pid 3459] <... ioctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] unlink("./638/binderfs" [pid 3459] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3459] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... close resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 289] unlink("./619/binderfs" [pid 3459] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] rmdir("./644" [pid 292] getdents64(3, [pid 3459] <... openat resumed>) = 4 [pid 289] <... unlink resumed>) = 0 [pid 3459] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 293] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] getdents64(3, [pid 293] mkdir("./645", 0777 [pid 3459] +++ killed by SIGKILL +++ [pid 292] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 289] close(3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] rmdir("./638" [pid 291] umount2("./639", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3459, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3460 attached [pid 292] <... rmdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... close resumed>) = 0 [pid 3460] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3460 [pid 292] mkdir("./639", 0777 [pid 291] openat(AT_FDCWD, "./639", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] rmdir("./619" [pid 3460] <... set_robust_list resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 289] <... rmdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] newfstatat(3, "", [pid 289] mkdir("./620", 0777./strace-static-x86_64: Process 3461 attached [pid 3460] chdir("./645" [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3461 [pid 291] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3461] set_robust_list(0x5555700d1660, 24 [pid 3460] <... chdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 3462 attached [pid 291] umount2("./639/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3462 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./639/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] unlink("./639/binderfs" [pid 3462] set_robust_list(0x5555700d1660, 24 [pid 3461] <... set_robust_list resumed>) = 0 [pid 3460] <... prctl resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./639" [pid 3461] chdir("./639" [pid 3462] <... set_robust_list resumed>) = 0 [pid 3460] setpgid(0, 0 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./640", 0777 [pid 3461] <... chdir resumed>) = 0 [pid 3460] <... setpgid resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3462] chdir("./620" [pid 3461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3463 ./strace-static-x86_64: Process 3463 attached [pid 3463] set_robust_list(0x5555700d1660, 24) = 0 [pid 3460] <... openat resumed>) = 3 [pid 3463] chdir("./640") = 0 [pid 3463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3463] setpgid(0, 0 [pid 3460] write(3, "1000", 4 [pid 3463] <... setpgid resumed>) = 0 [pid 3463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3463] write(3, "1000", 4) = 4 [pid 3463] close(3) = 0 [pid 3463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3460] <... write resumed>) = 4 executing program [pid 3461] <... prctl resumed>) = 0 [pid 3463] write(1, "executing program\n", 18) = 18 [pid 3463] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3463] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3461] setpgid(0, 0 [pid 3460] close(3 [pid 3463] <... ioctl resumed>) = 0 [pid 3463] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3461] <... setpgid resumed>) = 0 [pid 3460] <... close resumed>) = 0 [pid 3463] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3460] symlink("/dev/binderfs", "./binderfs" [pid 3463] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3463] <... openat resumed>) = 4 [pid 3463] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3460] <... symlink resumed>) = 0 [pid 3461] <... openat resumed>) = 3 [pid 3460] write(1, "executing program\n", 18executing program [pid 3463] <... write resumed>) = ? [pid 3462] <... chdir resumed>) = 0 [pid 3461] write(3, "1000", 4 [pid 3460] <... write resumed>) = 18 [pid 290] <... restart_syscall resumed>) = 0 [pid 3461] <... write resumed>) = 4 [pid 3460] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3461] close(3 [pid 3460] <... openat resumed>) = 3 [pid 3461] <... close resumed>) = 0 [pid 3460] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] umount2("./618", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3461] symlink("/dev/binderfs", "./binderfs" [pid 3460] <... ioctl resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3461] <... symlink resumed>) = 0 [pid 3460] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] openat(AT_FDCWD, "./618", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 3461] write(1, "executing program\n", 18 [pid 3460] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... openat resumed>) = 3 [pid 3461] <... write resumed>) = 18 [pid 3460] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] newfstatat(3, "", [pid 3461] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3460] <... openat resumed>) = 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3461] <... openat resumed>) = 3 [pid 3460] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] getdents64(3, [pid 3461] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3460] <... write resumed>) = 8784 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3461] <... ioctl resumed>) = ? [pid 290] umount2("./618/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3461] +++ killed by SIGKILL +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./618/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./618/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./618") = 0 [pid 290] mkdir("./619", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3464 [pid 3462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3462] setpgid(0, 0) = 0 [pid 3462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3462] write(3, "1000", 4) = 4 [pid 3462] close(3) = 0 ./strace-static-x86_64: Process 3464 attached [pid 3460] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3460, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3462] symlink("/dev/binderfs", "./binderfs") = 0 [ 63.160179][ T375] tty tty1: SAK: killed process 3454 (syz-executor903): by fd#3 [ 63.160207][ T375] tty tty1: SAK: killed process 3455 (syz-executor903): by fd#3 [ 63.182821][ T60] tty tty1: SAK: killed process 3459 (syz-executor903): by fd#3 [ 63.200959][ T375] tty tty1: SAK: killed process 3463 (syz-executor903): by fd#3 [ 63.209102][ T375] tty tty1: SAK: killed process 3460 (syz-executor903): by fd#3 [pid 3462] write(1, "executing program\n", 18executing program ) = 18 [pid 3462] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3462] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3462] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3462] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3462] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3462] exit_group(0) = ? executing program [pid 3464] set_robust_list(0x5555700d1660, 24) = 0 [pid 3464] chdir("./619") = 0 [pid 3464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3464] setpgid(0, 0) = 0 [pid 3464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3464] write(3, "1000", 4) = 4 [pid 3464] close(3) = 0 [pid 3464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3464] write(1, "executing program\n", 18) = 18 [pid 3464] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3464] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3464] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3464] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3464] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3463] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3461, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3464] exit_group(0) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./645", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./645", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./645/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./645/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./645/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./645") = 0 [pid 293] mkdir("./646", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3465 [pid 292] umount2("./639", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./639", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./639/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./639/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./639/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./639") = 0 [pid 292] mkdir("./640", 0777 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3463, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3464] +++ exited with 0 +++ ./strace-static-x86_64: Process 3465 attached [pid 3465] set_robust_list(0x5555700d1660, 24) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3464, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3465] chdir("./646") = 0 [pid 3465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3466 [pid 3465] setpgid(0, 0) = 0 [pid 3465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3466 attached ) = 3 [pid 3465] write(3, "1000", 4) = 4 [pid 3465] close(3) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3465] symlink("/dev/binderfs", "./binderfs" [pid 290] umount2("./619", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./619", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3465] <... symlink resumed>) = 0 [pid 290] <... openat resumed>) = 3 executing program [pid 3465] write(1, "executing program\n", 18 [pid 290] newfstatat(3, "", [pid 3465] <... write resumed>) = 18 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 3465] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3466] set_robust_list(0x5555700d1660, 24 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3462] +++ exited with 0 +++ [pid 290] umount2("./619/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3462, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./619/binderfs", [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3466] <... set_robust_list resumed>) = 0 [pid 290] unlink("./619/binderfs" [pid 3465] <... openat resumed>) = 3 [pid 3465] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... unlink resumed>) = 0 [pid 3465] <... ioctl resumed>) = 0 [pid 290] getdents64(3, [pid 3465] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3465] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] close(3 [pid 3465] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... close resumed>) = 0 [pid 3465] <... openat resumed>) = 4 [pid 290] rmdir("./619" [pid 3465] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 290] <... rmdir resumed>) = 0 [pid 3465] exit_group(0 [pid 290] mkdir("./620", 0777 [pid 3465] <... exit_group resumed>) = ? [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3465] +++ exited with 0 +++ [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3467 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3465, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3467 attached [pid 3467] set_robust_list(0x5555700d1660, 24) = 0 [pid 3467] chdir("./620") = 0 [pid 3467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3466] chdir("./640" [pid 3467] setpgid(0, 0) = 0 [pid 3466] <... chdir resumed>) = 0 [pid 3467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3467] write(3, "1000", 4) = 4 [pid 3467] close(3) = 0 [pid 3467] symlink("/dev/binderfs", "./binderfs" [pid 3466] <... prctl resumed>) = 0 [pid 3467] <... symlink resumed>) = 0 [pid 3466] setpgid(0, 0executing program [pid 3467] write(1, "executing program\n", 18) = 18 [pid 293] <... restart_syscall resumed>) = 0 [pid 3466] <... setpgid resumed>) = 0 [pid 3467] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] umount2("./646", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] openat(AT_FDCWD, "./646", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3467] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 3466] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3467] <... ioctl resumed>) = 0 [pid 293] getdents64(3, [pid 3466] write(3, "1000", 4 [pid 3467] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3466] <... write resumed>) = 4 [pid 3467] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] umount2("./646/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3466] close(3 [pid 3467] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3466] <... close resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./646/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3466] symlink("/dev/binderfs", "./binderfs" [pid 293] unlink("./646/binderfs" [pid 3467] <... openat resumed>) = 4 [pid 3467] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program ) = ? [pid 3466] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./646") = 0 [pid 293] mkdir("./647", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3468 [pid 3466] write(1, "executing program\n", 18) = 18 [pid 3466] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3466] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3466] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3466] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3466] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 289] <... restart_syscall resumed>) = 0 [pid 3466] exit_group(0 [pid 289] umount2("./620", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3468 attached [pid 291] umount2("./640", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3468] set_robust_list(0x5555700d1660, 24 [pid 289] openat(AT_FDCWD, "./620", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./640", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 3468] <... set_robust_list resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 3466] <... exit_group resumed>) = ? executing program [pid 3468] chdir("./647") = 0 [pid 3468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3468] setpgid(0, 0) = 0 [pid 3468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3468] write(3, "1000", 4) = 4 [pid 3468] close(3) = 0 [pid 3468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3468] write(1, "executing program\n", 18) = 18 [pid 3468] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3468] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3468] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3468] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3468] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3468] exit_group(0) = ? [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./640/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./640/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./640/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./640") = 0 [pid 291] mkdir("./641", 0777 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./620/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] <... mkdir resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./620/binderfs", [pid 3466] +++ killed by SIGKILL +++ [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3467] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3466, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] unlink("./620/binderfs") = 0 [pid 289] getdents64(3, [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3469 [pid 289] close(3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3467, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... close resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] rmdir("./620"./strace-static-x86_64: Process 3469 attached [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 290] umount2("./620", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./620", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./620/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./620/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./620/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./620") = 0 [pid 290] mkdir("./621", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3470 [pid 292] umount2("./640", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./640", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./640/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3469] set_robust_list(0x5555700d1660, 24 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3469] <... set_robust_list resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./640/binderfs", ./strace-static-x86_64: Process 3470 attached [pid 3468] +++ exited with 0 +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] mkdir("./621", 0777 [pid 3470] set_robust_list(0x5555700d1660, 24 [pid 3469] chdir("./641" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3468, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] unlink("./640/binderfs" [pid 3470] <... set_robust_list resumed>) = 0 [pid 3469] <... chdir resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... unlink resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3470] chdir("./621" [pid 3469] <... prctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3469] setpgid(0, 0 [pid 292] close(3 [pid 3469] <... setpgid resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 3470] <... chdir resumed>) = 0 [pid 3469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] rmdir("./640"./strace-static-x86_64: Process 3471 attached [pid 3470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... rmdir resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3471 [pid 3471] set_robust_list(0x5555700d1660, 24 [pid 3470] <... prctl resumed>) = 0 [pid 3469] <... openat resumed>) = 3 [pid 292] mkdir("./641", 0777 [pid 3471] <... set_robust_list resumed>) = 0 [pid 3470] setpgid(0, 0 [pid 3471] chdir("./621" [pid 3470] <... setpgid resumed>) = 0 [pid 3469] write(3, "1000", 4 [pid 292] <... mkdir resumed>) = 0 [pid 3469] <... write resumed>) = 4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3471] <... chdir resumed>) = 0 [pid 3470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3472 attached [pid 3469] close(3 [pid 3472] set_robust_list(0x5555700d1660, 24 [pid 3470] <... openat resumed>) = 3 [pid 3469] <... close resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3472 [pid 3472] <... set_robust_list resumed>) = 0 [pid 3470] write(3, "1000", 4 [pid 3469] symlink("/dev/binderfs", "./binderfs" [pid 3471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3470] <... write resumed>) = 4 [pid 3471] <... prctl resumed>) = 0 [pid 3470] close(3 [pid 3469] <... symlink resumed>) = 0 [pid 3472] chdir("./641" [pid 3471] setpgid(0, 0 [pid 3470] <... close resumed>) = 0 [pid 3471] <... setpgid resumed>) = 0 [pid 3470] symlink("/dev/binderfs", "./binderfs" [pid 3471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3470] <... symlink resumed>) = 0 executing program executing program [pid 3469] write(1, "executing program\n", 18 [pid 3472] <... chdir resumed>) = 0 [pid 3471] <... openat resumed>) = 3 [pid 3470] write(1, "executing program\n", 18 [pid 3471] write(3, "1000", 4 [pid 3470] <... write resumed>) = 18 [pid 3471] <... write resumed>) = 4 [pid 3470] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3469] <... write resumed>) = 18 [pid 3472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3471] close(3 [pid 3470] <... openat resumed>) = 3 [pid 3472] <... prctl resumed>) = 0 [pid 3471] <... close resumed>) = 0 [pid 3470] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3469] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3471] symlink("/dev/binderfs", "./binderfs" [pid 3470] <... ioctl resumed>) = 0 [pid 3471] <... symlink resumed>) = 0 [pid 3470] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program [pid 3469] <... openat resumed>) = 3 [pid 3472] setpgid(0, 0 [pid 3471] write(1, "executing program\n", 18 [pid 3470] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3471] <... write resumed>) = 18 [pid 3470] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3471] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3470] <... openat resumed>) = 4 [pid 3469] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3471] <... openat resumed>) = 3 [ 63.209138][ T375] tty tty1: SAK: killed process 3461 (syz-executor903): by fd#3 [ 63.209161][ T375] tty tty1: SAK: killed process 3463 (syz-executor903): by fd#3 [ 63.241740][ T375] tty tty1: SAK: killed process 3467 (syz-executor903): by fd#3 [ 63.250208][ T375] tty tty1: SAK: killed process 3466 (syz-executor903): by fd#3 [ 63.250232][ T375] tty tty1: SAK: killed process 3467 (syz-executor903): by fd#3 [pid 3470] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3472] <... setpgid resumed>) = 0 [pid 3469] <... ioctl resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 3472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3469] +++ killed by SIGKILL +++ [pid 3472] <... openat resumed>) = 3 [pid 3470] <... write resumed>) = ? [pid 3472] write(3, "1000", 4 [pid 293] umount2("./647", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3469, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3472] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./641", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3472] close(3 [pid 293] openat(AT_FDCWD, "./647", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3472] <... close resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./641", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3472] symlink("/dev/binderfs", "./binderfs" [pid 293] newfstatat(3, "", [pid 291] <... openat resumed>) = 3 [pid 3472] <... symlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 291] newfstatat(3, "", [pid 3472] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3472] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 3472] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./647/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3472] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./641/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3472] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] newfstatat(AT_FDCWD, "./647/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3472] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./641/binderfs", [pid 3472] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] unlink("./647/binderfs" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3472] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... unlink resumed>) = 0 [pid 291] unlink("./641/binderfs" [pid 3472] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 3472] <... openat resumed>) = 4 [pid 3471] +++ killed by SIGKILL +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 3472] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3470] +++ killed by SIGKILL +++ [pid 293] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3471, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3472] <... write resumed>) = 8784 [pid 293] <... close resumed>) = 0 [pid 291] close(3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3470, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3472] exit_group(0 [pid 293] rmdir("./647" [pid 291] <... close resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3472] <... exit_group resumed>) = ? [pid 293] <... rmdir resumed>) = 0 [pid 291] rmdir("./641" [pid 293] mkdir("./648", 0777 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 291] mkdir("./642", 0777 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./621", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3473 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3474 [pid 290] openat(AT_FDCWD, "./621", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./621/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3474 attached ./strace-static-x86_64: Process 3473 attached [pid 3472] +++ exited with 0 +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3474] set_robust_list(0x5555700d1660, 24 [pid 3473] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3472, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] newfstatat(AT_FDCWD, "./621/binderfs", [pid 3474] <... set_robust_list resumed>) = 0 [pid 3473] <... set_robust_list resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3474] chdir("./642" [pid 290] unlink("./621/binderfs" [pid 3474] <... chdir resumed>) = 0 [pid 3473] chdir("./648" [pid 289] umount2("./621", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3473] <... chdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3474] <... prctl resumed>) = 0 [pid 3473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] getdents64(3, [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3474] setpgid(0, 0 [pid 3473] <... prctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3474] <... setpgid resumed>) = 0 [pid 3473] setpgid(0, 0 [pid 290] close(3 [pid 289] openat(AT_FDCWD, "./621", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3473] <... setpgid resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./621" [pid 289] <... openat resumed>) = 3 [pid 3474] <... openat resumed>) = 3 [pid 3473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... rmdir resumed>) = 0 [pid 289] newfstatat(3, "", [pid 3474] write(3, "1000", 4 [pid 3473] <... openat resumed>) = 3 [pid 290] mkdir("./622", 0777 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3474] <... write resumed>) = 4 [pid 3473] write(3, "1000", 4 [pid 289] getdents64(3, [pid 3474] close(3 [pid 3473] <... write resumed>) = 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3474] <... close resumed>) = 0 [pid 3473] close(3 [pid 290] <... mkdir resumed>) = 0 [pid 289] umount2("./621/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3474] symlink("/dev/binderfs", "./binderfs" [pid 3473] <... close resumed>) = 0 executing program executing program [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3474] <... symlink resumed>) = 0 [pid 3473] symlink("/dev/binderfs", "./binderfs" [pid 289] newfstatat(AT_FDCWD, "./621/binderfs", [pid 3474] write(1, "executing program\n", 18 [pid 3473] <... symlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3474] <... write resumed>) = 18 [pid 3473] write(1, "executing program\n", 18 [pid 289] unlink("./621/binderfs" [pid 3474] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3473] <... write resumed>) = 18 [pid 289] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 3475 attached [pid 3474] <... openat resumed>) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3475 [pid 3475] set_robust_list(0x5555700d1660, 24 [pid 3474] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3473] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] getdents64(3, [pid 3475] <... set_robust_list resumed>) = 0 [pid 3474] <... ioctl resumed>) = 0 [pid 3473] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3474] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3475] chdir("./622" [pid 3474] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 3473] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] close(3 [pid 3474] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3473] <... ioctl resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3475] <... chdir resumed>) = 0 [pid 3474] <... openat resumed>) = 4 [pid 289] rmdir("./621" [pid 3474] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3473] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3475] setpgid(0, 0 [pid 3473] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... rmdir resumed>) = 0 [pid 3475] <... setpgid resumed>) = 0 [pid 3475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3474] <... write resumed>) = 8784 [pid 3473] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] mkdir("./622", 0777 [pid 3475] <... openat resumed>) = 3 [pid 3475] write(3, "1000", 4) = 4 [pid 3475] close(3) = 0 [pid 3475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3473] <... openat resumed>) = ? [pid 289] <... mkdir resumed>) = 0 [pid 3475] write(1, "executing program\n", 18) = 18 [pid 3475] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3475] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3475] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3475] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3474] +++ killed by SIGKILL +++ [pid 3473] +++ killed by SIGKILL +++ [pid 292] <... restart_syscall resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3475] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3473, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3474, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3475] <... write resumed>) = 8784 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3476 [pid 3475] exit_group(0 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] umount2("./641", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... restart_syscall resumed>) = 0 [pid 3475] <... exit_group resumed>) = ? [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./641", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] umount2("./648", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 3 [pid 291] umount2("./642", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(3, "", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./648", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] openat(AT_FDCWD, "./642", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 291] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./641/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(AT_FDCWD, "./641/binderfs", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./648/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./642/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] unlink("./641/binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./648/binderfs", [pid 292] <... unlink resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./642/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./648/binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] unlink("./642/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 292] close(3 [pid 291] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 292] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] rmdir("./641" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 292] <... rmdir resumed>) = 0 [pid 291] close(3 [pid 293] <... close resumed>) = 0 [pid 292] mkdir("./642", 0777 [pid 291] <... close resumed>) = 0 [pid 293] rmdir("./648" [pid 292] <... mkdir resumed>) = 0 [pid 291] rmdir("./642" [pid 293] <... rmdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program executing program executing program [pid 291] <... rmdir resumed>) = 0 [pid 293] mkdir("./649", 0777 [pid 291] mkdir("./643", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3477 [pid 291] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3478 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3479 ./strace-static-x86_64: Process 3478 attached [pid 3478] set_robust_list(0x5555700d1660, 24) = 0 [pid 3478] chdir("./649") = 0 [pid 3478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3478] setpgid(0, 0) = 0 [pid 3478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3478] write(3, "1000", 4) = 4 [pid 3478] close(3) = 0 [pid 3478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3478] write(1, "executing program\n", 18) = 18 [pid 3478] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3476 attached [pid 3476] set_robust_list(0x5555700d1660, 24) = 0 [pid 3476] chdir("./622") = 0 [pid 3476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3476] setpgid(0, 0) = 0 [pid 3476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "1000", 4) = 4 [pid 3476] close(3) = 0 [pid 3476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3476] write(1, "executing program\n", 18) = 18 [pid 3476] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3477 attached [pid 3477] set_robust_list(0x5555700d1660, 24) = 0 [pid 3477] chdir("./642") = 0 [pid 3477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3477] setpgid(0, 0) = 0 [pid 3477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3477] write(3, "1000", 4) = 4 [pid 3477] close(3) = 0 [pid 3477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3477] write(1, "executing program\n", 18) = 18 [pid 3477] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3479 attached [pid 3479] set_robust_list(0x5555700d1660, 24 [pid 3475] +++ exited with 0 +++ [pid 3478] <... openat resumed>) = 3 [pid 3476] <... openat resumed>) = 3 [pid 3479] <... set_robust_list resumed>) = 0 [pid 3477] <... openat resumed>) = 3 [pid 3476] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3475, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3478] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3476] <... ioctl resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3476] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3478] <... ioctl resumed>) = 0 [pid 3477] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3476] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3476] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3476] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3479] chdir("./643" [pid 3478] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3477] <... ioctl resumed>) = 0 [pid 3476] <... write resumed>) = 8784 [pid 3478] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3478] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3478] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [ 63.275492][ T375] tty tty1: SAK: killed process 3469 (syz-executor903): by fd#3 [ 63.275524][ T375] tty tty1: SAK: killed process 3470 (syz-executor903): by fd#3 [ 63.275540][ T375] tty tty1: SAK: killed process 3471 (syz-executor903): by fd#3 [ 63.306640][ T375] tty tty1: SAK: killed process 3473 (syz-executor903): by fd#3 [ 63.306666][ T375] tty tty1: SAK: killed process 3474 (syz-executor903): by fd#3 [pid 3477] +++ killed by SIGKILL +++ [pid 3479] <... chdir resumed>) = 0 [pid 3479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3479] setpgid(0, 0) = 0 [pid 3479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3479] write(3, "1000", 4) = 4 [pid 3479] close(3) = 0 executing program [pid 3479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3479] write(1, "executing program\n", 18) = 18 [pid 3479] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3479] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3479] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3479] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3479] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3479] exit_group(0) = ? [pid 3478] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3477, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3478, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... restart_syscall resumed>) = 0 [pid 293] umount2("./649", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./642", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./622", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./649", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./649/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./649/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./649/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./649") = 0 [pid 293] mkdir("./650", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3480 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./642", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./642/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./642/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./642/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./642") = 0 [pid 292] mkdir("./643", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3481 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./622", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3476] +++ killed by SIGKILL +++ [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./622/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./622/binderfs", [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3476, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./622/binderfs" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./622"executing program ./strace-static-x86_64: Process 3481 attached ./strace-static-x86_64: Process 3480 attached ) = 0 [pid 290] mkdir("./623", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3482 ./strace-static-x86_64: Process 3482 attached [pid 3482] set_robust_list(0x5555700d1660, 24) = 0 [pid 3482] chdir("./623") = 0 [pid 3482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3482] setpgid(0, 0) = 0 [pid 3482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3482] write(3, "1000", 4) = 4 [pid 3482] close(3) = 0 [pid 3482] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3482] write(1, "executing program\n", 18) = 18 [pid 3482] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3481] set_robust_list(0x5555700d1660, 24) = 0 [pid 3481] chdir("./643") = 0 [pid 3481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3481] setpgid(0, 0) = 0 [pid 3481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3481] write(3, "1000", 4) = 4 [pid 3481] close(3) = 0 [pid 3481] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3481] write(1, "executing program\n", 18) = 18 [pid 3481] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3480] set_robust_list(0x5555700d1660, 24) = 0 [pid 3480] chdir("./650" [pid 289] <... restart_syscall resumed>) = 0 [pid 3480] <... chdir resumed>) = 0 [pid 289] umount2("./622", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./622", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3479] +++ exited with 0 +++ [pid 289] getdents64(3, [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3479, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] umount2("./622/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3480] <... prctl resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3480] setpgid(0, 0 [pid 289] newfstatat(AT_FDCWD, "./622/binderfs", [pid 3480] <... setpgid resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] unlink("./622/binderfs") = 0 [pid 3480] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 3482] <... openat resumed>) = 3 [pid 3481] <... openat resumed>) = 3 [pid 3480] write(3, "1000", 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3481] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3480] <... write resumed>) = 4 [pid 289] close(3 [pid 3481] <... ioctl resumed>) = 0 [pid 3480] close(3 [pid 289] <... close resumed>) = 0 [pid 3481] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3482] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3480] <... close resumed>) = 0 [pid 289] rmdir("./622" [pid 3481] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3481] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3480] symlink("/dev/binderfs", "./binderfs" [pid 289] <... rmdir resumed>) = 0 [pid 3482] <... ioctl resumed>) = 0 [pid 289] mkdir("./623", 0777 [pid 3481] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program ) = ? [pid 3480] <... symlink resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3480] write(1, "executing program\n", 18 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3480] <... write resumed>) = 18 [pid 3480] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3483 [pid 3480] <... openat resumed>) = 3 [pid 291] umount2("./643", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3480] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3480] <... ioctl resumed>) = 0 [pid 291] openat(AT_FDCWD, "./643", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3480] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... openat resumed>) = 3 [pid 3480] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] newfstatat(3, "", [pid 3480] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3480] <... openat resumed>) = 4 [pid 291] getdents64(3, [pid 3480] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3480] <... write resumed>) = 8784 [pid 291] umount2("./643/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3480] exit_group(0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3480] <... exit_group resumed>) = ? [pid 291] newfstatat(AT_FDCWD, "./643/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./643/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./643") = 0 [pid 291] mkdir("./644", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3484 ./strace-static-x86_64: Process 3483 attached ./strace-static-x86_64: Process 3484 attached [pid 3480] +++ exited with 0 +++ [pid 3482] +++ killed by SIGKILL +++ [pid 3483] set_robust_list(0x5555700d1660, 24) = 0 [pid 3483] chdir("./623") = 0 [pid 3483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3483] setpgid(0, 0) = 0 [pid 3483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3483] write(3, "1000", 4) = 4 [pid 3483] close(3) = 0 [pid 3483] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3483] write(1, "executing program\n", 18) = 18 [pid 3483] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3483] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3483] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3483] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3483] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [ 63.326490][ T60] tty tty1: SAK: killed process 3476 (syz-executor903): by fd#3 [ 63.326519][ T60] tty tty1: SAK: killed process 3477 (syz-executor903): by fd#3 [ 63.326538][ T60] tty tty1: SAK: killed process 3478 (syz-executor903): by fd#3 [ 63.355905][ T42] tty tty1: SAK: killed process 3481 (syz-executor903): by fd#3 [ 63.355932][ T42] tty tty1: SAK: killed process 3482 (syz-executor903): by fd#3 [pid 3483] exit_group(0) = ? [pid 3484] set_robust_list(0x5555700d1660, 24) = 0 [pid 3484] chdir("./644") = 0 [pid 3484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3484] setpgid(0, 0) = 0 [pid 3484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3484] write(3, "1000", 4) = 4 [pid 3484] close(3) = 0 [pid 3484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3482, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3484] write(1, "executing program\n", 18executing program [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3480, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3484] <... write resumed>) = 18 [pid 290] umount2("./623", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3484] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./650", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3484] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3484] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./623", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3484] <... ioctl resumed>) = 0 [pid 293] openat(AT_FDCWD, "./650", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3484] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 3484] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 3484] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3484] <... openat resumed>) = 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3484] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3484] exit_group(0) = ? [pid 3481] +++ killed by SIGKILL +++ [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./650/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./650/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./650/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./650") = 0 [pid 293] mkdir("./651", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3485 ./strace-static-x86_64: Process 3485 attached [pid 3483] +++ exited with 0 +++ [pid 290] getdents64(3, [pid 3485] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3481, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3485] <... set_robust_list resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./623/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3485] chdir("./651" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3483, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3485] <... chdir resumed>) = 0 [pid 3484] +++ exited with 0 +++ [pid 292] <... restart_syscall resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./623/binderfs", [pid 3485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3485] <... prctl resumed>) = 0 [pid 290] unlink("./623/binderfs" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3485] setpgid(0, 0 [pid 292] umount2("./643", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3484, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... unlink resumed>) = 0 [pid 3485] <... setpgid resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] getdents64(3, [pid 3485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] openat(AT_FDCWD, "./643", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3485] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] close(3 [pid 3485] write(3, "1000", 4 [pid 292] newfstatat(3, "", [pid 290] <... close resumed>) = 0 [pid 3485] <... write resumed>) = 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] rmdir("./623" [pid 3485] close(3 [pid 292] getdents64(3, [pid 290] <... rmdir resumed>) = 0 [pid 3485] <... close resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./644", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] mkdir("./624", 0777 [pid 3485] symlink("/dev/binderfs", "./binderfs" [pid 292] umount2("./643/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... mkdir resumed>) = 0 [pid 3485] <... symlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./644", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3485] write(1, "executing program\n", 18 [pid 292] newfstatat(AT_FDCWD, "./643/binderfs", executing program [pid 291] <... openat resumed>) = 3 [pid 3485] <... write resumed>) = 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3486 [pid 3485] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] unlink("./643/binderfs"./strace-static-x86_64: Process 3486 attached [pid 3485] <... openat resumed>) = 3 [pid 292] <... unlink resumed>) = 0 [pid 291] newfstatat(3, "", [pid 3485] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] getdents64(3, [pid 3485] <... ioctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3485] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] close(3 [pid 3485] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... close resumed>) = 0 [pid 3485] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] rmdir("./643" [pid 3486] set_robust_list(0x5555700d1660, 24 [pid 3485] <... openat resumed>) = 4 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3485] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] mkdir("./644", 0777executing program executing program ) = 0 [pid 291] getdents64(3, [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3487 ./strace-static-x86_64: Process 3487 attached [pid 3487] set_robust_list(0x5555700d1660, 24) = 0 [pid 3487] chdir("./644") = 0 [pid 3487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3487] setpgid(0, 0) = 0 [pid 3487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3487] write(3, "1000", 4) = 4 [pid 3487] close(3) = 0 [pid 3487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3487] write(1, "executing program\n", 18) = 18 [pid 3487] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3487] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3487] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3487] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3487] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3487] exit_group(0) = ? [pid 3486] <... set_robust_list resumed>) = 0 [pid 3486] chdir("./624") = 0 [pid 3486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3486] setpgid(0, 0) = 0 [pid 3486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3486] write(3, "1000", 4) = 4 [pid 3486] close(3) = 0 [pid 3486] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3486] write(1, "executing program\n", 18) = 18 [pid 3486] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3486] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3486] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3486] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3486] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3486] exit_group(0) = ? [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./644/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./644/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./644/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./644" [pid 3485] <... write resumed>) = ? [pid 291] <... rmdir resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 291] mkdir("./645", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3488 [pid 3487] +++ exited with 0 +++ [pid 289] umount2("./623", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3487, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3486] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3486, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3488 attached [pid 3488] set_robust_list(0x5555700d1660, 24) = 0 [pid 289] openat(AT_FDCWD, "./623", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... restart_syscall resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3485] +++ killed by SIGKILL +++ [pid 292] umount2("./644", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./644", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./644/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./644/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./644/binderfs" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3485, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./644" [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... rmdir resumed>) = 0 [pid 289] getdents64(3, [pid 292] mkdir("./645", 0777) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] umount2("./623/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3489 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3489 attached [pid 3488] chdir("./645" [pid 289] newfstatat(AT_FDCWD, "./623/binderfs", [pid 3488] <... chdir resumed>) = 0 [pid 3488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3488] setpgid(0, 0) = 0 [pid 3488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3488] <... openat resumed>) = 3 [pid 3488] write(3, "1000", 4) = 4 [pid 3488] close(3) = 0 [pid 289] unlink("./623/binderfs" [pid 3488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3488] write(1, "executing program\n", 18executing program [pid 289] <... unlink resumed>) = 0 [pid 3488] <... write resumed>) = 18 [pid 3488] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] getdents64(3, [pid 3489] set_robust_list(0x5555700d1660, 24 [pid 3488] <... openat resumed>) = 3 [pid 3489] <... set_robust_list resumed>) = 0 [pid 3488] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3488] <... ioctl resumed>) = 0 [pid 3488] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3488] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 289] close(3 [pid 3488] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3489] chdir("./645" [pid 3488] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./623") = 0 [pid 293] umount2("./651", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] mkdir("./624", 0777 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./651", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... mkdir resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, ./strace-static-x86_64: Process 3490 attached [pid 3489] <... chdir resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... restart_syscall resumed>) = 0 [pid 3489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] umount2("./651/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3490 [pid 3490] set_robust_list(0x5555700d1660, 24 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3490] <... set_robust_list resumed>) = 0 [pid 3489] <... prctl resumed>) = 0 [pid 3488] +++ killed by SIGKILL +++ [pid 293] newfstatat(AT_FDCWD, "./651/binderfs", [pid 3490] chdir("./624" [pid 3489] setpgid(0, 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3490] <... chdir resumed>) = 0 [pid 3489] <... setpgid resumed>) = 0 [pid 290] umount2("./624", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] unlink("./651/binderfs" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3488, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... unlink resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] openat(AT_FDCWD, "./624", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3490] <... prctl resumed>) = 0 [pid 3489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 3490] setpgid(0, 0 [pid 290] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(3, "", [pid 293] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... close resumed>) = 0 [pid 290] getdents64(3, [pid 293] rmdir("./651" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3490] <... setpgid resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 290] umount2("./624/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3489] <... openat resumed>) = 3 [pid 293] mkdir("./652", 0777 [pid 3489] write(3, "1000", 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3489] <... write resumed>) = 4 [pid 293] <... mkdir resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./624/binderfs", [pid 3490] <... openat resumed>) = 3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3490] write(3, "1000", 4) = 4 [pid 3490] close(3) = 0 [pid 3490] symlink("/dev/binderfs", "./binderfs" [pid 290] unlink("./624/binderfs" [pid 3490] <... symlink resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3491 [pid 290] <... unlink resumed>) = 0 [pid 3490] write(1, "executing program\n", 18 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 3490] <... write resumed>) = 18 [pid 290] close(3) = 0 [pid 3490] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] rmdir("./624" [pid 3490] <... openat resumed>) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 3490] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] mkdir("./625", 0777 [pid 3490] <... ioctl resumed>) = 0 [pid 3490] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3490] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... mkdir resumed>) = 0 [pid 3490] <... openat resumed>) = 4 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 63.372188][ T42] tty tty1: SAK: killed process 3481 (syz-executor903): by fd#3 [ 63.372211][ T42] tty tty1: SAK: killed process 3482 (syz-executor903): by fd#3 [ 63.396931][ T60] tty tty1: SAK: killed process 3485 (syz-executor903): by fd#3 [ 63.413094][ T42] tty tty1: SAK: killed process 3488 (syz-executor903): by fd#3 [pid 3490] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3492 attached ./strace-static-x86_64: Process 3491 attached ) = ? [pid 3489] close(3 [pid 291] <... restart_syscall resumed>) = 0 [pid 3492] set_robust_list(0x5555700d1660, 24 [pid 3489] <... close resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3492 [pid 3492] <... set_robust_list resumed>) = 0 [pid 3489] symlink("/dev/binderfs", "./binderfs" [pid 3492] chdir("./625" [pid 3489] <... symlink resumed>) = 0 [pid 291] umount2("./645", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3492] <... chdir resumed>) = 0 [pid 3491] set_robust_list(0x5555700d1660, 24 [pid 3489] write(1, "executing program\n", 18 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3491] <... set_robust_list resumed>) = 0 [pid 3491] chdir("./652" [pid 3492] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3491] <... chdir resumed>) = 0 [pid 3489] <... write resumed>) = 18 [pid 291] openat(AT_FDCWD, "./645", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3490] +++ killed by SIGKILL +++ [pid 3491] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3492] <... prctl resumed>) = 0 [pid 3489] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... openat resumed>) = 3 [pid 3491] <... prctl resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3490, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3491] setpgid(0, 0 [pid 3489] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3491] <... setpgid resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3489] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] getdents64(3, [pid 3491] <... openat resumed>) = 3 [pid 3489] <... ioctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3491] write(3, "1000", 4 [pid 291] umount2("./645/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3491] <... write resumed>) = 4 [pid 3491] close(3) = 0 [pid 3491] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3489] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3489] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] newfstatat(AT_FDCWD, "./645/binderfs", [pid 3491] write(1, "executing program\n", 18 [pid 3489] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3491] <... write resumed>) = 18 executing program [pid 291] unlink("./645/binderfs" [pid 3489] <... openat resumed>) = 4 [pid 3491] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 291] <... unlink resumed>) = 0 [pid 3489] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] getdents64(3, [pid 3491] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3491] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3489] <... write resumed>) = 8784 [pid 3491] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3491] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3491] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 3492] setpgid(0, 0) = 0 [pid 3492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3492] write(3, "1000", 4) = 4 [pid 3492] close(3) = 0 [pid 3492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3492] write(1, "executing program\n", 18) = 18 [pid 3492] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3492] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3492] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3492] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3492] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3492] exit_group(0) = ? [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./645") = 0 [pid 291] mkdir("./646", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3493 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./624", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3492] +++ exited with 0 +++ [pid 3491] +++ killed by SIGKILL +++ [pid 289] openat(AT_FDCWD, "./624", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./624/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./624/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./624/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./624") = 0 [pid 289] mkdir("./625", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3494 ./strace-static-x86_64: Process 3494 attached [pid 3494] set_robust_list(0x5555700d1660, 24) = 0 [pid 3494] chdir("./625") = 0 [pid 3494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3494] setpgid(0, 0) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3491, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3492, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] umount2("./652", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3493 attached ) = -1 EINVAL (Invalid argument) [pid 290] umount2("./625", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] openat(AT_FDCWD, "./652", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3493] set_robust_list(0x5555700d1660, 24 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3493] <... set_robust_list resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 3494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3489] +++ killed by SIGKILL +++ [pid 290] openat(AT_FDCWD, "./625", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3489, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] getdents64(3, [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./652/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 293] newfstatat(AT_FDCWD, "./652/binderfs", [pid 3493] chdir("./646" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] unlink("./652/binderfs" [pid 290] umount2("./625/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3493] <... chdir resumed>) = 0 [pid 3493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3493] <... prctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(AT_FDCWD, "./625/binderfs", [pid 293] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... close resumed>) = 0 [pid 290] unlink("./625/binderfs" [pid 293] rmdir("./652" [pid 3493] setpgid(0, 0) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... rmdir resumed>) = 0 [pid 290] getdents64(3, executing program [pid 293] mkdir("./653", 0777 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3493] <... openat resumed>) = 3 [pid 3493] write(3, "1000", 4) = 4 [pid 3493] close(3) = 0 [pid 3493] symlink("/dev/binderfs", "./binderfs" [pid 293] <... mkdir resumed>) = 0 [pid 290] close(3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... close resumed>) = 0 [pid 3493] <... symlink resumed>) = 0 [pid 3493] write(1, "executing program\n", 18) = 18 [pid 290] rmdir("./625" [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3495 [pid 3493] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./626", 0777 [pid 3493] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3493] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... mkdir resumed>) = 0 [pid 3493] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3493] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3493] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3496 attached ./strace-static-x86_64: Process 3495 attached [pid 3494] <... openat resumed>) = 3 [pid 3493] <... write resumed>) = ? [pid 3496] set_robust_list(0x5555700d1660, 24 [pid 3494] write(3, "1000", 4 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3496 [pid 3496] <... set_robust_list resumed>) = 0 [pid 3494] <... write resumed>) = 4 [pid 3496] chdir("./626" [pid 3494] close(3 [pid 3496] <... chdir resumed>) = 0 [pid 3494] <... close resumed>) = 0 [pid 3496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3494] symlink("/dev/binderfs", "./binderfs" executing program [pid 3496] <... prctl resumed>) = 0 [pid 3494] <... symlink resumed>) = 0 [pid 3496] setpgid(0, 0 [pid 3494] write(1, "executing program\n", 18 [pid 3496] <... setpgid resumed>) = 0 [pid 3495] set_robust_list(0x5555700d1660, 24 [pid 3494] <... write resumed>) = 18 [pid 3496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3495] <... set_robust_list resumed>) = 0 [pid 3494] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3493] +++ killed by SIGKILL +++ [pid 292] <... restart_syscall resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3493, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3494] <... openat resumed>) = 3 [pid 3494] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] umount2("./645", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./646", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3494] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./645", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./646", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3494] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 3494] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 3494] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 63.427014][ T60] tty tty1: SAK: killed process 3490 (syz-executor903): by fd#3 [ 63.439981][ T42] tty tty1: SAK: killed process 3489 (syz-executor903): by fd#3 [ 63.440007][ T42] tty tty1: SAK: killed process 3491 (syz-executor903): by fd#3 [ 63.462066][ T60] tty tty1: SAK: killed process 3493 (syz-executor903): by fd#3 [pid 3494] <... openat resumed>) = 4 [pid 292] getdents64(3, [pid 291] getdents64(3, executing program executing program executing program [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3494] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./645/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./646/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./646/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./646/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./646") = 0 [pid 291] mkdir("./647", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3497 ./strace-static-x86_64: Process 3497 attached [pid 3497] set_robust_list(0x5555700d1660, 24) = 0 [pid 3497] chdir("./647") = 0 [pid 3497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3497] setpgid(0, 0) = 0 [pid 3497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3497] write(3, "1000", 4) = 4 [pid 3497] close(3) = 0 [pid 3497] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3497] write(1, "executing program\n", 18) = 18 [pid 3497] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3497] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3497] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3497] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3496] <... openat resumed>) = 3 [pid 3496] write(3, "1000", 4) = 4 [pid 3496] close(3) = 0 [pid 3496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3496] write(1, "executing program\n", 18) = 18 [pid 3496] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3496] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3496] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3496] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3495] chdir("./653") = 0 [pid 3495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3495] setpgid(0, 0) = 0 [pid 3495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3495] write(3, "1000", 4) = 4 [pid 3495] close(3) = 0 [pid 3495] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3495] write(1, "executing program\n", 18) = 18 [pid 3495] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3495] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3495] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3495] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3494] <... write resumed>) = ? [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./645/binderfs", [pid 3494] +++ killed by SIGKILL +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./645/binderfs" [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3494, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3497] <... openat resumed>) = 4 [pid 3496] <... openat resumed>) = 4 [pid 3496] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... unlink resumed>) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3 [pid 289] umount2("./625", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... close resumed>) = 0 [pid 292] rmdir("./645" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3496] <... write resumed>) = ? [pid 292] <... rmdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "./625", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] mkdir("./646", 0777 [pid 3496] +++ killed by SIGKILL +++ [pid 289] <... openat resumed>) = 3 [pid 3495] <... openat resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] newfstatat(3, "", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3496, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3495] +++ killed by SIGKILL +++ [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3495, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3498 [pid 289] getdents64(3, [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./626", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./625/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./626", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 [pid 289] newfstatat(AT_FDCWD, "./625/binderfs", [pid 290] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] unlink("./625/binderfs" [pid 290] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 290] umount2("./626/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] close(3 [pid 290] newfstatat(AT_FDCWD, "./626/binderfs", [pid 289] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] rmdir("./625" [pid 290] unlink("./626/binderfs" [pid 289] <... rmdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] mkdir("./626", 0777 [pid 290] getdents64(3, [pid 289] <... mkdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] close(3) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3499 [pid 290] rmdir("./626") = 0 [pid 290] mkdir("./627", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3500 ./strace-static-x86_64: Process 3498 attached [pid 3498] set_robust_list(0x5555700d1660, 24) = 0 [pid 3498] chdir("./646") = 0 [pid 3498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3498] setpgid(0, 0./strace-static-x86_64: Process 3500 attached ./strace-static-x86_64: Process 3499 attached ) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./653", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./653", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./653/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./653/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./653/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./653") = 0 [pid 293] mkdir("./654", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3501 [pid 3498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3498] write(3, "1000", 4) = 4 [pid 3498] close(3) = 0 [pid 3498] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3498] write(1, "executing program\n", 18) = 18 [pid 3498] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3500] set_robust_list(0x5555700d1660, 24) = 0 [pid 3500] chdir("./627") = 0 [pid 3500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3500] setpgid(0, 0) = 0 [pid 3500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3500] write(3, "1000", 4) = 4 [pid 3500] close(3 [pid 3499] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 3501 attached [pid 3501] set_robust_list(0x5555700d1660, 24 [pid 3500] <... close resumed>) = 0 [pid 3499] <... set_robust_list resumed>) = 0 [pid 3497] +++ killed by SIGKILL +++ [pid 3501] <... set_robust_list resumed>) = 0 [pid 3500] symlink("/dev/binderfs", "./binderfs" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3497, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3501] chdir("./654" [pid 3500] <... symlink resumed>) = 0 [pid 3499] chdir("./626" [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3501] <... chdir resumed>) = 0 [pid 3500] write(1, "executing program\n", 18executing program [pid 3499] <... chdir resumed>) = 0 [pid 3498] <... openat resumed>) = 3 [pid 3501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3500] <... write resumed>) = 18 [pid 3499] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3501] <... prctl resumed>) = 0 [pid 3499] <... prctl resumed>) = 0 [pid 3501] setpgid(0, 0 [pid 3500] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3499] setpgid(0, 0 [pid 3501] <... setpgid resumed>) = 0 [pid 3498] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3499] <... setpgid resumed>) = 0 [pid 3501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3500] <... openat resumed>) = 3 [pid 3500] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3501] <... openat resumed>) = 3 [pid 3500] <... ioctl resumed>) = 0 [pid 3500] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3501] write(3, "1000", 4 [pid 3499] <... openat resumed>) = 3 [pid 3498] <... ioctl resumed>) = 0 [pid 3501] <... write resumed>) = 4 [pid 3499] write(3, "1000", 4 [pid 3501] close(3 [pid 3499] <... write resumed>) = 4 [pid 3501] <... close resumed>) = 0 [pid 3498] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3501] symlink("/dev/binderfs", "./binderfs" [pid 3499] close(3 [pid 3500] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3500] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3500] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3501] <... symlink resumed>) = 0 [pid 3499] <... close resumed>) = 0 [pid 3498] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3501] write(1, "executing program\n", 18 [pid 3499] symlink("/dev/binderfs", "./binderfs"executing program [pid 3501] <... write resumed>) = 18 [pid 3498] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3501] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3500] <... write resumed>) = ? [pid 3499] <... symlink resumed>) = 0 [pid 3498] <... openat resumed>) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 3501] <... openat resumed>) = 3 executing program [pid 3499] write(1, "executing program\n", 18 [pid 3501] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3499] <... write resumed>) = 18 [pid 3501] <... ioctl resumed>) = 0 [pid 3499] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3501] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3499] <... openat resumed>) = 3 [pid 3501] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3499] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3501] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3499] <... ioctl resumed>) = 0 [pid 3501] <... openat resumed>) = 4 [pid 3499] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3501] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3499] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3501] <... write resumed>) = 8784 [pid 3499] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3501] exit_group(0 [pid 3499] <... openat resumed>) = 4 [pid 3501] <... exit_group resumed>) = ? [pid 3499] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3499] exit_group(0) = ? [pid 291] umount2("./647", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./647", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3501] +++ exited with 0 +++ [pid 3500] +++ killed by SIGKILL +++ [pid 3499] +++ exited with 0 +++ [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./647/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./647/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./647/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./647") = 0 [pid 291] mkdir("./648", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3502 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3501, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] umount2("./654", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./654", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./654/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./654/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./654/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./654") = 0 [pid 293] mkdir("./655", 0777./strace-static-x86_64: Process 3502 attached [pid 3498] +++ killed by SIGKILL +++ [pid 293] <... mkdir resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3500, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3499, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3502] set_robust_list(0x5555700d1660, 24 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3502] <... set_robust_list resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3498, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3502] chdir("./648" [pid 292] umount2("./646", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./627", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./626", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3502] <... chdir resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3503 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] openat(AT_FDCWD, "./646", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./627", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./626", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3502] <... prctl resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 3502] setpgid(0, 0 [pid 292] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3502] <... setpgid resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3503 attached [pid 3502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 3503] set_robust_list(0x5555700d1660, 24 [pid 3502] <... openat resumed>) = 3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3502] write(3, "1000", 4 [pid 292] umount2("./646/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./627/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./626/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3502] <... write resumed>) = 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3502] close(3 [pid 292] newfstatat(AT_FDCWD, "./646/binderfs", [pid 290] newfstatat(AT_FDCWD, "./627/binderfs", [pid 289] newfstatat(AT_FDCWD, "./626/binderfs", [pid 3502] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3502] symlink("/dev/binderfs", "./binderfs" [pid 292] unlink("./646/binderfs" [pid 290] unlink("./627/binderfs" [pid 289] unlink("./626/binderfs" [pid 3503] <... set_robust_list resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 3503] chdir("./655" [pid 292] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3502] <... symlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 3502] write(1, "executing program\n", 18executing program [pid 292] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3502] <... write resumed>) = 18 [pid 292] <... close resumed>) = 0 [pid 290] close(3 [pid 289] close(3 [pid 3502] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] rmdir("./646" [pid 290] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3503] <... chdir resumed>) = 0 [pid 3502] <... openat resumed>) = 3 [pid 3503] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3502] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... rmdir resumed>) = 0 [pid 290] rmdir("./627" [pid 289] rmdir("./626" [pid 3503] <... prctl resumed>) = 0 [pid 3502] <... ioctl resumed>) = 0 [pid 292] mkdir("./647", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3503] setpgid(0, 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] mkdir("./628", 0777 [pid 289] mkdir("./627", 0777 [pid 3503] <... setpgid resumed>) = 0 [pid 3502] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 [pid 3502] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3504 [pid 290] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 3504 attached [pid 3503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3502] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3504] set_robust_list(0x5555700d1660, 24 [pid 3503] <... openat resumed>) = 3 [pid 3502] <... openat resumed>) = 4 [pid 3504] <... set_robust_list resumed>) = 0 [pid 3504] chdir("./647" [pid 3502] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3505 [pid 3503] write(3, "1000", 4./strace-static-x86_64: Process 3505 attached [pid 3504] <... chdir resumed>) = 0 [pid 3502] <... write resumed>) = 8784 [pid 3503] <... write resumed>) = 4 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3506 [pid 3504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 63.472399][ T42] tty tty1: SAK: killed process 3494 (syz-executor903): by fd#3 [ 63.481975][ T60] tty tty1: SAK: killed process 3495 (syz-executor903): by fd#3 [ 63.482001][ T60] tty tty1: SAK: killed process 3496 (syz-executor903): by fd#3 [ 63.482017][ T60] tty tty1: SAK: killed process 3497 (syz-executor903): by fd#3 [ 63.511271][ T42] tty tty1: SAK: killed process 3498 (syz-executor903): by fd#3 [ 63.511324][ T42] tty tty1: SAK: killed process 3500 (syz-executor903): by fd#3 [pid 3504] setpgid(0, 0) = 0 [pid 3504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3504] write(3, "1000", 4) = 4 [pid 3504] close(3) = 0 [pid 3504] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3504] write(1, "executing program\n", 18) = 18 [pid 3504] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3504] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3504] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3504] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3504] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3504] exit_group(0) = ? ./strace-static-x86_64: Process 3506 attached [pid 3506] set_robust_list(0x5555700d1660, 24) = 0 [pid 3506] chdir("./627") = 0 [pid 3504] +++ exited with 0 +++ [pid 3503] close(3 [pid 3505] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3504, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3503] <... close resumed>) = 0 [pid 3506] <... prctl resumed>) = 0 [pid 3506] setpgid(0, 0) = 0 [pid 3506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... restart_syscall resumed>) = 0 [pid 3503] symlink("/dev/binderfs", "./binderfs" [pid 3506] <... openat resumed>) = 3 [pid 3505] <... set_robust_list resumed>) = 0 [pid 3503] <... symlink resumed>) = 0 [pid 292] umount2("./647", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3506] write(3, "1000", 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3506] <... write resumed>) = 4 [pid 292] openat(AT_FDCWD, "./647", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3506] close(3 [pid 292] <... openat resumed>) = 3 [pid 3506] <... close resumed>) = 0 [pid 292] newfstatat(3, "", [pid 3506] symlink("/dev/binderfs", "./binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3506] <... symlink resumed>) = 0 [pid 292] getdents64(3, [pid 3506] write(1, "executing program\n", 18 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3506] <... write resumed>) = 18 [pid 292] umount2("./647/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3506] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./647/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./647/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./647") = 0 [pid 292] mkdir("./648", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3507 ./strace-static-x86_64: Process 3507 attached [pid 3507] set_robust_list(0x5555700d1660, 24) = 0 [pid 3507] chdir("./648") = 0 [pid 3507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3507] setpgid(0, 0) = 0 executing program [pid 3505] chdir("./628" [pid 3503] write(1, "executing program\n", 18 [pid 3502] +++ killed by SIGKILL +++ [pid 3506] <... openat resumed>) = 3 [pid 3505] <... chdir resumed>) = 0 [pid 3503] <... write resumed>) = 18 [pid 3507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3506] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3503] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3502, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3506] <... ioctl resumed>) = 0 [pid 3505] <... prctl resumed>) = 0 [pid 3503] <... openat resumed>) = 3 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3506] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3505] setpgid(0, 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 3506] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3505] <... setpgid resumed>) = 0 [pid 3503] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3506] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3503] <... ioctl resumed>) = 0 [pid 3506] <... openat resumed>) = 4 [pid 3505] <... openat resumed>) = 3 [pid 291] umount2("./648", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3506] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 3505] write(3, "1000", 4 [pid 3503] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3507] <... openat resumed>) = 3 [pid 3505] <... write resumed>) = 4 [pid 3503] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3505] close(3) = 0 [pid 3503] +++ killed by SIGKILL +++ [pid 3505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3505] write(1, "executing program\n", 18) = 18 [pid 3505] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3505] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3505] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3505] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3507] write(3, "1000", 4) = 4 [pid 3507] close(3) = 0 [pid 3507] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3507] write(1, "executing program\n", 18) = 18 [pid 3507] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3507] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3507] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3507] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3506] <... write resumed>) = ? [pid 3505] <... openat resumed>) = 4 [pid 3505] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 291] openat(AT_FDCWD, "./648", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3505] exit_group(0 [pid 3506] +++ killed by SIGKILL +++ [pid 3505] <... exit_group resumed>) = ? [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3506, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3507] <... openat resumed>) = 4 [pid 3507] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3507] exit_group(0) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./627", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./627", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./627/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./627/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./627/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./627") = 0 [pid 289] mkdir("./628", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3508 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3503, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./655", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./655", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3508 attached [pid 3505] +++ exited with 0 +++ [pid 3507] +++ exited with 0 +++ [pid 293] getdents64(3, [pid 291] <... openat resumed>) = 3 [pid 3508] set_robust_list(0x5555700d1660, 24 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3505, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3508] <... set_robust_list resumed>) = 0 [pid 293] umount2("./655/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(3, "", [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3508] chdir("./628" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3508] <... chdir resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./655/binderfs", [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3507, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3508] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./648", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3508] <... prctl resumed>) = 0 [pid 293] unlink("./655/binderfs" [pid 291] getdents64(3, [pid 3508] setpgid(0, 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3508] <... setpgid resumed>) = 0 [pid 293] getdents64(3, [pid 292] openat(AT_FDCWD, "./648", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] umount2("./648/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3508] <... openat resumed>) = 3 [pid 293] close(3 [pid 292] newfstatat(3, "", [pid 291] newfstatat(AT_FDCWD, "./648/binderfs", [pid 3508] write(3, "1000", 4 [pid 293] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3508] <... write resumed>) = 4 [pid 293] rmdir("./655" [pid 292] getdents64(3, [pid 291] unlink("./648/binderfs" [pid 3508] close(3 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... unlink resumed>) = 0 [pid 3508] <... close resumed>) = 0 [pid 293] mkdir("./656", 0777 [pid 292] umount2("./648/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, [pid 3508] symlink("/dev/binderfs", "./binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] newfstatat(AT_FDCWD, "./648/binderfs", [pid 291] close(3 [pid 293] <... mkdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3508] <... symlink resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] unlink("./648/binderfs" [pid 291] rmdir("./648"executing program [pid 3508] write(1, "executing program\n", 18 [pid 292] <... unlink resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 3508] <... write resumed>) = 18 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3509 [pid 292] getdents64(3, [pid 291] mkdir("./649", 0777./strace-static-x86_64: Process 3509 attached [pid 3508] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] umount2("./628", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3509] set_robust_list(0x5555700d1660, 24 [pid 3508] <... openat resumed>) = 3 [pid 292] close(3 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3509] <... set_robust_list resumed>) = 0 [pid 3508] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] openat(AT_FDCWD, "./628", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3509] chdir("./656" [pid 3508] <... ioctl resumed>) = 0 [pid 292] rmdir("./648" [pid 290] <... openat resumed>) = 3 [pid 3509] <... chdir resumed>) = 0 [pid 3508] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] newfstatat(3, "", [pid 3509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3508] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3509] <... prctl resumed>) = 0 [pid 3508] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] getdents64(3, [pid 3509] setpgid(0, 0 [pid 3508] <... openat resumed>) = 4 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3510 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3509] <... setpgid resumed>) = 0 [ 63.536818][ T375] tty tty1: SAK: killed process 3502 (syz-executor903): by fd#3 [ 63.545248][ T375] tty tty1: SAK: killed process 3502 (syz-executor903): by fd#3 [ 63.556388][ T60] tty tty1: SAK: killed process 3503 (syz-executor903): by fd#3 [ 63.556421][ T60] tty tty1: SAK: killed process 3506 (syz-executor903): by fd#3 [pid 3508] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] mkdir("./649", 0777 [pid 290] umount2("./628/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3510 attached [pid 3509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3508] <... write resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3509] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./628/binderfs", [pid 3509] write(3, "1000", 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3509] <... write resumed>) = 4 [pid 290] unlink("./628/binderfs"executing program [pid 3509] close(3 [pid 290] <... unlink resumed>) = 0 [pid 3509] <... close resumed>) = 0 [pid 290] getdents64(3, [pid 3509] symlink("/dev/binderfs", "./binderfs" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3509] <... symlink resumed>) = 0 [pid 290] close(3 [pid 3509] write(1, "executing program\n", 18 [pid 290] <... close resumed>) = 0 [pid 3509] <... write resumed>) = 18 [pid 290] rmdir("./628" [pid 3509] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3508] +++ killed by SIGKILL +++ [pid 3510] set_robust_list(0x5555700d1660, 24 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... rmdir resumed>) = 0 [pid 3509] <... openat resumed>) = 3 [pid 290] mkdir("./629", 0777./strace-static-x86_64: Process 3511 attached [pid 3510] <... set_robust_list resumed>) = 0 [pid 3509] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... mkdir resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3508, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3510] chdir("./649" [pid 3509] <... ioctl resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3511 [pid 3510] <... chdir resumed>) = 0 [pid 3510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3510] setpgid(0, 0 [pid 3509] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3510] <... setpgid resumed>) = 0 [pid 3510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3509] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3509] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3512 [pid 3510] <... openat resumed>) = 3 [pid 3509] <... openat resumed>) = 4 [pid 3509] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3510] write(3, "1000", 4) = 4 [pid 3509] <... write resumed>) = 8784 [pid 3510] close(3) = 0 [pid 3510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3510] write(1, "executing program\n", 18) = 18 [pid 3510] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3510] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3510] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3510] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3510] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3510] exit_group(0) = ? ./strace-static-x86_64: Process 3512 attached [pid 3512] set_robust_list(0x5555700d1660, 24) = 0 [pid 3512] chdir("./629") = 0 [pid 3512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3512] setpgid(0, 0) = 0 [pid 3512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3512] write(3, "1000", 4) = 4 [pid 3512] close(3) = 0 [pid 3512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3512] write(1, "executing program\n", 18) = 18 [pid 3512] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3512] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3512] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3512] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3512] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3512] exit_group(0) = ? [pid 3511] set_robust_list(0x5555700d1660, 24) = 0 [pid 3511] chdir("./649") = 0 [pid 3511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3511] setpgid(0, 0) = 0 [pid 3511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3511] write(3, "1000", 4) = 4 [pid 3511] close(3) = 0 [pid 3511] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3511] write(1, "executing program\n", 18) = 18 [pid 3511] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3511] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3511] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3511] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program executing program executing program [pid 3510] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3510, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3511] <... openat resumed>) = 4 [pid 3512] +++ exited with 0 +++ [pid 3509] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3512, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3509, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] umount2("./628", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./628", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./628/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./628/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./628/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./628") = 0 [pid 289] mkdir("./629", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3513 ./strace-static-x86_64: Process 3513 attached [pid 3513] set_robust_list(0x5555700d1660, 24) = 0 [pid 3513] chdir("./629") = 0 [pid 3513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3513] setpgid(0, 0) = 0 [pid 3513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3513] write(3, "1000", 4) = 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./649", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./649", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 291] getdents64(3, [pid 3511] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3511, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3513] close(3) = 0 [pid 3513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 291] umount2("./649/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./629", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3513] write(1, "executing program\n", 18 [pid 291] newfstatat(AT_FDCWD, "./649/binderfs", [pid 290] openat(AT_FDCWD, "./629", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] umount2("./656", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 executing program [pid 293] openat(AT_FDCWD, "./656", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] unlink("./649/binderfs" [pid 290] newfstatat(3, "", [pid 293] <... openat resumed>) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 3513] <... write resumed>) = 18 [pid 3513] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] newfstatat(3, "", [pid 291] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3513] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./649", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, [pid 3513] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 3513] <... ioctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] openat(AT_FDCWD, "./649", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3513] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] umount2("./656/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 3 [pid 291] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3513] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(3, "", [pid 291] <... close resumed>) = 0 [pid 290] umount2("./629/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3513] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] newfstatat(AT_FDCWD, "./656/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] rmdir("./649" [pid 3513] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3513] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] unlink("./656/binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... rmdir resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./629/binderfs", [pid 3513] <... write resumed>) = ? [pid 293] <... unlink resumed>) = 0 [pid 292] umount2("./649/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] mkdir("./650", 0777 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... mkdir resumed>) = 0 [pid 290] unlink("./629/binderfs" [pid 3513] +++ killed by SIGKILL +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] newfstatat(AT_FDCWD, "./649/binderfs", [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... unlink resumed>) = 0 [pid 293] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 3514 attached [pid 293] <... close resumed>) = 0 [pid 292] unlink("./649/binderfs" [pid 290] getdents64(3, [pid 3514] set_robust_list(0x5555700d1660, 24 [pid 293] rmdir("./656" [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3514 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3513, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... rmdir resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] close(3 [pid 289] umount2("./629", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3514] <... set_robust_list resumed>) = 0 [pid 293] mkdir("./657", 0777 [pid 292] getdents64(3, [pid 290] <... close resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] openat(AT_FDCWD, "./629", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] close(3 [pid 289] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 289] newfstatat(3, "", [pid 292] rmdir("./649" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3514] chdir("./650" [pid 293] <... mkdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 290] rmdir("./629" [pid 289] getdents64(3, [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] mkdir("./650", 0777 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] umount2("./629/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] mkdir("./630", 0777 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3516 attached ./strace-static-x86_64: Process 3515 attached [pid 3514] <... chdir resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3515 [pid 290] <... mkdir resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./629/binderfs", [pid 3515] set_robust_list(0x5555700d1660, 24 [pid 3514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3516 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3516] set_robust_list(0x5555700d1660, 24 [pid 3515] <... set_robust_list resumed>) = 0 [pid 3514] <... prctl resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 3517 attached [pid 3515] chdir("./657" [pid 3514] setpgid(0, 0 [pid 289] unlink("./629/binderfs" [pid 3517] set_robust_list(0x5555700d1660, 24 [pid 3515] <... chdir resumed>) = 0 [pid 3514] <... setpgid resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3517 [pid 3517] <... set_robust_list resumed>) = 0 [pid 3515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3517] chdir("./630" [pid 3515] <... prctl resumed>) = 0 [pid 3514] <... openat resumed>) = 3 [pid 3517] <... chdir resumed>) = 0 [pid 3515] setpgid(0, 0 [pid 3514] write(3, "1000", 4 [pid 3517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3515] <... setpgid resumed>) = 0 [pid 3514] <... write resumed>) = 4 [pid 289] <... unlink resumed>) = 0 [pid 3517] <... prctl resumed>) = 0 [pid 3516] <... set_robust_list resumed>) = 0 [pid 3515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3514] close(3 [pid 3517] setpgid(0, 0 [pid 3515] <... openat resumed>) = 3 [pid 3514] <... close resumed>) = 0 [pid 289] getdents64(3, [pid 3517] <... setpgid resumed>) = 0 [pid 3516] chdir("./650" [pid 3515] write(3, "1000", 4 [pid 3514] symlink("/dev/binderfs", "./binderfs" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3516] <... chdir resumed>) = 0 [pid 3515] <... write resumed>) = 4 [pid 3514] <... symlink resumed>) = 0 [pid 289] close(3 [pid 3517] <... openat resumed>) = 3 [pid 3516] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3515] close(3executing program [pid 3514] write(1, "executing program\n", 18 [pid 3517] write(3, "1000", 4 [pid 3515] <... close resumed>) = 0 [pid 3514] <... write resumed>) = 18 [pid 289] <... close resumed>) = 0 [pid 3517] <... write resumed>) = 4 [pid 3515] symlink("/dev/binderfs", "./binderfs" [pid 3514] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3517] close(3 [pid 3516] <... prctl resumed>) = 0 [pid 3515] <... symlink resumed>) = 0 [pid 3514] <... openat resumed>) = 3 executing program [pid 289] rmdir("./629" [pid 3517] <... close resumed>) = 0 [pid 3515] write(1, "executing program\n", 18 [pid 3514] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3517] symlink("/dev/binderfs", "./binderfs" [pid 3515] <... write resumed>) = 18 [pid 3514] <... ioctl resumed>) = 0 [pid 3517] <... symlink resumed>) = 0 [pid 3515] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3514] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program [pid 289] <... rmdir resumed>) = 0 [pid 3517] write(1, "executing program\n", 18 [pid 3516] setpgid(0, 0 [pid 3515] <... openat resumed>) = 3 [pid 3514] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] mkdir("./630", 0777 [pid 3517] <... write resumed>) = 18 [pid 3515] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3514] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3517] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3515] <... ioctl resumed>) = 0 [pid 3514] <... openat resumed>) = 4 [pid 3517] <... openat resumed>) = 3 [pid 3515] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [ 63.581285][ T375] tty tty1: SAK: killed process 3508 (syz-executor903): by fd#3 [ 63.594641][ T375] tty tty1: SAK: killed process 3509 (syz-executor903): by fd#3 [ 63.603796][ T375] tty tty1: SAK: killed process 3511 (syz-executor903): by fd#3 [ 63.616726][ T60] tty tty1: SAK: killed process 3513 (syz-executor903): by fd#3 [pid 3514] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... mkdir resumed>) = 0 [pid 3516] <... setpgid resumed>) = 0 [pid 3514] <... write resumed>) = ? [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3515] <... ioctl resumed>) = ? [pid 3514] +++ killed by SIGKILL +++ [pid 3515] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3514, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3518 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3515, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./657", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./650", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./657", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./650", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3516] <... openat resumed>) = 3 [pid 293] umount2("./657/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./650/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./657/binderfs", [pid 291] newfstatat(AT_FDCWD, "./650/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./657/binderfs" [pid 291] unlink("./650/binderfs"./strace-static-x86_64: Process 3518 attached [pid 3516] write(3, "1000", 4 [pid 293] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 3516] <... write resumed>) = 4 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] close(3 [pid 293] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 293] rmdir("./657" [pid 291] rmdir("./650" [pid 3518] set_robust_list(0x5555700d1660, 24 [pid 3516] close(3 [pid 293] <... rmdir resumed>) = 0 [pid 3518] <... set_robust_list resumed>) = 0 [pid 3516] <... close resumed>) = 0 [pid 3518] chdir("./630" [pid 3516] symlink("/dev/binderfs", "./binderfs" [pid 3518] <... chdir resumed>) = 0 [pid 3516] <... symlink resumed>) = 0 executing program [pid 3518] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3516] write(1, "executing program\n", 18 [pid 3518] <... prctl resumed>) = 0 [pid 3516] <... write resumed>) = 18 [pid 3518] setpgid(0, 0 [pid 3516] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3518] <... setpgid resumed>) = 0 [pid 3518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3518] write(3, "1000", 4) = 4 [pid 3518] close(3) = 0 [pid 3518] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3518] write(1, "executing program\n", 18) = 18 [pid 3518] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./651", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3519 [pid 293] mkdir("./658", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3519 attached ./strace-static-x86_64: Process 3520 attached , child_tidptr=0x5555700d1650) = 3520 [pid 3519] set_robust_list(0x5555700d1660, 24) = 0 [pid 3519] chdir("./651") = 0 [pid 3519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3519] setpgid(0, 0) = 0 [pid 3519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3519] write(3, "1000", 4) = 4 [pid 3519] close(3) = 0 [pid 3519] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3519] write(1, "executing program\n", 18) = 18 [pid 3519] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3520] set_robust_list(0x5555700d1660, 24) = 0 [pid 3520] chdir("./658") = 0 [pid 3520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3520] setpgid(0, 0) = 0 [pid 3520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3520] write(3, "1000", 4) = 4 [pid 3520] close(3) = 0 executing program [pid 3520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3520] write(1, "executing program\n", 18) = 18 [pid 3520] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3517] +++ killed by SIGKILL +++ [pid 3520] <... openat resumed>) = 3 [pid 3519] <... openat resumed>) = 3 [pid 3518] <... openat resumed>) = 3 [pid 3516] <... openat resumed>) = 3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3517, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3520] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3519] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3518] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3516] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3520] <... ioctl resumed>) = 0 [pid 3519] <... ioctl resumed>) = 0 [pid 3518] <... ioctl resumed>) = 0 [pid 3516] <... ioctl resumed>) = 0 [pid 3520] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3519] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3518] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3516] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3520] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3519] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3518] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3516] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3520] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3519] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3518] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3516] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3520] <... openat resumed>) = 4 [pid 3519] <... openat resumed>) = 4 [pid 3518] <... openat resumed>) = 4 [pid 3516] <... openat resumed>) = 4 [pid 3520] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3519] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3518] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3516] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3520] <... write resumed>) = -1 (errno 18446744073709551615) [pid 3516] <... write resumed>) = ? [pid 3520] +++ killed by SIGKILL +++ [pid 3519] <... write resumed>) = ? [pid 3518] <... write resumed>) = ? [pid 290] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3520, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./658", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./658", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./658/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./658/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./658/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./658") = 0 [pid 293] mkdir("./659", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3521 [pid 290] umount2("./630", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3516] +++ killed by SIGKILL +++ [pid 290] openat(AT_FDCWD, "./630", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3521 attached [pid 3519] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3516, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... openat resumed>) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./630/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./630/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./630/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./630") = 0 [pid 290] mkdir("./631", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3522 [pid 3521] set_robust_list(0x5555700d1660, 24) = 0 [pid 3521] chdir("./659") = 0 [ 63.636453][ T375] tty tty1: SAK: killed process 3514 (syz-executor903): by fd#3 [ 63.636487][ T375] tty tty1: SAK: killed process 3515 (syz-executor903): by fd#3 [ 63.636511][ T375] tty tty1: SAK: killed process 3517 (syz-executor903): by fd#3 [ 63.666315][ T60] tty tty1: SAK: killed process 3516 (syz-executor903): by fd#3 [ 63.666420][ T60] tty tty1: SAK: killed process 3518 (syz-executor903): by fd#3 [pid 3521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3521] setpgid(0, 0) = 0 [pid 3521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3521] write(3, "1000", 4executing program ) = 4 [pid 3521] close(3) = 0 [pid 3521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3521] write(1, "executing program\n", 18) = 18 [pid 3521] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3519, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./651", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./651", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, ./strace-static-x86_64: Process 3522 attached 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./651/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./651/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./651/binderfs") = 0 [pid 291] getdents64(3, [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 292] umount2("./650", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] rmdir("./651" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... rmdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "./650", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] mkdir("./652", 0777 [pid 292] <... openat resumed>) = 3 [pid 291] <... mkdir resumed>) = 0 [pid 292] newfstatat(3, "", [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3523 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./650/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./650/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./650/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./650") = 0 [pid 292] mkdir("./651", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3522] set_robust_list(0x5555700d1660, 24) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3524 ./strace-static-x86_64: Process 3524 attached [pid 3522] chdir("./631" [pid 3524] set_robust_list(0x5555700d1660, 24) = 0 [pid 3522] <... chdir resumed>) = 0 [pid 3522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3522] setpgid(0, 0) = 0 [pid 3524] chdir("./651" [pid 3522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3524] <... chdir resumed>) = 0 [pid 3524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3522] <... openat resumed>) = 3 [pid 3522] write(3, "1000", 4 [pid 3524] setpgid(0, 0 [pid 3522] <... write resumed>) = 4 [pid 3522] close(3 [pid 3524] <... setpgid resumed>) = 0 [pid 3522] <... close resumed>) = 0 [pid 3522] symlink("/dev/binderfs", "./binderfs" [pid 3524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3522] <... symlink resumed>) = 0 executing program [pid 3522] write(1, "executing program\n", 18 [pid 3524] <... openat resumed>) = 3 [pid 3522] <... write resumed>) = 18 [pid 3524] write(3, "1000", 4 [pid 3522] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3524] <... write resumed>) = 4 [pid 3524] close(3) = 0 [pid 3524] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 3523 attached ) = 0 [pid 3521] <... openat resumed>) = 3 [pid 3518] +++ killed by SIGKILL +++ [pid 3522] <... openat resumed>) = 3 [pid 3521] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3518, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3521] <... ioctl resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3521] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3521] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3521] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3524] write(1, "executing program\n", 18 [pid 3523] set_robust_list(0x5555700d1660, 24 [pid 3522] set_robust_list(0x5555700d1660, 24 [pid 3521] <... write resumed>) = ? [pid 3523] <... set_robust_list resumed>) = 0 [pid 3522] +++ killed by SIGKILL +++ [pid 3523] chdir("./652") = 0 [pid 3523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3523] setpgid(0, 0) = 0 [pid 3523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3523] write(3, "1000", 4) = 4 [pid 3523] close(3) = 0 [pid 3523] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3523] write(1, "executing program\n", 18) = 18 [pid 3523] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3523] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3523] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3523] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... restart_syscall resumed>) = 0 [pid 3523] <... openat resumed>) = 4 [pid 3523] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3523] exit_group(0) = ? executing program [pid 3524] <... write resumed>) = 18 [pid 3524] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3524] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3524] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3524] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3524] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3524] exit_group(0) = ? [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3522, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./631", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./631", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3523] +++ exited with 0 +++ [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./631/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./631/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3523, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] unlink("./631/binderfs" [pid 3521] +++ killed by SIGKILL +++ [pid 291] umount2("./652", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... unlink resumed>) = 0 [pid 289] umount2("./630", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3524] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3521, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] openat(AT_FDCWD, "./652", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3524, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... openat resumed>) = 3 [pid 290] close(3 [pid 289] openat(AT_FDCWD, "./630", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] newfstatat(3, "", [pid 290] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] rmdir("./631" [pid 289] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 289] newfstatat(3, "", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./652/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... rmdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] newfstatat(AT_FDCWD, "./652/binderfs", [pid 290] mkdir("./632", 0777 [pid 289] umount2("./630/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] unlink("./652/binderfs" [pid 289] newfstatat(AT_FDCWD, "./630/binderfs", [pid 291] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 289] unlink("./630/binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 291] close(3 [pid 289] getdents64(3, [pid 291] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] rmdir("./652" [pid 289] close(3 [pid 291] <... rmdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 291] mkdir("./653", 0777 [pid 289] rmdir("./630"./strace-static-x86_64: Process 3525 attached [pid 291] <... mkdir resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3525 [pid 3525] set_robust_list(0x5555700d1660, 24) = 0 [pid 3525] chdir("./632" [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... rmdir resumed>) = 0 [pid 3525] <... chdir resumed>) = 0 [pid 3525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3525] setpgid(0, 0) = 0 [pid 3525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 289] mkdir("./631", 0777 [pid 3525] write(3, "1000", 4) = 4 [pid 3525] close(3) = 0 [pid 3525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3525] write(1, "executing program\n", 18) = 18 [pid 3525] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3525] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3526 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3525] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3525] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3525] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3527 attached ./strace-static-x86_64: Process 3526 attached ) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3527 [pid 3527] set_robust_list(0x5555700d1660, 24 [pid 3526] set_robust_list(0x5555700d1660, 24 [pid 292] <... restart_syscall resumed>) = 0 [pid 3525] +++ killed by SIGKILL +++ [pid 3527] <... set_robust_list resumed>) = 0 [pid 3527] chdir("./631" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3525, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3526] <... set_robust_list resumed>) = 0 [pid 3527] <... chdir resumed>) = 0 [pid 3527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3527] setpgid(0, 0) = 0 [pid 3526] chdir("./653" [pid 293] umount2("./659", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3527] write(3, "1000", 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./651", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3527] <... write resumed>) = 4 [pid 3526] <... chdir resumed>) = 0 [pid 3527] close(3) = 0 [pid 3527] symlink("/dev/binderfs", "./binderfs" [pid 3526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./659", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./632", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3527] <... symlink resumed>) = 0 [pid 3526] <... prctl resumed>) = 0 [pid 292] openat(AT_FDCWD, "./651", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY executing program [pid 3527] write(1, "executing program\n", 18 [pid 293] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3527] <... write resumed>) = 18 [pid 3526] setpgid(0, 0 [pid 293] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./632", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3527] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 3527] <... openat resumed>) = 3 [pid 3526] <... setpgid resumed>) = 0 [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3527] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./659/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./651/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3527] <... ioctl resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./659/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./632/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./651/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3527] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] unlink("./659/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./632/binderfs", [pid 3527] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... unlink resumed>) = 0 [pid 292] unlink("./651/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 290] unlink("./632/binderfs" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 3527] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 293] <... close resumed>) = 0 [pid 292] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] rmdir("./659" [pid 292] <... close resumed>) = 0 [pid 290] close(3 [pid 3527] <... openat resumed>) = 4 [pid 3526] <... openat resumed>) = 3 [pid 293] <... rmdir resumed>) = 0 [ 63.666448][ T60] tty tty1: SAK: killed process 3519 (syz-executor903): by fd#3 [ 63.666465][ T60] tty tty1: SAK: killed process 3520 (syz-executor903): by fd#3 [ 63.703150][ T375] tty tty1: SAK: killed process 3521 (syz-executor903): by fd#3 [ 63.703181][ T375] tty tty1: SAK: killed process 3522 (syz-executor903): by fd#3 [ 63.727217][ T20] tty tty1: SAK: killed process 3525 (syz-executor903): by fd#3 [pid 292] rmdir("./651"executing program executing program [pid 290] <... close resumed>) = 0 [pid 3527] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3526] write(3, "1000", 4 [pid 293] mkdir("./660", 0777 [pid 292] <... rmdir resumed>) = 0 [pid 290] rmdir("./632" [pid 293] <... mkdir resumed>) = 0 [pid 292] mkdir("./652", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... mkdir resumed>) = 0 [pid 290] mkdir("./633", 0777 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3528 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3529 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3530 ./strace-static-x86_64: Process 3529 attached [pid 3529] set_robust_list(0x5555700d1660, 24) = 0 [pid 3529] chdir("./652") = 0 [pid 3529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3529] setpgid(0, 0) = 0 [pid 3529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3529] write(3, "1000", 4) = 4 [pid 3529] close(3) = 0 [pid 3529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3529] write(1, "executing program\n", 18) = 18 [pid 3529] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 ./strace-static-x86_64: Process 3528 attached [pid 3529] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3528] set_robust_list(0x5555700d1660, 24) = 0 [pid 3528] chdir("./660" [pid 3529] <... ioctl resumed>) = 0 [pid 3529] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3529] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3528] <... chdir resumed>) = 0 [pid 3528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3528] setpgid(0, 0) = 0 [pid 3528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3528] write(3, "1000", 4) = 4 [pid 3528] close(3) = 0 [pid 3528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3528] write(1, "executing program\n", 18) = 18 [pid 3528] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3528] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3528] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3528] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3529] <... openat resumed>) = 4 [pid 3527] <... write resumed>) = ? [pid 3526] <... write resumed>) = 4 ./strace-static-x86_64: Process 3530 attached [pid 3526] close(3) = 0 [pid 3526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3529] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3527] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3527, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3529] <... write resumed>) = 8784 [pid 3530] set_robust_list(0x5555700d1660, 24 [pid 3529] exit_group(0 [pid 3530] <... set_robust_list resumed>) = 0 [pid 3529] +++ killed by SIGKILL +++ [pid 3528] <... openat resumed>) = ? [pid 3526] write(1, "executing program\n", 18 [pid 289] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3529, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] umount2("./631", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./652", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./631", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./652", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 292] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./631/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./652/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./631/binderfs", [pid 292] newfstatat(AT_FDCWD, "./652/binderfs", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./631/binderfs" [pid 292] unlink("./652/binderfs" [pid 289] <... unlink resumed>) = 0 executing program [pid 292] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 3526] <... write resumed>) = 18 [pid 292] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3526] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 3526] <... openat resumed>) = 3 [pid 292] close(3 [pid 289] <... close resumed>) = 0 [pid 3526] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... close resumed>) = 0 [pid 289] rmdir("./631" [pid 3526] <... ioctl resumed>) = 0 [pid 292] rmdir("./652" [pid 289] <... rmdir resumed>) = 0 [pid 3530] chdir("./633" [pid 3528] +++ killed by SIGKILL +++ [pid 3526] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... rmdir resumed>) = 0 [pid 289] mkdir("./632", 0777 [pid 3530] <... chdir resumed>) = 0 [pid 3526] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3528, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] mkdir("./653", 0777 [pid 289] <... mkdir resumed>) = 0 [pid 3530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3526] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3530] <... prctl resumed>) = 0 [pid 3526] <... openat resumed>) = 4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3531 attached ./strace-static-x86_64: Process 3532 attached [pid 3530] setpgid(0, 0 [pid 3526] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3531 [pid 3532] set_robust_list(0x5555700d1660, 24 [pid 3531] set_robust_list(0x5555700d1660, 24 [pid 3530] <... setpgid resumed>) = 0 [pid 3526] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3532 [pid 3532] <... set_robust_list resumed>) = 0 [pid 3531] <... set_robust_list resumed>) = 0 [pid 3530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3526] +++ killed by SIGKILL +++ [pid 3532] chdir("./653" [pid 3531] chdir("./632" [pid 3530] <... openat resumed>) = 3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3526, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3530] write(3, "1000", 4 [pid 293] umount2("./660", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./653", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3530] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./653", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3531] <... chdir resumed>) = 0 [pid 3530] close(3 [pid 293] openat(AT_FDCWD, "./660", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./653/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./653/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... openat resumed>) = 3 [pid 291] unlink("./653/binderfs" [pid 3530] <... close resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./653" [pid 3532] <... chdir resumed>) = 0 [pid 3531] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3530] symlink("/dev/binderfs", "./binderfs" [pid 293] newfstatat(3, "", [pid 291] <... rmdir resumed>) = 0 [pid 3532] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3531] <... prctl resumed>) = 0 [pid 3530] <... symlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] mkdir("./654", 0777 [pid 3532] <... prctl resumed>) = 0 [pid 3531] setpgid(0, 0executing program [pid 3530] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 3531] <... setpgid resumed>) = 0 [pid 3530] <... write resumed>) = 18 [pid 291] <... mkdir resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3530] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./660/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3533 ./strace-static-x86_64: Process 3533 attached [pid 3533] set_robust_list(0x5555700d1660, 24) = 0 [pid 3530] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3530] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] newfstatat(AT_FDCWD, "./660/binderfs", [pid 3530] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3530] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] unlink("./660/binderfs" [pid 3531] <... openat resumed>) = 3 [pid 3530] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3533] chdir("./654" [pid 3532] setpgid(0, 0 [pid 293] <... unlink resumed>) = 0 [pid 3530] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [ 63.742918][ T20] tty tty1: SAK: killed process 3527 (syz-executor903): by fd#3 [ 63.752735][ T20] tty tty1: SAK: killed process 3528 (syz-executor903): by fd#3 [ 63.752765][ T20] tty tty1: SAK: killed process 3529 (syz-executor903): by fd#3 [ 63.771743][ T375] tty tty1: SAK: killed process 3526 (syz-executor903): by fd#3 [pid 293] getdents64(3, [pid 3533] <... chdir resumed>) = 0 [pid 3532] <... setpgid resumed>) = 0 [pid 3531] write(3, "1000", 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3531] <... write resumed>) = 4 [pid 3530] <... openat resumed>) = 4 [pid 293] close(3 [pid 3530] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... close resumed>) = 0 [pid 3531] close(3) = 0 [pid 3531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3530] <... write resumed>) = 8784 [pid 3531] write(1, "executing program\n", 18) = 18 [pid 3531] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3531] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3531] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3531] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3531] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3531] exit_group(0) = ? [pid 3532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3533] setpgid(0, 0 [pid 3532] write(3, "1000", 4) = 4 [pid 3533] <... setpgid resumed>) = 0 [pid 3532] close(3 [pid 3533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3532] <... close resumed>) = 0 [pid 3532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3533] <... openat resumed>) = 3 [pid 3533] write(3, "1000", 4) = 4 [pid 3533] close(3 [pid 3532] write(1, "executing program\n", 18 [pid 3533] <... close resumed>) = 0 [pid 3532] <... write resumed>) = 18 [pid 3532] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3533] symlink("/dev/binderfs", "./binderfs" [pid 3532] <... openat resumed>) = 3 [pid 3532] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3533] <... symlink resumed>) = 0 [pid 3532] <... ioctl resumed>) = 0 [pid 3532] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3533] write(1, "executing program\n", 18) = 18 [pid 3532] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3532] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3533] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3532] <... openat resumed>) = 4 [pid 3533] <... openat resumed>) = 3 [pid 3532] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3533] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3533] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3533] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3533] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3532] exit_group(0) = ? [pid 3533] exit_group(0) = ? executing program executing program executing program [pid 3532] +++ exited with 0 +++ [pid 3531] +++ exited with 0 +++ [pid 293] rmdir("./660" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3532, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3531, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3533] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3533, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... restart_syscall resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3530] +++ killed by SIGKILL +++ [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./661", 0777 [pid 292] umount2("./653", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3530, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./632", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./633", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "./653", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./632", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./633", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 292] newfstatat(3, "", [pid 290] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3534 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./632/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./633/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./632/binderfs", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] newfstatat(AT_FDCWD, "./633/binderfs", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./653/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./632/binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] unlink("./633/binderfs" [pid 289] <... unlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./653/binderfs", [pid 290] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./654", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] unlink("./653/binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3./strace-static-x86_64: Process 3534 attached [pid 292] <... unlink resumed>) = 0 [pid 291] openat(AT_FDCWD, "./654", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] close(3 [pid 289] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... openat resumed>) = 3 [pid 290] <... close resumed>) = 0 [pid 289] rmdir("./632" [pid 3534] set_robust_list(0x5555700d1660, 24 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(3, "", [pid 290] rmdir("./633" [pid 289] <... rmdir resumed>) = 0 [pid 3534] <... set_robust_list resumed>) = 0 [pid 292] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 290] <... rmdir resumed>) = 0 [pid 289] mkdir("./633", 0777 [pid 292] rmdir("./653" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] mkdir("./634", 0777 [pid 289] <... mkdir resumed>) = 0 [pid 3534] chdir("./661" [pid 292] <... rmdir resumed>) = 0 [pid 291] umount2("./654/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3534] <... chdir resumed>) = 0 [pid 292] mkdir("./654", 0777 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3535 attached [pid 291] newfstatat(AT_FDCWD, "./654/binderfs", [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3535 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3536 [pid 291] unlink("./654/binderfs" [pid 3535] set_robust_list(0x5555700d1660, 24 [pid 3534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./654") = 0 [pid 291] mkdir("./655", 0777 [pid 3535] <... set_robust_list resumed>) = 0 [pid 3534] <... prctl resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 3534] setpgid(0, 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3537 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3535] chdir("./633" [pid 3534] <... setpgid resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3538 ./strace-static-x86_64: Process 3537 attached [pid 3537] set_robust_list(0x5555700d1660, 24) = 0 [pid 3537] chdir("./654") = 0 [pid 3537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3537] setpgid(0, 0 [pid 3534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3537] <... setpgid resumed>) = 0 [pid 3537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3537] write(3, "1000", 4 [pid 3534] <... openat resumed>) = 3 [pid 3537] <... write resumed>) = 4 [pid 3537] close(3) = 0 [pid 3537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3534] write(3, "1000", 4./strace-static-x86_64: Process 3538 attached ./strace-static-x86_64: Process 3536 attached [pid 3535] <... chdir resumed>) = 0 [pid 3534] <... write resumed>) = 4 [pid 3535] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 3537] write(1, "executing program\n", 18) = 18 [pid 3537] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3538] set_robust_list(0x5555700d1660, 24 [pid 3537] <... openat resumed>) = 3 [pid 3536] set_robust_list(0x5555700d1660, 24 [pid 3535] <... prctl resumed>) = 0 [pid 3534] close(3 [pid 3537] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3537] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3537] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3537] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3538] <... set_robust_list resumed>) = 0 [pid 3537] <... write resumed>) = ? [pid 3536] <... set_robust_list resumed>) = 0 [pid 3535] setpgid(0, 0 [pid 3534] <... close resumed>) = 0 [pid 3535] <... setpgid resumed>) = 0 [pid 3534] symlink("/dev/binderfs", "./binderfs" [pid 3535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3534] <... symlink resumed>) = 0 [pid 3535] <... openat resumed>) = 3 executing program [pid 3534] write(1, "executing program\n", 18 [pid 3535] write(3, "1000", 4 [pid 3534] <... write resumed>) = 18 [pid 3535] <... write resumed>) = 4 [pid 3534] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3535] close(3 [pid 3534] <... openat resumed>) = 3 [pid 3535] <... close resumed>) = 0 [pid 3534] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3535] symlink("/dev/binderfs", "./binderfs" [pid 3534] <... ioctl resumed>) = 0 [pid 3535] <... symlink resumed>) = 0 [pid 3534] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3535] write(1, "executing program\n", 18 [pid 3534] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 3535] <... write resumed>) = 18 [pid 3534] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3538] chdir("./655" [pid 3535] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3534] <... openat resumed>) = 4 [pid 3538] <... chdir resumed>) = 0 [pid 3536] chdir("./634" [pid 3535] <... openat resumed>) = 3 [pid 3534] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3538] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3536] <... chdir resumed>) = 0 [pid 3535] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3534] <... write resumed>) = -1 (errno 18446744073709551600) [pid 3538] <... prctl resumed>) = 0 [pid 3536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3535] <... ioctl resumed>) = ? [pid 3538] setpgid(0, 0 [pid 3536] <... prctl resumed>) = 0 [pid 3535] +++ killed by SIGKILL +++ [pid 3538] <... setpgid resumed>) = 0 [pid 3536] setpgid(0, 0 [pid 3538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3536] <... setpgid resumed>) = 0 [pid 3538] <... openat resumed>) = 3 [pid 3536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3538] write(3, "1000", 4 [pid 3536] <... openat resumed>) = 3 [pid 3538] <... write resumed>) = 4 [pid 3536] write(3, "1000", 4 [pid 3538] close(3 [pid 3536] <... write resumed>) = 4 [pid 3538] <... close resumed>) = 0 [pid 3536] close(3 [pid 3538] symlink("/dev/binderfs", "./binderfs" [pid 3536] <... close resumed>) = 0 [pid 3538] <... symlink resumed>) = 0 [pid 3536] symlink("/dev/binderfs", "./binderfs" [pid 3538] write(1, "executing program\n", 18 [pid 3536] <... symlink resumed>) = 0 executing program executing program [pid 3538] <... write resumed>) = 18 [pid 3536] write(1, "executing program\n", 18 [pid 3538] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3536] <... write resumed>) = 18 [pid 3538] <... openat resumed>) = 3 [pid 3536] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3538] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3536] <... openat resumed>) = 3 [pid 3538] <... ioctl resumed>) = 0 [pid 3536] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3538] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3537] +++ killed by SIGKILL +++ [pid 3536] <... ioctl resumed>) = 0 [pid 3534] +++ killed by SIGKILL +++ [ 63.787022][ T20] tty tty1: SAK: killed process 3530 (syz-executor903): by fd#3 [ 63.795506][ T20] tty tty1: SAK: killed process 3530 (syz-executor903): by fd#3 [ 63.827181][ T375] tty tty1: SAK: killed process 3537 (syz-executor903): by fd#3 [ 63.835422][ T375] tty tty1: SAK: killed process 3534 (syz-executor903): by fd#3 [pid 3538] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3536] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3534, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3537, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3538] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3536] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3538] <... openat resumed>) = 4 [pid 3536] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3538] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3536] <... openat resumed>) = 4 [pid 3538] <... write resumed>) = 8784 [pid 3536] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3538] exit_group(0 [pid 3536] <... write resumed>) = 8784 [pid 3538] <... exit_group resumed>) = ? [pid 3536] exit_group(0) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./661", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./661", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3538] +++ exited with 0 +++ [pid 293] umount2("./661/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./654", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3535, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./661/binderfs", [pid 292] openat(AT_FDCWD, "./654", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... openat resumed>) = 3 [pid 293] unlink("./661/binderfs" [pid 292] newfstatat(3, "", [pid 293] <... unlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] close(3 [pid 292] umount2("./654/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] rmdir("./661" [pid 292] newfstatat(AT_FDCWD, "./654/binderfs", [pid 293] <... rmdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] mkdir("./662", 0777 [pid 292] unlink("./654/binderfs" [pid 293] <... mkdir resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3539 [pid 292] close(3) = 0 [pid 292] rmdir("./654") = 0 [pid 292] mkdir("./655", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3539 attached [pid 3539] set_robust_list(0x5555700d1660, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3538, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- ./strace-static-x86_64: Process 3540 attached [pid 3539] <... set_robust_list resumed>) = 0 [pid 3536] +++ exited with 0 +++ [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3540 [pid 291] umount2("./655", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./633", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3540] set_robust_list(0x5555700d1660, 24 [pid 3539] chdir("./662" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3536, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3540] <... set_robust_list resumed>) = 0 [pid 3539] <... chdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "./655", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] openat(AT_FDCWD, "./633", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3540] chdir("./655" [pid 3539] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 3540] <... chdir resumed>) = 0 [pid 3539] <... prctl resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3539] setpgid(0, 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3540] <... prctl resumed>) = 0 [pid 3539] <... setpgid resumed>) = 0 [pid 291] getdents64(3, [pid 289] getdents64(3, [pid 3540] setpgid(0, 0 [pid 3539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3540] <... setpgid resumed>) = 0 [pid 3539] <... openat resumed>) = 3 [pid 291] umount2("./655/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3539] write(3, "1000", 4 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./633/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3539] <... write resumed>) = 4 [pid 291] newfstatat(AT_FDCWD, "./655/binderfs", [pid 3539] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3540] <... openat resumed>) = 3 [pid 3539] <... close resumed>) = 0 [pid 291] unlink("./655/binderfs" [pid 289] newfstatat(AT_FDCWD, "./633/binderfs", [pid 3540] write(3, "1000", 4 [pid 3539] symlink("/dev/binderfs", "./binderfs" [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 3540] <... write resumed>) = 4 [pid 3539] <... symlink resumed>) = 0 [pid 291] close(3 [pid 289] unlink("./633/binderfs" [pid 3540] close(3 [pid 3539] write(1, "executing program\n", 18 [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./655" [pid 3540] <... close resumed>) = 0 [pid 3539] <... write resumed>) = 18 [pid 289] <... unlink resumed>) = 0 [pid 3540] symlink("/dev/binderfs", "./binderfs" [pid 3539] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... rmdir resumed>) = 0 [pid 289] getdents64(3, [pid 3540] <... symlink resumed>) = 0 [pid 3539] <... openat resumed>) = 3 [pid 291] mkdir("./656", 0777 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 3540] write(1, "executing program\n", 18 [pid 3539] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] close(3 [pid 3540] <... write resumed>) = 18 [pid 3539] <... ioctl resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3540] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3539] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] rmdir("./633" [pid 3540] <... openat resumed>) = 3 [pid 3539] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... rmdir resumed>) = 0 [pid 3540] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3539] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] mkdir("./634", 0777./strace-static-x86_64: Process 3541 attached [pid 3540] <... ioctl resumed>) = 0 [pid 3539] <... openat resumed>) = 4 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3541 [pid 3541] set_robust_list(0x5555700d1660, 24 [pid 3540] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3539] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... mkdir resumed>) = 0 [pid 3541] <... set_robust_list resumed>) = 0 [pid 3540] <... ioctl resumed>) = ? [pid 3539] <... write resumed>) = ? [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3542 ./strace-static-x86_64: Process 3542 attached [pid 3542] set_robust_list(0x5555700d1660, 24) = 0 [pid 3542] chdir("./634") = 0 [pid 3542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3542] setpgid(0, 0) = 0 [pid 3542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3542] write(3, "1000", 4) = 4 [pid 3542] close(3) = 0 [pid 3542] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3542] write(1, "executing program\n", 18executing program ) = 18 [pid 3542] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3542] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3542] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... restart_syscall resumed>) = 0 [pid 3542] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3542] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3539] +++ killed by SIGKILL +++ [pid 290] umount2("./634", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3539, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3540] +++ killed by SIGKILL +++ [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3541] chdir("./656" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3540, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3542] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3542] exit_group(0) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./662", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./662", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 292] <... restart_syscall resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./662/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] umount2("./655", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] newfstatat(AT_FDCWD, "./662/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] openat(AT_FDCWD, "./655", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] unlink("./662/binderfs" [pid 292] <... openat resumed>) = 3 [pid 293] <... unlink resumed>) = 0 [pid 292] newfstatat(3, "", [pid 3541] <... chdir resumed>) = 0 [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] openat(AT_FDCWD, "./634", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3541] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 293] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... close resumed>) = 0 [pid 292] umount2("./655/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] rmdir("./662" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... rmdir resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./655/binderfs", [pid 293] mkdir("./663", 0777 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] unlink("./655/binderfs" [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... unlink resumed>) = 0 [pid 292] getdents64(3, [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3543 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./655") = 0 [pid 292] mkdir("./656", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3544 [pid 3541] <... prctl resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 3541] setpgid(0, 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3544 attached ./strace-static-x86_64: Process 3543 attached [pid 3542] +++ exited with 0 +++ [pid 3541] <... setpgid resumed>) = 0 [pid 290] getdents64(3, [pid 3544] set_robust_list(0x5555700d1660, 24 [pid 3543] set_robust_list(0x5555700d1660, 24 [pid 3541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3542, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3544] <... set_robust_list resumed>) = 0 [pid 3543] <... set_robust_list resumed>) = 0 [pid 290] umount2("./634/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3544] chdir("./656" [pid 3541] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3544] <... chdir resumed>) = 0 [pid 3543] chdir("./663" [pid 3541] write(3, "1000", 4 [pid 290] newfstatat(AT_FDCWD, "./634/binderfs", [pid 3544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3543] <... chdir resumed>) = 0 [pid 3541] <... write resumed>) = 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3544] <... prctl resumed>) = 0 [pid 3543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3541] close(3 [pid 290] unlink("./634/binderfs" [pid 3544] setpgid(0, 0 [pid 3543] <... prctl resumed>) = 0 [pid 3541] <... close resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3544] <... setpgid resumed>) = 0 [pid 3543] setpgid(0, 0 [pid 3541] symlink("/dev/binderfs", "./binderfs" [pid 290] getdents64(3, [pid 3544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 3543] <... setpgid resumed>) = 0 [pid 3541] <... symlink resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./634"executing program [pid 3544] <... openat resumed>) = 3 [pid 3543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3541] write(1, "executing program\n", 18 [pid 290] <... rmdir resumed>) = 0 [pid 3544] write(3, "1000", 4 [pid 290] mkdir("./635", 0777 [pid 3544] <... write resumed>) = 4 [pid 3543] <... openat resumed>) = 3 [pid 3541] <... write resumed>) = 18 [pid 3544] close(3 [pid 3543] write(3, "1000", 4 [pid 3541] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3544] <... close resumed>) = 0 [pid 3543] <... write resumed>) = 4 [pid 3541] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 3544] symlink("/dev/binderfs", "./binderfs" [pid 3543] close(3 [pid 3541] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 3544] <... symlink resumed>) = 0 [pid 3543] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3544] write(1, "executing program\n", 18 [pid 3543] symlink("/dev/binderfs", "./binderfs" [pid 3541] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 3545 attached [pid 3544] <... write resumed>) = 18 [pid 3543] <... symlink resumed>) = 0 [pid 3541] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3545] set_robust_list(0x5555700d1660, 24 [pid 3544] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3543] write(1, "executing program\n", 18executing program [pid 3541] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3545 [pid 3545] <... set_robust_list resumed>) = 0 [pid 3544] <... openat resumed>) = 3 [pid 3543] <... write resumed>) = 18 [pid 3541] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3545] chdir("./635" [pid 3544] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3543] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3541] <... openat resumed>) = 4 [pid 3545] <... chdir resumed>) = 0 [pid 3544] <... ioctl resumed>) = 0 [pid 3543] <... openat resumed>) = 3 [ 63.835457][ T375] tty tty1: SAK: killed process 3535 (syz-executor903): by fd#3 [ 63.835479][ T375] tty tty1: SAK: killed process 3537 (syz-executor903): by fd#3 [ 63.867353][ T375] tty tty1: SAK: killed process 3539 (syz-executor903): by fd#3 [ 63.867386][ T375] tty tty1: SAK: killed process 3540 (syz-executor903): by fd#3 [ 63.884622][ T375] tty tty1: SAK: killed process 3542 (syz-executor903): by fd#3 [pid 3541] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3541] <... write resumed>) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 3545] <... prctl resumed>) = 0 [pid 3545] setpgid(0, 0) = 0 [pid 289] umount2("./634", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3545] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./634", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3545] write(3, "1000", 4 [pid 289] <... openat resumed>) = 3 [pid 3545] <... write resumed>) = 4 [pid 289] newfstatat(3, "", [pid 3545] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3545] <... close resumed>) = 0 [pid 289] getdents64(3, [pid 3545] symlink("/dev/binderfs", "./binderfs" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3545] <... symlink resumed>) = 0 [pid 289] umount2("./634/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 3545] write(1, "executing program\n", 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3545] <... write resumed>) = 18 [pid 289] newfstatat(AT_FDCWD, "./634/binderfs", [pid 3545] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3545] <... openat resumed>) = 3 [pid 289] unlink("./634/binderfs" [pid 3545] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3541] +++ killed by SIGKILL +++ [pid 289] <... unlink resumed>) = 0 [pid 3545] <... ioctl resumed>) = 0 [pid 3544] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3541, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] getdents64(3, [pid 3545] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3544, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3545] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3543] +++ killed by SIGKILL +++ [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] close(3 [pid 3545] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3543, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... close resumed>) = 0 [pid 3545] <... openat resumed>) = 4 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] rmdir("./634" [pid 3545] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... rmdir resumed>) = 0 [pid 3545] <... write resumed>) = 8784 [pid 289] mkdir("./635", 0777 [pid 3545] exit_group(0 [pid 289] <... mkdir resumed>) = 0 [pid 3545] <... exit_group resumed>) = ? [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3546 ./strace-static-x86_64: Process 3546 attached [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 293] umount2("./663", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./663", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] umount2("./656", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./656", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 292] openat(AT_FDCWD, "./656", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./656", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 292] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./663/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(AT_FDCWD, "./663/binderfs", [pid 292] umount2("./656/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./656/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./663/binderfs" [pid 292] newfstatat(AT_FDCWD, "./656/binderfs", [pid 291] newfstatat(AT_FDCWD, "./656/binderfs", [pid 293] <... unlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 292] unlink("./656/binderfs" [pid 291] unlink("./656/binderfs" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 293] close(3 [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 293] <... close resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] rmdir("./663" [pid 292] close(3 [pid 291] close(3 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 293] mkdir("./664", 0777 [pid 292] rmdir("./656" [pid 291] rmdir("./656" [pid 293] <... mkdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] mkdir("./657", 0777 [pid 291] mkdir("./657", 0777 [pid 3546] set_robust_list(0x5555700d1660, 24) = 0 [pid 3546] chdir("./635") = 0 [pid 3546] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3546] setpgid(0, 0) = 0 [pid 3546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... mkdir resumed>) = 0 [pid 3546] <... openat resumed>) = 3 [pid 292] <... mkdir resumed>) = 0 [pid 3545] +++ exited with 0 +++ [pid 3546] write(3, "1000", 4 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3547 [pid 3546] <... write resumed>) = 4 [pid 3546] close(3) = 0 [pid 3546] symlink("/dev/binderfs", "./binderfs") = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3545, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3546] write(1, "executing program\n", 18) = 18 [pid 3546] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3548 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3549 [pid 3546] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3546] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}./strace-static-x86_64: Process 3549 attached ) = -1 EBADF (Bad file descriptor) [pid 3546] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3546] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3548 attached ./strace-static-x86_64: Process 3547 attached [pid 3549] set_robust_list(0x5555700d1660, 24 [pid 3546] <... write resumed>) = ? [pid 3549] <... set_robust_list resumed>) = 0 [pid 3548] set_robust_list(0x5555700d1660, 24 [pid 3547] set_robust_list(0x5555700d1660, 24 [pid 290] <... restart_syscall resumed>) = 0 [pid 3549] chdir("./657" [pid 3548] <... set_robust_list resumed>) = 0 [pid 3547] <... set_robust_list resumed>) = 0 [pid 3546] +++ killed by SIGKILL +++ [pid 290] umount2("./635", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3549] <... chdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3546, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] openat(AT_FDCWD, "./635", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3548] chdir("./657" [pid 290] <... openat resumed>) = 3 [pid 3548] <... chdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 3548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3547] chdir("./664" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 3548] <... prctl resumed>) = 0 [pid 3547] <... chdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./635/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3548] setpgid(0, 0 [pid 3547] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3548] <... setpgid resumed>) = 0 [pid 3547] <... prctl resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./635/binderfs", [pid 3548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3547] setpgid(0, 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3548] <... openat resumed>) = 3 [pid 3547] <... setpgid resumed>) = 0 [pid 290] unlink("./635/binderfs" [pid 3549] <... prctl resumed>) = 0 [pid 3548] write(3, "1000", 4 [pid 3547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... unlink resumed>) = 0 [pid 3549] setpgid(0, 0 [pid 290] getdents64(3, [pid 3549] <... setpgid resumed>) = 0 [pid 3548] <... write resumed>) = 4 [pid 3547] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3548] close(3 [pid 3547] write(3, "1000", 4 [pid 290] close(3 [pid 3548] <... close resumed>) = 0 [pid 3547] <... write resumed>) = 4 [pid 290] <... close resumed>) = 0 [pid 3549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3548] symlink("/dev/binderfs", "./binderfs"executing program [pid 3547] close(3 [pid 290] rmdir("./635" [pid 3548] <... symlink resumed>) = 0 [pid 3547] <... close resumed>) = 0 [pid 3548] write(1, "executing program\n", 18 [pid 3547] symlink("/dev/binderfs", "./binderfs" [pid 290] <... rmdir resumed>) = 0 [pid 3549] <... openat resumed>) = 3 [pid 3548] <... write resumed>) = 18 [pid 3547] <... symlink resumed>) = 0 [pid 290] mkdir("./636", 0777executing program [pid 3548] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3547] write(1, "executing program\n", 18 [pid 3548] <... openat resumed>) = 3 [pid 3547] <... write resumed>) = 18 [pid 3549] write(3, "1000", 4 [pid 3548] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3547] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... mkdir resumed>) = 0 [pid 3549] <... write resumed>) = 4 [pid 3548] <... ioctl resumed>) = 0 [pid 3547] <... openat resumed>) = 3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3548] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3547] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3548] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3547] <... ioctl resumed>) = 0 [pid 3548] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3547] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3548] <... openat resumed>) = 4 [pid 3547] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3549] close(3 [pid 3548] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3547] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3549] <... close resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3550 ./strace-static-x86_64: Process 3550 attached [pid 3549] symlink("/dev/binderfs", "./binderfs" [pid 3547] +++ killed by SIGKILL +++ [pid 3550] set_robust_list(0x5555700d1660, 24 [pid 3549] <... symlink resumed>) = 0 [pid 3548] <... write resumed>) = ? [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3547, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [ 63.899401][ T375] tty tty1: SAK: killed process 3541 (syz-executor903): by fd#3 [ 63.899430][ T375] tty tty1: SAK: killed process 3543 (syz-executor903): by fd#3 [ 63.899452][ T375] tty tty1: SAK: killed process 3544 (syz-executor903): by fd#3 [ 63.927075][ T375] tty tty1: SAK: killed process 3546 (syz-executor903): by fd#3 [ 63.941092][ T375] tty tty1: SAK: killed process 3547 (syz-executor903): by fd#3 [pid 3550] <... set_robust_list resumed>) = 0 executing program [pid 3549] write(1, "executing program\n", 18 [pid 3550] chdir("./636" [pid 3549] <... write resumed>) = 18 [pid 289] umount2("./635", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3550] <... chdir resumed>) = 0 [pid 3549] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./664", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3549] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./635", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3550] <... prctl resumed>) = 0 [pid 3549] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] openat(AT_FDCWD, "./664", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 3550] setpgid(0, 0 [pid 3549] <... ioctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 3550] <... setpgid resumed>) = 0 [pid 3549] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3549] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 3550] <... openat resumed>) = 3 [pid 3549] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3550] write(3, "1000", 4 [pid 3549] <... openat resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./635/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3550] <... write resumed>) = 4 [pid 3549] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./664/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3548] +++ killed by SIGKILL +++ [pid 3549] <... write resumed>) = ? [pid 3550] close(3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./635/binderfs", [pid 3550] <... close resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./664/binderfs", [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3548, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3550] symlink("/dev/binderfs", "./binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./635/binderfs" [pid 3550] <... symlink resumed>) = 0 [pid 3549] +++ killed by SIGKILL +++ [pid 293] unlink("./664/binderfs" [pid 289] <... unlink resumed>) = 0 executing program [pid 3550] write(1, "executing program\n", 18 [pid 293] <... unlink resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3549, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./657", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 3550] <... write resumed>) = 18 [pid 293] getdents64(3, [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] openat(AT_FDCWD, "./657", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3550] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... close resumed>) = 0 [pid 289] close(3 [pid 293] rmdir("./664" [pid 291] <... openat resumed>) = 3 [pid 289] <... close resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] rmdir("./635" [pid 3550] <... openat resumed>) = 3 [pid 293] mkdir("./665", 0777 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3550] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... rmdir resumed>) = 0 [pid 3550] <... ioctl resumed>) = 0 [pid 3550] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... mkdir resumed>) = 0 [pid 291] getdents64(3, [pid 289] mkdir("./636", 0777 [pid 3550] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3550] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 executing program [pid 291] umount2("./657/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... mkdir resumed>) = 0 [pid 3550] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3551 attached [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3551] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3551 [pid 291] newfstatat(AT_FDCWD, "./657/binderfs", [pid 3551] <... set_robust_list resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3552 [pid 3551] chdir("./665" [pid 291] unlink("./657/binderfs" [pid 3551] <... chdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 3551] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] getdents64(3, [pid 3551] <... prctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3551] setpgid(0, 0 [pid 291] close(3 [pid 3551] <... setpgid resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 3551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] rmdir("./657" [pid 3551] <... openat resumed>) = 3 [pid 291] <... rmdir resumed>) = 0 [pid 3551] write(3, "1000", 4 [pid 291] mkdir("./658", 0777 [pid 3551] <... write resumed>) = 4 [pid 291] <... mkdir resumed>) = 0 [pid 3551] close(3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3551] <... close resumed>) = 0 [pid 3551] symlink("/dev/binderfs", "./binderfs" [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3553 [pid 3551] <... symlink resumed>) = 0 [pid 3551] write(1, "executing program\n", 18) = 18 [pid 3551] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3551] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3551] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3551] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 3553 attached [pid 3553] set_robust_list(0x5555700d1660, 24) = 0 [pid 3553] chdir("./658") = 0 [pid 3553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3553] setpgid(0, 0) = 0 [pid 3553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3553] write(3, "1000", 4) = 4 [pid 3553] close(3) = 0 [pid 3553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3553] write(1, "executing program\n", 18 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./657", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./657", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./657/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./657/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./657/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./657" [pid 3551] <... openat resumed>) = 4 [pid 3550] <... write resumed>) = ? [pid 292] <... rmdir resumed>) = 0 [pid 3551] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 292] mkdir("./658", 0777./strace-static-x86_64: Process 3552 attached [pid 3553] <... write resumed>) = 18 [pid 3552] set_robust_list(0x5555700d1660, 24 [pid 3553] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3552] <... set_robust_list resumed>) = 0 [pid 3552] chdir("./636" [pid 3553] <... openat resumed>) = 3 [pid 3553] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3552] <... chdir resumed>) = 0 [pid 3552] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3553] <... ioctl resumed>) = 0 [pid 3552] <... prctl resumed>) = 0 [pid 3552] setpgid(0, 0 [pid 3553] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3552] <... setpgid resumed>) = 0 [pid 3553] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3553] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3552] <... openat resumed>) = 3 [pid 3552] write(3, "1000", 4) = 4 [pid 3552] close(3) = 0 [pid 3552] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3552] write(1, "executing program\n", 18) = 18 [pid 3552] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3552] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3552] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3552] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3553] <... openat resumed>) = 4 [pid 3551] <... write resumed>) = ? [pid 3553] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3551] +++ killed by SIGKILL +++ [pid 3550] +++ killed by SIGKILL +++ [pid 292] <... mkdir resumed>) = 0 [pid 3552] <... openat resumed>) = 4 [pid 3553] <... write resumed>) = 8784 [pid 3553] exit_group(0) = ? [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3551, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./665", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./665", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./665/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./665/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./665/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./665") = 0 [pid 293] mkdir("./666", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3554 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3555 ./strace-static-x86_64: Process 3555 attached [pid 3555] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 3554 attached [pid 3553] +++ exited with 0 +++ [pid 3552] set_robust_list(0x5555700d1660, 24 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3550, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3552] <... set_robust_list resumed>) = ? [pid 3555] <... set_robust_list resumed>) = 0 [pid 3555] chdir("./658") = 0 [pid 3555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3555] setpgid(0, 0) = 0 [pid 3555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3555] write(3, "1000", 4) = 4 [ 63.941124][ T375] tty tty1: SAK: killed process 3548 (syz-executor903): by fd#3 [ 63.958289][ T20] tty tty1: SAK: killed process 3549 (syz-executor903): by fd#3 [ 63.971132][ T375] tty tty1: SAK: killed process 3550 (syz-executor903): by fd#3 [ 63.980235][ T20] tty tty1: SAK: killed process 3550 (syz-executor903): by fd#3 [ 63.980261][ T20] tty tty1: SAK: killed process 3551 (syz-executor903): by fd#3 [pid 3555] close(3executing program ) = 0 [pid 3555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3555] write(1, "executing program\n", 18) = 18 [pid 3555] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3555] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3555] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3555] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3555] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3555] exit_group(0) = ? executing program [pid 3554] set_robust_list(0x5555700d1660, 24) = 0 [pid 3554] chdir("./666") = 0 [pid 3554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3554] setpgid(0, 0) = 0 [pid 3554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3554] write(3, "1000", 4) = 4 [pid 3554] close(3) = 0 [pid 3554] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3554] write(1, "executing program\n", 18) = 18 [pid 3554] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3554] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3554] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3554] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3554] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3555] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3555, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3553, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] umount2("./658", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./658", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./658/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./658/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./658/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./658") = 0 [pid 291] mkdir("./659", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3556 [pid 290] umount2("./636", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./636", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./636/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./636/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./636/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./636" [pid 3554] +++ killed by SIGKILL +++ [pid 290] <... rmdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3554, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] mkdir("./637", 0777./strace-static-x86_64: Process 3556 attached [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3556] set_robust_list(0x5555700d1660, 24 [pid 3552] +++ killed by SIGKILL +++ [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3556] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3557 attached [pid 3556] chdir("./659" [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3552, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3557] set_robust_list(0x5555700d1660, 24 [pid 3556] <... chdir resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3557 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3557] <... set_robust_list resumed>) = 0 [pid 3556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3557] chdir("./637" [pid 3556] <... prctl resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3557] <... chdir resumed>) = 0 [pid 3556] setpgid(0, 0 [pid 3557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3556] <... setpgid resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 3557] <... prctl resumed>) = 0 [pid 3557] setpgid(0, 0 [pid 3556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] umount2("./636", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3557] <... setpgid resumed>) = 0 [pid 293] umount2("./666", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3556] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3557] <... openat resumed>) = 3 [pid 3556] write(3, "1000", 4 [pid 293] openat(AT_FDCWD, "./666", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... restart_syscall resumed>) = 0 [pid 3556] <... write resumed>) = 4 [pid 289] openat(AT_FDCWD, "./636", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3557] write(3, "1000", 4 [pid 3556] close(3 [pid 293] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 3556] <... close resumed>) = 0 [pid 293] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3557] <... write resumed>) = 4 [pid 3556] symlink("/dev/binderfs", "./binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3557] close(3 [pid 293] getdents64(3, [pid 292] umount2("./658", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3557] <... close resumed>) = 0 [pid 3556] <... symlink resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 executing program [pid 289] getdents64(3, [pid 3557] symlink("/dev/binderfs", "./binderfs" [pid 3556] write(1, "executing program\n", 18 [pid 293] umount2("./666/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3556] <... write resumed>) = 18 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./658", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] umount2("./636/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3556] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] newfstatat(AT_FDCWD, "./666/binderfs", [pid 292] <... openat resumed>) = 3 [pid 3557] <... symlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3557] write(1, "executing program\n", 18 [pid 3556] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(3, "", [pid 289] newfstatat(AT_FDCWD, "./636/binderfs", [pid 3557] <... write resumed>) = 18 [pid 3556] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] unlink("./666/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3556] <... ioctl resumed>) = 0 [pid 289] unlink("./636/binderfs" [pid 3557] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3556] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... unlink resumed>) = 0 [pid 292] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 3557] <... openat resumed>) = 3 [pid 3556] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 3556] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] umount2("./658/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3557] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3556] <... openat resumed>) = 4 [pid 293] close(3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] close(3 [pid 3557] <... ioctl resumed>) = 0 [pid 3556] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... close resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./658/binderfs", [pid 289] <... close resumed>) = 0 [pid 3556] <... write resumed>) = ? [pid 293] rmdir("./666" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3557] +++ killed by SIGKILL +++ [pid 293] <... rmdir resumed>) = 0 [pid 292] unlink("./658/binderfs" [pid 289] rmdir("./636" [pid 293] mkdir("./667", 0777 [pid 292] <... unlink resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3557, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] umount2("./637", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3558 [pid 292] <... close resumed>) = 0 [pid 290] openat(AT_FDCWD, "./637", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] rmdir("./658" [pid 290] <... openat resumed>) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 292] mkdir("./659", 0777 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] getdents64(3, [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./637/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3559 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./637/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./637/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./637") = 0 [pid 290] mkdir("./638", 0777 [pid 289] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 3559 attached ./strace-static-x86_64: Process 3558 attached [pid 3556] +++ killed by SIGKILL +++ [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./637", 0777 [pid 3559] set_robust_list(0x5555700d1660, 24 [pid 3558] set_robust_list(0x5555700d1660, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3556, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3559] <... set_robust_list resumed>) = 0 [pid 3558] <... set_robust_list resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 3560 attached [pid 3559] chdir("./659" [pid 3558] chdir("./667" [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3560] set_robust_list(0x5555700d1660, 24 [pid 3559] <... chdir resumed>) = 0 [pid 3558] <... chdir resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3560 ./strace-static-x86_64: Process 3561 attached [pid 3559] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3561] set_robust_list(0x5555700d1660, 24 [pid 3559] <... prctl resumed>) = 0 [pid 3558] <... prctl resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3561 [pid 3561] <... set_robust_list resumed>) = 0 [pid 3560] <... set_robust_list resumed>) = 0 [pid 3559] setpgid(0, 0 [pid 3558] setpgid(0, 0 [pid 3561] chdir("./637" [pid 3559] <... setpgid resumed>) = 0 [pid 3558] <... setpgid resumed>) = 0 [pid 3561] <... chdir resumed>) = 0 [pid 3560] chdir("./638" [pid 3559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3561] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3560] <... chdir resumed>) = 0 [pid 3559] <... openat resumed>) = 3 [pid 3558] <... openat resumed>) = 3 [pid 3561] <... prctl resumed>) = 0 [pid 3559] write(3, "1000", 4 [pid 3558] write(3, "1000", 4 [pid 3561] setpgid(0, 0 [pid 3560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3559] <... write resumed>) = 4 [pid 3558] <... write resumed>) = 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 3561] <... setpgid resumed>) = 0 [pid 3559] close(3 [pid 3558] close(3 [pid 3561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3560] <... prctl resumed>) = 0 [pid 3559] <... close resumed>) = 0 [pid 3558] <... close resumed>) = 0 [pid 3561] <... openat resumed>) = 3 [pid 3559] symlink("/dev/binderfs", "./binderfs" [pid 3558] symlink("/dev/binderfs", "./binderfs" [pid 291] umount2("./659", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3561] write(3, "1000", 4 [pid 3560] setpgid(0, 0 [pid 3559] <... symlink resumed>) = 0 [pid 3558] <... symlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3561] <... write resumed>) = 4 executing program executing program [pid 3559] write(1, "executing program\n", 18 [pid 3558] write(1, "executing program\n", 18 [pid 291] openat(AT_FDCWD, "./659", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3561] close(3 [pid 3559] <... write resumed>) = 18 [pid 3558] <... write resumed>) = 18 [pid 291] <... openat resumed>) = 3 [pid 3561] <... close resumed>) = 0 [pid 3560] <... setpgid resumed>) = 0 [pid 3559] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3558] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] newfstatat(3, "", [pid 3561] symlink("/dev/binderfs", "./binderfs" [pid 3560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3559] <... openat resumed>) = 3 [pid 3558] <... openat resumed>) = 3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3561] <... symlink resumed>) = 0 [pid 3560] <... openat resumed>) = 3 [pid 3559] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3558] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] getdents64(3, [pid 3561] write(1, "executing program\n", 18executing program [pid 3560] write(3, "1000", 4 [pid 3559] <... ioctl resumed>) = 0 [pid 3558] <... ioctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3561] <... write resumed>) = 18 [pid 3560] <... write resumed>) = 4 [pid 3559] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3558] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] umount2("./659/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3561] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3560] close(3 [pid 3559] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3558] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3561] <... openat resumed>) = 3 [pid 3560] <... close resumed>) = 0 [pid 3559] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3558] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] newfstatat(AT_FDCWD, "./659/binderfs", [pid 3561] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3560] symlink("/dev/binderfs", "./binderfs" [pid 3559] <... openat resumed>) = 4 [pid 3558] <... openat resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3561] <... ioctl resumed>) = 0 [pid 3560] <... symlink resumed>) = 0 [ 63.997586][ T20] tty tty1: SAK: killed process 3552 (syz-executor903): by fd#3 [ 64.006874][ T20] tty tty1: SAK: killed process 3554 (syz-executor903): by fd#3 [ 64.022919][ T20] tty tty1: SAK: killed process 3556 (syz-executor903): by fd#3 [ 64.022947][ T20] tty tty1: SAK: killed process 3557 (syz-executor903): by fd#3 [pid 3559] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3558] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 291] unlink("./659/binderfs" [pid 3560] write(1, "executing program\n", 18) = 18 [pid 3558] +++ killed by SIGKILL +++ [pid 3560] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... unlink resumed>) = 0 [pid 3560] <... openat resumed>) = 3 [pid 3559] <... write resumed>) = ? [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3558, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3560] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./667", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3560] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3560] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] openat(AT_FDCWD, "./667", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3560] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... openat resumed>) = 3 [pid 3560] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] newfstatat(3, "", [pid 3560] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3560] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 3560] <... write resumed>) = 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3560] exit_group(0 [pid 293] umount2("./667/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3560] <... exit_group resumed>) = ? [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./667/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./667/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./667") = 0 [pid 293] mkdir("./668", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3562 ./strace-static-x86_64: Process 3562 attached [pid 3562] set_robust_list(0x5555700d1660, 24 [pid 3560] +++ exited with 0 +++ [pid 291] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3560, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3562] <... set_robust_list resumed>) = 0 [pid 3562] chdir("./668") = 0 [pid 3559] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3559, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3562] setpgid(0, 0) = 0 [pid 3562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./638", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./638", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./638/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./638/binderfs", [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./638/binderfs") = 0 [pid 292] umount2("./659", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] openat(AT_FDCWD, "./659", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] close(3 [pid 292] <... openat resumed>) = 3 [pid 290] <... close resumed>) = 0 [pid 292] newfstatat(3, "", [pid 290] rmdir("./638" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 292] getdents64(3, [pid 290] mkdir("./639", 0777 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... mkdir resumed>) = 0 [pid 292] umount2("./659/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./659/binderfs", [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3563 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./659/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./659") = 0 [pid 292] mkdir("./660", 0777./strace-static-x86_64: Process 3563 attached [pid 3561] +++ killed by SIGKILL +++ [pid 292] <... mkdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3563] set_robust_list(0x5555700d1660, 24 [pid 3562] <... openat resumed>) = 3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] close(3 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3561, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3563] <... set_robust_list resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3563] chdir("./639" [pid 291] rmdir("./659"./strace-static-x86_64: Process 3564 attached [pid 3563] <... chdir resumed>) = 0 [pid 3562] write(3, "1000", 4 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3564 [pid 3564] set_robust_list(0x5555700d1660, 24 [pid 3562] <... write resumed>) = 4 [pid 291] <... rmdir resumed>) = 0 [pid 3564] <... set_robust_list resumed>) = 0 [pid 3563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3562] close(3 [pid 291] mkdir("./660", 0777 [pid 3564] chdir("./660" [pid 3562] <... close resumed>) = 0 [pid 3564] <... chdir resumed>) = 0 [pid 3562] symlink("/dev/binderfs", "./binderfs" [pid 3564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3563] <... prctl resumed>) = 0 [pid 3562] <... symlink resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3563] setpgid(0, 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3563] <... setpgid resumed>) = 0 [pid 3564] <... prctl resumed>) = 0 [pid 3562] write(1, "executing program\n", 18 [pid 3564] setpgid(0, 0 [pid 3562] <... write resumed>) = 18 [pid 3564] <... setpgid resumed>) = 0 [pid 3562] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3562] <... openat resumed>) = 3 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3565 [pid 3564] <... openat resumed>) = 3 [pid 3562] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3563] <... openat resumed>) = 3 [pid 289] umount2("./637", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3563] write(3, "1000", 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3563] <... write resumed>) = 4 [pid 289] openat(AT_FDCWD, "./637", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3563] close(3 [pid 3564] write(3, "1000", 4 [pid 3562] <... ioctl resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3563] <... close resumed>) = 0 [pid 289] newfstatat(3, "", [pid 3564] <... write resumed>) = 4 [pid 3563] symlink("/dev/binderfs", "./binderfs" [pid 3562] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3564] close(3 [pid 3562] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3564] <... close resumed>) = 0 [pid 3563] <... symlink resumed>) = 0 executing program [pid 3562] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3563] write(1, "executing program\n", 18 [pid 289] getdents64(3, [pid 3563] <... write resumed>) = 18 [pid 3564] symlink("/dev/binderfs", "./binderfs" [pid 3563] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3562] <... openat resumed>) = 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3564] <... symlink resumed>) = 0 [pid 3563] <... openat resumed>) = 3 [pid 3562] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] umount2("./637/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3563] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3565 attached [pid 3564] write(1, "executing program\n", 18 [pid 3563] <... ioctl resumed>) = ? [pid 3562] <... write resumed>) = ? [pid 289] newfstatat(AT_FDCWD, "./637/binderfs", [pid 3565] set_robust_list(0x5555700d1660, 24 [pid 3564] <... write resumed>) = 18 [pid 3563] +++ killed by SIGKILL +++ [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3565] <... set_robust_list resumed>) = 0 [pid 3564] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] unlink("./637/binderfs" [pid 3565] chdir("./660" [pid 3564] <... openat resumed>) = 3 [pid 289] <... unlink resumed>) = 0 [pid 3565] <... chdir resumed>) = 0 [pid 3564] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 3565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3564] <... ioctl resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3565] <... prctl resumed>) = 0 [pid 3564] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] close(3 [pid 3565] setpgid(0, 0 [pid 3564] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... close resumed>) = 0 [pid 3565] <... setpgid resumed>) = 0 [pid 3564] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] rmdir("./637" [pid 3565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3564] <... openat resumed>) = 4 [pid 3562] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3563, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... rmdir resumed>) = 0 [ 64.050164][ T20] tty tty1: SAK: killed process 3558 (syz-executor903): by fd#3 [ 64.050193][ T20] tty tty1: SAK: killed process 3559 (syz-executor903): by fd#3 [ 64.050224][ T20] tty tty1: SAK: killed process 3561 (syz-executor903): by fd#3 [ 64.081731][ T375] tty tty1: SAK: killed process 3562 (syz-executor903): by fd#3 [ 64.081765][ T375] tty tty1: SAK: killed process 3563 (syz-executor903): by fd#3 [pid 3564] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program executing program [pid 289] mkdir("./638", 0777 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3562, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 293] umount2("./668", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./639", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./668", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./639", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 289] <... mkdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./668/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./639/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./668/binderfs", [pid 290] newfstatat(AT_FDCWD, "./639/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./668/binderfs" [pid 290] unlink("./639/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 290] close(3 [pid 293] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 293] rmdir("./668" [pid 290] rmdir("./639" [pid 293] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 293] mkdir("./669", 0777 [pid 290] mkdir("./640", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3566 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3567 ./strace-static-x86_64: Process 3567 attached [pid 3567] set_robust_list(0x5555700d1660, 24) = 0 [pid 3567] chdir("./640") = 0 [pid 3567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3567] setpgid(0, 0) = 0 [pid 3567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3567] write(3, "1000", 4) = 4 [pid 3567] close(3) = 0 [pid 3567] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3567] write(1, "executing program\n", 18) = 18 [pid 3567] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3567] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}./strace-static-x86_64: Process 3566 attached ) = 0 [pid 3566] set_robust_list(0x5555700d1660, 24 [pid 3567] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3566] <... set_robust_list resumed>) = 0 [pid 3566] chdir("./669" [pid 3567] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3567] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3566] <... chdir resumed>) = 0 [pid 3566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3566] setpgid(0, 0) = 0 [pid 3566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3566] write(3, "1000", 4) = 4 [pid 3566] close(3) = 0 [pid 3566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3566] write(1, "executing program\n", 18) = 18 [pid 3566] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3568 [pid 3566] <... openat resumed>) = 3 [pid 3566] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3567] <... openat resumed>) = 4 [pid 3564] <... write resumed>) = ? [pid 3567] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3567] exit_group(0) = ? [pid 3565] <... openat resumed>) = 3 [pid 3564] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3564, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3565] write(3, "1000", 4 [pid 3566] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3566] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3566] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 3567] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3567, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3566] <... write resumed>) = ? [pid 3565] <... write resumed>) = 4 [pid 3565] close(3./strace-static-x86_64: Process 3568 attached [pid 3568] set_robust_list(0x5555700d1660, 24) = 0 [pid 3568] chdir("./638") = 0 [pid 3568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3568] setpgid(0, 0) = 0 [pid 3568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3568] write(3, "1000", 4) = 4 [pid 3568] close(3) = 0 [pid 3568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3568] write(1, "executing program\n", 18) = 18 [pid 3568] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3568] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3568] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3568] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3568] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3568] exit_group(0) = ? [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./640", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./640", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./640/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./640/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./640/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./640") = 0 [pid 290] mkdir("./641", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3569 executing program [pid 3565] <... close resumed>) = 0 [pid 3565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3565] write(1, "executing program\n", 18) = 18 ./strace-static-x86_64: Process 3569 attached [pid 3565] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3569] set_robust_list(0x5555700d1660, 24 [pid 3566] +++ killed by SIGKILL +++ [pid 3565] <... openat resumed>) = ? [pid 3565] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3566, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... restart_syscall resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] umount2("./660", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./660", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./660/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./660/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./660/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./660") = 0 [pid 292] mkdir("./661", 0777 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] umount2("./669", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3570 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./669", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, ./strace-static-x86_64: Process 3570 attached [pid 3569] <... set_robust_list resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3565, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3570] set_robust_list(0x5555700d1660, 24 [pid 3569] chdir("./641" [pid 293] umount2("./669/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3568] +++ exited with 0 +++ [pid 3570] <... set_robust_list resumed>) = 0 [pid 3569] <... chdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3568, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] newfstatat(AT_FDCWD, "./669/binderfs", [pid 3570] chdir("./661" [pid 3569] <... prctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./660", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3570] <... chdir resumed>) = 0 [pid 3569] setpgid(0, 0 [pid 293] unlink("./669/binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3569] <... setpgid resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 291] openat(AT_FDCWD, "./660", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3570] <... prctl resumed>) = 0 [pid 3569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 291] <... openat resumed>) = 3 [pid 3570] setpgid(0, 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3570] <... setpgid resumed>) = 0 [pid 3569] <... openat resumed>) = 3 [pid 293] close(3 [pid 291] newfstatat(3, "", [pid 3570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3569] write(3, "1000", 4 [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./669" [pid 3570] <... openat resumed>) = 3 [pid 3569] <... write resumed>) = 4 [pid 293] <... rmdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3570] write(3, "1000", 4 [pid 3569] close(3 [pid 293] mkdir("./670", 0777 [pid 291] getdents64(3, [pid 3570] <... write resumed>) = 4 [pid 3569] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3570] close(3 [pid 3569] symlink("/dev/binderfs", "./binderfs" [pid 293] <... mkdir resumed>) = 0 [pid 291] umount2("./660/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3570] <... close resumed>) = 0 [pid 3569] <... symlink resumed>) = 0 executing program [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3570] symlink("/dev/binderfs", "./binderfs" [pid 3569] write(1, "executing program\n", 18 [pid 291] newfstatat(AT_FDCWD, "./660/binderfs", [pid 3570] <... symlink resumed>) = 0 [pid 3569] <... write resumed>) = 18 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 3570] write(1, "executing program\n", 18 [pid 3569] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3571 [pid 291] unlink("./660/binderfs" [pid 3570] <... write resumed>) = 18 [pid 3569] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 3570] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3569] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] getdents64(3, [pid 3570] <... openat resumed>) = 3 [pid 3569] <... ioctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3570] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3569] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] close(3 [pid 3570] <... ioctl resumed>) = 0 [pid 3569] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... close resumed>) = 0 [pid 3570] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3569] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] rmdir("./660" [pid 3570] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3569] <... openat resumed>) = 4 [pid 291] <... rmdir resumed>) = 0 [pid 3570] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3569] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] mkdir("./661", 0777./strace-static-x86_64: Process 3571 attached [pid 3570] <... openat resumed>) = ? [pid 3569] <... write resumed>) = ? [pid 3571] set_robust_list(0x5555700d1660, 24) = 0 [pid 3571] chdir("./670") = 0 [pid 3571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3571] setpgid(0, 0) = 0 [pid 3571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3571] write(3, "1000", 4) = 4 [pid 3571] close(3) = 0 [pid 3571] symlink("/dev/binderfs", "./binderfs" [pid 3569] +++ killed by SIGKILL +++ [pid 3571] <... symlink resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3569, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3571] write(1, "executing program\n", 18executing program [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3571] <... write resumed>) = 18 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 64.099577][ T20] tty tty1: SAK: killed process 3564 (syz-executor903): by fd#3 [ 64.109825][ T20] tty tty1: SAK: killed process 3566 (syz-executor903): by fd#3 [ 64.118737][ T20] tty tty1: SAK: killed process 3565 (syz-executor903): by fd#3 [ 64.135423][ T20] tty tty1: SAK: killed process 3569 (syz-executor903): by fd#3 [pid 3571] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 3572 attached [pid 3570] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3572 [pid 3572] set_robust_list(0x5555700d1660, 24) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3570, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./638", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3572] chdir("./661" [pid 292] umount2("./661", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./641", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3572] <... chdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./638", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3572] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] openat(AT_FDCWD, "./661", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./641", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 3572] <... prctl resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 3572] setpgid(0, 0 [pid 3571] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3572] <... setpgid resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 3572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3571] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3572] <... openat resumed>) = 3 [pid 3571] <... ioctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./638/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3572] write(3, "1000", 4 [pid 3571] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] umount2("./661/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./641/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3572] <... write resumed>) = 4 [pid 3571] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3572] close(3 [pid 3571] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] newfstatat(AT_FDCWD, "./661/binderfs", [pid 290] newfstatat(AT_FDCWD, "./641/binderfs", [pid 289] newfstatat(AT_FDCWD, "./638/binderfs", [pid 3572] <... close resumed>) = 0 [pid 3571] <... openat resumed>) = 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3572] symlink("/dev/binderfs", "./binderfs" [pid 3571] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] unlink("./661/binderfs" [pid 290] unlink("./641/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 3572] <... symlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 289] unlink("./638/binderfs" [pid 3572] write(1, "executing program\n", 18 [pid 289] <... unlink resumed>) = 0 [pid 3572] <... write resumed>) = 18 [pid 289] getdents64(3, [pid 3572] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3572] <... openat resumed>) = 3 [pid 289] close(3 [pid 3572] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... close resumed>) = 0 [pid 3572] <... ioctl resumed>) = 0 [pid 289] rmdir("./638" [pid 3572] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... rmdir resumed>) = 0 [pid 3572] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] mkdir("./639", 0777 [pid 3572] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3573 [pid 3572] <... openat resumed>) = 4 [pid 3571] <... write resumed>) = ? [pid 3572] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3572] exit_group(0 [pid 290] <... unlink resumed>) = 0 [pid 3572] <... exit_group resumed>) = ? [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 3571] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3573 attached [pid 3573] set_robust_list(0x5555700d1660, 24) = 0 [pid 3573] chdir("./639") = 0 [pid 3573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3573] setpgid(0, 0) = 0 [pid 3573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3573] write(3, "1000", 4) = 4 [pid 3573] close(3) = 0 [pid 3573] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3573] write(1, "executing program\n", 18executing program ) = 18 [pid 3573] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3573] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3573] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3573] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3572] +++ exited with 0 +++ [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3573] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3571, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] close(3) = 0 [pid 290] close(3 [pid 292] rmdir("./661" [pid 3573] <... write resumed>) = 8784 [pid 292] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3572, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... close resumed>) = 0 [pid 292] mkdir("./662", 0777executing program ) = 0 [pid 291] umount2("./661", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] rmdir("./641" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3574 ./strace-static-x86_64: Process 3574 attached [pid 3574] set_robust_list(0x5555700d1660, 24) = 0 [pid 3574] chdir("./662") = 0 [pid 3574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3574] setpgid(0, 0) = 0 [pid 3574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3574] write(3, "1000", 4) = 4 [pid 3574] close(3) = 0 [pid 3574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3574] write(1, "executing program\n", 18) = 18 [pid 3574] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3574] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3574] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3574] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3574] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3574] exit_group(0) = ? [pid 293] umount2("./670", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./670", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./670/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./670/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./670/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./670") = 0 [pid 293] mkdir("./671", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3575 [pid 3574] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3574, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3575 attached [pid 3575] set_robust_list(0x5555700d1660, 24) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "./661", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] mkdir("./642", 0777 [pid 291] <... openat resumed>) = 3 [pid 3575] chdir("./671") = 0 [pid 3575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 291] newfstatat(3, "", [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3575] setpgid(0, 0) = 0 [pid 3575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] getdents64(3, [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3576 [pid 3575] <... openat resumed>) = 3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3575] write(3, "1000", 4 [pid 291] umount2("./661/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3575] <... write resumed>) = 4 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3575] close(3 [pid 291] newfstatat(AT_FDCWD, "./661/binderfs", [pid 3573] +++ killed by SIGKILL +++ [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3573, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] unlink("./661/binderfs" [pid 3575] <... close resumed>) = 0 [pid 3575] symlink("/dev/binderfs", "./binderfs" [pid 291] <... unlink resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 291] getdents64(3, [pid 3575] <... symlink resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 292] umount2("./662", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] close(3 [pid 3575] write(1, "executing program\n", 18) = 18 [pid 3575] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... close resumed>) = 0 [pid 3575] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./662", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] rmdir("./661" [pid 3575] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... openat resumed>) = 3 [pid 3575] <... ioctl resumed>) = 0 [pid 3575] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3575] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 292] newfstatat(3, "", [pid 291] <... rmdir resumed>) = 0 [pid 3575] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3576 attached ) = ? [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] mkdir("./662", 0777 [pid 289] <... restart_syscall resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... mkdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./662/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./639", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3577 [pid 289] openat(AT_FDCWD, "./639", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(AT_FDCWD, "./662/binderfs", [pid 289] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(3, "", [pid 292] unlink("./662/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3577 attached [pid 3576] set_robust_list(0x5555700d1660, 24 [pid 292] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 292] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] umount2("./639/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... close resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./639/binderfs", [pid 292] rmdir("./662" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3575] +++ killed by SIGKILL +++ [pid 292] <... rmdir resumed>) = 0 [pid 289] unlink("./639/binderfs" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3575, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] mkdir("./663", 0777 [pid 289] <... unlink resumed>) = 0 [pid 3577] set_robust_list(0x5555700d1660, 24 [pid 3576] <... set_robust_list resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... mkdir resumed>) = 0 [pid 289] getdents64(3, [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3577] <... set_robust_list resumed>) = 0 [pid 3576] chdir("./642" [pid 289] close(3./strace-static-x86_64: Process 3578 attached [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3578 [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./639" [pid 3578] set_robust_list(0x5555700d1660, 24 [pid 3577] chdir("./662" [pid 3578] <... set_robust_list resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3576] <... chdir resumed>) = 0 [pid 289] mkdir("./640", 0777 [pid 3577] <... chdir resumed>) = 0 [pid 3577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3577] setpgid(0, 0) = 0 [pid 3577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... mkdir resumed>) = 0 [pid 3577] <... openat resumed>) = 3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3577] write(3, "1000", 4) = 4 [pid 3577] close(3) = 0 [pid 3577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3578] chdir("./663" [pid 3576] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3579 [pid 3577] write(1, "executing program\n", 18) = 18 [pid 3577] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3579 attached [pid 3578] <... chdir resumed>) = 0 [pid 3577] <... openat resumed>) = 3 [pid 3576] <... prctl resumed>) = 0 [pid 3578] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3576] setpgid(0, 0 [pid 3578] <... prctl resumed>) = 0 [pid 3576] <... setpgid resumed>) = 0 [pid 3578] setpgid(0, 0 [pid 3577] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3578] <... setpgid resumed>) = 0 [pid 3576] <... openat resumed>) = 3 [pid 3577] <... ioctl resumed>) = 0 [pid 3578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3576] write(3, "1000", 4 [pid 3578] <... openat resumed>) = 3 [pid 3577] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3576] <... write resumed>) = 4 [pid 3579] set_robust_list(0x5555700d1660, 24 [pid 3578] write(3, "1000", 4 [pid 3576] close(3 [pid 3578] <... write resumed>) = 4 [pid 3576] <... close resumed>) = 0 [pid 3578] close(3 [pid 3576] symlink("/dev/binderfs", "./binderfs" [pid 3579] <... set_robust_list resumed>) = 0 [pid 3578] <... close resumed>) = 0 [pid 3577] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 3576] <... symlink resumed>) = 0 [pid 3576] write(1, "executing program\n", 18) = 18 [pid 3576] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3578] symlink("/dev/binderfs", "./binderfs" [pid 3577] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3576] <... openat resumed>) = 3 [pid 3576] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3576] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3576] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3578] <... symlink resumed>) = 0 [pid 3576] <... openat resumed>) = 4 [ 64.135448][ T20] tty tty1: SAK: killed process 3570 (syz-executor903): by fd#3 [ 64.157238][ T375] tty tty1: SAK: killed process 3571 (syz-executor903): by fd#3 [ 64.165677][ T375] tty tty1: SAK: killed process 3572 (syz-executor903): by fd#3 [ 64.174492][ T375] tty tty1: SAK: killed process 3573 (syz-executor903): by fd#3 [ 64.187638][ T20] tty tty1: SAK: killed process 3575 (syz-executor903): by fd#3 [pid 3576] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 3579] chdir("./640" [pid 3578] write(1, "executing program\n", 18 [pid 3577] <... openat resumed>) = ? [pid 3576] <... write resumed>) = ? [pid 3578] <... write resumed>) = 18 [pid 293] <... restart_syscall resumed>) = 0 [pid 3578] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3579] <... chdir resumed>) = 0 [pid 3578] <... openat resumed>) = 3 [pid 3579] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3578] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./671", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3579] <... prctl resumed>) = 0 [pid 3578] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3579] setpgid(0, 0 [pid 3578] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] openat(AT_FDCWD, "./671", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3579] <... setpgid resumed>) = 0 [pid 3578] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... openat resumed>) = 3 [pid 3579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3578] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] newfstatat(3, "", [pid 3579] <... openat resumed>) = 3 [pid 3578] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3579] write(3, "1000", 4 [pid 3578] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 3579] <... write resumed>) = 4 [pid 3578] <... write resumed>) = 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3579] close(3 [pid 3578] exit_group(0 [pid 293] umount2("./671/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3579] <... close resumed>) = 0 [pid 3578] <... exit_group resumed>) = ? [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3579] symlink("/dev/binderfs", "./binderfs" [pid 293] newfstatat(AT_FDCWD, "./671/binderfs", [pid 3577] +++ killed by SIGKILL +++ [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./671/binderfs" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3577, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./662", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./662", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 3579] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 3579] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 291] newfstatat(3, "", [pid 3579] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 293] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3579] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... close resumed>) = 0 [pid 291] umount2("./662/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] rmdir("./671" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3579] <... openat resumed>) = 3 [pid 291] newfstatat(AT_FDCWD, "./662/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./662/binderfs" [pid 293] <... rmdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 293] mkdir("./672", 0777 [pid 291] getdents64(3, [pid 3579] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./662" [pid 3579] <... ioctl resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 3579] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] mkdir("./663", 0777 [pid 3578] +++ exited with 0 +++ [pid 291] <... mkdir resumed>) = 0 [pid 3579] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3576] +++ killed by SIGKILL +++ [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3580 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3578, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3580 attached [pid 3579] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3581 attached [pid 3580] set_robust_list(0x5555700d1660, 24 [pid 3579] <... openat resumed>) = 4 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3576, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3580] <... set_robust_list resumed>) = 0 [pid 3579] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3581 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3581] set_robust_list(0x5555700d1660, 24) = 0 [pid 3581] chdir("./663") = 0 [pid 3581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3581] setpgid(0, 0) = 0 [pid 3581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3581] write(3, "1000", 4) = 4 [pid 3581] close(3) = 0 executing program [pid 3581] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3581] write(1, "executing program\n", 18) = 18 [pid 3581] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3581] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3581] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3581] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3580] chdir("./672") = 0 [pid 3580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3580] setpgid(0, 0) = 0 [pid 3580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3580] <... openat resumed>) = 3 [pid 3580] write(3, "1000", 4) = 4 [pid 292] umount2("./663", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./642", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3581] <... openat resumed>) = 4 [pid 3580] close(3 [pid 3579] <... write resumed>) = ? [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./663", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./642", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./663/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./642/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./663/binderfs", [pid 290] newfstatat(AT_FDCWD, "./642/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./663/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] unlink("./642/binderfs" [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 292] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... close resumed>) = 0 [pid 290] close(3 [pid 292] rmdir("./663" [pid 290] <... close resumed>) = 0 [pid 3581] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3579] +++ killed by SIGKILL +++ executing program [pid 292] <... rmdir resumed>) = 0 [pid 290] rmdir("./642" [pid 3580] <... close resumed>) = 0 [pid 292] mkdir("./664", 0777 [pid 3581] <... write resumed>) = 8784 [pid 290] <... rmdir resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3579, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3580] symlink("/dev/binderfs", "./binderfs" [pid 292] <... mkdir resumed>) = 0 [pid 290] mkdir("./643", 0777 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3582 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3583 [pid 3580] <... symlink resumed>) = 0 [pid 3580] write(1, "executing program\n", 18) = 18 [pid 3580] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3580] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3580] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3580] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3580] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3580] exit_group(0) = ? ./strace-static-x86_64: Process 3582 attached [pid 3582] set_robust_list(0x5555700d1660, 24) = 0 [pid 3582] chdir("./664") = 0 [pid 3582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3582] setpgid(0, 0) = 0 [pid 3582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3582] write(3, "1000", 4) = 4 [pid 3582] close(3 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./640", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./640", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 3581] +++ killed by SIGKILL +++ [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3581, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./640/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./640/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./640/binderfs"./strace-static-x86_64: Process 3583 attached ) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 3583] set_robust_list(0x5555700d1660, 24 [pid 289] <... close resumed>) = 0 [pid 3583] <... set_robust_list resumed>) = 0 [pid 3580] +++ exited with 0 +++ [pid 289] rmdir("./640" [pid 3583] chdir("./643" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3580, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... rmdir resumed>) = 0 [pid 3583] <... chdir resumed>) = 0 [pid 3582] <... close resumed>) = 0 [pid 289] mkdir("./641", 0777 [pid 3583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3582] symlink("/dev/binderfs", "./binderfs" [pid 3583] <... prctl resumed>) = 0 [pid 3583] setpgid(0, 0 [pid 3582] <... symlink resumed>) = 0 [pid 3583] <... setpgid resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 3582] write(1, "executing program\n", 18 [pid 291] <... restart_syscall resumed>) = 0 [pid 3583] <... openat resumed>) = 3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3583] write(3, "1000", 4 [pid 3582] <... write resumed>) = 18 [pid 3583] <... write resumed>) = 4 [pid 3583] close(3 [pid 3582] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3583] <... close resumed>) = 0 [pid 3583] symlink("/dev/binderfs", "./binderfs" [pid 3582] <... openat resumed>) = 3 [pid 3583] <... symlink resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3584 ./strace-static-x86_64: Process 3584 attached [pid 3583] write(1, "executing program\n", 18executing program [pid 3582] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] umount2("./663", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3583] <... write resumed>) = 18 [pid 3583] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3582] <... ioctl resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3583] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./663", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3584] set_robust_list(0x5555700d1660, 24 [pid 3583] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3582] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3583] <... ioctl resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 3583] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3582] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] newfstatat(3, "", [pid 3583] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3583] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3582] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3583] <... openat resumed>) = 4 [ 64.204575][ T42] tty tty1: SAK: killed process 3576 (syz-executor903): by fd#3 [ 64.204608][ T42] tty tty1: SAK: killed process 3577 (syz-executor903): by fd#3 [ 64.225675][ T20] tty tty1: SAK: killed process 3579 (syz-executor903): by fd#3 [ 64.237140][ T20] tty tty1: SAK: killed process 3581 (syz-executor903): by fd#3 [pid 3583] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3582] <... openat resumed>) = -1 (errno 18446744073709551615) [pid 291] getdents64(3, [pid 3584] <... set_robust_list resumed>) = 0 [pid 3583] <... write resumed>) = ? [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3584] chdir("./641" [pid 291] umount2("./663/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3584] <... chdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] umount2("./672", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./663/binderfs", [pid 3584] <... prctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3584] setpgid(0, 0 [pid 293] openat(AT_FDCWD, "./672", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] unlink("./663/binderfs" [pid 3584] <... setpgid resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 3584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] newfstatat(3, "", [pid 291] getdents64(3, [pid 3584] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3584] write(3, "1000", 4 [pid 293] getdents64(3, [pid 291] close(3 [pid 3584] <... write resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... close resumed>) = 0 [pid 3584] close(3 [pid 293] umount2("./672/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] rmdir("./663" [pid 3584] <... close resumed>) = 0 [pid 3582] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... rmdir resumed>) = 0 [pid 3583] +++ killed by SIGKILL +++ [pid 293] newfstatat(AT_FDCWD, "./672/binderfs", [pid 291] mkdir("./664", 0777 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3582, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] unlink("./672/binderfs" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3583, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3584] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... mkdir resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] getdents64(3, [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3584] write(1, "executing program\n", 18) = 18 [pid 3584] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] close(3 [pid 3584] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... close resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3585 [pid 293] rmdir("./672" [pid 3584] <... ioctl resumed>) = 0 [pid 3584] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3584] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 293] <... rmdir resumed>) = 0 [pid 3584] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] mkdir("./673", 0777./strace-static-x86_64: Process 3585 attached ) = 0 [pid 3585] set_robust_list(0x5555700d1660, 24 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3585] <... set_robust_list resumed>) = 0 [pid 3585] chdir("./664" [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3586 [pid 3585] <... chdir resumed>) = 0 [pid 3585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3585] setpgid(0, 0) = 0 [pid 3585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3585] write(3, "1000", 4) = 4 [pid 292] <... restart_syscall resumed>) = 0 [pid 3585] close(3 [pid 290] <... restart_syscall resumed>) = 0 [pid 3585] <... close resumed>) = 0 [pid 3585] symlink("/dev/binderfs", "./binderfs" [pid 292] umount2("./664", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3585] <... symlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./643", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3585] write(1, "executing program\n", 18 [pid 292] openat(AT_FDCWD, "./664", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3585] <... write resumed>) = 18 [pid 292] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./643", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3585] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 3585] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(3, "", [pid 3585] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3585] <... ioctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 3585] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] umount2("./664/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 3586 attached [pid 3585] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3584] <... write resumed>) = ? [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./643/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3586] set_robust_list(0x5555700d1660, 24 [pid 3585] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] newfstatat(AT_FDCWD, "./664/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3586] <... set_robust_list resumed>) = 0 [pid 3585] <... openat resumed>) = 4 [pid 3584] +++ killed by SIGKILL +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./643/binderfs", [pid 3586] chdir("./673" [pid 3585] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] unlink("./664/binderfs" [pid 3586] <... chdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3584, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3586] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... unlink resumed>) = 0 [pid 3586] <... prctl resumed>) = 0 [pid 3586] setpgid(0, 0) = 0 [pid 3586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3586] write(3, "1000", 4) = 4 [pid 3586] close(3) = 0 [pid 3586] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3586] write(1, "executing program\n", 18) = 18 [pid 3586] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3586] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3586] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3586] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3585] <... write resumed>) = ? [pid 3586] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3586] exit_group(0) = ? [pid 292] getdents64(3, [pid 290] unlink("./643/binderfs" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./664") = 0 [pid 292] mkdir("./665", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3587 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./643") = 0 [pid 290] mkdir("./644", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3588 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./641", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./641", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 3588 attached ./strace-static-x86_64: Process 3587 attached [pid 3586] +++ exited with 0 +++ [pid 289] umount2("./641/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3586, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] newfstatat(AT_FDCWD, "./641/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./641/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./641") = 0 [pid 289] mkdir("./642", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3589 [pid 3588] set_robust_list(0x5555700d1660, 24) = 0 [pid 3588] chdir("./644") = 0 [pid 3588] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3588] setpgid(0, 0) = 0 [pid 3588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3588] write(3, "1000", 4) = 4 [pid 3588] close(3) = 0 [pid 3588] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3588] write(1, "executing program\n", 18) = 18 [pid 293] <... restart_syscall resumed>) = 0 [ 64.251177][ T20] tty tty1: SAK: killed process 3582 (syz-executor903): by fd#3 [ 64.251205][ T20] tty tty1: SAK: killed process 3583 (syz-executor903): by fd#3 [ 64.270073][ T20] tty tty1: SAK: killed process 3584 (syz-executor903): by fd#3 [ 64.280450][ T42] tty tty1: SAK: killed process 3585 (syz-executor903): by fd#3 [ 64.288928][ T42] tty tty1: SAK: killed process 3585 (syz-executor903): by fd#3 [ 64.288953][ T42] tty tty1: SAK: killed process 3586 (syz-executor903): by fd#3 [pid 3588] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3588] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./673", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3588] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3588] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] openat(AT_FDCWD, "./673", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3589 attached [pid 3588] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3585] +++ killed by SIGKILL +++ [pid 3587] set_robust_list(0x5555700d1660, 24 [pid 293] <... openat resumed>) = 3 [pid 3589] set_robust_list(0x5555700d1660, 24 [pid 3588] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3587] <... set_robust_list resumed>) = 0 [pid 293] newfstatat(3, "", [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3585, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3589] <... set_robust_list resumed>) = 0 executing program executing program [pid 3588] <... openat resumed>) = 4 [pid 3587] chdir("./665" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3589] chdir("./642" [pid 3588] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3587] <... chdir resumed>) = 0 [pid 293] getdents64(3, [pid 3589] <... chdir resumed>) = 0 [pid 3587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3589] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3587] <... prctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3589] <... prctl resumed>) = 0 [pid 3587] setpgid(0, 0 [pid 3589] setpgid(0, 0 [pid 3587] <... setpgid resumed>) = 0 [pid 3589] <... setpgid resumed>) = 0 [pid 3587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3587] <... openat resumed>) = 3 [pid 3589] <... openat resumed>) = 3 [pid 3587] write(3, "1000", 4 [pid 3589] write(3, "1000", 4 [pid 3587] <... write resumed>) = 4 [pid 3589] <... write resumed>) = 4 [pid 3587] close(3 [pid 3589] close(3 [pid 3587] <... close resumed>) = 0 [pid 3589] <... close resumed>) = 0 [pid 3587] symlink("/dev/binderfs", "./binderfs" [pid 3589] symlink("/dev/binderfs", "./binderfs" [pid 3587] <... symlink resumed>) = 0 [pid 3589] <... symlink resumed>) = 0 [pid 3587] write(1, "executing program\n", 18 [pid 3589] write(1, "executing program\n", 18 [pid 3587] <... write resumed>) = 18 [pid 3589] <... write resumed>) = 18 [pid 3587] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3589] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3587] <... openat resumed>) = 3 [pid 3589] <... openat resumed>) = 3 [pid 3587] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3589] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3587] <... ioctl resumed>) = 0 [pid 3589] <... ioctl resumed>) = 0 [pid 3587] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3589] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3587] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3589] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3587] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3589] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3588] <... write resumed>) = ? [pid 3587] <... openat resumed>) = 4 [pid 3589] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3587] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3589] <... write resumed>) = 8784 [pid 3587] <... write resumed>) = 8784 [pid 293] umount2("./673/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... restart_syscall resumed>) = 0 [pid 3588] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./673/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./673/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./673") = 0 [pid 293] mkdir("./674", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3587] +++ killed by SIGKILL +++ [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3590 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3588, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3590 attached [pid 291] umount2("./664", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3590] set_robust_list(0x5555700d1660, 24) = 0 [pid 3590] chdir("./674") = 0 [pid 3590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3590] setpgid(0, 0) = 0 [pid 3590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3590] write(3, "1000", 4) = 4 [pid 3590] close(3) = 0 [pid 3590] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3590] write(1, "executing program\n", 18) = 18 [pid 3590] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3587, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] umount2("./665", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./665", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./665/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./665/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./665/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./665") = 0 [pid 292] mkdir("./666", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3591 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./664", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 3591 attached [pid 291] umount2("./664/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... restart_syscall resumed>) = 0 [pid 3589] +++ killed by SIGKILL +++ [pid 3591] set_robust_list(0x5555700d1660, 24 [pid 3590] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3589, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3591] <... set_robust_list resumed>) = 0 [pid 3590] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] newfstatat(AT_FDCWD, "./664/binderfs", [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3591] chdir("./666" [pid 3590] <... ioctl resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./644", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3591] <... chdir resumed>) = 0 [pid 3590] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] unlink("./664/binderfs" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3590] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] openat(AT_FDCWD, "./644", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3591] <... prctl resumed>) = 0 [pid 3590] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... unlink resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 3591] setpgid(0, 0 [pid 3590] <... openat resumed>) = 4 [pid 291] getdents64(3, [pid 290] newfstatat(3, "", [pid 3591] <... setpgid resumed>) = 0 executing program [pid 3590] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3590] <... write resumed>) = 8784 [pid 290] getdents64(3, [pid 3591] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3591] write(3, "1000", 4 [pid 290] umount2("./644/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3591] <... write resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3591] close(3 [pid 290] newfstatat(AT_FDCWD, "./644/binderfs", [pid 3591] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3591] symlink("/dev/binderfs", "./binderfs" [pid 290] unlink("./644/binderfs" [pid 3591] <... symlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3591] write(1, "executing program\n", 18 [pid 290] getdents64(3, [pid 3591] <... write resumed>) = 18 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3591] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] close(3 [pid 3591] <... openat resumed>) = 3 [pid 290] <... close resumed>) = 0 [pid 3591] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] rmdir("./644" [pid 3591] <... ioctl resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3591] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] mkdir("./645", 0777 [pid 3591] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... mkdir resumed>) = 0 [pid 3591] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3591] <... openat resumed>) = 4 [pid 3591] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3592 [pid 3591] <... write resumed>) = 8784 [pid 3591] exit_group(0) = ? [pid 291] close(3) = 0 [pid 291] rmdir("./664") = 0 [pid 291] mkdir("./665", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3593 [pid 3591] +++ exited with 0 +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3591, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3593 attached ./strace-static-x86_64: Process 3592 attached [pid 3590] +++ killed by SIGKILL +++ [pid 289] umount2("./642", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./666", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./642", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./666", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 292] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./642/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./666/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./642/binderfs", [pid 292] newfstatat(AT_FDCWD, "./666/binderfs", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./642/binderfs" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3590, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] unlink("./666/binderfs" [pid 289] <... unlink resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 292] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 292] close(3 [pid 289] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 289] rmdir("./642" [pid 3593] set_robust_list(0x5555700d1660, 24 [pid 3592] set_robust_list(0x5555700d1660, 24 [pid 292] rmdir("./666" [pid 3593] <... set_robust_list resumed>) = 0 [pid 3592] <... set_robust_list resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3593] chdir("./665" [pid 3592] chdir("./645" [pid 292] <... rmdir resumed>) = 0 [pid 289] mkdir("./643", 0777 [pid 3593] <... chdir resumed>) = 0 [pid 3592] <... chdir resumed>) = 0 [pid 3593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3592] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3593] <... prctl resumed>) = 0 [pid 3592] <... prctl resumed>) = 0 [pid 3593] setpgid(0, 0 [pid 3592] setpgid(0, 0 [pid 3593] <... setpgid resumed>) = 0 [pid 3592] <... setpgid resumed>) = 0 [pid 292] mkdir("./667", 0777 [pid 3593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... mkdir resumed>) = 0 [pid 3593] <... openat resumed>) = 3 [pid 3592] <... openat resumed>) = 3 [pid 292] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3593] write(3, "1000", 4 [pid 3592] write(3, "1000", 4 [pid 3593] <... write resumed>) = 4 [pid 3592] <... write resumed>) = 4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3593] close(3 [pid 3592] close(3 [pid 3593] <... close resumed>) = 0 [pid 3592] <... close resumed>) = 0 [pid 3593] symlink("/dev/binderfs", "./binderfs" [pid 3592] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 3595 attached ./strace-static-x86_64: Process 3594 attached ) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3594 [pid 3593] <... symlink resumed>) = 0 executing program [pid 3592] write(1, "executing program\n", 18 [pid 3593] write(1, "executing program\n", 18 [pid 3592] <... write resumed>) = 18 executing program [pid 3595] set_robust_list(0x5555700d1660, 24 [pid 3594] set_robust_list(0x5555700d1660, 24 [pid 3593] <... write resumed>) = 18 [pid 3592] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./674", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3595 [pid 3595] <... set_robust_list resumed>) = 0 [pid 3594] <... set_robust_list resumed>) = 0 [pid 3593] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3592] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3593] <... openat resumed>) = 3 [pid 3592] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3593] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3592] <... ioctl resumed>) = 0 [pid 3593] <... ioctl resumed>) = 0 [pid 3592] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] openat(AT_FDCWD, "./674", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3593] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3592] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3593] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3592] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3593] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3592] <... openat resumed>) = 4 [pid 3593] <... openat resumed>) = 4 [ 64.306326][ T20] tty tty1: SAK: killed process 3588 (syz-executor903): by fd#3 [ 64.315098][ T20] tty tty1: SAK: killed process 3587 (syz-executor903): by fd#3 [ 64.315130][ T20] tty tty1: SAK: killed process 3589 (syz-executor903): by fd#3 [ 64.334201][ T42] tty tty1: SAK: killed process 3590 (syz-executor903): by fd#3 [pid 3592] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... openat resumed>) = 3 [pid 3595] chdir("./667" [pid 3594] chdir("./643" [pid 3592] <... write resumed>) = ? [pid 3595] <... chdir resumed>) = 0 [pid 3594] <... chdir resumed>) = 0 [pid 3593] +++ killed by SIGKILL +++ [pid 293] newfstatat(3, "", [pid 3595] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3595] <... prctl resumed>) = 0 [pid 3594] <... prctl resumed>) = 0 [pid 293] getdents64(3, [pid 3595] setpgid(0, 0 [pid 3594] setpgid(0, 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3595] <... setpgid resumed>) = 0 [pid 3594] <... setpgid resumed>) = 0 [pid 293] umount2("./674/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3595] <... openat resumed>) = 3 [pid 3594] <... openat resumed>) = 3 [pid 293] newfstatat(AT_FDCWD, "./674/binderfs", [pid 3595] write(3, "1000", 4 [pid 3594] write(3, "1000", 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3595] <... write resumed>) = 4 [pid 3594] <... write resumed>) = 4 [pid 293] unlink("./674/binderfs" [pid 3595] close(3 [pid 3594] close(3 [pid 293] <... unlink resumed>) = 0 [pid 3595] <... close resumed>) = 0 [pid 3594] <... close resumed>) = 0 [pid 293] getdents64(3, [pid 3595] symlink("/dev/binderfs", "./binderfs" [pid 3594] symlink("/dev/binderfs", "./binderfs" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3595] <... symlink resumed>) = 0 [pid 3594] <... symlink resumed>) = 0 [pid 293] close(3executing program [pid 3595] write(1, "executing program\n", 18 [pid 3594] write(1, "executing program\n", 18 [pid 293] <... close resumed>) = 0 [pid 3595] <... write resumed>) = 18 [pid 3592] +++ killed by SIGKILL +++ [pid 293] rmdir("./674" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3593, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3592, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... rmdir resumed>) = 0 [pid 291] umount2("./665", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3595] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] mkdir("./675", 0777 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./665", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 293] <... mkdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] umount2("./665/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./665/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./665/binderfs"executing program [pid 3595] <... openat resumed>) = 3 [pid 3594] <... write resumed>) = 18 [pid 291] <... unlink resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3596 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3595] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] close(3 [pid 3594] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./665"./strace-static-x86_64: Process 3596 attached [pid 3595] <... ioctl resumed>) = 0 [pid 3594] <... openat resumed>) = 3 [pid 3596] set_robust_list(0x5555700d1660, 24 [pid 291] <... rmdir resumed>) = 0 [pid 3595] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] mkdir("./666", 0777 [pid 3596] <... set_robust_list resumed>) = 0 [pid 3595] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3594] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3596] chdir("./675" [pid 3595] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3594] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 3597 attached [pid 3597] set_robust_list(0x5555700d1660, 24 [pid 3595] <... openat resumed>) = 4 [pid 3594] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3597 executing program executing program [pid 3597] <... set_robust_list resumed>) = 0 [pid 3595] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3597] chdir("./666" [pid 3595] <... write resumed>) = 8784 [pid 3597] <... chdir resumed>) = 0 [pid 3597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3597] setpgid(0, 0) = 0 [pid 3597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3597] write(3, "1000", 4) = 4 [pid 3597] close(3) = 0 [pid 3597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3597] write(1, "executing program\n", 18) = 18 [pid 3597] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3597] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3597] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3597] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3597] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3597] exit_group(0) = ? [pid 3596] <... chdir resumed>) = 0 [pid 3596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3596] setpgid(0, 0) = 0 [pid 3596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3596] write(3, "1000", 4) = 4 [pid 3596] close(3) = 0 [pid 3596] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3596] write(1, "executing program\n", 18) = 18 [pid 3596] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3596] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3596] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3596] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3596] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3596] exit_group(0) = ? [pid 290] umount2("./645", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./645", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3597] +++ exited with 0 +++ [pid 3596] +++ exited with 0 +++ [pid 3594] <... ioctl resumed>) = ? [pid 290] getdents64(3, [pid 3595] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3597, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./645/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./645/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./666", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] unlink("./645/binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... unlink resumed>) = 0 [pid 291] openat(AT_FDCWD, "./666", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] getdents64(3, [pid 291] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(3, "", [pid 290] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 290] rmdir("./645" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... rmdir resumed>) = 0 [pid 291] umount2("./666/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] mkdir("./646", 0777 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... mkdir resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./666/binderfs", [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./666/binderfs" [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3598 [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./666"./strace-static-x86_64: Process 3598 attached [pid 3594] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3596, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3595, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... rmdir resumed>) = 0 [pid 3598] set_robust_list(0x5555700d1660, 24 [pid 291] mkdir("./667", 0777 [pid 3598] <... set_robust_list resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3594, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3598] chdir("./646" [pid 293] umount2("./675", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./667", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./643", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3598] <... chdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... mkdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./675", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./667", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] openat(AT_FDCWD, "./643", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3598] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 3598] setpgid(0, 0 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3598] <... setpgid resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3599 [pid 289] getdents64(3, [pid 3598] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3598] write(3, "1000", 4 [pid 293] umount2("./675/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./667/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./643/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3598] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3598] close(3 [pid 293] newfstatat(AT_FDCWD, "./675/binderfs", [pid 292] newfstatat(AT_FDCWD, "./667/binderfs", [pid 289] newfstatat(AT_FDCWD, "./643/binderfs", [pid 3598] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3598] symlink("/dev/binderfs", "./binderfs" [pid 293] unlink("./675/binderfs" [pid 292] unlink("./667/binderfs" [pid 289] unlink("./643/binderfs" [pid 3598] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 executing program [pid 3598] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 289] getdents64(3, [pid 3598] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3598] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] close(3 [pid 292] close(3 [pid 289] close(3 [pid 3598] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3598] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] rmdir("./675" [pid 292] rmdir("./667" [pid 289] rmdir("./643" [pid 3598] <... ioctl resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3598] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] mkdir("./676", 0777 [pid 292] mkdir("./668", 0777 [pid 289] mkdir("./644", 0777./strace-static-x86_64: Process 3599 attached [pid 3598] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3598] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3601 attached ./strace-static-x86_64: Process 3600 attached [pid 3599] set_robust_list(0x5555700d1660, 24 [pid 3598] <... openat resumed>) = 4 [pid 3598] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3600 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3601 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3602 ./strace-static-x86_64: Process 3602 attached [pid 3601] set_robust_list(0x5555700d1660, 24 [pid 3600] set_robust_list(0x5555700d1660, 24 [pid 3599] <... set_robust_list resumed>) = 0 [pid 3598] <... write resumed>) = ? [ 64.352654][ T20] tty tty1: SAK: killed process 3592 (syz-executor903): by fd#3 [ 64.352681][ T20] tty tty1: SAK: killed process 3593 (syz-executor903): by fd#3 [ 64.373796][ T42] tty tty1: SAK: killed process 3594 (syz-executor903): by fd#3 [ 64.373824][ T42] tty tty1: SAK: killed process 3595 (syz-executor903): by fd#3 [pid 3602] set_robust_list(0x5555700d1660, 24 [pid 3601] <... set_robust_list resumed>) = 0 [pid 3600] <... set_robust_list resumed>) = 0 [pid 3599] chdir("./667" [pid 3600] chdir("./676" [pid 3599] <... chdir resumed>) = 0 [pid 3602] <... set_robust_list resumed>) = 0 [pid 3601] chdir("./668" [pid 3598] +++ killed by SIGKILL +++ [pid 3600] <... chdir resumed>) = 0 [pid 3599] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3598, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3602] chdir("./644" [pid 3600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3599] <... prctl resumed>) = 0 [pid 3601] <... chdir resumed>) = 0 [pid 3602] <... chdir resumed>) = 0 [pid 3600] <... prctl resumed>) = 0 [pid 3599] setpgid(0, 0 [pid 3602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3602] setpgid(0, 0) = 0 [pid 3602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3601] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3600] setpgid(0, 0 [pid 3599] <... setpgid resumed>) = 0 [pid 3600] <... setpgid resumed>) = 0 [pid 3602] <... openat resumed>) = 3 [pid 3599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3602] write(3, "1000", 4 [pid 3600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3602] <... write resumed>) = 4 [pid 3599] <... openat resumed>) = 3 [pid 3602] close(3 [pid 3600] <... openat resumed>) = 3 [pid 3599] write(3, "1000", 4 [pid 3602] <... close resumed>) = 0 [pid 3602] symlink("/dev/binderfs", "./binderfs" [pid 3599] <... write resumed>) = 4 [pid 3600] write(3, "1000", 4executing program [pid 3602] <... symlink resumed>) = 0 [pid 3601] <... prctl resumed>) = 0 [pid 3600] <... write resumed>) = 4 [pid 3599] close(3 [pid 3602] write(1, "executing program\n", 18) = 18 [pid 3602] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3601] setpgid(0, 0 [pid 3600] close(3 [pid 3599] <... close resumed>) = 0 [pid 3602] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3602] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3602] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3602] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 3601] <... setpgid resumed>) = 0 [pid 3600] <... close resumed>) = 0 [pid 3599] symlink("/dev/binderfs", "./binderfs" [pid 3601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3600] symlink("/dev/binderfs", "./binderfs" [pid 3599] <... symlink resumed>) = 0 [pid 3602] +++ killed by SIGKILL +++ [pid 3601] <... openat resumed>) = 3 [pid 3600] <... symlink resumed>) = 0 [pid 3599] write(1, "executing program\n", 18executing program [pid 290] <... restart_syscall resumed>) = 0 [pid 3601] write(3, "1000", 4 [pid 3600] write(1, "executing program\n", 18executing program [pid 3599] <... write resumed>) = 18 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3602, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3601] <... write resumed>) = 4 [pid 3600] <... write resumed>) = 18 [pid 3599] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3601] close(3 [pid 3600] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3601] <... close resumed>) = 0 [pid 3600] <... openat resumed>) = 3 [pid 3599] <... openat resumed>) = 3 [pid 3601] symlink("/dev/binderfs", "./binderfs" [pid 3600] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3599] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] umount2("./646", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3601] <... symlink resumed>) = 0 [pid 3600] <... ioctl resumed>) = 0 [pid 3599] <... ioctl resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3601] write(1, "executing program\n", 18 [pid 3600] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3599] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] openat(AT_FDCWD, "./646", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3601] <... write resumed>) = 18 [pid 3600] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3599] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3601] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3600] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3599] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... openat resumed>) = 3 [pid 3601] <... openat resumed>) = 3 [pid 3600] <... openat resumed>) = 4 [pid 3599] <... openat resumed>) = 4 [pid 3601] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3600] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3599] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] newfstatat(3, "", [pid 3601] <... ioctl resumed>) = ? [pid 3600] <... write resumed>) = ? [pid 3599] +++ killed by SIGKILL +++ [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3599, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./646/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./667", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./646/binderfs", [pid 291] openat(AT_FDCWD, "./667", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] unlink("./646/binderfs" [pid 291] newfstatat(3, "", [pid 290] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] close(3 [pid 291] umount2("./667/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] rmdir("./646" [pid 291] newfstatat(AT_FDCWD, "./667/binderfs", [pid 290] <... rmdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] mkdir("./647", 0777 [pid 291] unlink("./667/binderfs" [pid 290] <... mkdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3603 [pid 291] close(3) = 0 [pid 291] rmdir("./667") = 0 [pid 291] mkdir("./668", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3604 [pid 3601] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3603 attached [pid 3603] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 3604 attached ) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3601, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3600] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3600, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./676", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./676", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] umount2("./644", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./668", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./676/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./676/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./676/binderfs") = 0 [pid 293] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./668", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./644", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 289] getdents64(3, [pid 293] rmdir("./676") = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./668/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./644/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] mkdir("./677", 0777 [pid 3604] set_robust_list(0x5555700d1660, 24 [pid 3603] chdir("./647" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... mkdir resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./668/binderfs", [pid 289] newfstatat(AT_FDCWD, "./644/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./668/binderfs" [pid 289] unlink("./644/binderfs" [pid 3604] <... set_robust_list resumed>) = 0 [pid 3603] <... chdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./644" [pid 292] getdents64(3, [pid 289] <... rmdir resumed>) = 0 [pid 3603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3605 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] mkdir("./645", 0777./strace-static-x86_64: Process 3605 attached [pid 3604] chdir("./668" [pid 3603] <... prctl resumed>) = 0 [pid 292] close(3 [pid 289] <... mkdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3605] set_robust_list(0x5555700d1660, 24 [pid 3604] <... chdir resumed>) = 0 [pid 3603] setpgid(0, 0 [pid 292] rmdir("./668"./strace-static-x86_64: Process 3606 attached [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3606 [pid 3606] set_robust_list(0x5555700d1660, 24 [pid 292] <... rmdir resumed>) = 0 [pid 3603] <... setpgid resumed>) = 0 [pid 292] mkdir("./669", 0777 [pid 3606] <... set_robust_list resumed>) = 0 [pid 3606] chdir("./645") = 0 [pid 3606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... mkdir resumed>) = 0 [pid 3606] <... prctl resumed>) = 0 [pid 3606] setpgid(0, 0 [pid 3603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3606] <... setpgid resumed>) = 0 [pid 3606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1000", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 3607 attached ) = 0 [pid 3605] <... set_robust_list resumed>) = 0 [pid 3604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3603] <... openat resumed>) = 3 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3607 executing program [pid 3606] write(1, "executing program\n", 18) = 18 [pid 3606] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3604] <... prctl resumed>) = 0 [pid 3603] write(3, "1000", 4 [pid 3606] <... openat resumed>) = 3 [pid 3604] setpgid(0, 0 [pid 3603] <... write resumed>) = 4 [pid 3606] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3605] chdir("./677" [pid 3604] <... setpgid resumed>) = 0 [pid 3603] close(3 [pid 3606] <... ioctl resumed>) = 0 [pid 3606] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3603] <... close resumed>) = 0 [pid 3606] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3606] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3603] symlink("/dev/binderfs", "./binderfs" [pid 3606] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3607] set_robust_list(0x5555700d1660, 24 [pid 3606] <... write resumed>) = ? [pid 3605] <... chdir resumed>) = 0 [pid 3604] <... openat resumed>) = 3 [ 64.401134][ T375] tty tty1: SAK: killed process 3598 (syz-executor903): by fd#3 [ 64.413758][ T375] tty tty1: SAK: killed process 3602 (syz-executor903): by fd#3 [ 64.426664][ T20] tty tty1: SAK: killed process 3599 (syz-executor903): by fd#3 [ 64.426692][ T20] tty tty1: SAK: killed process 3600 (syz-executor903): by fd#3 [ 64.426715][ T20] tty tty1: SAK: killed process 3601 (syz-executor903): by fd#3 [pid 3603] <... symlink resumed>) = 0 [pid 3605] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 3604] write(3, "1000", 4 [pid 3603] write(1, "executing program\n", 18 [pid 3605] <... prctl resumed>) = 0 [pid 3604] <... write resumed>) = 4 [pid 3603] <... write resumed>) = 18 [pid 3605] setpgid(0, 0 [pid 3604] close(3 [pid 3603] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3607] <... set_robust_list resumed>) = 0 [pid 3605] <... setpgid resumed>) = 0 [pid 3604] <... close resumed>) = 0 [pid 3603] <... openat resumed>) = 3 [pid 3607] chdir("./669" [pid 3605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3604] symlink("/dev/binderfs", "./binderfs" [pid 3603] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3607] <... chdir resumed>) = 0 [pid 3605] <... openat resumed>) = 3 [pid 3606] +++ killed by SIGKILL +++ [pid 3604] <... symlink resumed>) = 0 [pid 3603] <... ioctl resumed>) = 0 [pid 3605] write(3, "1000", 4) = 4 [pid 3604] write(1, "executing program\n", 18executing program [pid 3603] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3605] close(3 [pid 3604] <... write resumed>) = 18 [pid 3603] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3606, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3604] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3603] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] umount2("./645", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3605] <... close resumed>) = 0 [pid 3604] <... openat resumed>) = 3 executing program executing program [pid 3603] <... openat resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3603] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] openat(AT_FDCWD, "./645", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3605] symlink("/dev/binderfs", "./binderfs" [pid 3604] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... openat resumed>) = 3 [pid 3603] <... write resumed>) = 8784 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./645/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./645/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./645/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./645") = 0 [pid 289] mkdir("./646", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3608 ./strace-static-x86_64: Process 3608 attached [pid 3608] set_robust_list(0x5555700d1660, 24) = 0 [pid 3608] chdir("./646") = 0 [pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3608] setpgid(0, 0) = 0 [pid 3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1000", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3608] write(1, "executing program\n", 18) = 18 [pid 3608] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3608] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3608] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3608] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3608] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3608] exit_group(0) = ? [pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3607] setpgid(0, 0) = 0 [pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1000", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3607] write(1, "executing program\n", 18) = 18 [pid 3607] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3607] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3607] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3607] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3607] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3604] <... ioctl resumed>) = ? [pid 3607] <... write resumed>) = 8784 [pid 3608] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3608, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3607] exit_group(0) = ? [pid 3603] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3603, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./647", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./647", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./647/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./647/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./647/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3604] +++ killed by SIGKILL +++ [pid 290] close(3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3604, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... close resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] rmdir("./647") = 0 [pid 290] mkdir("./648", 0777 [pid 3605] <... symlink resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3609 executing program [pid 3605] write(1, "executing program\n", 18 [pid 289] <... restart_syscall resumed>) = 0 [pid 3605] <... write resumed>) = 18 [pid 3605] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] umount2("./646", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./646", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./646/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./646/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./646/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./646") = 0 [pid 289] mkdir("./647", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3610 ./strace-static-x86_64: Process 3609 attached [pid 3609] set_robust_list(0x5555700d1660, 24) = 0 [pid 3609] chdir("./648") = 0 [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setpgid(0, 0) = 0 [pid 3609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3610 attached ) = 3 [pid 3610] set_robust_list(0x5555700d1660, 24 [pid 3607] +++ exited with 0 +++ [pid 3610] <... set_robust_list resumed>) = 0 [pid 3609] write(3, "1000", 4 [pid 3605] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3607, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3605] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... restart_syscall resumed>) = 0 [pid 3605] <... ioctl resumed>) = 0 [pid 3609] <... write resumed>) = 4 [pid 3605] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 291] umount2("./668", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3605] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3610] chdir("./647" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3605] <... openat resumed>) = 4 [pid 291] openat(AT_FDCWD, "./668", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 3605] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3610] <... chdir resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 3609] close(3) = 0 [pid 3609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3609] write(1, "executing program\n", 18) = 18 [pid 3609] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3609] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3609] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3609] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3605] <... write resumed>) = ? [pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3609] <... openat resumed>) = 4 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] newfstatat(3, "", [pid 3610] <... prctl resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3610] setpgid(0, 0 [pid 291] getdents64(3, [pid 3610] <... setpgid resumed>) = 0 [pid 292] umount2("./669", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./668/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3610] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./669", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3610] write(3, "1000", 4 [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(AT_FDCWD, "./668/binderfs", [pid 3610] <... write resumed>) = 4 [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3610] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] unlink("./668/binderfs" [pid 3610] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 3610] symlink("/dev/binderfs", "./binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 3610] <... symlink resumed>) = 0 executing program [pid 292] umount2("./669/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3610] write(1, "executing program\n", 18 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] close(3 [pid 3610] <... write resumed>) = 18 [pid 292] newfstatat(AT_FDCWD, "./669/binderfs", [pid 291] <... close resumed>) = 0 [pid 3610] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3609] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] rmdir("./668" [pid 3610] <... openat resumed>) = 3 [pid 3609] <... write resumed>) = 8784 [pid 3605] +++ killed by SIGKILL +++ [pid 292] unlink("./669/binderfs" [pid 291] <... rmdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3605, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 3610] +++ killed by SIGKILL +++ [pid 292] <... unlink resumed>) = 0 [pid 291] mkdir("./669", 0777 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3610, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] getdents64(3, [pid 289] <... restart_syscall resumed>) = 0 [pid 293] umount2("./677", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 64.464246][ T20] tty tty1: SAK: killed process 3606 (syz-executor903): by fd#3 [ 64.474565][ T375] tty tty1: SAK: killed process 3603 (syz-executor903): by fd#3 [ 64.474592][ T375] tty tty1: SAK: killed process 3604 (syz-executor903): by fd#3 [ 64.494205][ T42] tty tty1: SAK: killed process 3605 (syz-executor903): by fd#3 [ 64.506069][ T42] tty tty1: SAK: killed process 3609 (syz-executor903): by fd#3 [pid 293] openat(AT_FDCWD, "./677", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] umount2("./647", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 289] openat(AT_FDCWD, "./647", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 289] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./677/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(AT_FDCWD, "./677/binderfs", [pid 289] umount2("./647/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./677/binderfs" [pid 289] newfstatat(AT_FDCWD, "./647/binderfs", [pid 293] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 289] unlink("./647/binderfs" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] close(3 [pid 289] getdents64(3, [pid 293] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] rmdir("./677" [pid 289] close(3 [pid 293] <... rmdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 293] mkdir("./678", 0777 [pid 289] rmdir("./647" [pid 293] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] mkdir("./648", 0777./strace-static-x86_64: Process 3611 attached [pid 292] close(3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 [pid 3611] set_robust_list(0x5555700d1660, 24 [pid 3609] +++ killed by SIGKILL +++ [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3611 [pid 292] <... close resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3611] <... set_robust_list resumed>) = 0 [pid 292] rmdir("./669" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3609, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3612 attached [pid 3611] chdir("./678" [pid 292] <... rmdir resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3612 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3611] <... chdir resumed>) = 0 [pid 292] mkdir("./670", 0777 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3613 ./strace-static-x86_64: Process 3613 attached [pid 3612] set_robust_list(0x5555700d1660, 24 [pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... mkdir resumed>) = 0 [pid 3613] set_robust_list(0x5555700d1660, 24 [pid 3611] <... prctl resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3613] <... set_robust_list resumed>) = 0 [pid 3611] setpgid(0, 0 [pid 3612] <... set_robust_list resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3611] <... setpgid resumed>) = 0 [pid 290] umount2("./648", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3614 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./648", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3611] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 3611] write(3, "1000", 4 [pid 290] newfstatat(3, "", [pid 3611] <... write resumed>) = 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3611] close(3 [pid 290] getdents64(3, [pid 3611] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 3614 attached [pid 290] umount2("./648/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./648/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3613] chdir("./648" [pid 3611] symlink("/dev/binderfs", "./binderfs" [pid 290] unlink("./648/binderfs" [pid 3613] <... chdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3611] <... symlink resumed>) = 0 [pid 290] getdents64(3, [pid 3613] <... prctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3614] set_robust_list(0x5555700d1660, 24 [pid 3612] chdir("./669" [pid 3611] write(1, "executing program\n", 18 [pid 290] close(3 [pid 3613] setpgid(0, 0 [pid 290] <... close resumed>) = 0 [pid 3613] <... setpgid resumed>) = 0 executing program [pid 290] rmdir("./648" [pid 3614] <... set_robust_list resumed>) = 0 [pid 3612] <... chdir resumed>) = 0 [pid 3611] <... write resumed>) = 18 [pid 3614] chdir("./670" [pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3611] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... rmdir resumed>) = 0 [pid 3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] mkdir("./649", 0777 [pid 3614] <... chdir resumed>) = 0 [pid 3612] <... prctl resumed>) = 0 [pid 3611] <... openat resumed>) = 3 [pid 3614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3613] <... openat resumed>) = 3 [pid 3612] setpgid(0, 0 [pid 3611] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... mkdir resumed>) = 0 [pid 3613] write(3, "1000", 4 [pid 3611] <... ioctl resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3614] <... prctl resumed>) = 0 [pid 3612] <... setpgid resumed>) = 0 [pid 3611] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}./strace-static-x86_64: Process 3615 attached [pid 3614] setpgid(0, 0 [pid 3613] <... write resumed>) = 4 [pid 3611] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3615] set_robust_list(0x5555700d1660, 24 [pid 3613] close(3 [pid 3611] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3615 [pid 3615] <... set_robust_list resumed>) = 0 [pid 3613] <... close resumed>) = 0 [pid 3612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3611] <... openat resumed>) = 4 [pid 3615] chdir("./649" [pid 3614] <... setpgid resumed>) = 0 [pid 3613] symlink("/dev/binderfs", "./binderfs" [pid 3611] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program executing program executing program [pid 3615] <... chdir resumed>) = 0 [pid 3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3613] <... symlink resumed>) = 0 [pid 3612] <... openat resumed>) = 3 [pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3613] write(1, "executing program\n", 18 [pid 3615] <... prctl resumed>) = 0 [pid 3613] <... write resumed>) = 18 [pid 3612] write(3, "1000", 4 [pid 3611] <... write resumed>) = 8784 [pid 3615] setpgid(0, 0 [pid 3613] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3615] <... setpgid resumed>) = 0 [pid 3613] <... openat resumed>) = 3 [pid 3612] <... write resumed>) = 4 [pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3613] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3615] <... openat resumed>) = 3 [pid 3613] <... ioctl resumed>) = 0 [pid 3612] close(3 [pid 3615] write(3, "1000", 4 [pid 3613] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3615] <... write resumed>) = 4 [pid 3613] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3612] <... close resumed>) = 0 [pid 3615] close(3 [pid 3613] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3615] <... close resumed>) = 0 [pid 3613] <... openat resumed>) = 4 [pid 3612] symlink("/dev/binderfs", "./binderfs" [pid 3615] symlink("/dev/binderfs", "./binderfs" [pid 3613] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3612] <... symlink resumed>) = 0 [pid 3615] <... symlink resumed>) = 0 [pid 3613] <... write resumed>) = 8784 [pid 3612] write(1, "executing program\n", 18 [pid 3615] write(1, "executing program\n", 18 [pid 3613] exit_group(0 [pid 3612] <... write resumed>) = 18 [pid 3615] <... write resumed>) = 18 [pid 3613] <... exit_group resumed>) = ? [pid 3612] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3615] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3612] <... openat resumed>) = 3 [pid 3615] <... openat resumed>) = 3 [pid 3612] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3615] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3612] <... ioctl resumed>) = 0 [pid 3615] <... ioctl resumed>) = 0 [pid 3612] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3615] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3612] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3615] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3612] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3615] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3612] <... openat resumed>) = 4 [pid 3615] <... openat resumed>) = 4 [pid 3612] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3615] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3612] <... write resumed>) = 8784 [pid 3615] <... write resumed>) = 8784 [pid 3612] exit_group(0 [pid 3615] exit_group(0 [pid 3612] <... exit_group resumed>) = ? [pid 3615] <... exit_group resumed>) = ? [pid 3614] <... openat resumed>) = 3 [pid 3614] write(3, "1000", 4) = 4 [pid 3614] close(3executing program ) = 0 [pid 3613] +++ exited with 0 +++ [pid 3615] +++ exited with 0 +++ [pid 3612] +++ exited with 0 +++ [pid 3614] symlink("/dev/binderfs", "./binderfs" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3615, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3613, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3614] <... symlink resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3614] write(1, "executing program\n", 18 [pid 290] <... restart_syscall resumed>) = 0 [pid 3614] <... write resumed>) = 18 [pid 3614] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 290] umount2("./649", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3614] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3614] <... ioctl resumed>) = 0 [pid 290] openat(AT_FDCWD, "./649", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3614] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... openat resumed>) = 3 [pid 3614] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] newfstatat(3, "", [pid 3614] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3614] <... openat resumed>) = 4 [pid 290] getdents64(3, [pid 3614] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3614] <... write resumed>) = 8784 [pid 290] umount2("./649/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3614] exit_group(0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3614] <... exit_group resumed>) = ? [pid 290] newfstatat(AT_FDCWD, "./649/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./649/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./649") = 0 [pid 290] mkdir("./650", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... restart_syscall resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3616 [pid 289] umount2("./648", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./648", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./648/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./648/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./648/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./648") = 0 [pid 289] mkdir("./649", 0777 [pid 3614] +++ exited with 0 +++ [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3612, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3617 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3614, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3616 attached [pid 3616] set_robust_list(0x5555700d1660, 24) = 0 [pid 3616] chdir("./650") = 0 [pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3616] setpgid(0, 0) = 0 [pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3617 attached [pid 291] umount2("./669", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3611] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3611, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3616] <... openat resumed>) = 3 [pid 292] umount2("./670", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3617] set_robust_list(0x5555700d1660, 24 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3616] write(3, "1000", 4) = 4 [pid 3616] close(3) = 0 [pid 3616] symlink("/dev/binderfs", "./binderfs" [pid 3617] <... set_robust_list resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./669", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3616] <... symlink resumed>) = 0 executing program [pid 3616] write(1, "executing program\n", 18) = 18 [pid 3616] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3617] chdir("./649" [pid 3616] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./670", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 3616] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 3616] <... ioctl resumed>) = 0 [pid 3616] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3616] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3616] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3617] <... chdir resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 293] umount2("./678", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./669/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./670/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3616] <... write resumed>) = ? [pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./678", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./669/binderfs", [pid 3617] <... prctl resumed>) = 0 [pid 3616] +++ killed by SIGKILL +++ [pid 293] <... openat resumed>) = 3 [pid 292] newfstatat(AT_FDCWD, "./670/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./669/binderfs" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3616, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] unlink("./670/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] umount2("./678/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] close(3 [pid 291] <... close resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./678/binderfs", [pid 292] <... close resumed>) = 0 [pid 291] rmdir("./669" [pid 3617] setpgid(0, 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] rmdir("./670" [pid 3617] <... setpgid resumed>) = 0 [pid 293] unlink("./678/binderfs" [pid 291] <... rmdir resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] mkdir("./670", 0777 [pid 3617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 292] mkdir("./671", 0777 [pid 3617] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3617] write(3, "1000", 4 [pid 293] close(3 [pid 3617] <... write resumed>) = 4 [pid 293] <... close resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 3617] close(3 [pid 293] rmdir("./678" [pid 3617] <... close resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3617] symlink("/dev/binderfs", "./binderfs" [pid 293] mkdir("./679", 0777 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3618 attached ./strace-static-x86_64: Process 3619 attached [pid 3617] <... symlink resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 3619] set_robust_list(0x5555700d1660, 24 [pid 3618] set_robust_list(0x5555700d1660, 24 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3619 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3618 [pid 3619] <... set_robust_list resumed>) = 0 [pid 3618] <... set_robust_list resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3619] chdir("./671" [pid 3618] chdir("./670" [pid 3617] write(1, "executing program\n", 18./strace-static-x86_64: Process 3620 attached [pid 3619] <... chdir resumed>) = 0 [pid 3618] <... chdir resumed>) = 0 executing program [pid 3617] <... write resumed>) = 18 [pid 3617] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3620 [pid 3620] set_robust_list(0x5555700d1660, 24 [pid 3619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3618] <... prctl resumed>) = 0 [pid 3617] <... openat resumed>) = 3 [pid 3620] <... set_robust_list resumed>) = 0 [pid 3617] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3617] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3617] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3617] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3620] chdir("./679" [pid 3619] <... prctl resumed>) = 0 [pid 3618] setpgid(0, 0 [pid 3617] <... write resumed>) = 109 [ 64.506095][ T42] tty tty1: SAK: killed process 3610 (syz-executor903): by fd#3 [ 64.532585][ T42] tty tty1: SAK: killed process 3611 (syz-executor903): by fd#3 [ 64.540812][ T42] tty tty1: SAK: killed process 3611 (syz-executor903): by fd#3 [ 64.553974][ T20] tty tty1: SAK: killed process 3616 (syz-executor903): by fd#3 [pid 3620] <... chdir resumed>) = 0 [pid 3619] setpgid(0, 0 [pid 3618] <... setpgid resumed>) = 0 [pid 3620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3619] <... setpgid resumed>) = 0 [pid 3618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3620] <... prctl resumed>) = 0 [pid 3619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3618] <... openat resumed>) = 3 [pid 3620] setpgid(0, 0 [pid 3619] <... openat resumed>) = 3 [pid 3618] write(3, "1000", 4 [pid 3620] <... setpgid resumed>) = 0 [pid 3619] write(3, "1000", 4 [pid 3618] <... write resumed>) = 4 [pid 3620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3619] <... write resumed>) = 4 [pid 3618] close(3 [pid 3620] <... openat resumed>) = 3 [pid 3619] close(3 [pid 3618] <... close resumed>) = 0 [pid 3620] write(3, "1000", 4 [pid 3619] <... close resumed>) = 0 [pid 3618] symlink("/dev/binderfs", "./binderfs" [pid 3620] <... write resumed>) = 4 [pid 3619] symlink("/dev/binderfs", "./binderfs" [pid 3618] <... symlink resumed>) = 0 [pid 3620] close(3 [pid 3619] <... symlink resumed>) = 0 executing program executing program [pid 3618] write(1, "executing program\n", 18 [pid 3620] <... close resumed>) = 0 [pid 3619] write(1, "executing program\n", 18 [pid 3618] <... write resumed>) = 18 [pid 3620] symlink("/dev/binderfs", "./binderfs" [pid 3619] <... write resumed>) = 18 [pid 3618] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3619] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... restart_syscall resumed>) = 0 [pid 3620] <... symlink resumed>) = 0 [pid 3619] <... openat resumed>) = 3 [pid 3618] <... openat resumed>) = 3 [pid 3617] +++ killed by SIGKILL +++ [pid 3620] write(1, "executing program\n", 18 [pid 3619] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3618] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3619] <... ioctl resumed>) = 0 [pid 3618] <... ioctl resumed>) = 0 executing program [pid 3619] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3618] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] umount2("./650", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3620] <... write resumed>) = 18 [pid 3619] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3618] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3617, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3619] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3618] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] umount2("./649", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./650", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3620] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3619] <... openat resumed>) = 4 [pid 3618] <... openat resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3619] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3618] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... openat resumed>) = 3 [pid 3620] <... openat resumed>) = ? [pid 290] newfstatat(3, "", [pid 289] openat(AT_FDCWD, "./649", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3620] +++ killed by SIGKILL +++ [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 3 [pid 3619] <... write resumed>) = ? [pid 3618] +++ killed by SIGKILL +++ [pid 290] getdents64(3, [pid 289] newfstatat(3, "", [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] umount2("./650/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] newfstatat(AT_FDCWD, "./650/binderfs", [pid 289] umount2("./649/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] unlink("./650/binderfs" [pid 289] newfstatat(AT_FDCWD, "./649/binderfs", [pid 290] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] getdents64(3, [pid 289] unlink("./649/binderfs" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... unlink resumed>) = 0 [pid 290] close(3 [pid 289] getdents64(3, [pid 290] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] rmdir("./650" [pid 289] close(3 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 290] mkdir("./651", 0777 [pid 289] rmdir("./649" [pid 290] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] mkdir("./650", 0777) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3621 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3622 ./strace-static-x86_64: Process 3621 attached [pid 3621] set_robust_list(0x5555700d1660, 24) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3620, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3622 attached [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3618, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3621] chdir("./651") = 0 [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [pid 3621] close(3) = 0 [pid 3621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3621] write(1, "executing program\n", 18executing program ) = 18 [pid 3621] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3622] set_robust_list(0x5555700d1660, 24) = 0 [pid 3622] chdir("./650") = 0 [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3622] write(1, "executing program\n", 18) = 18 [pid 3622] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./679", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./679", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./679/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./679/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3619] +++ killed by SIGKILL +++ [pid 293] unlink("./679/binderfs") = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3619, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3622] <... openat resumed>) = 3 [pid 3621] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 3622] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] umount2("./670", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3622] <... ioctl resumed>) = 0 [pid 293] close(3 [pid 3622] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3622] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] rmdir("./679" [pid 3622] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3621] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] openat(AT_FDCWD, "./670", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", [pid 3622] <... openat resumed>) = 4 [pid 293] <... rmdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3622] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] mkdir("./680", 0777 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./670/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./670/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./670/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./670") = 0 [pid 291] mkdir("./671", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3621] <... ioctl resumed>) = ? [pid 3621] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3623 [pid 3622] <... write resumed>) = ? [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3624 [pid 292] umount2("./671", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./671", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./671/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./671/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./671/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./671") = 0 [ 64.571543][ T20] tty tty1: SAK: killed process 3617 (syz-executor903): by fd#3 [ 64.582278][ T42] tty tty1: SAK: killed process 3618 (syz-executor903): by fd#3 [ 64.582311][ T42] tty tty1: SAK: killed process 3619 (syz-executor903): by fd#3 [ 64.582334][ T42] tty tty1: SAK: killed process 3620 (syz-executor903): by fd#3 [ 64.608791][ T20] tty tty1: SAK: killed process 3621 (syz-executor903): by fd#3 [pid 292] mkdir("./672", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3625 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3621, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3623 attached [pid 3623] set_robust_list(0x5555700d1660, 24) = 0 ./strace-static-x86_64: Process 3624 attached [pid 3623] chdir("./671"./strace-static-x86_64: Process 3625 attached [pid 3625] set_robust_list(0x5555700d1660, 24 [pid 3623] <... chdir resumed>) = 0 [pid 3622] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3622, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3624] set_robust_list(0x5555700d1660, 24) = 0 [pid 3624] chdir("./680" [pid 3625] <... set_robust_list resumed>) = 0 [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3624] <... chdir resumed>) = 0 [pid 3624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3624] setpgid(0, 0 [pid 3625] chdir("./672" [pid 3623] <... prctl resumed>) = 0 [pid 3624] <... setpgid resumed>) = 0 [pid 3624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3625] <... chdir resumed>) = 0 [pid 3623] setpgid(0, 0 [pid 3624] <... openat resumed>) = 3 [pid 3624] write(3, "1000", 4) = 4 [pid 3624] close(3) = 0 [pid 3624] symlink("/dev/binderfs", "./binderfs" [pid 3623] <... setpgid resumed>) = 0 [pid 3625] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 3624] <... symlink resumed>) = 0 [pid 3624] write(1, "executing program\n", 18) = 18 [pid 3625] <... prctl resumed>) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3624] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3625] setpgid(0, 0 [pid 3623] <... openat resumed>) = 3 [pid 3625] <... setpgid resumed>) = 0 [pid 3624] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3624] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3624] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3624] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3623] write(3, "1000", 4executing program executing program [pid 3625] <... openat resumed>) = 3 [pid 3624] <... write resumed>) = ? [pid 3623] <... write resumed>) = 4 [pid 3625] write(3, "1000", 4 [pid 3623] close(3 [pid 3625] <... write resumed>) = 4 [pid 3623] <... close resumed>) = 0 [pid 3625] close(3 [pid 3623] symlink("/dev/binderfs", "./binderfs" [pid 3625] <... close resumed>) = 0 [pid 3623] <... symlink resumed>) = 0 [pid 3625] symlink("/dev/binderfs", "./binderfs" [pid 3623] write(1, "executing program\n", 18 [pid 3625] <... symlink resumed>) = 0 [pid 3623] <... write resumed>) = 18 [pid 3625] write(1, "executing program\n", 18 [pid 3623] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3625] <... write resumed>) = 18 [pid 3623] <... openat resumed>) = 3 [pid 3625] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3623] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3625] <... openat resumed>) = 3 [pid 3623] <... ioctl resumed>) = 0 [pid 3625] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3623] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3625] <... ioctl resumed>) = 0 [pid 3623] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3625] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3623] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3625] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3623] <... openat resumed>) = 4 [pid 3625] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3623] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3625] <... openat resumed>) = 4 [pid 3623] <... write resumed>) = 8784 [pid 3625] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3623] exit_group(0 [pid 3625] <... write resumed>) = 8784 [pid 3623] <... exit_group resumed>) = ? [pid 3625] exit_group(0) = ? [pid 3623] +++ exited with 0 +++ [pid 3625] +++ exited with 0 +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3625, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3623, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] umount2("./672", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./672", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./672/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./672/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./672/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./672") = 0 [pid 292] mkdir("./673", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3626 ./strace-static-x86_64: Process 3626 attached [pid 3626] set_robust_list(0x5555700d1660, 24) = 0 [pid 3626] chdir("./673") = 0 [pid 3626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3626] setpgid(0, 0) = 0 [pid 3626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3624] +++ killed by SIGKILL +++ [pid 290] umount2("./651", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./650", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./671", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3626] write(3, "1000", 4) = 4 [pid 3626] close(3) = 0 [pid 3626] symlink("/dev/binderfs", "./binderfs" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3624, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./650", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] openat(AT_FDCWD, "./671", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./651", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 executing program [pid 290] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3626] <... symlink resumed>) = 0 [pid 3626] write(1, "executing program\n", 18) = 18 [pid 3626] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./651/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./650/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3626] <... openat resumed>) = 3 [pid 3626] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] umount2("./671/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./651/binderfs", [pid 289] newfstatat(AT_FDCWD, "./650/binderfs", [pid 291] newfstatat(AT_FDCWD, "./671/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./671/binderfs" [pid 290] unlink("./651/binderfs" [pid 289] unlink("./650/binderfs" [pid 3626] <... ioctl resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 3626] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 289] <... unlink resumed>) = 0 [pid 3626] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 289] close(3 [pid 290] close(3 [pid 291] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 291] rmdir("./671" [pid 290] rmdir("./651" [pid 289] rmdir("./650" [pid 3626] <... openat resumed>) = 4 [pid 3626] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... rmdir resumed>) = 0 [pid 3626] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 291] mkdir("./672", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] mkdir("./652", 0777 [pid 289] mkdir("./651", 0777 [pid 293] umount2("./680", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3627 attached [pid 293] openat(AT_FDCWD, "./680", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3628 attached [pid 3627] set_robust_list(0x5555700d1660, 24 [pid 3626] +++ killed by SIGKILL +++ [pid 293] <... openat resumed>) = 3 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3627 [pid 3627] <... set_robust_list resumed>) = 0 [pid 293] newfstatat(3, "", [pid 3627] chdir("./672" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3626, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3628 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3629 [pid 3627] <... chdir resumed>) = 0 [pid 292] umount2("./673", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3627] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3627] <... prctl resumed>) = 0 [pid 292] openat(AT_FDCWD, "./673", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3627] setpgid(0, 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... openat resumed>) = 3 [pid 3627] <... setpgid resumed>) = 0 [pid 292] newfstatat(3, "", ./strace-static-x86_64: Process 3629 attached [pid 3628] set_robust_list(0x5555700d1660, 24 [pid 3627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3629] set_robust_list(0x5555700d1660, 24 [pid 3628] <... set_robust_list resumed>) = 0 [pid 3627] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 3627] write(3, "1000", 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3627] <... write resumed>) = 4 [pid 292] umount2("./673/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3627] close(3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3627] <... close resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./673/binderfs", [pid 3627] symlink("/dev/binderfs", "./binderfs" [pid 293] umount2("./680/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3629] <... set_robust_list resumed>) = 0 executing program [pid 3628] chdir("./652" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] unlink("./673/binderfs" [pid 3627] <... symlink resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./680/binderfs", [pid 292] <... unlink resumed>) = 0 [pid 3627] write(1, "executing program\n", 18 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(3, [pid 3627] <... write resumed>) = 18 [pid 293] unlink("./680/binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3627] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] close(3 [pid 3627] <... openat resumed>) = 3 [pid 293] <... unlink resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 3629] chdir("./651" [pid 3627] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] getdents64(3, [pid 292] rmdir("./673" [pid 3628] <... chdir resumed>) = 0 [pid 3629] <... chdir resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3628] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3627] <... ioctl resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 3627] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] close(3 [pid 292] mkdir("./674", 0777 [pid 3629] <... prctl resumed>) = 0 [pid 3628] <... prctl resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 3629] setpgid(0, 0 [pid 3627] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] rmdir("./680" [pid 292] <... mkdir resumed>) = 0 [pid 3629] <... setpgid resumed>) = 0 [pid 3628] setpgid(0, 0 [pid 3627] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... rmdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3630 attached [pid 3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3628] <... setpgid resumed>) = 0 [pid 3627] <... openat resumed>) = 4 [pid 293] mkdir("./681", 0777 [pid 3630] set_robust_list(0x5555700d1660, 24 [pid 3629] <... openat resumed>) = 3 [pid 3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3627] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3630 [pid 3630] <... set_robust_list resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 3630] chdir("./674" [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3630] <... chdir resumed>) = 0 [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL [ 64.608818][ T20] tty tty1: SAK: killed process 3622 (syz-executor903): by fd#3 [ 64.628328][ T42] tty tty1: SAK: killed process 3624 (syz-executor903): by fd#3 [ 64.636551][ T42] tty tty1: SAK: killed process 3624 (syz-executor903): by fd#3 [ 64.650121][ T20] tty tty1: SAK: killed process 3626 (syz-executor903): by fd#3 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3631 [pid 3630] <... prctl resumed>) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3627] <... write resumed>) = ? [pid 3630] write(1, "executing program\n", 18 executing program [pid 3629] write(3, "1000", 4 [pid 3628] <... openat resumed>) = 3 [pid 3630] <... write resumed>) = 18 [pid 3629] <... write resumed>) = 4 ./strace-static-x86_64: Process 3631 attached [pid 3630] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3629] close(3 [pid 3628] write(3, "1000", 4 [pid 3627] +++ killed by SIGKILL +++ [pid 3630] <... openat resumed>) = 3 [pid 3629] <... close resumed>) = 0 [pid 3628] <... write resumed>) = 4 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3627, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3631] set_robust_list(0x5555700d1660, 24 [pid 3630] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3630] <... ioctl resumed>) = 0 [pid 3630] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3630] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3629] symlink("/dev/binderfs", "./binderfs" [pid 3628] close(3 [pid 3630] <... openat resumed>) = 4 [pid 3630] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3631] <... set_robust_list resumed>) = 0 [pid 3630] <... write resumed>) = ? [pid 3629] <... symlink resumed>) = 0 [pid 3628] <... close resumed>) = 0 [pid 3631] chdir("./681" [pid 3629] write(1, "executing program\n", 18 executing program [pid 3628] symlink("/dev/binderfs", "./binderfs" [pid 291] <... restart_syscall resumed>) = 0 [pid 3630] +++ killed by SIGKILL +++ executing program [pid 3629] <... write resumed>) = 18 [pid 3628] <... symlink resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3630, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3629] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3628] write(1, "executing program\n", 18 [pid 291] umount2("./672", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3629] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3628] <... write resumed>) = 18 [pid 291] openat(AT_FDCWD, "./672", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3629] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3628] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] umount2("./674", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 3628] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 3629] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3628] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3631] <... chdir resumed>) = 0 [pid 3629] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3628] <... ioctl resumed>) = 0 [pid 292] openat(AT_FDCWD, "./674", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] getdents64(3, [pid 3631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3629] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3628] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... openat resumed>) = 3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3631] <... prctl resumed>) = 0 [pid 3629] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3628] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] newfstatat(3, "", [pid 291] umount2("./672/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3631] setpgid(0, 0 [pid 3629] <... openat resumed>) = 4 [pid 3628] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3631] <... setpgid resumed>) = 0 [pid 3629] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3628] <... openat resumed>) = 4 [pid 292] getdents64(3, [pid 291] newfstatat(AT_FDCWD, "./672/binderfs", [pid 3631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3631] <... openat resumed>) = 3 [pid 3629] <... write resumed>) = 8784 [pid 3628] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] unlink("./672/binderfs" [pid 3631] write(3, "1000", 4 [pid 3629] exit_group(0 [pid 292] umount2("./674/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... unlink resumed>) = 0 [pid 3631] <... write resumed>) = 4 [pid 3628] <... write resumed>) = 8784 [pid 291] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3631] close(3 [pid 3629] <... exit_group resumed>) = ? [pid 3628] exit_group(0 [pid 292] newfstatat(AT_FDCWD, "./674/binderfs", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3631] <... close resumed>) = 0 [pid 291] close(3 [pid 3631] symlink("/dev/binderfs", "./binderfs" [pid 291] <... close resumed>) = 0 [pid 3631] <... symlink resumed>) = 0 [pid 291] rmdir("./672" [pid 3631] write(1, "executing program\n", 18 [pid 3629] +++ exited with 0 +++ [pid 3628] <... exit_group resumed>) = ? [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 3631] <... write resumed>) = 18 [pid 291] mkdir("./673", 0777 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3629, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3631] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] unlink("./674/binderfs" [pid 291] <... mkdir resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...>executing program [pid 3631] <... openat resumed>) = 3 [pid 3628] +++ exited with 0 +++ [pid 292] <... unlink resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 292] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3628, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3632 [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3632 attached [pid 3632] set_robust_list(0x5555700d1660, 24) = 0 [pid 3632] chdir("./673") = 0 [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3632] write(1, "executing program\n", 18) = 18 [pid 3632] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./674") = 0 [pid 292] mkdir("./675", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3633 ./strace-static-x86_64: Process 3633 attached [pid 3633] set_robust_list(0x5555700d1660, 24) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 290] umount2("./652", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./651", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./652", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./651", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./652/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./651/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./652/binderfs", [pid 289] newfstatat(AT_FDCWD, "./651/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./652/binderfs" [pid 289] unlink("./651/binderfs" [pid 290] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 289] close(3 [pid 290] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 290] rmdir("./652" [pid 289] rmdir("./651" [pid 3633] chdir("./675" [pid 3631] +++ killed by SIGKILL +++ [pid 290] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3631, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] mkdir("./653", 0777 [pid 3632] <... openat resumed>) = 3 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] mkdir("./652", 0777 [pid 3633] <... chdir resumed>) = 0 [pid 3633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3633] setpgid(0, 0) = 0 executing program [pid 3633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... mkdir resumed>) = 0 [pid 3633] <... openat resumed>) = 3 [pid 3633] write(3, "1000", 4) = 4 [pid 3633] close(3) = 0 [pid 3633] symlink("/dev/binderfs", "./binderfs" [pid 290] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3632] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3633] <... symlink resumed>) = 0 [pid 3633] write(1, "executing program\n", 18) = 18 [pid 3633] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3633] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3634 [pid 3632] <... ioctl resumed>) = 0 [pid 3633] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3633] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3635 [pid 3632] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3633] <... openat resumed>) = 4 [pid 3633] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3632] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 3635 attached ./strace-static-x86_64: Process 3634 attached [pid 3633] <... write resumed>) = ? [pid 3632] <... openat resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 3635] set_robust_list(0x5555700d1660, 24) = 0 [pid 3635] chdir("./653") = 0 [pid 3635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3635] setpgid(0, 0) = 0 [pid 3635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] umount2("./681", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3635] <... openat resumed>) = 3 [pid 3635] write(3, "1000", 4) = 4 [pid 3635] close(3) = 0 [pid 3635] symlink("/dev/binderfs", "./binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3632] +++ killed by SIGKILL +++ [pid 3635] <... symlink resumed>) = 0 [pid 293] openat(AT_FDCWD, "./681", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3635] write(1, "executing program\n", 18executing program ) = 18 [pid 3635] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3632, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3634] set_robust_list(0x5555700d1660, 24 [pid 293] <... openat resumed>) = 3 [pid 3635] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] newfstatat(3, "", [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3635] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3635] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3635] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3634] <... set_robust_list resumed>) = 0 [pid 293] getdents64(3, [pid 3635] <... openat resumed>) = 4 [pid 3635] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3634] chdir("./652" [pid 293] umount2("./681/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./681/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./681/binderfs" [pid 3635] <... write resumed>) = 8784 [pid 3635] exit_group(0 [pid 293] <... unlink resumed>) = 0 [pid 3635] <... exit_group resumed>) = ? [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./681") = 0 [pid 293] mkdir("./682", 0777 [pid 3634] <... chdir resumed>) = 0 [pid 3635] +++ exited with 0 +++ [pid 3634] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3635, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 64.667146][ T20] tty tty1: SAK: killed process 3627 (syz-executor903): by fd#3 [ 64.678127][ T42] tty tty1: SAK: killed process 3630 (syz-executor903): by fd#3 [ 64.692370][ T20] tty tty1: SAK: killed process 3631 (syz-executor903): by fd#3 [ 64.704416][ T20] tty tty1: SAK: killed process 3632 (syz-executor903): by fd#3 [ 64.704443][ T20] tty tty1: SAK: killed process 3633 (syz-executor903): by fd#3 [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3636 attached [pid 3634] <... prctl resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3636 [pid 3634] setpgid(0, 0) = 0 [pid 3634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3634] write(3, "1000", 4) = 4 [pid 3634] close(3executing program ) = 0 [pid 3634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3634] write(1, "executing program\n", 18) = 18 [pid 3634] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3634] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3634] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3634] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./673", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] <... restart_syscall resumed>) = 0 [pid 291] openat(AT_FDCWD, "./673", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", [pid 290] umount2("./653", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3634] <... openat resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3634] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] getdents64(3, [pid 290] openat(AT_FDCWD, "./653", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3634] <... write resumed>) = 8784 [pid 3633] +++ killed by SIGKILL +++ [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3633, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./673/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(3, "", [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(AT_FDCWD, "./673/binderfs", [pid 290] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] unlink("./673/binderfs" [pid 290] umount2("./653/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... unlink resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 290] newfstatat(AT_FDCWD, "./653/binderfs", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] close(3 [pid 290] unlink("./653/binderfs" [pid 291] <... close resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3636] set_robust_list(0x5555700d1660, 24 [pid 291] rmdir("./673" [pid 290] getdents64(3, [pid 3636] <... set_robust_list resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3636] chdir("./682" [pid 291] mkdir("./674", 0777 [pid 290] close(3 [pid 3636] <... chdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 3636] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] rmdir("./653" [pid 3636] <... prctl resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3636] setpgid(0, 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3637 [pid 290] mkdir("./654", 0777./strace-static-x86_64: Process 3637 attached [pid 3636] <... setpgid resumed>) = 0 [pid 3637] set_robust_list(0x5555700d1660, 24) = 0 [pid 3637] chdir("./674" [pid 290] <... mkdir resumed>) = 0 [pid 3634] +++ killed by SIGKILL +++ [pid 292] umount2("./675", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3637] <... chdir resumed>) = 0 [pid 3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3637] setpgid(0, 0) = 0 [pid 3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] openat(AT_FDCWD, "./675", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3638 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3634, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... openat resumed>) = 3 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] newfstatat(3, "", [pid 3636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3637] <... openat resumed>) = 3 [pid 3636] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 3637] write(3, "1000", 4) = 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3636] write(3, "1000", 4 [pid 292] umount2("./675/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3637] close(3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3636] <... write resumed>) = 4 [pid 292] newfstatat(AT_FDCWD, "./675/binderfs", [pid 3637] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3636] close(3 [pid 292] unlink("./675/binderfs" [pid 3637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3636] <... close resumed>) = 0 [pid 292] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 3638 attached [pid 292] getdents64(3, [pid 3636] symlink("/dev/binderfs", "./binderfs" executing program [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3637] write(1, "executing program\n", 18 [pid 292] close(3 [pid 3637] <... write resumed>) = 18 [pid 292] <... close resumed>) = 0 [pid 3637] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] rmdir("./675" [pid 3636] <... symlink resumed>) = 0 [pid 3637] <... openat resumed>) = 3 executing program [pid 3637] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3636] write(1, "executing program\n", 18 [pid 292] <... rmdir resumed>) = 0 [pid 3637] <... ioctl resumed>) = 0 [pid 3636] <... write resumed>) = 18 [pid 292] mkdir("./676", 0777 [pid 3637] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3637] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3637] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... mkdir resumed>) = 0 [pid 3638] set_robust_list(0x5555700d1660, 24 [pid 3637] <... write resumed>) = ? [pid 3636] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3638] <... set_robust_list resumed>) = 0 [pid 3637] +++ killed by SIGKILL +++ [pid 3636] <... openat resumed>) = 3 [pid 289] <... restart_syscall resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3637, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3639 ./strace-static-x86_64: Process 3639 attached [pid 289] umount2("./652", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./674", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3636] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] openat(AT_FDCWD, "./652", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./674", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 3636] <... ioctl resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3639] set_robust_list(0x5555700d1660, 24 [pid 289] getdents64(3, [pid 3638] chdir("./654" [pid 3636] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] getdents64(3, [pid 3638] <... chdir resumed>) = 0 [pid 3638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3638] setpgid(0, 0 [pid 3639] <... set_robust_list resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3638] <... setpgid resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./674/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./652/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3636] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3636] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] newfstatat(AT_FDCWD, "./674/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program executing program [pid 289] newfstatat(AT_FDCWD, "./652/binderfs", [pid 3636] <... openat resumed>) = 4 [pid 291] unlink("./674/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... unlink resumed>) = 0 [pid 289] unlink("./652/binderfs" [pid 3636] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] getdents64(3, [pid 3639] chdir("./676" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3639] <... chdir resumed>) = 0 [pid 3639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3638] <... openat resumed>) = 3 [pid 3639] <... prctl resumed>) = 0 [pid 3639] setpgid(0, 0) = 0 [pid 3639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3638] write(3, "1000", 4) = 4 [pid 3638] close(3) = 0 [pid 3638] symlink("/dev/binderfs", "./binderfs" [pid 3639] <... openat resumed>) = 3 [pid 3638] <... symlink resumed>) = 0 [pid 3639] write(3, "1000", 4) = 4 [pid 3639] close(3) = 0 [pid 3639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3638] write(1, "executing program\n", 18) = 18 [pid 3638] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3639] write(1, "executing program\n", 18 [pid 3638] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3639] <... write resumed>) = 18 [pid 3639] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3638] <... ioctl resumed>) = 0 [pid 3639] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3638] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3638] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3639] <... ioctl resumed>) = 0 [pid 3639] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3639] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3636] <... write resumed>) = ? [pid 291] close(3 [pid 289] getdents64(3, [pid 3639] <... openat resumed>) = 4 [pid 291] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3638] <... openat resumed>) = 4 [pid 291] rmdir("./674" [pid 289] close(3 [ 64.726475][ T20] tty tty1: SAK: killed process 3633 (syz-executor903): by fd#3 [ 64.735222][ T20] tty tty1: SAK: killed process 3634 (syz-executor903): by fd#3 [ 64.747728][ T20] tty tty1: SAK: killed process 3637 (syz-executor903): by fd#3 [ 64.769337][ T42] tty tty1: SAK: killed process 3636 (syz-executor903): by fd#3 [pid 3639] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 291] <... rmdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 291] mkdir("./675", 0777 [pid 289] rmdir("./652" [pid 291] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] mkdir("./653", 0777) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3640 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3641 [pid 3636] +++ killed by SIGKILL +++ [pid 3638] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3636, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3638, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3640 attached [pid 3640] set_robust_list(0x5555700d1660, 24) = 0 [pid 3640] chdir("./675") = 0 [pid 3640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3640] setpgid(0, 0) = 0 [pid 3640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3640] write(3, "1000", 4) = 4 [pid 3640] close(3) = 0 [pid 3640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3640] write(1, "executing program\n", 18executing program ) = 18 [pid 3640] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3641 attached [pid 3641] set_robust_list(0x5555700d1660, 24) = 0 [pid 3641] chdir("./653") = 0 [pid 3641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./682", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./682", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 290] umount2("./654", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./682/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./654", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 [pid 293] newfstatat(AT_FDCWD, "./682/binderfs", [pid 290] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] unlink("./682/binderfs" [pid 290] getdents64(3, [pid 293] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] getdents64(3, [pid 290] umount2("./654/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] close(3 [pid 290] newfstatat(AT_FDCWD, "./654/binderfs", [pid 293] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] rmdir("./682" [pid 290] unlink("./654/binderfs" [pid 3641] setpgid(0, 0 [pid 293] <... rmdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3641] <... setpgid resumed>) = 0 [pid 293] mkdir("./683", 0777 [pid 290] getdents64(3, [pid 3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... mkdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3641] <... openat resumed>) = 3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] close(3 [pid 3641] write(3, "1000", 4 [pid 290] <... close resumed>) = 0 [pid 3641] <... write resumed>) = 4 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3642 [pid 290] rmdir("./654" [pid 3641] close(3 [pid 290] <... rmdir resumed>) = 0 [pid 3641] <... close resumed>) = 0 [pid 290] mkdir("./655", 0777 [pid 3641] symlink("/dev/binderfs", "./binderfs" [pid 290] <... mkdir resumed>) = 0 [pid 3641] <... symlink resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 3643 attached ./strace-static-x86_64: Process 3642 attached [pid 3641] write(1, "executing program\n", 18) = 18 [pid 3639] +++ killed by SIGKILL +++ [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3643 [pid 3643] set_robust_list(0x5555700d1660, 24 [pid 3642] set_robust_list(0x5555700d1660, 24 [pid 3641] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3640] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3639, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3643] <... set_robust_list resumed>) = 0 [pid 3642] <... set_robust_list resumed>) = 0 [pid 3641] <... openat resumed>) = 3 [pid 3640] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3641] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3640] <... ioctl resumed>) = 0 [pid 3641] <... ioctl resumed>) = 0 [pid 3640] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... restart_syscall resumed>) = 0 [pid 3642] chdir("./683" [pid 3641] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3640] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3643] chdir("./655" [pid 3641] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3640] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3641] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3640] <... openat resumed>) = 4 [pid 292] umount2("./676", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3641] <... openat resumed>) = 4 [pid 3640] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3643] <... chdir resumed>) = 0 [pid 3641] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3642] <... chdir resumed>) = 0 [pid 3640] <... write resumed>) = 8784 [pid 3642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3642] setpgid(0, 0) = 0 [pid 3642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3642] write(3, "1000", 4) = 4 [pid 3642] close(3) = 0 [pid 3642] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3642] write(1, "executing program\n", 18) = 18 [pid 3642] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3642] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3642] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3642] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3642] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3642] exit_group(0) = ? [pid 3643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3643] setpgid(0, 0) = 0 [pid 3643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3643] write(3, "1000", 4) = 4 [pid 3643] close(3) = 0 [pid 3643] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3643] write(1, "executing program\n", 18) = 18 [pid 3643] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3643] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3642] +++ exited with 0 +++ [pid 3643] <... ioctl resumed>) = 0 [pid 3643] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3643] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3642, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] openat(AT_FDCWD, "./676", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3641] <... write resumed>) = ? [pid 3643] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 292] <... openat resumed>) = 3 [pid 3643] exit_group(0) = ? [pid 3640] +++ killed by SIGKILL +++ [pid 292] newfstatat(3, "", [pid 3641] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3640, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] umount2("./683", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./683", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./683/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./683/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./683/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./683") = 0 [pid 293] mkdir("./684", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3644 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./676/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./676/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./676/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./676") = 0 [pid 292] mkdir("./677", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3645 attached ./strace-static-x86_64: Process 3644 attached [pid 3643] +++ exited with 0 +++ [pid 3644] set_robust_list(0x5555700d1660, 24 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3645 [pid 3644] <... set_robust_list resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3641, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3645] set_robust_list(0x5555700d1660, 24) = 0 [pid 3644] chdir("./684" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3643, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3645] chdir("./677" [pid 3644] <... chdir resumed>) = 0 [pid 290] umount2("./655", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3645] <... chdir resumed>) = 0 [pid 3644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3644] <... prctl resumed>) = 0 [pid 290] openat(AT_FDCWD, "./655", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3645] <... prctl resumed>) = 0 [pid 3644] setpgid(0, 0 [pid 290] <... openat resumed>) = 3 [pid 3645] setpgid(0, 0 [pid 3644] <... setpgid resumed>) = 0 [pid 290] newfstatat(3, "", [pid 3645] <... setpgid resumed>) = 0 [pid 3644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3644] <... openat resumed>) = 3 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] getdents64(3, [pid 289] <... restart_syscall resumed>) = 0 [pid 3645] <... openat resumed>) = 3 [pid 3644] write(3, "1000", 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3645] write(3, "1000", 4 [pid 3644] <... write resumed>) = 4 [pid 290] umount2("./655/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3645] <... write resumed>) = 4 [pid 3644] close(3 [pid 291] umount2("./675", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./653", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3645] close(3 [pid 3644] <... close resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./655/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3645] <... close resumed>) = 0 [pid 3644] symlink("/dev/binderfs", "./binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] openat(AT_FDCWD, "./653", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3645] symlink("/dev/binderfs", "./binderfs" [pid 3644] <... symlink resumed>) = 0 executing program executing program [pid 291] openat(AT_FDCWD, "./675", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] unlink("./655/binderfs" [pid 289] <... openat resumed>) = 3 [pid 3645] <... symlink resumed>) = 0 [pid 3644] write(1, "executing program\n", 18 [pid 289] newfstatat(3, "", [pid 3645] write(1, "executing program\n", 18 [pid 3644] <... write resumed>) = 18 [pid 291] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3645] <... write resumed>) = 18 [pid 3644] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] newfstatat(3, "", [pid 290] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 3645] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3644] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3645] <... openat resumed>) = 3 [pid 3644] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 289] umount2("./653/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3645] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3644] <... ioctl resumed>) = 0 [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3645] <... ioctl resumed>) = 0 [pid 3644] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] close(3 [pid 289] newfstatat(AT_FDCWD, "./653/binderfs", [pid 3645] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3644] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] umount2("./675/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3645] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3644] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] rmdir("./655" [pid 289] unlink("./653/binderfs" [pid 3645] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3644] <... openat resumed>) = 4 [pid 291] newfstatat(AT_FDCWD, "./675/binderfs", [pid 289] <... unlink resumed>) = 0 [ 64.777718][ T20] tty tty1: SAK: killed process 3636 (syz-executor903): by fd#3 [ 64.777747][ T20] tty tty1: SAK: killed process 3638 (syz-executor903): by fd#3 [ 64.777769][ T20] tty tty1: SAK: killed process 3639 (syz-executor903): by fd#3 [ 64.803996][ T42] tty tty1: SAK: killed process 3640 (syz-executor903): by fd#3 [ 64.804024][ T42] tty tty1: SAK: killed process 3641 (syz-executor903): by fd#3 [pid 3644] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] getdents64(3, [pid 3645] <... openat resumed>) = ? [pid 3644] <... write resumed>) = ? [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 291] unlink("./675/binderfs" [pid 290] mkdir("./656", 0777 [pid 291] <... unlink resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 291] getdents64(3, [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3646 [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./675" [pid 3644] +++ killed by SIGKILL +++ [pid 291] <... rmdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3644, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] mkdir("./676", 0777 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3647 ./strace-static-x86_64: Process 3646 attached [pid 3646] set_robust_list(0x5555700d1660, 24) = 0 [pid 3646] chdir("./656") = 0 [pid 3646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3646] setpgid(0, 0) = 0 [pid 3646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3646] write(3, "1000", 4) = 4 [pid 3646] close(3) = 0 [pid 3646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3646] write(1, "executing program\n", 18executing program ) = 18 [pid 3646] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] close(3) = 0 [pid 289] rmdir("./653") = 0 [pid 289] mkdir("./654", 0777./strace-static-x86_64: Process 3647 attached [pid 3647] set_robust_list(0x5555700d1660, 24) = 0 [pid 3647] chdir("./676" [pid 3645] +++ killed by SIGKILL +++ [pid 289] <... mkdir resumed>) = 0 [pid 3647] <... chdir resumed>) = 0 [pid 3647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... restart_syscall resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3645, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3647] <... prctl resumed>) = 0 [pid 3647] setpgid(0, 0) = 0 [pid 3647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3647] write(3, "1000", 4) = 4 [pid 292] <... restart_syscall resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3648 [pid 293] umount2("./684", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3647] close(3) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3647] symlink("/dev/binderfs", "./binderfs"executing program [pid 293] openat(AT_FDCWD, "./684", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3648 attached [pid 3647] <... symlink resumed>) = 0 [pid 3647] write(1, "executing program\n", 18) = 18 [pid 3647] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... openat resumed>) = 3 [pid 292] umount2("./677", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3648] set_robust_list(0x5555700d1660, 24 [pid 3647] <... openat resumed>) = 3 [pid 3646] <... openat resumed>) = 3 [pid 3647] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3647] <... ioctl resumed>) = 0 [pid 3646] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] newfstatat(3, "", [pid 292] openat(AT_FDCWD, "./677", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3647] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3648] <... set_robust_list resumed>) = 0 [pid 3647] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3646] <... ioctl resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 3647] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] getdents64(3, [pid 292] newfstatat(3, "", [pid 3647] <... openat resumed>) = 4 [pid 3646] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3647] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3648] chdir("./654" [pid 3647] <... write resumed>) = ? [pid 3646] <... ioctl resumed>) = ? [pid 293] umount2("./684/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 3648] <... chdir resumed>) = 0 [pid 3646] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] newfstatat(AT_FDCWD, "./684/binderfs", [pid 292] umount2("./677/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3646, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 3648] <... prctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3648] setpgid(0, 0 [pid 293] unlink("./684/binderfs" [pid 292] newfstatat(AT_FDCWD, "./677/binderfs", [pid 3648] <... setpgid resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./656", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 292] unlink("./677/binderfs" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3648] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] openat(AT_FDCWD, "./656", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3648] write(3, "1000", 4 [pid 293] close(3 [pid 292] getdents64(3, [pid 290] <... openat resumed>) = 3 [pid 3648] <... write resumed>) = 4 [pid 293] <... close resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(3, "", [pid 3648] close(3 [pid 3647] +++ killed by SIGKILL +++ [pid 293] rmdir("./684" [pid 292] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3648] <... close resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3647, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- executing program [pid 293] mkdir("./685", 0777 [pid 292] <... close resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] getdents64(3, [pid 3648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3648] write(1, "executing program\n", 18 [pid 293] <... mkdir resumed>) = 0 [pid 292] rmdir("./677" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3648] <... write resumed>) = 18 [pid 3648] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... rmdir resumed>) = 0 [pid 290] umount2("./656/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3648] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3648] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3648] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 292] mkdir("./678", 0777 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3649 [pid 3648] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3649 attached ) = ? [pid 292] <... mkdir resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./656/binderfs", [pid 3649] set_robust_list(0x5555700d1660, 24 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3649] <... set_robust_list resumed>) = 0 [pid 290] unlink("./656/binderfs" [pid 3649] chdir("./685" [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3650 [pid 290] <... unlink resumed>) = 0 [pid 3649] <... chdir resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] getdents64(3, [pid 3649] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3649] <... prctl resumed>) = 0 [pid 290] close(3 [pid 3649] setpgid(0, 0 [pid 291] umount2("./676", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... close resumed>) = 0 [pid 3649] <... setpgid resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] rmdir("./656" [pid 3649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] openat(AT_FDCWD, "./676", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... rmdir resumed>) = 0 [pid 3649] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 290] mkdir("./657", 0777 [pid 3649] write(3, "1000", 4 [pid 291] newfstatat(3, "", [pid 290] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 3650 attached [pid 3649] <... write resumed>) = 4 [pid 3648] +++ killed by SIGKILL +++ [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3650] set_robust_list(0x5555700d1660, 24) = 0 [pid 3650] chdir("./678" [pid 291] getdents64(3, [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3648, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3650] <... chdir resumed>) = 0 [pid 3650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3650] setpgid(0, 0) = 0 [pid 3650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3650] <... openat resumed>) = 3 [pid 3649] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3651 [pid 3650] write(3, "1000", 4) = 4 [pid 3650] close(3) = 0 [pid 291] umount2("./676/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3650] symlink("/dev/binderfs", "./binderfs" [pid 3649] <... close resumed>) = 0 ./strace-static-x86_64: Process 3651 attached [pid 3650] <... symlink resumed>) = 0 [pid 3649] symlink("/dev/binderfs", "./binderfs"executing program [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3650] write(1, "executing program\n", 18) = 18 [pid 291] newfstatat(AT_FDCWD, "./676/binderfs", [pid 3650] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 executing program [pid 3649] <... symlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3650] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3649] write(1, "executing program\n", 18 [pid 3650] <... ioctl resumed>) = 0 [pid 3650] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3649] <... write resumed>) = 18 [pid 291] unlink("./676/binderfs" [pid 3650] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3650] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3650] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3649] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... unlink resumed>) = 0 [pid 3651] set_robust_list(0x5555700d1660, 24 [pid 3650] <... write resumed>) = ? [pid 3649] <... openat resumed>) = -1 (errno 18446744073709551343) [ 64.829134][ T42] tty tty1: SAK: killed process 3644 (syz-executor903): by fd#3 [ 64.829186][ T42] tty tty1: SAK: killed process 3645 (syz-executor903): by fd#3 [ 64.849095][ T42] tty tty1: SAK: killed process 3646 (syz-executor903): by fd#3 [ 64.849122][ T42] tty tty1: SAK: killed process 3647 (syz-executor903): by fd#3 [ 64.867872][ T42] tty tty1: SAK: killed process 3648 (syz-executor903): by fd#3 [pid 291] getdents64(3, [pid 3651] <... set_robust_list resumed>) = 0 [pid 3649] +++ killed by SIGKILL +++ [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3651] chdir("./657" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3649, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] close(3 [pid 3651] <... chdir resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... close resumed>) = 0 [pid 3651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] rmdir("./676" [pid 3651] <... prctl resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3651] setpgid(0, 0 [pid 291] mkdir("./677", 0777 [pid 3651] <... setpgid resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 3651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] umount2("./654", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3651] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3651] write(3, "1000", 4 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3652 [pid 289] openat(AT_FDCWD, "./654", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3652 attached [pid 3651] <... write resumed>) = 4 [pid 289] <... openat resumed>) = 3 [pid 3651] close(3 [pid 289] newfstatat(3, "", [pid 3651] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3651] symlink("/dev/binderfs", "./binderfs" [pid 293] <... restart_syscall resumed>) = 0 [pid 289] getdents64(3, [pid 3651] <... symlink resumed>) = 0 executing program [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3651] write(1, "executing program\n", 18 [pid 289] umount2("./654/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3651] <... write resumed>) = 18 [pid 293] umount2("./685", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3651] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./654/binderfs", [pid 3651] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./685", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3651] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... openat resumed>) = 3 [pid 289] unlink("./654/binderfs" [pid 3651] <... ioctl resumed>) = 0 [pid 293] newfstatat(3, "", [pid 289] <... unlink resumed>) = 0 [pid 3651] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 3651] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3651] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] close(3 [pid 3651] <... openat resumed>) = 4 [pid 293] umount2("./685/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... close resumed>) = 0 [pid 3651] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] rmdir("./654" [pid 3651] <... write resumed>) = 8784 [pid 293] newfstatat(AT_FDCWD, "./685/binderfs", [pid 289] <... rmdir resumed>) = 0 [pid 3651] exit_group(0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] mkdir("./655", 0777 [pid 3652] set_robust_list(0x5555700d1660, 24 [pid 3650] +++ killed by SIGKILL +++ [pid 293] unlink("./685/binderfs" [pid 289] <... mkdir resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3650, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3653 [pid 293] close(3) = 0 [pid 293] rmdir("./685") = 0 [pid 293] mkdir("./686", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3654 [pid 3652] <... set_robust_list resumed>) = 0 [pid 3652] chdir("./677") = 0 [pid 3652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3652] setpgid(0, 0) = 0 [pid 3652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3652] write(3, "1000", 4) = 4 [pid 3652] close(3) = 0 [pid 3652] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3652] write(1, "executing program\n", 18) = 18 [pid 3652] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3653 attached ./strace-static-x86_64: Process 3654 attached ) = 3 [pid 3651] +++ killed by SIGKILL +++ [pid 3652] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3653] set_robust_list(0x5555700d1660, 24 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3651, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3654] set_robust_list(0x5555700d1660, 24 [pid 3653] <... set_robust_list resumed>) = 0 [pid 3652] <... ioctl resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3654] <... set_robust_list resumed>) = 0 [pid 3653] chdir("./655" [pid 3652] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3654] chdir("./686" [pid 3653] <... chdir resumed>) = 0 [pid 3654] <... chdir resumed>) = 0 [pid 3653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3654] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3653] <... prctl resumed>) = 0 [pid 3652] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3654] <... prctl resumed>) = 0 [pid 3653] setpgid(0, 0 [pid 3652] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3654] setpgid(0, 0 [pid 3653] <... setpgid resumed>) = 0 [pid 3654] <... setpgid resumed>) = 0 [pid 3653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3652] <... openat resumed>) = 4 [pid 3654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3653] <... openat resumed>) = 3 [pid 3654] <... openat resumed>) = 3 [pid 3653] write(3, "1000", 4 [pid 3652] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3654] write(3, "1000", 4 [pid 3653] <... write resumed>) = 4 [pid 3652] <... write resumed>) = 8784 [pid 3654] <... write resumed>) = 4 [pid 3653] close(3 [pid 3654] close(3 [pid 3653] <... close resumed>) = 0 [pid 3654] <... close resumed>) = 0 [pid 3653] symlink("/dev/binderfs", "./binderfs" [pid 3654] symlink("/dev/binderfs", "./binderfs" [pid 3653] <... symlink resumed>) = 0 [pid 3654] <... symlink resumed>) = 0 executing program executing program [pid 3653] write(1, "executing program\n", 18 [pid 3654] write(1, "executing program\n", 18 [pid 3653] <... write resumed>) = 18 [pid 3654] <... write resumed>) = 18 [pid 3653] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3654] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3653] <... openat resumed>) = 3 [pid 3654] <... openat resumed>) = 3 [pid 3653] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3654] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3653] <... ioctl resumed>) = 0 [pid 3654] <... ioctl resumed>) = 0 [pid 3653] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3654] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3653] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3654] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3653] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3654] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3653] <... openat resumed>) = 4 [pid 3654] <... openat resumed>) = 4 [pid 3653] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3654] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3653] <... write resumed>) = 8784 [pid 3654] <... write resumed>) = 8784 [pid 3653] exit_group(0 [pid 3654] exit_group(0 [pid 3653] <... exit_group resumed>) = ? [pid 3654] <... exit_group resumed>) = ? [pid 3653] +++ exited with 0 +++ [pid 3654] +++ exited with 0 +++ [pid 290] <... restart_syscall resumed>) = 0 [pid 3652] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3654, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3653, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] umount2("./678", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] umount2("./686", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./678", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3652, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./657", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... openat resumed>) = 3 [pid 291] umount2("./677", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] openat(AT_FDCWD, "./686", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(3, "", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./657", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] umount2("./655", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] newfstatat(3, "", [pid 292] getdents64(3, [pid 291] openat(AT_FDCWD, "./677", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(3, [pid 292] umount2("./678/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 289] openat(AT_FDCWD, "./655", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./686/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./678/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 289] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] newfstatat(3, "", [pid 293] newfstatat(AT_FDCWD, "./686/binderfs", [pid 292] unlink("./678/binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./657/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] umount2("./677/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] getdents64(3, [pid 293] unlink("./686/binderfs" [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./657/binderfs", [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(AT_FDCWD, "./677/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./655/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 292] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./657/binderfs" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... close resumed>) = 0 [pid 291] unlink("./677/binderfs" [pid 293] close(3 [pid 292] rmdir("./678" [pid 290] <... unlink resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./655/binderfs", [pid 291] <... unlink resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] rmdir("./686" [pid 292] mkdir("./679", 0777 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] unlink("./655/binderfs" [pid 293] <... rmdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] close(3 [pid 290] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] mkdir("./687", 0777 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3655 ./strace-static-x86_64: Process 3655 attached [pid 3655] set_robust_list(0x5555700d1660, 24) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 291] rmdir("./677" [pid 290] rmdir("./657" [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] getdents64(3, [pid 3655] chdir("./679" [pid 291] <... rmdir resumed>) = 0 [pid 3655] <... chdir resumed>) = 0 [pid 3655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3655] setpgid(0, 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] mkdir("./678", 0777 [pid 3655] <... setpgid resumed>) = 0 [pid 3655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] mkdir("./658", 0777 [pid 289] close(3 [pid 3655] <... openat resumed>) = 3 [pid 3655] write(3, "1000", 4) = 4 [pid 3655] close(3 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3655] <... close resumed>) = 0 [pid 3655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 290] <... mkdir resumed>) = 0 executing program [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3656 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] rmdir("./655" [pid 3655] write(1, "executing program\n", 18) = 18 [pid 3655] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3655] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3655] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... rmdir resumed>) = 0 [pid 3655] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3655] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3655] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] mkdir("./656", 0777 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3657 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3658 [ 64.879779][ T42] tty tty1: SAK: killed process 3649 (syz-executor903): by fd#3 [ 64.879818][ T42] tty tty1: SAK: killed process 3650 (syz-executor903): by fd#3 [ 64.896365][ T42] tty tty1: SAK: killed process 3651 (syz-executor903): by fd#3 [ 64.906873][ T20] tty tty1: SAK: killed process 3652 (syz-executor903): by fd#3 ./strace-static-x86_64: Process 3658 attached ./strace-static-x86_64: Process 3657 attached ./strace-static-x86_64: Process 3656 attached [pid 3655] <... write resumed>) = ? [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3658] set_robust_list(0x5555700d1660, 24) = 0 [pid 3658] chdir("./658") = 0 [pid 3658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3659 [pid 3658] setpgid(0, 0) = 0 [pid 3658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3657] set_robust_list(0x5555700d1660, 24 [pid 3658] <... openat resumed>) = 3 [pid 3658] write(3, "1000", 4) = 4 [pid 3658] close(3) = 0 [pid 3658] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3658] write(1, "executing program\n", 18) = 18 [pid 3658] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3657] <... set_robust_list resumed>) = 0 [pid 3658] <... openat resumed>) = 3 [pid 3658] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3657] chdir("./678" [pid 3658] <... ioctl resumed>) = 0 [pid 3658] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3658] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3658] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3657] <... chdir resumed>) = 0 [pid 3655] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3655, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3658] exit_group(0) = ? [pid 3657] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3656] set_robust_list(0x5555700d1660, 24 [pid 3657] <... prctl resumed>) = 0 [pid 3656] <... set_robust_list resumed>) = 0 [pid 3657] setpgid(0, 0) = 0 [pid 3656] chdir("./687"./strace-static-x86_64: Process 3659 attached [pid 3657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3656] <... chdir resumed>) = 0 [pid 3657] <... openat resumed>) = 3 [pid 3657] write(3, "1000", 4) = 4 [pid 3657] close(3) = 0 [pid 3657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3657] write(1, "executing program\n", 18executing program ) = 18 [pid 3657] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3657] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3657] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3657] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3657] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3656] <... prctl resumed>) = 0 [pid 3657] <... write resumed>) = 8784 [pid 3656] setpgid(0, 0 [pid 3657] exit_group(0 [pid 3656] <... setpgid resumed>) = 0 [pid 3657] <... exit_group resumed>) = ? [pid 3656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3656] write(3, "1000", 4) = 4 [pid 3656] close(3) = 0 executing program [pid 3656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 3656] write(1, "executing program\n", 18 [pid 3659] set_robust_list(0x5555700d1660, 24 [pid 3658] +++ exited with 0 +++ [pid 3656] <... write resumed>) = 18 [pid 3657] +++ exited with 0 +++ [pid 3656] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] umount2("./679", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3657, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3658, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3656] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./679", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 3656] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./679/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./679/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./679/binderfs") = 0 [pid 3659] <... set_robust_list resumed>) = 0 [pid 3656] <... ioctl resumed>) = 0 [pid 292] getdents64(3, [pid 3659] chdir("./656" [pid 3656] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3659] <... chdir resumed>) = 0 [pid 3656] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] close(3 [pid 3659] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... close resumed>) = 0 [pid 3659] <... prctl resumed>) = 0 [pid 292] rmdir("./679" [pid 3656] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 292] <... rmdir resumed>) = 0 [pid 3659] setpgid(0, 0 [pid 292] mkdir("./680", 0777 [pid 3656] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3659] <... setpgid resumed>) = 0 [pid 3656] <... write resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 291] umount2("./678", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./658", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3660 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3660 attached [pid 3659] <... openat resumed>) = 3 [pid 3656] +++ killed by SIGKILL +++ [pid 291] openat(AT_FDCWD, "./678", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./658", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3659] write(3, "1000", 4 [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3656, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./678/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./658/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./678/binderfs", [pid 290] newfstatat(AT_FDCWD, "./658/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3659] <... write resumed>) = 4 [pid 291] unlink("./678/binderfs" [pid 290] unlink("./658/binderfs" [pid 3660] set_robust_list(0x5555700d1660, 24 [pid 3659] close(3 [pid 291] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3659] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 290] close(3 [pid 3660] <... set_robust_list resumed>) = 0 [pid 3659] symlink("/dev/binderfs", "./binderfs" [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 291] rmdir("./678" [pid 290] rmdir("./658" [pid 3660] chdir("./680" [pid 3659] <... symlink resumed>) = 0 executing program [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3659] write(1, "executing program\n", 18 [pid 291] mkdir("./679", 0777 [pid 290] mkdir("./659", 0777 [pid 3660] <... chdir resumed>) = 0 [pid 3659] <... write resumed>) = 18 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 3659] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3661 attached [pid 3660] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3659] <... openat resumed>) = 3 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3661 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3662 [pid 3659] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3660] <... prctl resumed>) = 0 [pid 3661] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 3662 attached [pid 3662] set_robust_list(0x5555700d1660, 24) = 0 [pid 3659] <... ioctl resumed>) = 0 [pid 3662] chdir("./659" [pid 3660] setpgid(0, 0 [pid 3659] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3662] <... chdir resumed>) = 0 [pid 3662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3662] setpgid(0, 0 [pid 3659] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3662] <... setpgid resumed>) = 0 [pid 3662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3660] <... setpgid resumed>) = 0 [pid 3659] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3661] <... set_robust_list resumed>) = 0 [pid 3662] <... openat resumed>) = 3 [pid 3659] <... openat resumed>) = 4 [pid 3660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3662] write(3, "1000", 4) = 4 [pid 3662] close(3) = 0 [pid 3662] symlink("/dev/binderfs", "./binderfs" [pid 3659] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3660] <... openat resumed>) = 3 executing program executing program [pid 3662] <... symlink resumed>) = 0 [pid 3662] write(1, "executing program\n", 18) = 18 [pid 3662] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3659] <... write resumed>) = 8784 [pid 3662] <... openat resumed>) = 3 [pid 3662] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./687", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./687", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./687/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./687/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./687/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./687") = 0 [pid 293] mkdir("./688", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3663 [pid 3662] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3662, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3663 attached [pid 3663] set_robust_list(0x5555700d1660, 24) = 0 [pid 3663] chdir("./688") = 0 [pid 3663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3663] setpgid(0, 0) = 0 [pid 3663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3663] write(3, "1000", 4) = 4 [pid 3663] close(3) = 0 [pid 3663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3663] write(1, "executing program\n", 18) = 18 [pid 3663] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3663] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3663] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3663] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3663] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3663] exit_group(0) = ? [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./659", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./659", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3660] write(3, "1000", 4 [pid 290] umount2("./659/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./659/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./659/binderfs" [pid 3660] <... write resumed>) = 4 [pid 3659] +++ killed by SIGKILL +++ [pid 290] <... unlink resumed>) = 0 [pid 3660] close(3 [pid 290] getdents64(3, [pid 3660] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3659, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] close(3 [pid 289] restart_syscall(<... resuming interrupted clone ...> [ 64.925546][ T42] tty tty1: SAK: killed process 3655 (syz-executor903): by fd#3 [ 64.937470][ T42] tty tty1: SAK: killed process 3658 (syz-executor903): by fd#3 [ 64.949046][ T60] tty tty1: SAK: killed process 3656 (syz-executor903): by fd#3 [ 64.967007][ T42] tty tty1: SAK: killed process 3659 (syz-executor903): by fd#3 [pid 3660] symlink("/dev/binderfs", "./binderfs"executing program [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./659" [pid 3661] chdir("./679" [pid 3660] <... symlink resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./660", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3664 ./strace-static-x86_64: Process 3664 attached [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./656", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./656", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./656/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./656/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./656/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./656") = 0 [pid 289] mkdir("./657", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3665 [pid 3664] set_robust_list(0x5555700d1660, 24) = 0 [pid 3664] chdir("./660") = 0 [pid 3664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3664] setpgid(0, 0) = 0 [pid 3664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3664] write(3, "1000", 4) = 4 [pid 3664] close(3) = 0 [pid 3664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3664] write(1, "executing program\n", 18) = 18 [pid 3664] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3664] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3664] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3664] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3664] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3664] exit_group(0) = ? [pid 3663] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3663, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3661] <... chdir resumed>) = 0 [pid 3660] write(1, "executing program\n", 18executing program [pid 3661] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3660] <... write resumed>) = 18 ./strace-static-x86_64: Process 3665 attached [pid 3660] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3661] <... prctl resumed>) = 0 [pid 3665] set_robust_list(0x5555700d1660, 24) = 0 [pid 3661] setpgid(0, 0) = 0 [pid 3665] chdir("./657") = 0 [pid 3665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3665] <... prctl resumed>) = 0 [pid 3665] setpgid(0, 0) = 0 [pid 3665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3661] <... openat resumed>) = 3 [pid 3665] <... openat resumed>) = 3 [pid 3661] write(3, "1000", 4 [pid 3665] write(3, "1000", 4executing program ) = 4 [pid 3661] <... write resumed>) = 4 [pid 3665] close(3) = 0 [pid 3665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3665] write(1, "executing program\n", 18) = 18 [pid 3665] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3661] close(3) = 0 [pid 3661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3661] write(1, "executing program\n", 18) = 18 [pid 3661] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./688", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./688", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./688/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./688/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./688/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./688") = 0 [pid 293] mkdir("./689", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3666 ./strace-static-x86_64: Process 3666 attached [pid 3664] +++ exited with 0 +++ [pid 3660] <... openat resumed>) = 3 [pid 3660] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3664, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3661] <... openat resumed>) = 3 [pid 3660] <... ioctl resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3661] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3661] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3661] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3660] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3661] <... openat resumed>) = 4 [pid 3660] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3661] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3666] set_robust_list(0x5555700d1660, 24 [pid 3661] <... write resumed>) = ? [pid 290] <... restart_syscall resumed>) = 0 [pid 3660] +++ killed by SIGKILL +++ [pid 3666] <... set_robust_list resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3660, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3666] chdir("./689" [pid 292] umount2("./680", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./660", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./680", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./660", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./680/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./660/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./680/binderfs", [pid 290] newfstatat(AT_FDCWD, "./660/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./680/binderfs" [pid 290] unlink("./660/binderfs" [pid 292] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3 [pid 290] close(3 [pid 292] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 292] rmdir("./680" [pid 290] rmdir("./660" [pid 292] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 292] mkdir("./681", 0777 [pid 290] mkdir("./661", 0777 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3667 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3668 [pid 3666] <... chdir resumed>) = 0 [pid 3666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3666] setpgid(0, 0) = 0 [pid 3666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3666] write(3, "1000", 4 [pid 3661] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3668 attached ./strace-static-x86_64: Process 3667 attached [pid 3665] <... openat resumed>) = 3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3661, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3665] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3665] <... ioctl resumed>) = 0 [pid 3665] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3665] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3665] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3668] set_robust_list(0x5555700d1660, 24 [pid 3667] set_robust_list(0x5555700d1660, 24 [pid 3666] <... write resumed>) = 4 [pid 3668] <... set_robust_list resumed>) = 0 [pid 3667] <... set_robust_list resumed>) = 0 [pid 3666] close(3 [pid 3665] <... write resumed>) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./679", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./679", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./679/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./679/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./679/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./679") = 0 [pid 291] mkdir("./680", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3669 [pid 3667] chdir("./681") = 0 [pid 3667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3667] setpgid(0, 0) = 0 [pid 3667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3668] chdir("./661" [pid 3666] <... close resumed>) = 0 [pid 3666] symlink("/dev/binderfs", "./binderfs" [pid 3667] <... openat resumed>) = 3 [pid 3666] <... symlink resumed>) = 0 [pid 3668] <... chdir resumed>) = 0 [pid 3668] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3669 attached ) = 0 [pid 3669] set_robust_list(0x5555700d1660, 24 [pid 3667] write(3, "1000", 4 [pid 3666] write(1, "executing program\n", 18executing program [pid 3665] +++ killed by SIGKILL +++ [pid 3669] <... set_robust_list resumed>) = 0 [pid 3667] <... write resumed>) = 4 [pid 3666] <... write resumed>) = 18 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3665, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3668] setpgid(0, 0) = 0 [pid 3669] chdir("./680" [pid 3668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3667] close(3 [pid 3666] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3669] <... chdir resumed>) = 0 [pid 3668] <... openat resumed>) = 3 [pid 3668] write(3, "1000", 4) = 4 [pid 3668] close(3) = 0 [pid 3668] symlink("/dev/binderfs", "./binderfs" [pid 3669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3667] <... close resumed>) = 0 [pid 3666] <... openat resumed>) = 3 [pid 3668] <... symlink resumed>) = 0 [pid 3669] <... prctl resumed>) = 0 [pid 3669] setpgid(0, 0) = 0 [pid 3669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3668] write(1, "executing program\n", 18 [pid 3667] symlink("/dev/binderfs", "./binderfs" [pid 3666] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3669] <... openat resumed>) = 3 [pid 3669] write(3, "1000", 4) = 4 [pid 3669] close(3) = 0 [pid 3669] symlink("/dev/binderfs", "./binderfs"executing program executing program executing program ) = 0 [pid 3668] <... write resumed>) = 18 [pid 3667] <... symlink resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3667] write(1, "executing program\n", 18 [pid 3669] write(1, "executing program\n", 18) = 18 [pid 3669] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3668] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3667] <... write resumed>) = 18 [pid 3669] <... openat resumed>) = 3 [pid 3669] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3667] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3668] <... openat resumed>) = 3 [pid 289] umount2("./657", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3669] <... ioctl resumed>) = 0 [pid 3666] <... ioctl resumed>) = 0 [pid 3669] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3667] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3669] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3668] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3669] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] openat(AT_FDCWD, "./657", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3669] <... openat resumed>) = 4 [pid 3668] <... ioctl resumed>) = 0 [pid 3667] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3666] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... openat resumed>) = 3 [pid 3669] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3668] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3667] <... ioctl resumed>) = 0 [pid 3666] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] newfstatat(3, "", [pid 3669] <... write resumed>) = 8784 [pid 3668] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3667] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3666] ????( [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3667] <... ioctl resumed>) = ? [pid 3666] <... ???? resumed>) = ? [ 64.967041][ T42] tty tty1: SAK: killed process 3662 (syz-executor903): by fd#3 [ 64.985142][ T42] tty tty1: SAK: killed process 3664 (syz-executor903): by fd#3 [ 64.996889][ T60] tty tty1: SAK: killed process 3660 (syz-executor903): by fd#3 [ 64.996931][ T60] tty tty1: SAK: killed process 3661 (syz-executor903): by fd#3 [ 65.015726][ T42] tty tty1: SAK: killed process 3665 (syz-executor903): by fd#3 [pid 289] getdents64(3, [pid 3668] +++ killed by SIGKILL +++ [pid 3667] +++ killed by SIGKILL +++ [pid 3666] +++ killed by SIGKILL +++ [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3666, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./657/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./657/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./657/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./657") = 0 [pid 289] mkdir("./658", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3670 ./strace-static-x86_64: Process 3670 attached [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./689", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./689", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./689/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./689/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./689/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./689") = 0 [pid 293] mkdir("./690", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3671 [pid 3670] set_robust_list(0x5555700d1660, 24) = 0 [pid 3670] chdir("./658") = 0 [pid 3670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3670] setpgid(0, 0) = 0 [pid 3670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3670] write(3, "1000", 4) = 4 [pid 3670] close(3) = 0 [pid 3670] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3670] write(1, "executing program\n", 18) = 18 [pid 3670] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3670] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3669] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3667, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3668, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3671 attached [pid 3670] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3669, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3670] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3670] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3670] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3670] exit_group(0) = ? [pid 292] umount2("./681", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./681", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./681/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./681/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./681/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./681") = 0 [pid 292] mkdir("./682", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3672 [pid 290] umount2("./661", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3672 attached [pid 3671] set_robust_list(0x5555700d1660, 24 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./661", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./680", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./661/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./680", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] newfstatat(AT_FDCWD, "./661/binderfs", [pid 291] <... openat resumed>) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(3, "", [pid 290] unlink("./661/binderfs" [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] umount2("./680/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... close resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./680/binderfs", [pid 290] rmdir("./661" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 291] unlink("./680/binderfs" [pid 290] mkdir("./662", 0777 [pid 291] <... unlink resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 291] getdents64(3, [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3673 [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./680") = 0 [pid 291] mkdir("./681", 0777./strace-static-x86_64: Process 3673 attached [pid 3672] set_robust_list(0x5555700d1660, 24 [pid 3671] <... set_robust_list resumed>) = 0 [pid 3673] set_robust_list(0x5555700d1660, 24 [pid 3672] <... set_robust_list resumed>) = 0 [pid 3671] chdir("./690" [pid 3670] +++ exited with 0 +++ [pid 291] <... mkdir resumed>) = 0 [pid 3673] <... set_robust_list resumed>) = 0 [pid 3672] chdir("./682" [pid 3671] <... chdir resumed>) = 0 [pid 3673] chdir("./662" [pid 3672] <... chdir resumed>) = 0 [pid 3671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3673] <... chdir resumed>) = 0 [pid 3672] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3671] <... prctl resumed>) = 0 [pid 3673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3672] <... prctl resumed>) = 0 [pid 3671] setpgid(0, 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3670, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3673] <... prctl resumed>) = 0 [pid 3672] setpgid(0, 0 [pid 3671] <... setpgid resumed>) = 0 [pid 3673] setpgid(0, 0 [pid 3672] <... setpgid resumed>) = 0 [pid 3671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3673] <... setpgid resumed>) = 0 [pid 3672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3671] <... openat resumed>) = 3 [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3674 attached [pid 3673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3671] write(3, "1000", 4 [pid 3673] <... openat resumed>) = 3 [pid 3672] <... openat resumed>) = 3 [pid 3671] <... write resumed>) = 4 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3674 [pid 3673] write(3, "1000", 4 [pid 3672] write(3, "1000", 4 [pid 3671] close(3 [pid 3673] <... write resumed>) = 4 [pid 3671] <... close resumed>) = 0 [pid 3673] close(3 [pid 3672] <... write resumed>) = 4 [pid 3671] symlink("/dev/binderfs", "./binderfs" [pid 3674] set_robust_list(0x5555700d1660, 24 [pid 3673] <... close resumed>) = 0 [pid 3672] close(3 [pid 3671] <... symlink resumed>) = 0 [pid 3674] <... set_robust_list resumed>) = 0 [pid 3673] symlink("/dev/binderfs", "./binderfs" [pid 3672] <... close resumed>) = 0 [pid 3672] symlink("/dev/binderfs", "./binderfs" [pid 3671] write(1, "executing program\n", 18executing program executing program [pid 3673] <... symlink resumed>) = 0 [pid 3672] <... symlink resumed>) = 0 [pid 3673] write(1, "executing program\n", 18 [pid 3672] write(1, "executing program\n", 18executing program [pid 3671] <... write resumed>) = 18 [pid 3673] <... write resumed>) = 18 [pid 3672] <... write resumed>) = 18 [pid 3673] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3672] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3671] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3673] <... openat resumed>) = 3 [pid 3672] <... openat resumed>) = 3 [pid 3672] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3671] <... openat resumed>) = 3 [pid 3673] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3672] <... ioctl resumed>) = 0 [pid 3673] <... ioctl resumed>) = 0 [pid 3672] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3671] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3673] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3672] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3673] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3672] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3671] <... ioctl resumed>) = 0 [pid 3673] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3672] <... openat resumed>) = 4 [pid 3672] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3671] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3674] chdir("./681" [pid 3673] <... openat resumed>) = ? [pid 3672] <... write resumed>) = ? [pid 3671] +++ killed by SIGKILL +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 3674] <... chdir resumed>) = 0 [pid 3672] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3671, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3674] setpgid(0, 0 [pid 293] umount2("./690", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3672, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3674] <... setpgid resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] openat(AT_FDCWD, "./690", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] umount2("./682", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./658", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3674] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 3674] write(3, "1000", 4 [pid 293] newfstatat(3, "", [pid 3674] <... write resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3674] close(3 [pid 293] getdents64(3, [pid 3674] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3674] symlink("/dev/binderfs", "./binderfs" [pid 293] umount2("./690/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3674] <... symlink resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3674] write(1, "executing program\n", 18 [pid 293] newfstatat(AT_FDCWD, "./690/binderfs", [pid 3674] <... write resumed>) = 18 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3674] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] unlink("./690/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./690") = 0 [pid 293] mkdir("./691", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3675 [ 65.028862][ T42] tty tty1: SAK: killed process 3666 (syz-executor903): by fd#3 [ 65.028895][ T42] tty tty1: SAK: killed process 3667 (syz-executor903): by fd#3 [ 65.028915][ T42] tty tty1: SAK: killed process 3668 (syz-executor903): by fd#3 [ 65.028934][ T42] tty tty1: SAK: killed process 3669 (syz-executor903): by fd#3 [ 65.066536][ T60] tty tty1: SAK: killed process 3671 (syz-executor903): by fd#3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./682", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./682/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./682/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./682/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./682") = 0 [pid 292] mkdir("./683", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3676 attached ./strace-static-x86_64: Process 3675 attached [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3676 [pid 3676] set_robust_list(0x5555700d1660, 24) = 0 [pid 3676] chdir("./683") = 0 [pid 3676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3676] setpgid(0, 0) = 0 [pid 3676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3676] write(3, "1000", 4) = 4 [pid 3676] close(3) = 0 [pid 3676] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3676] write(1, "executing program\n", 18) = 18 [pid 3676] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3675] set_robust_list(0x5555700d1660, 24) = 0 [pid 3675] chdir("./691") = 0 [pid 3675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3675] setpgid(0, 0) = 0 [pid 3675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3675] write(3, "1000", 4) = 4 [pid 3675] close(3executing program ) = 0 [pid 3675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3675] write(1, "executing program\n", 18) = 18 [pid 3675] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] openat(AT_FDCWD, "./658", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./658/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3673] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3673, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3676] <... openat resumed>) = 3 [pid 3675] <... openat resumed>) = 3 [pid 3674] <... openat resumed>) = 3 [pid 289] newfstatat(AT_FDCWD, "./658/binderfs", [pid 3676] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3675] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3674] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3676] <... ioctl resumed>) = 0 [pid 3675] <... ioctl resumed>) = 0 [pid 3674] <... ioctl resumed>) = 0 [pid 289] unlink("./658/binderfs" [pid 3676] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3675] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3674] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... unlink resumed>) = 0 [pid 3676] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3675] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3674] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] getdents64(3, [pid 3676] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3675] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3674] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3676] <... openat resumed>) = 4 [pid 3675] <... openat resumed>) = 4 [pid 3674] <... openat resumed>) = 4 [pid 289] close(3 [pid 3676] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3675] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3674] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... close resumed>) = 0 [pid 3676] <... write resumed>) = ? [pid 3675] +++ killed by SIGKILL +++ [pid 290] umount2("./662", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./662", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./662/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./662/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./662/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./662") = 0 [pid 290] mkdir("./663", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3677 [pid 289] rmdir("./658") = 0 [pid 289] mkdir("./659", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3678 ./strace-static-x86_64: Process 3678 attached ./strace-static-x86_64: Process 3677 attached [pid 3674] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3675, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3674, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3678] set_robust_list(0x5555700d1660, 24 [pid 3677] set_robust_list(0x5555700d1660, 24 [pid 291] <... restart_syscall resumed>) = 0 [pid 3678] <... set_robust_list resumed>) = 0 [pid 3677] <... set_robust_list resumed>) = 0 [pid 3676] +++ killed by SIGKILL +++ [pid 3678] chdir("./659" [pid 3677] chdir("./663" [pid 293] umount2("./691", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3678] <... chdir resumed>) = 0 [pid 3677] <... chdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3676, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./681", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./691", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] umount2("./683", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3678] <... prctl resumed>) = 0 [pid 3677] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./681", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3678] setpgid(0, 0 [pid 3677] setpgid(0, 0 [pid 293] newfstatat(3, "", [pid 292] openat(AT_FDCWD, "./683", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 3678] <... setpgid resumed>) = 0 [pid 3677] <... setpgid resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 3678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3678] <... openat resumed>) = 3 [pid 3677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 3678] write(3, "1000", 4 [pid 3677] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3678] <... write resumed>) = 4 [pid 3677] write(3, "1000", 4 [pid 293] umount2("./691/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./681/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3678] close(3 [pid 3677] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./683/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3678] <... close resumed>) = 0 [pid 3677] close(3 [pid 293] newfstatat(AT_FDCWD, "./691/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./681/binderfs", [pid 3678] symlink("/dev/binderfs", "./binderfs" [pid 3677] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./683/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./681/binderfs"executing program [pid 3678] <... symlink resumed>) = 0 [pid 3677] symlink("/dev/binderfs", "./binderfs" [pid 293] unlink("./691/binderfs" [pid 292] unlink("./683/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 3678] write(1, "executing program\n", 18 [pid 3677] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] getdents64(3, executing program [pid 3678] <... write resumed>) = 18 [pid 3677] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3678] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3677] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 3678] <... openat resumed>) = 3 [pid 3677] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] close(3 [pid 292] close(3 [pid 291] <... close resumed>) = 0 [pid 3678] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3677] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] rmdir("./681" [pid 3678] <... ioctl resumed>) = 0 [pid 3677] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] rmdir("./691" [pid 292] rmdir("./683" [pid 3678] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3677] <... ioctl resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 3678] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3677] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] mkdir("./692", 0777 [pid 292] mkdir("./684", 0777 [pid 291] mkdir("./682", 0777 [pid 3678] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3677] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [ 65.066564][ T60] tty tty1: SAK: killed process 3672 (syz-executor903): by fd#3 [ 65.066587][ T60] tty tty1: SAK: killed process 3673 (syz-executor903): by fd#3 [ 65.094958][ T375] tty tty1: SAK: killed process 3674 (syz-executor903): by fd#3 [ 65.094992][ T375] tty tty1: SAK: killed process 3675 (syz-executor903): by fd#3 [ 65.095014][ T375] tty tty1: SAK: killed process 3676 (syz-executor903): by fd#3 [pid 3678] <... openat resumed>) = 4 [pid 3677] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 3678] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program executing program [pid 3677] <... openat resumed>) = 4 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3680 attached ./strace-static-x86_64: Process 3679 attached [pid 3678] <... write resumed>) = ? [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3679 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3680 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3681 [pid 3680] set_robust_list(0x5555700d1660, 24 [pid 3679] set_robust_list(0x5555700d1660, 24) = 0 [pid 3680] <... set_robust_list resumed>) = 0 [pid 3679] chdir("./692" [pid 3680] chdir("./684") = 0 [pid 3679] <... chdir resumed>) = 0 [pid 3679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3680] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3679] setpgid(0, 0 [pid 3680] <... prctl resumed>) = 0 [pid 3680] setpgid(0, 0 [pid 3679] <... setpgid resumed>) = 0 [pid 3679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3680] <... setpgid resumed>) = 0 [pid 3680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3679] <... openat resumed>) = 3 [pid 3680] <... openat resumed>) = 3 [pid 3680] write(3, "1000", 4 [pid 3679] write(3, "1000", 4 [pid 3680] <... write resumed>) = 4 [pid 3679] <... write resumed>) = 4 [pid 3680] close(3 [pid 3679] close(3 [pid 3680] <... close resumed>) = 0 [pid 3679] <... close resumed>) = 0 [pid 3680] symlink("/dev/binderfs", "./binderfs" [pid 3679] symlink("/dev/binderfs", "./binderfs" [pid 3680] <... symlink resumed>) = 0 [pid 3679] <... symlink resumed>) = 0 [pid 3679] write(1, "executing program\n", 18) = 18 [pid 3680] write(1, "executing program\n", 18 [pid 3679] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3680] <... write resumed>) = 18 [pid 3680] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3679] <... openat resumed>) = 3 [pid 3680] <... openat resumed>) = 3 [pid 3679] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3679] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3679] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3679] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3680] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3679] exit_group(0 [pid 3680] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3680] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3679] <... exit_group resumed>) = ? [pid 3680] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3680] exit_group(0) = ? ./strace-static-x86_64: Process 3681 attached [pid 3681] set_robust_list(0x5555700d1660, 24) = 0 [pid 3681] chdir("./682") = 0 [pid 3681] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3679] +++ exited with 0 +++ [pid 3681] <... prctl resumed>) = 0 [pid 3680] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3680, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3681] setpgid(0, 0) = 0 [pid 3681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3679, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3681] <... openat resumed>) = 3 [pid 3681] write(3, "1000", 4) = 4 [pid 3681] close(3) = 0 [pid 3681] symlink("/dev/binderfs", "./binderfs" [pid 3677] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3677, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>executing program [pid 3681] <... symlink resumed>) = 0 [pid 3681] write(1, "executing program\n", 18) = 18 [pid 3681] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./684", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./684", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./684/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./684/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./684/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./684") = 0 [pid 292] mkdir("./685", 0777) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3682 [pid 290] umount2("./663", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./663", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./663/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./663/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./663/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./663"./strace-static-x86_64: Process 3682 attached [pid 3678] +++ killed by SIGKILL +++ [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./664", 0777 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3678, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3682] set_robust_list(0x5555700d1660, 24) = 0 [pid 3682] chdir("./685") = 0 [pid 290] <... mkdir resumed>) = 0 [pid 3682] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3682] <... prctl resumed>) = 0 [pid 3682] setpgid(0, 0) = 0 [pid 3682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3683 [pid 3682] write(3, "1000", 4) = 4 [pid 3682] close(3 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./659", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3681] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./692", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] openat(AT_FDCWD, "./659", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3681] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./692", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(3, "", [pid 293] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(3, "", [pid 289] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3681] <... ioctl resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] getdents64(3, [pid 289] umount2("./659/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3681] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./692/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./659/binderfs", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(AT_FDCWD, "./692/binderfs", [pid 289] unlink("./659/binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] unlink("./692/binderfs" [pid 289] getdents64(3, [pid 293] <... unlink resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] getdents64(3, [pid 289] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... close resumed>) = 0 [pid 293] close(3 [pid 289] rmdir("./659"./strace-static-x86_64: Process 3683 attached [pid 3682] <... close resumed>) = 0 [pid 3681] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... close resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3681] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] rmdir("./692" [pid 3681] <... openat resumed>) = 4 [pid 3681] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3683] set_robust_list(0x5555700d1660, 24 [pid 3682] symlink("/dev/binderfs", "./binderfs" [pid 293] <... rmdir resumed>) = 0 [pid 289] mkdir("./660", 0777 [pid 3683] <... set_robust_list resumed>) = 0 [pid 3682] <... symlink resumed>) = 0 [pid 293] mkdir("./693", 0777 [pid 289] <... mkdir resumed>) = 0 [pid 3683] chdir("./664" [pid 3682] write(1, "executing program\n", 18executing program [pid 293] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3683] <... chdir resumed>) = 0 [pid 3682] <... write resumed>) = 18 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3682] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3684 [pid 3683] <... prctl resumed>) = 0 [pid 3682] <... openat resumed>) = 3 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3685 [pid 3683] setpgid(0, 0 [pid 3682] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3683] <... setpgid resumed>) = 0 [pid 3682] <... ioctl resumed>) = 0 [pid 3683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3682] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3683] <... openat resumed>) = 3 [pid 3682] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3683] write(3, "1000", 4 [pid 3682] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3683] <... write resumed>) = 4 [pid 3683] close(3) = 0 [pid 3683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3683] write(1, "executing program\n", 18executing program ) = 18 [pid 3683] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3681] <... write resumed>) = ? [pid 3683] <... openat resumed>) = 3 [pid 3682] <... openat resumed>) = 4 [pid 3683] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3682] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program executing program ./strace-static-x86_64: Process 3685 attached ./strace-static-x86_64: Process 3684 attached [pid 3683] <... ioctl resumed>) = ? [pid 3682] <... write resumed>) = ? [pid 3681] +++ killed by SIGKILL +++ [pid 3685] set_robust_list(0x5555700d1660, 24 [pid 3684] set_robust_list(0x5555700d1660, 24 [pid 3683] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3681, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3685] <... set_robust_list resumed>) = 0 [pid 3684] <... set_robust_list resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3683, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3685] chdir("./693" [pid 3684] chdir("./660" [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3685] <... chdir resumed>) = 0 [pid 3684] <... chdir resumed>) = 0 [pid 291] umount2("./682", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3685] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3684] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3685] <... prctl resumed>) = 0 [pid 3684] <... prctl resumed>) = 0 [pid 291] openat(AT_FDCWD, "./682", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3685] setpgid(0, 0 [pid 3684] setpgid(0, 0 [pid 291] <... openat resumed>) = 3 [pid 3685] <... setpgid resumed>) = 0 [pid 3684] <... setpgid resumed>) = 0 [pid 291] newfstatat(3, "", [pid 3685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3685] <... openat resumed>) = 3 [pid 3684] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 3685] write(3, "1000", 4 [pid 3684] write(3, "1000", 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3685] <... write resumed>) = 4 [pid 3684] <... write resumed>) = 4 [pid 291] umount2("./682/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3685] close(3 [pid 3684] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3685] <... close resumed>) = 0 [pid 3684] <... close resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./682/binderfs", [pid 3685] symlink("/dev/binderfs", "./binderfs" [pid 3684] symlink("/dev/binderfs", "./binderfs" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3685] <... symlink resumed>) = 0 [pid 3684] <... symlink resumed>) = 0 [pid 291] unlink("./682/binderfs" [pid 3685] write(1, "executing program\n", 18 [pid 3684] write(1, "executing program\n", 18 [pid 291] <... unlink resumed>) = 0 [pid 3685] <... write resumed>) = 18 [pid 3684] <... write resumed>) = 18 [pid 291] getdents64(3, [pid 3685] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3684] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3685] <... openat resumed>) = 3 [pid 3684] <... openat resumed>) = 3 [pid 291] close(3 [pid 3685] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3684] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... close resumed>) = 0 [pid 3685] <... ioctl resumed>) = 0 [pid 3684] <... ioctl resumed>) = 0 [pid 291] rmdir("./682" [pid 3685] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3684] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... rmdir resumed>) = 0 [pid 3685] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3684] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] mkdir("./683", 0777 [pid 3685] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3684] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... mkdir resumed>) = 0 [pid 3685] <... openat resumed>) = 4 [pid 3684] <... openat resumed>) = 4 [pid 3682] +++ killed by SIGKILL +++ [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3685] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3684] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3682, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3685] <... write resumed>) = 8784 [pid 3684] <... write resumed>) = 8784 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3686 [pid 3685] exit_group(0 [pid 3684] exit_group(0 [pid 3685] <... exit_group resumed>) = ? [pid 3684] <... exit_group resumed>) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 292] umount2("./685", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./685", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./664", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(3, "", [pid 290] openat(AT_FDCWD, "./664", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 290] newfstatat(3, "", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./685/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(AT_FDCWD, "./685/binderfs", [pid 290] umount2("./664/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] unlink("./685/binderfs" [pid 290] newfstatat(AT_FDCWD, "./664/binderfs", [pid 292] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(3, [pid 290] unlink("./664/binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... unlink resumed>) = 0 [pid 292] close(3 [pid 290] getdents64(3, [pid 292] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] rmdir("./685" [pid 290] close(3 [pid 292] <... rmdir resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 292] mkdir("./686", 0777 [pid 290] rmdir("./664" [pid 292] <... mkdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] mkdir("./665", 0777) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3687 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3687 attached ./strace-static-x86_64: Process 3686 attached [pid 3685] +++ exited with 0 +++ [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3688 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3685, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3688 attached [pid 3688] set_robust_list(0x5555700d1660, 24) = 0 [pid 3687] set_robust_list(0x5555700d1660, 24 [pid 3686] set_robust_list(0x5555700d1660, 24 [pid 3688] chdir("./665" [pid 3684] +++ exited with 0 +++ [pid 3687] <... set_robust_list resumed>) = 0 [pid 3686] <... set_robust_list resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3684, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3688] <... chdir resumed>) = 0 [pid 3687] chdir("./686" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3686] chdir("./683" [pid 3688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3688] setpgid(0, 0) = 0 [pid 3687] <... chdir resumed>) = 0 [pid 3686] <... chdir resumed>) = 0 [pid 3688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3687] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3686] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3688] write(3, "1000", 4) = 4 [pid 3688] close(3) = 0 [pid 3688] symlink("/dev/binderfs", "./binderfs" [pid 3687] <... prctl resumed>) = 0 [pid 3686] <... prctl resumed>) = 0 [pid 3688] <... symlink resumed>) = 0 [pid 3686] setpgid(0, 0executing program [pid 3688] write(1, "executing program\n", 18) = 18 [pid 3688] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3687] setpgid(0, 0 [pid 3686] <... setpgid resumed>) = 0 [pid 3687] <... setpgid resumed>) = 0 [pid 3686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3686] <... openat resumed>) = 3 [pid 3688] <... openat resumed>) = 3 [pid 3687] <... openat resumed>) = 3 [pid 3688] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3686] write(3, "1000", 4 [pid 3687] write(3, "1000", 4 [pid 3688] <... ioctl resumed>) = 0 [pid 3688] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3688] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3687] <... write resumed>) = 4 [pid 3686] <... write resumed>) = 4 [pid 3688] <... openat resumed>) = 4 [pid 3686] close(3 [pid 3687] close(3 [ 65.128203][ T375] tty tty1: SAK: killed process 3677 (syz-executor903): by fd#3 [ 65.128231][ T375] tty tty1: SAK: killed process 3678 (syz-executor903): by fd#3 [ 65.151239][ T60] tty tty1: SAK: killed process 3681 (syz-executor903): by fd#3 [ 65.160621][ T375] tty tty1: SAK: killed process 3682 (syz-executor903): by fd#3 [ 65.160655][ T375] tty tty1: SAK: killed process 3683 (syz-executor903): by fd#3 [pid 3688] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 3687] <... close resumed>) = 0 [pid 3686] <... close resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3687] symlink("/dev/binderfs", "./binderfs" [pid 3686] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 3687] <... symlink resumed>) = 0 [pid 3686] <... symlink resumed>) = 0 [pid 3687] write(1, "executing program\n", 18 [pid 3686] write(1, "executing program\n", 18 [pid 293] umount2("./693", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./660", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3687] <... write resumed>) = 18 [pid 3686] <... write resumed>) = 18 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3687] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3686] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] openat(AT_FDCWD, "./693", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./660", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3687] <... openat resumed>) = 3 [pid 3686] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 3688] +++ killed by SIGKILL +++ [pid 3687] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3686] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3687] <... ioctl resumed>) = 0 [pid 3686] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3686] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3688, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3687] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3686] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./665", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 3687] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3686] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] umount2("./693/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3687] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3686] <... openat resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./665", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3687] <... openat resumed>) = 4 [pid 3686] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] newfstatat(AT_FDCWD, "./693/binderfs", [pid 290] <... openat resumed>) = 3 [pid 289] umount2("./660/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3687] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(3, "", [pid 293] unlink("./693/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 293] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] newfstatat(AT_FDCWD, "./660/binderfs", [pid 3686] <... write resumed>) = 8784 [pid 293] getdents64(3, [pid 290] umount2("./665/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] close(3 [pid 290] newfstatat(AT_FDCWD, "./665/binderfs", [pid 289] unlink("./660/binderfs" [pid 293] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./665/binderfs" [pid 3687] <... write resumed>) = 8784 [pid 293] rmdir("./693" [pid 290] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3686] exit_group(0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./665"executing program [pid 3687] exit_group(0 [pid 3686] <... exit_group resumed>) = ? [pid 293] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] getdents64(3, [pid 3687] <... exit_group resumed>) = ? [pid 293] mkdir("./694", 0777 [pid 290] mkdir("./666", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] close(3 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3690 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3689 [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./660"./strace-static-x86_64: Process 3690 attached [pid 3690] set_robust_list(0x5555700d1660, 24) = 0 [pid 3690] chdir("./694" [pid 289] <... rmdir resumed>) = 0 [pid 3690] <... chdir resumed>) = 0 [pid 289] mkdir("./661", 0777 [pid 3690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3690] setpgid(0, 0) = 0 [pid 3690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... mkdir resumed>) = 0 [pid 3690] <... openat resumed>) = 3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3690] write(3, "1000", 4) = 4 [pid 3690] close(3) = 0 [pid 3690] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3690] write(1, "executing program\n", 18 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3691 [pid 3690] <... write resumed>) = 18 [pid 3690] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3690] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3687] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3687, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3690] <... ioctl resumed>) = 0 [pid 3690] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3690] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3690] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program ) = 8784 [pid 3690] exit_group(0) = ? ./strace-static-x86_64: Process 3689 attached [pid 3689] set_robust_list(0x5555700d1660, 24) = 0 [pid 3689] chdir("./666") = 0 [pid 3689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3689] setpgid(0, 0) = 0 [pid 3689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3689] write(3, "1000", 4) = 4 [pid 3689] close(3) = 0 [pid 3689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3689] write(1, "executing program\n", 18) = 18 [pid 3689] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3689] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3689] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3689] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3689] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./686", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./686", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./686/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./686/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./686/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./686") = 0 [pid 292] mkdir("./687", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3692 [pid 3689] exit_group(0) = ? ./strace-static-x86_64: Process 3692 attached [pid 3692] set_robust_list(0x5555700d1660, 24) = 0 [pid 3692] chdir("./687") = 0 [pid 3692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3692] setpgid(0, 0) = 0 [pid 3692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3690] +++ killed by SIGKILL +++ [pid 3686] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3690, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3686, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] umount2("./694", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./694", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3692] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 3692] write(3, "1000", 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3692] <... write resumed>) = 4 [pid 293] umount2("./694/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3692] close(3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./694/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3692] <... close resumed>) = 0 [pid 293] unlink("./694/binderfs" [pid 3692] symlink("/dev/binderfs", "./binderfs" [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 executing program [pid 293] rmdir("./694" [pid 3692] <... symlink resumed>) = 0 [pid 3692] write(1, "executing program\n", 18) = 18 [pid 293] <... rmdir resumed>) = 0 [pid 3692] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] mkdir("./695", 0777./strace-static-x86_64: Process 3691 attached [pid 3691] set_robust_list(0x5555700d1660, 24) = 0 [pid 3691] chdir("./661" [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3691] <... chdir resumed>) = 0 [pid 3691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3691] setpgid(0, 0) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3693 [pid 3691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 3693 attached [pid 3691] write(3, "1000", 4 [pid 3689] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3689, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3693] set_robust_list(0x5555700d1660, 24 [pid 3691] <... write resumed>) = 4 [pid 3691] close(3 [pid 3693] <... set_robust_list resumed>) = 0 [pid 3691] <... close resumed>) = 0 [pid 3692] <... openat resumed>) = 3 [pid 3693] chdir("./695" [pid 3691] symlink("/dev/binderfs", "./binderfs" [pid 3692] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3692] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3692] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3692] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3693] <... chdir resumed>) = 0 [pid 3691] <... symlink resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./683", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./683", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./683/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./683/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./683/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./683") = 0 [pid 291] mkdir("./684", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3694 [pid 3693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3693] setpgid(0, 0) = 0 [pid 3691] write(1, "executing program\n", 18executing program [pid 3693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3691] <... write resumed>) = 18 [pid 3691] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3692] <... write resumed>) = ? [pid 3691] <... openat resumed>) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 3691] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3693] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3694 attached [pid 3693] write(3, "1000", 4 [pid 290] umount2("./666", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3693] <... write resumed>) = 4 [pid 3692] +++ killed by SIGKILL +++ [pid 3694] set_robust_list(0x5555700d1660, 24 [pid 3693] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3693] <... close resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3692, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] openat(AT_FDCWD, "./666", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3693] symlink("/dev/binderfs", "./binderfs" [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3691] <... ioctl resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 3691] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] newfstatat(3, "", [pid 3691] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3691] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] getdents64(3, [pid 3693] <... symlink resumed>) = 0 [pid 3693] write(1, "executing program\n", 18 [pid 3691] <... openat resumed>) = 4 executing program [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3691] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] umount2("./666/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3693] <... write resumed>) = 18 [pid 3694] <... set_robust_list resumed>) = 0 [pid 3693] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3694] chdir("./684" [pid 3693] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./666/binderfs", [pid 3694] <... chdir resumed>) = 0 [pid 3693] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3691] <... write resumed>) = ? [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3693] <... ioctl resumed>) = 0 [pid 290] unlink("./666/binderfs" [pid 3694] <... prctl resumed>) = 0 [pid 3693] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3691] +++ killed by SIGKILL +++ [pid 3693] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... unlink resumed>) = 0 [pid 3693] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] getdents64(3, [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3691, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3693] <... openat resumed>) = 4 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] umount2("./661", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3693] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./661", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", [pid 290] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./687", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] rmdir("./666" [pid 289] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./661/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./661/binderfs", [pid 290] <... rmdir resumed>) = 0 [pid 3693] <... write resumed>) = 8784 [pid 292] openat(AT_FDCWD, "./687", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] mkdir("./667", 0777 [pid 3694] setpgid(0, 0 [pid 292] <... openat resumed>) = 3 [pid 289] unlink("./661/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 292] newfstatat(3, "", [pid 290] <... mkdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3694] <... setpgid resumed>) = 0 [pid 3693] exit_group(0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] rmdir("./661" [pid 292] getdents64(3, [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./662", 0777 [pid 3694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3693] <... exit_group resumed>) = ? [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... mkdir resumed>) = 0 [pid 292] umount2("./687/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3695 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./687/binderfs", [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3696 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./687/binderfs"./strace-static-x86_64: Process 3695 attached [pid 3695] set_robust_list(0x5555700d1660, 24 [pid 292] <... unlink resumed>) = 0 [pid 3695] <... set_robust_list resumed>) = 0 [pid 292] getdents64(3, [pid 3695] chdir("./667" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3693] +++ exited with 0 +++ [pid 292] close(3 [pid 3694] <... openat resumed>) = 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3693, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... close resumed>) = 0 [pid 3694] write(3, "1000", 4 [pid 292] rmdir("./687" [pid 3695] <... chdir resumed>) = 0 [pid 3695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3695] setpgid(0, 0) = 0 [pid 3695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3694] <... write resumed>) = 4 [pid 292] <... rmdir resumed>) = 0 [pid 3695] <... openat resumed>) = 3 [pid 3694] close(3 [pid 292] mkdir("./688", 0777./strace-static-x86_64: Process 3696 attached [pid 3695] write(3, "1000", 4) = 4 [pid 3695] close(3) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 3694] <... close resumed>) = 0 [pid 3696] set_robust_list(0x5555700d1660, 24executing program [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3694] symlink("/dev/binderfs", "./binderfs" [pid 3695] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3695] write(1, "executing program\n", 18) = 18 [pid 3695] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3697 [pid 3695] <... openat resumed>) = 3 [pid 3694] <... symlink resumed>) = 0 [pid 3695] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3694] write(1, "executing program\n", 18 [pid 3695] <... ioctl resumed>) = 0 executing program [pid 3695] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3694] <... write resumed>) = 18 [pid 3695] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3695] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3695] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3697 attached [pid 3696] <... set_robust_list resumed>) = 0 [pid 3695] <... write resumed>) = ? [ 65.183106][ T60] tty tty1: SAK: killed process 3688 (syz-executor903): by fd#3 [ 65.200114][ T375] tty tty1: SAK: killed process 3690 (syz-executor903): by fd#3 [ 65.214102][ T60] tty tty1: SAK: killed process 3692 (syz-executor903): by fd#3 [ 65.224324][ T42] tty tty1: SAK: killed process 3691 (syz-executor903): by fd#3 [pid 3694] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3696] chdir("./662" [pid 3694] <... openat resumed>) = 3 [pid 3696] <... chdir resumed>) = 0 [pid 3694] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3697] set_robust_list(0x5555700d1660, 24 [pid 3696] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3694] <... ioctl resumed>) = 0 [pid 3697] <... set_robust_list resumed>) = 0 [pid 3696] <... prctl resumed>) = 0 [pid 3694] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3697] chdir("./688" [pid 3696] setpgid(0, 0 [pid 3694] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... restart_syscall resumed>) = 0 [pid 3697] <... chdir resumed>) = 0 [pid 3696] <... setpgid resumed>) = 0 [pid 3695] +++ killed by SIGKILL +++ [pid 3694] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3694] <... openat resumed>) = 4 [pid 3697] <... prctl resumed>) = 0 [pid 3696] <... openat resumed>) = 3 [pid 3694] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./695", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3695, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3697] setpgid(0, 0 [pid 3696] write(3, "1000", 4 [pid 3694] <... write resumed>) = 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3697] <... setpgid resumed>) = 0 [pid 293] openat(AT_FDCWD, "./695", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... openat resumed>) = 3 [pid 3697] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 3697] write(3, "1000", 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3697] <... write resumed>) = 4 [pid 293] getdents64(3, [pid 3697] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3697] <... close resumed>) = 0 [pid 293] umount2("./695/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3697] symlink("/dev/binderfs", "./binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3697] <... symlink resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./695/binderfs", [pid 3697] write(1, "executing program\n", 18 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 3697] <... write resumed>) = 18 [pid 293] unlink("./695/binderfs" [pid 3697] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... unlink resumed>) = 0 [pid 3697] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 3697] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3697] <... ioctl resumed>) = 0 [pid 293] close(3 [pid 3697] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... close resumed>) = 0 [pid 3697] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] rmdir("./695" [pid 3697] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... rmdir resumed>) = 0 [pid 3697] <... openat resumed>) = 4 [pid 293] mkdir("./696", 0777 [pid 3697] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... mkdir resumed>) = 0 [pid 3697] <... write resumed>) = 8784 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3697] exit_group(0) = ? [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3698 [pid 3697] +++ exited with 0 +++ [pid 290] umount2("./667", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3698 attached [pid 3698] set_robust_list(0x5555700d1660, 24 [pid 3696] <... write resumed>) = 4 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3697, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3698] <... set_robust_list resumed>) = 0 [pid 3696] close(3 [pid 3698] chdir("./696") = 0 [pid 3698] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] umount2("./688", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./667", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3696] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 [pid 3698] <... prctl resumed>) = 0 [pid 3698] setpgid(0, 0) = 0 [pid 3698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3698] write(3, "1000", 4) = 4 [pid 3698] close(3) = 0 [pid 3698] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3698] write(1, "executing program\n", 18) = 18 [pid 3698] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3696] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3696] write(1, "executing program\n", 18) = 18 [pid 3696] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] openat(AT_FDCWD, "./688", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./688/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./688/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./688/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./688") = 0 [pid 292] mkdir("./689", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3699 attached [pid 3694] +++ killed by SIGKILL +++ [pid 290] newfstatat(3, "", [pid 3699] set_robust_list(0x5555700d1660, 24 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3699 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3699] <... set_robust_list resumed>) = 0 [pid 290] getdents64(3, [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3694, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3699] chdir("./689" [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3699] <... chdir resumed>) = 0 [pid 290] umount2("./667/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3699] <... prctl resumed>) = 0 [pid 3696] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./667/binderfs", [pid 3699] setpgid(0, 0 [pid 3698] <... openat resumed>) = 3 [pid 3696] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3699] <... setpgid resumed>) = 0 [pid 3696] <... ioctl resumed>) = 0 [pid 290] unlink("./667/binderfs" [pid 3699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3698] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3696] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3699] <... openat resumed>) = 3 [pid 3698] <... ioctl resumed>) = 0 [pid 3696] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... unlink resumed>) = 0 [pid 3699] write(3, "1000", 4 [pid 3696] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] getdents64(3, [pid 291] <... restart_syscall resumed>) = 0 [pid 3699] <... write resumed>) = 4 [pid 3698] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3696] <... openat resumed>) = 4 [pid 3699] close(3 [pid 3698] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3696] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] close(3 [pid 3699] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 3699] symlink("/dev/binderfs", "./binderfs" [pid 3696] <... write resumed>) = 8784 [pid 290] rmdir("./667" [pid 3699] <... symlink resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3699] write(1, "executing program\n", 18 [pid 290] mkdir("./668", 0777 [pid 3699] <... write resumed>) = 18 [pid 290] <... mkdir resumed>) = 0 [pid 3699] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3699] <... openat resumed>) = 3 [pid 3699] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3700 [pid 3699] <... ioctl resumed>) = 0 [pid 3699] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3699] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3699] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3699] exit_group(0) = ? ./strace-static-x86_64: Process 3700 attached [pid 3700] set_robust_list(0x5555700d1660, 24) = 0 [pid 3700] chdir("./668") = 0 [pid 3700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3700] setpgid(0, 0) = 0 [pid 3700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3700] write(3, "1000", 4) = 4 [pid 3700] close(3) = 0 [pid 3700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3700] write(1, "executing program\n", 18) = 18 [pid 3700] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3700] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3700] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3700] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3700] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3700] exit_group(0) = ? executing program executing program [pid 3698] +++ killed by SIGKILL +++ [pid 3699] +++ exited with 0 +++ [pid 291] umount2("./684", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3698, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./696", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./696", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./696/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./696/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./696/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./696") = 0 [pid 293] mkdir("./697", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3701 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3699, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] umount2("./689", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./689", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./689/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./689/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./689/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./689") = 0 [pid 292] mkdir("./690", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3701 attached ./strace-static-x86_64: Process 3702 attached [pid 3696] +++ killed by SIGKILL +++ [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3702 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./684", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3701] set_robust_list(0x5555700d1660, 24 [pid 291] <... openat resumed>) = 3 [pid 3702] set_robust_list(0x5555700d1660, 24 [pid 3701] <... set_robust_list resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3696, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3702] <... set_robust_list resumed>) = 0 [pid 3700] +++ exited with 0 +++ [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3701] chdir("./697" [pid 291] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3700, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3702] chdir("./690" [pid 3701] <... chdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3702] <... chdir resumed>) = 0 [pid 3701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] umount2("./684/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3702] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3701] <... prctl resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3702] <... prctl resumed>) = 0 [pid 3701] setpgid(0, 0 [pid 291] newfstatat(AT_FDCWD, "./684/binderfs", [pid 3702] setpgid(0, 0 [pid 3701] <... setpgid resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3702] <... setpgid resumed>) = 0 [pid 291] unlink("./684/binderfs" [pid 3701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3701] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 3701] write(3, "1000", 4) = 4 [pid 3702] <... openat resumed>) = 3 [pid 3701] close(3 [pid 291] getdents64(3, [pid 3702] write(3, "1000", 4 [pid 3701] <... close resumed>) = 0 [pid 3702] <... write resumed>) = 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3702] close(3 [pid 3701] symlink("/dev/binderfs", "./binderfs" [pid 3702] <... close resumed>) = 0 [pid 291] close(3executing program executing program [pid 3702] symlink("/dev/binderfs", "./binderfs" [pid 291] <... close resumed>) = 0 [pid 3701] <... symlink resumed>) = 0 [pid 291] rmdir("./684" [pid 3702] <... symlink resumed>) = 0 [pid 3702] write(1, "executing program\n", 18 [pid 3701] write(1, "executing program\n", 18 [pid 291] <... rmdir resumed>) = 0 [pid 3702] <... write resumed>) = 18 [pid 3701] <... write resumed>) = 18 [pid 291] mkdir("./685", 0777 [ 65.240265][ T42] tty tty1: SAK: killed process 3695 (syz-executor903): by fd#3 [ 65.250226][ T60] tty tty1: SAK: killed process 3694 (syz-executor903): by fd#3 [ 65.259168][ T60] tty tty1: SAK: killed process 3694 (syz-executor903): by fd#3 [ 65.271513][ T42] tty tty1: SAK: killed process 3696 (syz-executor903): by fd#3 [ 65.271540][ T42] tty tty1: SAK: killed process 3698 (syz-executor903): by fd#3 [pid 3702] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3701] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 291] <... mkdir resumed>) = 0 [pid 3702] <... openat resumed>) = 3 [pid 3701] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3702] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3701] <... ioctl resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3702] <... ioctl resumed>) = 0 [pid 3701] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3701] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3701] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3703 attached [pid 289] <... restart_syscall resumed>) = 0 [pid 3702] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3703 [pid 3703] set_robust_list(0x5555700d1660, 24) = 0 [pid 289] umount2("./662", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3703] chdir("./685" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3703] <... chdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "./662", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3703] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... openat resumed>) = 3 [pid 3703] <... prctl resumed>) = 0 [pid 289] newfstatat(3, "", [pid 3703] setpgid(0, 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3703] <... setpgid resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] getdents64(3, [pid 3703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3701] <... write resumed>) = ? [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3702, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3703] <... openat resumed>) = 3 [pid 289] umount2("./662/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3703] write(3, "1000", 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3703] <... write resumed>) = 4 [pid 289] newfstatat(AT_FDCWD, "./662/binderfs", [pid 3703] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3703] <... close resumed>) = 0 [pid 289] unlink("./662/binderfs" [pid 3703] symlink("/dev/binderfs", "./binderfs" [pid 289] <... unlink resumed>) = 0 [pid 3703] <... symlink resumed>) = 0 [pid 289] getdents64(3, executing program [pid 3703] write(1, "executing program\n", 18 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3703] <... write resumed>) = 18 [pid 289] close(3 [pid 3703] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... close resumed>) = 0 [pid 3703] <... openat resumed>) = 3 [pid 289] rmdir("./662" [pid 3703] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... rmdir resumed>) = 0 [pid 3703] <... ioctl resumed>) = 0 [pid 289] mkdir("./663", 0777 [pid 3703] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... mkdir resumed>) = 0 [pid 3703] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3703] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3704 [pid 3703] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3703] exit_group(0) = ? [pid 3701] +++ killed by SIGKILL +++ [pid 292] umount2("./690", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3701, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./668", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3704 attached [pid 3703] +++ exited with 0 +++ [pid 293] umount2("./697", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./690", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3703, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] openat(AT_FDCWD, "./668", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./697", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./685", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 293] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] openat(AT_FDCWD, "./685", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./690/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 290] umount2("./668/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3704] set_robust_list(0x5555700d1660, 24 [pid 293] umount2("./697/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./690/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(AT_FDCWD, "./668/binderfs", [pid 3704] <... set_robust_list resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./697/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./690/binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./697/binderfs" [pid 291] umount2("./685/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... unlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] unlink("./668/binderfs" [pid 291] newfstatat(AT_FDCWD, "./685/binderfs", [pid 293] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./685/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./685" [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] <... rmdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] mkdir("./686", 0777 [pid 3704] chdir("./663" [pid 293] close(3 [pid 292] close(3 [pid 290] getdents64(3, [pid 293] <... close resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 293] rmdir("./697" [pid 292] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3705 attached [pid 3704] <... chdir resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] rmdir("./690" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] mkdir("./698", 0777 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3705 [pid 3705] set_robust_list(0x5555700d1660, 24 [pid 292] <... rmdir resumed>) = 0 [pid 290] close(3 [pid 3705] <... set_robust_list resumed>) = 0 [pid 3705] chdir("./686") = 0 [pid 3705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... mkdir resumed>) = 0 [pid 292] mkdir("./691", 0777 [pid 290] <... close resumed>) = 0 [pid 3704] <... prctl resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] rmdir("./668" [pid 3705] <... prctl resumed>) = 0 [pid 3705] setpgid(0, 0) = 0 [pid 3705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... mkdir resumed>) = 0 [pid 3705] <... openat resumed>) = 3 [pid 3705] write(3, "1000", 4 [pid 290] <... rmdir resumed>) = 0 [pid 3705] <... write resumed>) = 4 [pid 3705] close(3) = 0 [pid 3705] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3704] setpgid(0, 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] mkdir("./669", 0777 [pid 3705] write(1, "executing program\n", 18) = 18 [pid 3705] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3705] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3705] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 290] <... mkdir resumed>) = 0 [pid 3705] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3705] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3707 attached ) = ? [pid 3704] <... setpgid resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3706 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3707] set_robust_list(0x5555700d1660, 24 [pid 3704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3707 [pid 3705] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3705, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3706 attached [pid 3706] set_robust_list(0x5555700d1660, 24) = 0 [pid 3704] <... openat resumed>) = 3 [pid 3706] chdir("./698" [pid 3704] write(3, "1000", 4 [pid 3706] <... chdir resumed>) = 0 [pid 3706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3706] setpgid(0, 0executing program ) = 0 [pid 3704] <... write resumed>) = 4 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3708 [pid 3706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3706] write(3, "1000", 4) = 4 [pid 3706] close(3) = 0 [pid 3706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3706] write(1, "executing program\n", 18) = 18 [pid 3706] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3706] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3706] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3706] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3706] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3707] <... set_robust_list resumed>) = 0 [pid 3704] close(3 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./686", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3707] chdir("./691" [pid 291] openat(AT_FDCWD, "./686", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3707] <... chdir resumed>) = 0 [pid 3704] <... close resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./686/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./686/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./686/binderfs") = 0 [pid 3704] symlink("/dev/binderfs", "./binderfs" [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] close(3) = 0 [pid 291] rmdir("./686" [pid 3707] <... prctl resumed>) = 0 [pid 3704] <... symlink resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./687", 0777 [pid 3707] setpgid(0, 0 [pid 3704] write(1, "executing program\n", 18 [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 3707] <... setpgid resumed>) = 0 [pid 3704] <... write resumed>) = 18 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3709 [pid 3707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3704] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3706] <... write resumed>) = ? [pid 3707] <... openat resumed>) = 3 [pid 3704] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3708 attached [pid 3708] set_robust_list(0x5555700d1660, 24) = 0 [pid 3708] chdir("./669") = 0 [pid 3708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3708] setpgid(0, 0) = 0 [pid 3708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3707] write(3, "1000", 4 [pid 3704] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3707] <... write resumed>) = 4 [pid 3708] <... openat resumed>) = 3 [pid 3707] close(3 [pid 3706] +++ killed by SIGKILL +++ [pid 3704] <... ioctl resumed>) = 0 [pid 3708] write(3, "1000", 4 [pid 3707] <... close resumed>) = 0 [pid 3704] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3706, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3708] <... write resumed>) = 4 [pid 3708] close(3) = 0 [pid 3708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3708] write(1, "executing program\n", 18executing program ) = 18 [pid 3708] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3708] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3708] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3708] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3708] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3707] symlink("/dev/binderfs", "./binderfs" [pid 3704] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3708] exit_group(0) = ? [pid 3707] <... symlink resumed>) = 0 executing program [pid 3704] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3707] write(1, "executing program\n", 18 [pid 3708] +++ exited with 0 +++ [pid 3707] <... write resumed>) = 18 [pid 3704] <... openat resumed>) = 4 [pid 3707] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3704] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3708, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3707] <... openat resumed>) = 3 [ 65.292338][ T60] tty tty1: SAK: killed process 3701 (syz-executor903): by fd#3 [ 65.292357][ T60] tty tty1: SAK: killed process 3702 (syz-executor903): by fd#3 [ 65.317771][ T42] tty tty1: SAK: killed process 3705 (syz-executor903): by fd#3 [ 65.332274][ T42] tty tty1: SAK: killed process 3706 (syz-executor903): by fd#3 [pid 3704] <... write resumed>) = ? [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3709 attached [pid 3707] +++ killed by SIGKILL +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3707, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3709] set_robust_list(0x5555700d1660, 24) = 0 [pid 293] umount2("./698", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./669", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3709] chdir("./687" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./691", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3709] <... chdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "./698", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./669", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3709] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./691", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 3709] <... prctl resumed>) = 0 [pid 293] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 3709] setpgid(0, 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3704] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3704, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] getdents64(3, [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3709] <... setpgid resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] umount2("./698/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./669/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3709] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./691/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3709] write(3, "1000", 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3709] <... write resumed>) = 4 [pid 292] newfstatat(AT_FDCWD, "./691/binderfs", [pid 3709] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(AT_FDCWD, "./698/binderfs", [pid 290] newfstatat(AT_FDCWD, "./669/binderfs", [pid 3709] <... close resumed>) = 0 [pid 292] unlink("./691/binderfs" [pid 3709] symlink("/dev/binderfs", "./binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... unlink resumed>) = 0 [pid 293] unlink("./698/binderfs" [pid 292] getdents64(3, [pid 290] unlink("./669/binderfs" [pid 3709] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3709] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 292] close(3executing program [pid 290] <... unlink resumed>) = 0 [pid 3709] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 3709] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] umount2("./663", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3709] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 290] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3709] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] rmdir("./698" [pid 292] rmdir("./691" [pid 290] <... close resumed>) = 0 [pid 289] openat(AT_FDCWD, "./663", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3709] <... ioctl resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 290] rmdir("./669" [pid 289] <... openat resumed>) = 3 [pid 3709] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] mkdir("./699", 0777 [pid 292] mkdir("./692", 0777 [pid 3709] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] newfstatat(3, "", [pid 3709] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] mkdir("./670", 0777 [pid 3709] <... openat resumed>) = 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3711 ./strace-static-x86_64: Process 3711 attached ./strace-static-x86_64: Process 3710 attached [pid 3710] set_robust_list(0x5555700d1660, 24 [pid 290] <... mkdir resumed>) = 0 [pid 3709] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3710 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] getdents64(3, [pid 3711] set_robust_list(0x5555700d1660, 24 [pid 3710] <... set_robust_list resumed>) = 0 [pid 3711] <... set_robust_list resumed>) = 0 [pid 3709] <... write resumed>) = 8784 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3710] chdir("./699") = 0 [pid 3711] chdir("./692") = 0 [pid 3710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 289] umount2("./663/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3709] exit_group(0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3712 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3709] <... exit_group resumed>) = ? [pid 289] newfstatat(AT_FDCWD, "./663/binderfs", [pid 3711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3711] setpgid(0, 0 [pid 3710] setpgid(0, 0) = 0 [pid 3710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3711] <... setpgid resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3709] +++ exited with 0 +++ [pid 289] unlink("./663/binderfs" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3709, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3710] <... openat resumed>) = 3 [pid 289] <... unlink resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./663" [pid 3711] <... openat resumed>) = 3 [pid 3710] write(3, "1000", 4) = 4 [pid 3711] write(3, "1000", 4 [pid 289] <... rmdir resumed>) = 0 [pid 3710] close(3 [pid 289] mkdir("./664", 0777 [pid 3711] <... write resumed>) = 4 [pid 3710] <... close resumed>) = 0 [pid 3711] close(3) = 0 [pid 3710] symlink("/dev/binderfs", "./binderfs" [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3713 executing program [pid 3710] <... symlink resumed>) = 0 [pid 3710] write(1, "executing program\n", 18) = 18 [pid 3710] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3712 attached ./strace-static-x86_64: Process 3713 attached [pid 3712] set_robust_list(0x5555700d1660, 24 [pid 3711] write(1, "executing program\n", 18 [pid 3713] set_robust_list(0x5555700d1660, 24 [pid 3710] <... openat resumed>) = 3 [pid 3712] <... set_robust_list resumed>) = 0 executing program [pid 3712] chdir("./670") = 0 [pid 3712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3712] setpgid(0, 0) = 0 [pid 3713] <... set_robust_list resumed>) = 0 [pid 3710] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3711] <... write resumed>) = 18 [pid 3712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3711] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3712] <... openat resumed>) = 3 [pid 3712] write(3, "1000", 4) = 4 [pid 3712] close(3) = 0 [pid 3712] symlink("/dev/binderfs", "./binderfs" [pid 3713] chdir("./664" [pid 3711] <... openat resumed>) = 3 [pid 3712] <... symlink resumed>) = 0 [pid 3712] write(1, "executing program\n", 18executing program ) = 18 [pid 3710] <... ioctl resumed>) = 0 [pid 3712] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3710] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3713] <... chdir resumed>) = 0 [pid 3712] <... openat resumed>) = 3 [pid 3711] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3710] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3710] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3713] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3711] <... ioctl resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 3710] <... openat resumed>) = 4 [pid 3710] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] umount2("./687", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./687", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 3712] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./687/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3712] <... ioctl resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./687/binderfs", [pid 3712] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./687/binderfs" [pid 3713] <... prctl resumed>) = 0 [pid 3712] <... ioctl resumed>) = ? [pid 3710] <... write resumed>) = ? [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./687") = 0 [pid 291] mkdir("./688", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3714 [pid 3713] setpgid(0, 0) = 0 [pid 3713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3711] +++ killed by SIGKILL +++ [pid 3712] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3712, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3713] <... openat resumed>) = 3 [pid 3713] write(3, "1000", 4./strace-static-x86_64: Process 3714 attached [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3711, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3713] <... write resumed>) = 4 [pid 3713] close(3) = 0 [pid 3713] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3713] write(1, "executing program\n", 18) = 18 [pid 3713] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3714] set_robust_list(0x5555700d1660, 24) = 0 [pid 3714] chdir("./688") = 0 [pid 3714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3714] setpgid(0, 0) = 0 [pid 3714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3714] write(3, "1000", 4) = 4 [pid 3714] close(3) = 0 [pid 3714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3714] write(1, "executing program\n", 18) = 18 [pid 3714] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] umount2("./692", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./692", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./692/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./692/binderfs", [pid 290] <... restart_syscall resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./692/binderfs") = 0 [pid 290] umount2("./670", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] openat(AT_FDCWD, "./670", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] close(3 [pid 290] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 290] newfstatat(3, "", [pid 292] rmdir("./692" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 290] getdents64(3, [pid 292] mkdir("./693", 0777 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... mkdir resumed>) = 0 [pid 290] umount2("./670/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./670/binderfs", [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3715 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./670/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [ 65.348587][ T42] tty tty1: SAK: killed process 3704 (syz-executor903): by fd#3 [ 65.348642][ T42] tty tty1: SAK: killed process 3707 (syz-executor903): by fd#3 [ 65.381077][ T20] tty tty1: SAK: killed process 3711 (syz-executor903): by fd#3 [ 65.381108][ T20] tty tty1: SAK: killed process 3710 (syz-executor903): by fd#3 [pid 290] close(3) = 0 [pid 290] rmdir("./670") = 0 [pid 290] mkdir("./671", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3716 ./strace-static-x86_64: Process 3715 attached [pid 3715] set_robust_list(0x5555700d1660, 24) = 0 [pid 3715] chdir("./693") = 0 [pid 3715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3715] setpgid(0, 0) = 0 [pid 3715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3715] write(3, "1000", 4) = 4 [pid 3715] close(3) = 0 executing program [pid 3715] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3715] write(1, "executing program\n", 18) = 18 [pid 3715] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3716 attached [pid 3710] +++ killed by SIGKILL +++ [pid 3714] <... openat resumed>) = 3 [pid 3713] <... openat resumed>) = 3 [pid 3716] set_robust_list(0x5555700d1660, 24 [pid 3715] <... openat resumed>) = 3 [pid 3714] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3710, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3714] <... ioctl resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3714] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3713] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3716] <... set_robust_list resumed>) = 0 [pid 3715] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3714] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3713] <... ioctl resumed>) = 0 [pid 3716] chdir("./671" [pid 3714] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3716] <... chdir resumed>) = 0 [pid 3715] <... ioctl resumed>) = 0 [pid 3714] <... openat resumed>) = 4 [pid 3713] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3714] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3716] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3715] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3713] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3716] <... prctl resumed>) = 0 [pid 3715] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3714] <... write resumed>) = ? [pid 3713] syscall_0xfffffffffffffff7(0xffffffffffffff01, 0x40304580, 0x200000001080, 0x7ffebc598dc7, 0x7, 0x7 [pid 3716] setpgid(0, 0 [pid 3713] +++ killed by SIGKILL +++ [pid 3716] <... setpgid resumed>) = 0 [pid 3715] +++ killed by SIGKILL +++ [pid 3716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3716] write(3, "1000", 4) = 4 [pid 3716] close(3) = 0 [pid 3716] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3716] write(1, "executing program\n", 18) = 18 [pid 3716] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3716] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3716] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3716] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3716] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3716] exit_group(0) = ? [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3715, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3713, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3714] +++ killed by SIGKILL +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 292] umount2("./693", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./664", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3714, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./699", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./693", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./699", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./699/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./699/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./699/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./699") = 0 [pid 293] mkdir("./700", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3717 [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./693/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./693/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./693/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./693") = 0 [pid 292] mkdir("./694", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] openat(AT_FDCWD, "./664", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3718 ./strace-static-x86_64: Process 3718 attached ./strace-static-x86_64: Process 3717 attached [pid 289] <... openat resumed>) = 3 [pid 3718] set_robust_list(0x5555700d1660, 24) = 0 [pid 3718] chdir("./694") = 0 [pid 3718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3718] setpgid(0, 0) = 0 [pid 3718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3718] write(3, "1000", 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 3718] <... write resumed>) = 4 [pid 3718] close(3) = 0 [pid 291] umount2("./688", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3718] symlink("/dev/binderfs", "./binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3718] <... symlink resumed>) = 0 [pid 291] openat(AT_FDCWD, "./688", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3718] write(1, "executing program\n", 18 [pid 291] <... openat resumed>) = 3 [pid 3718] <... write resumed>) = 18 [pid 291] newfstatat(3, "", [pid 3718] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./688/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./688/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./688/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./688") = 0 [pid 291] mkdir("./689", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3719 [pid 289] newfstatat(3, "", ./strace-static-x86_64: Process 3719 attached [pid 3717] set_robust_list(0x5555700d1660, 24 [pid 3716] +++ exited with 0 +++ [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3719] set_robust_list(0x5555700d1660, 24 [pid 3718] <... openat resumed>) = 3 [pid 3717] <... set_robust_list resumed>) = 0 [pid 289] getdents64(3, [pid 3719] <... set_robust_list resumed>) = 0 [pid 3718] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3717] chdir("./700" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3716, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3719] chdir("./689" [pid 3718] <... ioctl resumed>) = 0 [pid 3717] <... chdir resumed>) = 0 [pid 290] umount2("./671", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./664/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3719] <... chdir resumed>) = 0 [pid 3718] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3718] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3717] <... prctl resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./671", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3719] <... prctl resumed>) = 0 [pid 3718] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3717] setpgid(0, 0 [pid 289] newfstatat(AT_FDCWD, "./664/binderfs", [pid 3719] setpgid(0, 0 [pid 3718] <... openat resumed>) = 4 [pid 3717] <... setpgid resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 3719] <... setpgid resumed>) = 0 [pid 3718] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3718] <... write resumed>) = ? [pid 3717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] newfstatat(3, "", [pid 289] unlink("./664/binderfs" [pid 3719] <... openat resumed>) = 3 [pid 3717] <... openat resumed>) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3717] write(3, "1000", 4 [pid 290] getdents64(3, [pid 3719] write(3, "1000", 4) = 4 [pid 3719] close(3) = 0 [pid 3719] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3718] +++ killed by SIGKILL +++ [pid 3717] <... write resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 3719] write(1, "executing program\n", 18 [pid 3717] close(3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3718, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3719] <... write resumed>) = 18 [pid 3717] <... close resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./671/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3719] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3717] symlink("/dev/binderfs", "./binderfs" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3719] <... openat resumed>) = 3 [pid 289] close(3 [pid 3719] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3717] <... symlink resumed>) = 0 executing program [pid 290] newfstatat(AT_FDCWD, "./671/binderfs", [pid 289] <... close resumed>) = 0 [pid 3719] <... ioctl resumed>) = 0 [pid 3717] write(1, "executing program\n", 18 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] rmdir("./664" [pid 3719] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3717] <... write resumed>) = 18 [pid 290] unlink("./671/binderfs" [pid 3719] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3717] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... rmdir resumed>) = 0 [pid 3719] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3717] <... openat resumed>) = 3 [pid 290] <... unlink resumed>) = 0 [pid 289] mkdir("./665", 0777 [pid 3719] <... openat resumed>) = 4 [ 65.381126][ T20] tty tty1: SAK: killed process 3712 (syz-executor903): by fd#3 [ 65.407089][ T42] tty tty1: SAK: killed process 3713 (syz-executor903): by fd#3 [ 65.407128][ T42] tty tty1: SAK: killed process 3714 (syz-executor903): by fd#3 [ 65.407149][ T42] tty tty1: SAK: killed process 3715 (syz-executor903): by fd#3 [ 65.434400][ T20] tty tty1: SAK: killed process 3718 (syz-executor903): by fd#3 [pid 3717] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] getdents64(3, executing program executing program [pid 289] <... mkdir resumed>) = 0 [pid 3719] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3717] <... ioctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3719] <... write resumed>) = ? [pid 290] close(3 [pid 3717] +++ killed by SIGKILL +++ [pid 290] <... close resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3720 [pid 290] rmdir("./671") = 0 [pid 290] mkdir("./672", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3721 ./strace-static-x86_64: Process 3721 attached [pid 3721] set_robust_list(0x5555700d1660, 24) = 0 [pid 3721] chdir("./672") = 0 [pid 3721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3721] setpgid(0, 0) = 0 [pid 3721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 3720 attached [pid 3720] set_robust_list(0x5555700d1660, 24 [pid 3721] write(3, "1000", 4) = 4 [pid 3721] close(3 [pid 3720] <... set_robust_list resumed>) = 0 [pid 3721] <... close resumed>) = 0 [pid 3720] chdir("./665" [pid 3721] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3720] <... chdir resumed>) = 0 [pid 3720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3720] setpgid(0, 0) = 0 [pid 3720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3721] write(1, "executing program\n", 18) = 18 [pid 3721] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3720] <... openat resumed>) = 3 [pid 3721] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3720] write(3, "1000", 4) = 4 [pid 3720] close(3) = 0 [pid 3721] <... ioctl resumed>) = 0 [pid 3720] symlink("/dev/binderfs", "./binderfs" [pid 3721] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3720] <... symlink resumed>) = 0 [pid 3721] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3721] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3721] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3720] write(1, "executing program\n", 18) = 18 [pid 3720] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3721] <... write resumed>) = 8784 [pid 3720] <... openat resumed>) = 3 [pid 3720] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3721] exit_group(0) = ? [pid 3720] <... ioctl resumed>) = 0 [pid 3720] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3720] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3720] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3717, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3720] <... write resumed>) = 8784 [pid 292] umount2("./694", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3719] +++ killed by SIGKILL +++ [pid 293] umount2("./700", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3719, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] openat(AT_FDCWD, "./700", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./694", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 3720] exit_group(0 [pid 293] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 293] umount2("./700/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3720] <... exit_group resumed>) = ? [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./700/binderfs", [pid 292] umount2("./694/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3721] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3721, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./700/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./700") = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] mkdir("./701", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./672", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3722 [pid 290] openat(AT_FDCWD, "./672", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./672/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./672/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./672/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./672") = 0 ./strace-static-x86_64: Process 3722 attached [pid 3720] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] mkdir("./673", 0777 [pid 3722] set_robust_list(0x5555700d1660, 24 [pid 292] newfstatat(AT_FDCWD, "./694/binderfs", [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 3722] <... set_robust_list resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3720, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3722] chdir("./701" [pid 292] unlink("./694/binderfs" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3723 ./strace-static-x86_64: Process 3723 attached [pid 3723] set_robust_list(0x5555700d1660, 24 [pid 292] <... unlink resumed>) = 0 [pid 291] umount2("./689", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 3723] <... set_robust_list resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3722] <... chdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] openat(AT_FDCWD, "./689", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3722] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] close(3 [pid 291] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 291] newfstatat(3, "", [pid 3722] <... prctl resumed>) = 0 [pid 292] rmdir("./694" [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./689/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./689/binderfs", [pid 292] <... rmdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3722] setpgid(0, 0 [pid 292] mkdir("./695", 0777 [pid 291] unlink("./689/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./689" [pid 3722] <... setpgid resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./690", 0777 [pid 3722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... restart_syscall resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3725 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3724 [pid 3722] <... openat resumed>) = 3 [pid 3722] write(3, "1000", 4 [pid 289] umount2("./665", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3722] <... write resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3722] close(3 [pid 289] openat(AT_FDCWD, "./665", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3722] <... close resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3722] symlink("/dev/binderfs", "./binderfs" [pid 3723] chdir("./673" [pid 289] newfstatat(3, "", [pid 3723] <... chdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] getdents64(3, [pid 3723] <... prctl resumed>) = 0 [pid 3723] setpgid(0, 0executing program [pid 3722] <... symlink resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3722] write(1, "executing program\n", 18 [pid 289] umount2("./665/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3722] <... write resumed>) = 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3723] <... setpgid resumed>) = 0 [pid 3722] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] newfstatat(AT_FDCWD, "./665/binderfs", [pid 3723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3723] <... openat resumed>) = 3 [pid 3722] <... openat resumed>) = 3 [pid 289] unlink("./665/binderfs" [pid 3723] write(3, "1000", 4) = 4 [pid 3723] close(3 [pid 289] <... unlink resumed>) = 0 [pid 3723] <... close resumed>) = 0 [pid 3722] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 3723] symlink("/dev/binderfs", "./binderfs" [pid 3722] <... ioctl resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3722] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] close(3 [pid 3722] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3723] <... symlink resumed>) = 0 [pid 3722] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./665" [pid 3722] <... openat resumed>) = 4 ./strace-static-x86_64: Process 3725 attached [pid 3725] set_robust_list(0x5555700d1660, 24) = 0 executing program executing program executing program [pid 3722] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./666", 0777 [pid 3725] chdir("./690") = 0 [pid 3725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3725] setpgid(0, 0) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3725] write(3, "1000", 4) = 4 [pid 3725] close(3) = 0 [pid 3725] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 3724 attached [pid 3724] set_robust_list(0x5555700d1660, 24) = 0 [pid 3724] chdir("./695" [pid 3725] write(1, "executing program\n", 18) = 18 [pid 3725] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3724] <... chdir resumed>) = 0 [pid 3724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3725] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3724] <... prctl resumed>) = 0 [pid 3724] setpgid(0, 0) = 0 [pid 3724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3725] <... ioctl resumed>) = 0 [pid 3725] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3725] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3724] <... openat resumed>) = 3 [pid 3724] write(3, "1000", 4) = 4 [pid 3724] close(3) = 0 [pid 3724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3724] write(1, "executing program\n", 18) = 18 [pid 3724] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3724] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3724] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3724] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3723] write(1, "executing program\n", 18) = 18 [pid 3723] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3723] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3723] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3723] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3722] <... write resumed>) = ? [pid 3725] <... openat resumed>) = 4 [pid 3725] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3725] exit_group(0) = ? [pid 3724] <... openat resumed>) = 4 [pid 3724] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3724] exit_group(0) = ? [pid 3722] +++ killed by SIGKILL +++ [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3722, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3723] <... openat resumed>) = 4 [pid 3723] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3725] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3725, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3723] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./701", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./701", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./701/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./701/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./701/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./701") = 0 [pid 293] mkdir("./702", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3727 ./strace-static-x86_64: Process 3726 attached [pid 3726] set_robust_list(0x5555700d1660, 24) = 0 [pid 3726] chdir("./666") = 0 [pid 3726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3726] setpgid(0, 0) = 0 [pid 3726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3726] write(3, "1000", 4) = 4 [pid 3726] close(3) = 0 [pid 3726] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3726] write(1, "executing program\n", 18executing program ) = 18 [pid 3723] +++ killed by SIGKILL +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3726 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3723, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3727 attached [pid 291] umount2("./690", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./690", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./690/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./690/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./690/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./690") = 0 [pid 291] mkdir("./691", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3728 [pid 3726] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3727] set_robust_list(0x5555700d1660, 24) = 0 [pid 3727] chdir("./702") = 0 [pid 3727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3727] setpgid(0, 0) = 0 [pid 3727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3727] write(3, "1000", 4) = 4 [pid 3727] close(3) = 0 [pid 3727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3727] write(1, "executing program\n", 18) = 18 [pid 3727] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3728 attached [pid 3728] set_robust_list(0x5555700d1660, 24) = 0 [pid 3728] chdir("./691") = 0 [pid 3728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3728] setpgid(0, 0) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./673", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./673", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3724] +++ exited with 0 +++ [pid 290] umount2("./673/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3724, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(AT_FDCWD, "./673/binderfs", [pid 3727] <... openat resumed>) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3727] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 290] unlink("./673/binderfs" [pid 3727] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3727] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 290] <... unlink resumed>) = 0 [ 65.447658][ T20] tty tty1: SAK: killed process 3717 (syz-executor903): by fd#3 [ 65.447684][ T20] tty tty1: SAK: killed process 3719 (syz-executor903): by fd#3 [ 65.474283][ T60] tty tty1: SAK: killed process 3722 (syz-executor903): by fd#3 [ 65.482507][ T60] tty tty1: SAK: killed process 3723 (syz-executor903): by fd#3 [ 65.482538][ T60] tty tty1: SAK: killed process 3724 (syz-executor903): by fd#3 [pid 3727] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3727] <... write resumed>) = ? [pid 3726] <... openat resumed>) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3727] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3727, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] close(3 [pid 3726] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] umount2("./695", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3728] <... openat resumed>) = 3 [pid 3726] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... close resumed>) = 0 [pid 3728] write(3, "1000", 4 [pid 3726] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] openat(AT_FDCWD, "./695", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] rmdir("./673" [pid 3728] <... write resumed>) = 4 [pid 3726] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... openat resumed>) = 3 [pid 3728] close(3) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 292] newfstatat(3, "", [pid 3728] symlink("/dev/binderfs", "./binderfs" [pid 3726] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program executing program [pid 290] mkdir("./674", 0777 [pid 3728] <... symlink resumed>) = 0 [pid 292] getdents64(3, [pid 3728] write(1, "executing program\n", 18) = 18 [pid 3728] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... mkdir resumed>) = 0 [pid 3728] <... openat resumed>) = 3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3726] <... openat resumed>) = 4 [pid 292] umount2("./695/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3728] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3728] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3729 [pid 3726] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] newfstatat(AT_FDCWD, "./695/binderfs", [pid 3728] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./695/binderfs"./strace-static-x86_64: Process 3729 attached [pid 3729] set_robust_list(0x5555700d1660, 24) = 0 [pid 3729] chdir("./674" [pid 3728] <... openat resumed>) = ? [pid 3728] +++ killed by SIGKILL +++ [pid 292] <... unlink resumed>) = 0 [pid 3729] <... chdir resumed>) = 0 [pid 3729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3729] setpgid(0, 0) = 0 [pid 3729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3729] write(3, "1000", 4) = 4 [pid 3729] close(3) = 0 [pid 3729] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3729] write(1, "executing program\n", 18) = 18 [pid 3729] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3729] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3729] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3729] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3729] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3726] <... write resumed>) = ? [pid 3729] exit_group(0) = ? [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3728, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./695" [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./696", 0777) = 0 [pid 293] umount2("./702", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... restart_syscall resumed>) = 0 [pid 293] openat(AT_FDCWD, "./702", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3730 [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 291] umount2("./691", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(3, [pid 291] openat(AT_FDCWD, "./691", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... openat resumed>) = 3 [pid 293] umount2("./702/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(3, "", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(AT_FDCWD, "./702/binderfs", [pid 291] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] unlink("./702/binderfs" [pid 291] umount2("./691/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3730 attached [pid 293] <... unlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(3, [pid 291] newfstatat(AT_FDCWD, "./691/binderfs", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] close(3 [pid 291] unlink("./691/binderfs" [pid 3730] set_robust_list(0x5555700d1660, 24 [pid 293] <... close resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 293] rmdir("./702"executing program [pid 291] getdents64(3, [pid 3730] <... set_robust_list resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] mkdir("./703", 0777 [pid 291] close(3 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] rmdir("./691") = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3731 [pid 291] mkdir("./692", 0777) = 0 [pid 3726] +++ killed by SIGKILL +++ [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3726, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3732 [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3732 attached [pid 3732] set_robust_list(0x5555700d1660, 24) = 0 [pid 3732] chdir("./692") = 0 [pid 3732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3732] setpgid(0, 0) = 0 [pid 3732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3732] write(3, "1000", 4) = 4 [pid 3732] close(3) = 0 [pid 3732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3732] write(1, "executing program\n", 18) = 18 [pid 3732] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3732] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3732] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3732] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3732] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3732] exit_group(0) = ? [pid 3730] chdir("./696") = 0 [pid 3730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3730] setpgid(0, 0) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3731 attached ) = 3 [pid 3729] +++ exited with 0 +++ [pid 3731] set_robust_list(0x5555700d1660, 24 [pid 289] umount2("./666", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3731] <... set_robust_list resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3729, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3731] chdir("./703" [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3731] <... chdir resumed>) = 0 [pid 3731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3731] setpgid(0, 0) = 0 [pid 3731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3730] write(3, "1000", 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3732] +++ exited with 0 +++ [pid 3731] <... openat resumed>) = 3 [pid 3731] write(3, "1000", 4) = 4 [pid 3731] close(3) = 0 [pid 3731] symlink("/dev/binderfs", "./binderfs" [pid 3730] <... write resumed>) = 4 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] openat(AT_FDCWD, "./666", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3731] <... symlink resumed>) = 0 [pid 3730] close(3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3732, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 3731] write(1, "executing program\n", 18 [pid 3730] <... close resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... openat resumed>) = 3 [pid 3731] <... write resumed>) = 18 [pid 3730] symlink("/dev/binderfs", "./binderfs" [pid 290] umount2("./674", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(3, "", [pid 3731] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3730] <... symlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3731] <... openat resumed>) = 3 [pid 3730] write(1, "executing program\n", 18executing program [pid 290] openat(AT_FDCWD, "./674", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] getdents64(3, [pid 3730] <... write resumed>) = 18 [pid 290] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3731] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3730] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] umount2("./666/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3731] <... ioctl resumed>) = 0 [pid 3730] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3730] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] newfstatat(AT_FDCWD, "./666/binderfs", [pid 3731] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3730] <... ioctl resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3731] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3730] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] getdents64(3, [pid 289] unlink("./666/binderfs" [pid 3731] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3730] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... unlink resumed>) = 0 [pid 3730] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] umount2("./674/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 3731] <... openat resumed>) = 4 [pid 3730] <... openat resumed>) = 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3731] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3730] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] newfstatat(AT_FDCWD, "./674/binderfs", [pid 289] close(3 [pid 3731] <... write resumed>) = ? [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./674/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./674") = 0 [pid 290] mkdir("./675", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3733 [pid 3730] <... write resumed>) = ? [pid 3731] +++ killed by SIGKILL +++ [pid 289] <... close resumed>) = 0 ./strace-static-x86_64: Process 3733 attached [pid 3733] set_robust_list(0x5555700d1660, 24) = 0 [pid 3733] chdir("./675") = 0 [pid 3733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3733] setpgid(0, 0) = 0 [pid 3733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3733] write(3, "1000", 4) = 4 [pid 3733] close(3) = 0 [pid 3733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3733] write(1, "executing program\n", 18executing program ) = 18 [pid 3733] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [ 65.501018][ T375] tty tty1: SAK: killed process 3727 (syz-executor903): by fd#3 [ 65.513412][ T60] tty tty1: SAK: killed process 3726 (syz-executor903): by fd#3 [ 65.513440][ T60] tty tty1: SAK: killed process 3728 (syz-executor903): by fd#3 [ 65.538033][ T375] tty tty1: SAK: killed process 3730 (syz-executor903): by fd#3 [pid 3733] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3733] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3733] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3733] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3733] exit_group(0 [pid 3730] +++ killed by SIGKILL +++ [pid 291] umount2("./692", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] rmdir("./666" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3731, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3733] <... exit_group resumed>) = ? [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3730, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] openat(AT_FDCWD, "./692", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... rmdir resumed>) = 0 [pid 293] umount2("./703", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./703", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./703/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./703/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./703/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./703") = 0 [pid 293] mkdir("./704", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3734 [pid 292] umount2("./696", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 289] mkdir("./667", 0777./strace-static-x86_64: Process 3734 attached [pid 3733] +++ killed by SIGKILL +++ [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 289] <... mkdir resumed>) = 0 [pid 3734] set_robust_list(0x5555700d1660, 24 [pid 292] openat(AT_FDCWD, "./696", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3733, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3734] <... set_robust_list resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3734] chdir("./704" [pid 292] newfstatat(3, "", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... restart_syscall resumed>) = 0 [pid 3734] <... chdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./692/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3735 [pid 3734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3734] <... prctl resumed>) = 0 [pid 290] umount2("./675", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3734] setpgid(0, 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] newfstatat(AT_FDCWD, "./692/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3734] <... setpgid resumed>) = 0 [pid 292] umount2("./696/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] openat(AT_FDCWD, "./675", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", [pid 3734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] unlink("./692/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 3734] <... openat resumed>) = 3 [pid 292] newfstatat(AT_FDCWD, "./696/binderfs", [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3734] write(3, "1000", 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] umount2("./675/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3734] <... write resumed>) = 4 [pid 292] unlink("./696/binderfs" [pid 291] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3734] close(3 [pid 292] <... unlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(AT_FDCWD, "./675/binderfs", [pid 3734] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 291] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 3734] symlink("/dev/binderfs", "./binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... close resumed>) = 0 [pid 290] unlink("./675/binderfs" [pid 3734] <... symlink resumed>) = 0 [pid 292] close(3 [pid 290] <... unlink resumed>) = 0 [pid 291] rmdir("./692" [pid 3734] write(1, "executing program\n", 18 [pid 292] <... close resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./675"./strace-static-x86_64: Process 3735 attached [pid 3734] <... write resumed>) = 18 [pid 292] rmdir("./696" [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3734] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] mkdir("./676", 0777 [pid 3734] <... openat resumed>) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 291] mkdir("./693", 0777 [pid 290] <... mkdir resumed>) = 0 [pid 3734] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3736 ./strace-static-x86_64: Process 3736 attached [pid 3736] set_robust_list(0x5555700d1660, 24) = 0 [pid 3736] chdir("./676" [pid 291] <... mkdir resumed>) = 0 [pid 3736] <... chdir resumed>) = 0 [pid 292] mkdir("./697", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3734] <... ioctl resumed>) = 0 [pid 3736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3736] setpgid(0, 0) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 3736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3736] write(3, "1000", 4) = 4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3734] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3736] close(3) = 0 [pid 3736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3735] set_robust_list(0x5555700d1660, 24executing program executing program executing program [pid 3734] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3737 [pid 3735] <... set_robust_list resumed>) = 0 [pid 3734] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3738 [pid 3736] write(1, "executing program\n", 18 [pid 3734] <... openat resumed>) = 4 [pid 3734] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3736] <... write resumed>) = 18 [pid 3736] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3734] <... write resumed>) = 8784 [pid 3736] <... openat resumed>) = 3 [pid 3736] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3736] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3736, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3737 attached [pid 3737] set_robust_list(0x5555700d1660, 24) = 0 [pid 3737] chdir("./693") = 0 ./strace-static-x86_64: Process 3738 attached [pid 3737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3738] set_robust_list(0x5555700d1660, 24 [pid 3737] setpgid(0, 0 [pid 3738] <... set_robust_list resumed>) = 0 [pid 3737] <... setpgid resumed>) = 0 [pid 3738] chdir("./697" [pid 3737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3738] <... chdir resumed>) = 0 [pid 3737] <... openat resumed>) = 3 [pid 3738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3738] setpgid(0, 0) = 0 [pid 3738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3737] write(3, "1000", 4) = 4 [pid 3737] close(3) = 0 [pid 3738] <... openat resumed>) = 3 [pid 3737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3738] write(3, "1000", 4) = 4 [pid 3738] close(3) = 0 [pid 3738] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3737] write(1, "executing program\n", 18) = 18 [pid 3737] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3738] write(1, "executing program\n", 18) = 18 [pid 3737] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3738] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3737] <... ioctl resumed>) = 0 [pid 3738] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3737] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3737] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3738] <... ioctl resumed>) = 0 [pid 3737] <... openat resumed>) = 4 [pid 3738] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3738] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3737] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3738] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3737] <... write resumed>) = 8784 [pid 3738] <... write resumed>) = 8784 [pid 3737] exit_group(0 [pid 3738] exit_group(0 [pid 3737] <... exit_group resumed>) = ? [pid 3738] <... exit_group resumed>) = ? [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./676", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./676", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3734] +++ killed by SIGKILL +++ [pid 290] umount2("./676/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3735] chdir("./667" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3734, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(AT_FDCWD, "./676/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./676/binderfs"executing program [pid 3735] <... chdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./676") = 0 [pid 290] mkdir("./677", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3739 ./strace-static-x86_64: Process 3739 attached [pid 3739] set_robust_list(0x5555700d1660, 24) = 0 [pid 3739] chdir("./677") = 0 [pid 3739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3739] setpgid(0, 0) = 0 [pid 3739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3739] write(3, "1000", 4) = 4 [pid 3739] close(3) = 0 [pid 3739] symlink("/dev/binderfs", "./binderfs" [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./704", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./704", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./704/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./704/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./704/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./704") = 0 [pid 293] mkdir("./705", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3740 [pid 3739] <... symlink resumed>) = 0 [pid 3739] write(1, "executing program\n", 18) = 18 [pid 3739] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3739] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3739] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3739] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3739] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3735] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3740 attached [pid 3737] +++ exited with 0 +++ [pid 3735] <... prctl resumed>) = 0 [pid 3738] +++ exited with 0 +++ [pid 3739] <... write resumed>) = ? [pid 3740] set_robust_list(0x5555700d1660, 24) = 0 [pid 3740] chdir("./705") = 0 [pid 3740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3740] setpgid(0, 0) = 0 [pid 3740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3740] write(3, "1000", 4) = 4 [pid 3740] close(3) = 0 [pid 3740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3740] write(1, "executing program\n", 18executing program ) = 18 [pid 3740] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3740] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3740] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3740] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3735] setpgid(0, 0) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3738, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3740] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] umount2("./697", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3737, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3735] <... openat resumed>) = 3 [pid 3735] write(3, "1000", 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./693", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3735] <... write resumed>) = 4 [pid 292] openat(AT_FDCWD, "./697", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3735] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3735] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 3740] <... write resumed>) = 8784 [pid 3735] symlink("/dev/binderfs", "./binderfs" [pid 292] newfstatat(3, "", [pid 291] openat(AT_FDCWD, "./693", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3739] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3739, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3735] <... symlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3735] write(1, "executing program\n", 18 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./697/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./697/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./697/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./697") = 0 [pid 292] mkdir("./698", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3741 ./strace-static-x86_64: Process 3741 attached [pid 3741] set_robust_list(0x5555700d1660, 24) = 0 [ 65.538064][ T375] tty tty1: SAK: killed process 3731 (syz-executor903): by fd#3 [ 65.554021][ T375] tty tty1: SAK: killed process 3733 (syz-executor903): by fd#3 [ 65.570698][ T375] tty tty1: SAK: killed process 3734 (syz-executor903): by fd#3 [ 65.570729][ T375] tty tty1: SAK: killed process 3736 (syz-executor903): by fd#3 [ 65.588476][ T375] tty tty1: SAK: killed process 3739 (syz-executor903): by fd#3 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./677", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./677", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./677/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./677/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./677/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./677"executing program ) = 0 [pid 290] mkdir("./678", 0777 [pid 3741] chdir("./698" [pid 3740] +++ killed by SIGKILL +++ [pid 3735] <... write resumed>) = 18 [pid 291] newfstatat(3, "", [pid 290] <... mkdir resumed>) = 0 [pid 3735] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3740, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3735] <... openat resumed>) = 3 [pid 3741] <... chdir resumed>) = 0 [pid 3735] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3742 attached [pid 3735] <... ioctl resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 3735] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3735] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3735] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3742 [pid 3735] exit_group(0) = ? [pid 3742] set_robust_list(0x5555700d1660, 24 [pid 3741] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] getdents64(3, [pid 293] umount2("./705", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3735] +++ exited with 0 +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3742] <... set_robust_list resumed>) = 0 [pid 3741] <... prctl resumed>) = 0 [pid 293] openat(AT_FDCWD, "./705", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3735, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3741] setpgid(0, 0 [pid 293] getdents64(3, [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./705/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./705/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./705/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./705" [pid 3742] chdir("./678" [pid 3741] <... setpgid resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] umount2("./693/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] mkdir("./706", 0777 [pid 3742] <... chdir resumed>) = 0 [pid 3741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... mkdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3743 attached [pid 3742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3741] <... openat resumed>) = 3 [pid 291] newfstatat(AT_FDCWD, "./693/binderfs", [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3743 [pid 3742] <... prctl resumed>) = 0 [pid 3742] setpgid(0, 0) = 0 [pid 3742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3741] write(3, "1000", 4 [pid 3743] set_robust_list(0x5555700d1660, 24 [pid 3742] <... openat resumed>) = 3 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3742] write(3, "1000", 4) = 4 [pid 3742] close(3) = 0 [pid 3742] symlink("/dev/binderfs", "./binderfs" [pid 3743] <... set_robust_list resumed>) = 0 [pid 3742] <... symlink resumed>) = 0 executing program [pid 3741] <... write resumed>) = 4 [pid 291] unlink("./693/binderfs" [pid 3742] write(1, "executing program\n", 18) = 18 [pid 3742] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3741] close(3 [pid 291] <... unlink resumed>) = 0 [pid 3743] chdir("./706" [pid 3742] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3742] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3742] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3741] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 3743] <... chdir resumed>) = 0 [pid 3742] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3743] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3741] symlink("/dev/binderfs", "./binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3742] <... write resumed>) = ? [pid 3743] <... prctl resumed>) = 0 [pid 3741] <... symlink resumed>) = 0 [pid 291] close(3 [pid 3742] +++ killed by SIGKILL +++ [pid 3741] write(1, "executing program\n", 18 executing program [pid 289] umount2("./667", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... close resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3742, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3741] <... write resumed>) = 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3743] setpgid(0, 0 [pid 3741] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] rmdir("./693" [pid 289] openat(AT_FDCWD, "./667", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3741] <... openat resumed>) = 3 [pid 3743] <... setpgid resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3741] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] newfstatat(3, "", [pid 3743] <... openat resumed>) = 3 [pid 291] <... rmdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3741] <... ioctl resumed>) = 0 [pid 3743] write(3, "1000", 4 [pid 289] getdents64(3, [pid 3741] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} executing program [pid 291] mkdir("./694", 0777 [pid 3741] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3741] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3743] <... write resumed>) = 4 [pid 3743] close(3) = 0 [pid 3743] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3741] <... openat resumed>) = 4 [pid 291] <... mkdir resumed>) = 0 [pid 289] umount2("./667/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3741] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3743] write(1, "executing program\n", 18) = 18 [pid 3743] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3741] <... write resumed>) = 8784 [pid 289] newfstatat(AT_FDCWD, "./667/binderfs", [pid 3743] <... openat resumed>) = 3 [pid 3743] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = ? [pid 3743] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3743, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3744 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./667/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./667") = 0 [pid 289] mkdir("./668", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3745 [pid 293] umount2("./706", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./678", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./706", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./678", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./706/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./678/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./706/binderfs", [pid 290] newfstatat(AT_FDCWD, "./678/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./706/binderfs" [pid 290] unlink("./678/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 3745 attached [pid 293] close(3 [pid 290] close(3./strace-static-x86_64: Process 3744 attached [pid 3745] set_robust_list(0x5555700d1660, 24 [pid 3741] +++ killed by SIGKILL +++ [pid 293] <... close resumed>) = 0 [pid 3745] <... set_robust_list resumed>) = 0 [pid 3744] set_robust_list(0x5555700d1660, 24 [pid 290] <... close resumed>) = 0 [pid 3745] chdir("./668" [pid 3744] <... set_robust_list resumed>) = 0 [pid 293] rmdir("./706" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3741, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] rmdir("./678" [pid 3745] <... chdir resumed>) = 0 [pid 3744] chdir("./694" [pid 3745] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3744] <... chdir resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3745] <... prctl resumed>) = 0 [pid 3744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] mkdir("./707", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 3745] setpgid(0, 0 [pid 3744] <... prctl resumed>) = 0 [pid 3745] <... setpgid resumed>) = 0 [pid 3744] setpgid(0, 0 [pid 3745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3744] <... setpgid resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 290] mkdir("./679", 0777 [pid 3745] <... openat resumed>) = 3 [pid 3744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3745] write(3, "1000", 4 [pid 3744] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 3745] <... write resumed>) = 4 [pid 3744] write(3, "1000", 4 [pid 3745] close(3 [pid 3744] <... write resumed>) = 4 [pid 3745] <... close resumed>) = 0 [pid 3744] close(3 [pid 3745] symlink("/dev/binderfs", "./binderfs" [pid 3744] <... close resumed>) = 0 [pid 3745] <... symlink resumed>) = 0 [pid 3744] symlink("/dev/binderfs", "./binderfs" [pid 3745] write(1, "executing program\n", 18executing program [pid 3744] <... symlink resumed>) = 0 executing program [pid 292] <... restart_syscall resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3746 attached [pid 3745] <... write resumed>) = 18 [pid 3744] write(1, "executing program\n", 18 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3746 [pid 3745] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3744] <... write resumed>) = 18 [pid 3745] <... openat resumed>) = 3 [pid 3744] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3745] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3744] <... openat resumed>) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3747 [pid 3745] <... ioctl resumed>) = 0 [pid 3744] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] umount2("./698", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3745] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3744] <... ioctl resumed>) = 0 [pid 3745] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3744] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3745] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3744] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3745] <... openat resumed>) = 4 [pid 3744] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] openat(AT_FDCWD, "./698", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3745] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3744] <... openat resumed>) = 4 ./strace-static-x86_64: Process 3747 attached [pid 3746] set_robust_list(0x5555700d1660, 24 [pid 3745] <... write resumed>) = ? [pid 292] <... openat resumed>) = 3 [pid 3747] set_robust_list(0x5555700d1660, 24 [pid 3746] <... set_robust_list resumed>) = 0 [pid 292] newfstatat(3, "", [pid 3747] <... set_robust_list resumed>) = 0 [pid 3746] chdir("./707" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3747] chdir("./679" [pid 3746] <... chdir resumed>) = 0 [ 65.597531][ T375] tty tty1: SAK: killed process 3740 (syz-executor903): by fd#3 [ 65.615872][ T60] tty tty1: SAK: killed process 3742 (syz-executor903): by fd#3 [ 65.627598][ T375] tty tty1: SAK: killed process 3741 (syz-executor903): by fd#3 [ 65.627628][ T375] tty tty1: SAK: killed process 3743 (syz-executor903): by fd#3 [pid 292] getdents64(3, [pid 3747] <... chdir resumed>) = 0 [pid 3746] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3747] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3746] <... prctl resumed>) = 0 [pid 292] umount2("./698/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3747] <... prctl resumed>) = 0 [pid 3746] setpgid(0, 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3747] setpgid(0, 0 [pid 3746] <... setpgid resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./698/binderfs", [pid 3747] <... setpgid resumed>) = 0 [pid 3746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3746] <... openat resumed>) = 3 [pid 292] unlink("./698/binderfs" [pid 3747] <... openat resumed>) = 3 [pid 3746] write(3, "1000", 4 [pid 292] <... unlink resumed>) = 0 [pid 3747] write(3, "1000", 4 [pid 3746] <... write resumed>) = 4 [pid 292] getdents64(3, [pid 3747] <... write resumed>) = 4 [pid 3746] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3747] close(3 [pid 3746] <... close resumed>) = 0 [pid 292] close(3 [pid 3747] <... close resumed>) = 0 [pid 3746] symlink("/dev/binderfs", "./binderfs" [pid 292] <... close resumed>) = 0 [pid 3747] symlink("/dev/binderfs", "./binderfs" [pid 3746] <... symlink resumed>) = 0 [pid 3744] +++ killed by SIGKILL +++ [pid 292] rmdir("./698"executing program [pid 3747] <... symlink resumed>) = 0 [pid 3746] write(1, "executing program\n", 18 [pid 292] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3744, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- executing program [pid 3747] write(1, "executing program\n", 18 [pid 3746] <... write resumed>) = 18 [pid 292] mkdir("./699", 0777 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3747] <... write resumed>) = 18 [pid 3746] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... mkdir resumed>) = 0 [pid 3747] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3746] <... openat resumed>) = 3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3747] <... openat resumed>) = 3 [pid 3746] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3747] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3746] <... ioctl resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3748 [pid 291] <... restart_syscall resumed>) = 0 [pid 3747] <... ioctl resumed>) = 0 [pid 3746] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3747] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3746] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3747] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3746] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] umount2("./694", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3748 attached [pid 3747] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3746] <... openat resumed>) = 4 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3748] set_robust_list(0x5555700d1660, 24 [pid 3747] <... openat resumed>) = 4 [pid 3746] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3745] +++ killed by SIGKILL +++ [pid 291] openat(AT_FDCWD, "./694", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3748] <... set_robust_list resumed>) = 0 [pid 3747] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3746] <... write resumed>) = 8784 [pid 3748] chdir("./699") = 0 [pid 3748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3748] setpgid(0, 0) = 0 [pid 3748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3748] write(3, "1000", 4) = 4 [pid 3748] close(3) = 0 [pid 3748] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3748] write(1, "executing program\n", 18) = 18 [pid 3748] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3748] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3748] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3748] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3748] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3748] exit_group(0) = ? [pid 291] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./694/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./694/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./694/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./694") = 0 [pid 291] mkdir("./695", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3748] +++ exited with 0 +++ [pid 3747] <... write resumed>) = ? [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3745, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3749 ./strace-static-x86_64: Process 3749 attached [pid 3749] set_robust_list(0x5555700d1660, 24) = 0 [pid 3749] chdir("./695") = 0 [pid 3749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3749] setpgid(0, 0) = 0 [pid 3749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3749] write(3, "1000", 4) = 4 [pid 3749] close(3) = 0 [pid 3749] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3749] write(1, "executing program\n", 18executing program ) = 18 [pid 3749] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3749] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3749] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3749] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3749] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3749] exit_group(0) = ? [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3748, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./699", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./699", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./699/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./699/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./699/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 3749] +++ exited with 0 +++ [pid 292] rmdir("./699" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3746] +++ killed by SIGKILL +++ [pid 292] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3749, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3747] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3746, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] mkdir("./700", 0777 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... restart_syscall resumed>) = 0 [pid 293] umount2("./707", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3747, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./707", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... mkdir resumed>) = 0 [pid 289] umount2("./668", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 289] openat(AT_FDCWD, "./668", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 291] <... restart_syscall resumed>) = 0 [pid 289] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3750 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./707/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(AT_FDCWD, "./707/binderfs", [pid 291] umount2("./695", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./668/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./707/binderfs" [pid 291] openat(AT_FDCWD, "./695", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(AT_FDCWD, "./668/binderfs", ./strace-static-x86_64: Process 3750 attached [pid 293] <... unlink resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 291] newfstatat(3, "", [pid 289] unlink("./668/binderfs" [pid 3750] set_robust_list(0x5555700d1660, 24 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3750] <... set_robust_list resumed>) = 0 [pid 293] close(3 [pid 291] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 3750] chdir("./700" [pid 293] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3750] <... chdir resumed>) = 0 [pid 293] rmdir("./707" [pid 291] umount2("./695/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 3750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3750] <... prctl resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./695/binderfs", [pid 3750] setpgid(0, 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3750] <... setpgid resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] unlink("./695/binderfs" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] mkdir("./708", 0777 [pid 291] <... unlink resumed>) = 0 [pid 3750] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 289] close(3 [pid 3750] write(3, "1000", 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3750] <... write resumed>) = 4 [pid 291] close(3 [pid 3750] close(3 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3750] <... close resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] rmdir("./695" [pid 3750] symlink("/dev/binderfs", "./binderfs" [pid 291] <... rmdir resumed>) = 0 [pid 289] rmdir("./668" [pid 3750] <... symlink resumed>) = 0 [pid 291] mkdir("./696", 0777 [pid 3750] write(1, "executing program\n", 18 executing program [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3751 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3750] <... write resumed>) = 18 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3751 attached ./strace-static-x86_64: Process 3752 attached [pid 3750] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] mkdir("./669", 0777 [pid 3750] <... openat resumed>) = 3 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3752 [pid 3750] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3750] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3750] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3750] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... mkdir resumed>) = 0 [pid 3752] set_robust_list(0x5555700d1660, 24 [pid 3751] set_robust_list(0x5555700d1660, 24 [pid 3750] <... write resumed>) = ? [ 65.649649][ T375] tty tty1: SAK: killed process 3744 (syz-executor903): by fd#3 [ 65.649678][ T375] tty tty1: SAK: killed process 3745 (syz-executor903): by fd#3 [ 65.667220][ T60] tty tty1: SAK: killed process 3746 (syz-executor903): by fd#3 [ 65.667248][ T60] tty tty1: SAK: killed process 3747 (syz-executor903): by fd#3 [ 65.693052][ T375] tty tty1: SAK: killed process 3750 (syz-executor903): by fd#3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3752] <... set_robust_list resumed>) = 0 [pid 3751] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3753 attached [pid 3750] +++ killed by SIGKILL +++ [pid 3753] set_robust_list(0x5555700d1660, 24 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3753 [pid 3753] <... set_robust_list resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3750, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3753] chdir("./669" [pid 292] umount2("./700", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./679", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3753] <... chdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3753] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] openat(AT_FDCWD, "./700", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3753] <... prctl resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 3753] setpgid(0, 0 [pid 292] newfstatat(3, "", [pid 3753] <... setpgid resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3753] <... openat resumed>) = 3 [pid 3751] chdir("./708" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3753] write(3, "1000", 4 [pid 292] umount2("./700/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3753] <... write resumed>) = 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3753] close(3 [pid 292] newfstatat(AT_FDCWD, "./700/binderfs", [pid 3753] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3753] symlink("/dev/binderfs", "./binderfs" [pid 292] unlink("./700/binderfs" [pid 3753] <... symlink resumed>) = 0 [pid 3752] chdir("./696" [pid 3751] <... chdir resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] openat(AT_FDCWD, "./679", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3752] <... chdir resumed>) = 0 [pid 3751] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] getdents64(3, [pid 290] <... openat resumed>) = 3 [pid 3752] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3751] <... prctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(3, "", [pid 3752] <... prctl resumed>) = 0 [pid 3751] setpgid(0, 0 [pid 292] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3752] setpgid(0, 0 [pid 3751] <... setpgid resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 290] getdents64(3, [pid 3753] write(1, "executing program\n", 18 [pid 3752] <... setpgid resumed>) = 0 [pid 3751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 292] rmdir("./700" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3753] <... write resumed>) = 18 [pid 3752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3751] <... openat resumed>) = 3 [pid 290] umount2("./679/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3752] <... openat resumed>) = 3 [pid 3751] write(3, "1000", 4 [pid 292] <... rmdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3752] write(3, "1000", 4 [pid 3751] <... write resumed>) = 4 [pid 292] mkdir("./701", 0777 [pid 290] newfstatat(AT_FDCWD, "./679/binderfs", [pid 3753] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3752] <... write resumed>) = 4 [pid 3751] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3752] close(3 [pid 3751] <... close resumed>) = 0 [pid 290] unlink("./679/binderfs" [pid 3752] <... close resumed>) = 0 [pid 3751] symlink("/dev/binderfs", "./binderfs" [pid 292] <... mkdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3753] <... openat resumed>) = 3 [pid 3752] symlink("/dev/binderfs", "./binderfs" [pid 3751] <... symlink resumed>) = 0 executing program [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] getdents64(3, [pid 3753] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3752] <... symlink resumed>) = 0 [pid 3751] write(1, "executing program\n", 18 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3752] write(1, "executing program\n", 18 [pid 3751] <... write resumed>) = 18 executing program [pid 290] close(3 [pid 3752] <... write resumed>) = 18 [pid 3751] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... close resumed>) = 0 [pid 3753] <... ioctl resumed>) = 0 [pid 3752] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3751] <... openat resumed>) = 3 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3754 [pid 290] rmdir("./679"./strace-static-x86_64: Process 3754 attached [pid 3753] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3752] <... openat resumed>) = 3 [pid 3751] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... rmdir resumed>) = 0 [pid 3752] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3751] <... ioctl resumed>) = 0 [pid 290] mkdir("./680", 0777 [pid 3754] set_robust_list(0x5555700d1660, 24 [pid 3753] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3752] <... ioctl resumed>) = 0 [pid 3751] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... mkdir resumed>) = 0 [pid 3752] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3751] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3754] <... set_robust_list resumed>) = 0 [pid 3753] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3752] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3751] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3752] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3751] <... openat resumed>) = 4 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3755 [pid 3753] <... openat resumed>) = 4 [pid 3752] <... openat resumed>) = 4 [pid 3751] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3754] chdir("./701"./strace-static-x86_64: Process 3755 attached ) = 0 [pid 3751] <... write resumed>) = ? [pid 3755] set_robust_list(0x5555700d1660, 24 [pid 3754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3755] <... set_robust_list resumed>) = 0 [pid 3754] <... prctl resumed>) = 0 [pid 3755] chdir("./680" [pid 3754] setpgid(0, 0 [pid 3755] <... chdir resumed>) = 0 [pid 3754] <... setpgid resumed>) = 0 [pid 3755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3755] <... prctl resumed>) = 0 [pid 3754] <... openat resumed>) = 3 [pid 3755] setpgid(0, 0 [pid 3754] write(3, "1000", 4 [pid 3755] <... setpgid resumed>) = 0 [pid 3754] <... write resumed>) = 4 [pid 3755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3754] close(3 [pid 3755] <... openat resumed>) = 3 [pid 3754] <... close resumed>) = 0 [pid 3755] write(3, "1000", 4 [pid 3754] symlink("/dev/binderfs", "./binderfs" [pid 3755] <... write resumed>) = 4 [pid 3754] <... symlink resumed>) = 0 [pid 3755] close(3 executing program [pid 3754] write(1, "executing program\n", 18 [pid 3753] +++ killed by SIGKILL +++ [pid 3751] +++ killed by SIGKILL +++ [pid 3755] <... close resumed>) = 0 [pid 3754] <... write resumed>) = 18 [pid 3755] symlink("/dev/binderfs", "./binderfs" [pid 3754] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3755] <... symlink resumed>) = 0 executing program [pid 3755] write(1, "executing program\n", 18) = 18 [pid 3755] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3751, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./708", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./708", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./708/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./708/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./708/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./708") = 0 [pid 293] mkdir("./709", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3756 attached [pid 3755] <... openat resumed>) = 3 [pid 3754] <... openat resumed>) = 3 [pid 3752] +++ killed by SIGKILL +++ [pid 3756] set_robust_list(0x5555700d1660, 24 [pid 3754] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3753, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3756] <... set_robust_list resumed>) = 0 [pid 3755] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3754] <... ioctl resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3756 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3752, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./669", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3756] chdir("./709" [pid 3755] <... ioctl resumed>) = 0 [pid 3754] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3756] <... chdir resumed>) = 0 [pid 3755] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3754] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] openat(AT_FDCWD, "./669", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3756] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3755] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3754] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... openat resumed>) = 3 [pid 3756] <... prctl resumed>) = 0 [pid 289] newfstatat(3, "", [pid 3756] setpgid(0, 0 [pid 3755] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3754] <... openat resumed>) = 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3756] <... setpgid resumed>) = 0 [pid 3755] <... openat resumed>) = 4 executing program [pid 3754] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] getdents64(3, [pid 3756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3755] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3754] <... write resumed>) = 8784 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3756] <... openat resumed>) = 3 [pid 289] umount2("./669/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3756] write(3, "1000", 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3756] <... write resumed>) = 4 [pid 289] newfstatat(AT_FDCWD, "./669/binderfs", [pid 3756] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3756] <... close resumed>) = 0 [pid 289] unlink("./669/binderfs" [pid 3756] symlink("/dev/binderfs", "./binderfs" [pid 289] <... unlink resumed>) = 0 [pid 3756] <... symlink resumed>) = 0 [pid 289] getdents64(3, [pid 3756] write(1, "executing program\n", 18 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3756] <... write resumed>) = 18 [pid 289] close(3 [pid 3756] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... close resumed>) = 0 [pid 3756] <... openat resumed>) = 3 [pid 289] rmdir("./669" [pid 3756] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... rmdir resumed>) = 0 [pid 3756] <... ioctl resumed>) = 0 [pid 289] mkdir("./670", 0777 [pid 3756] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... mkdir resumed>) = 0 [pid 3756] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3756] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3757 [pid 3756] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3756] exit_group(0) = ? [pid 3755] <... write resumed>) = ? [pid 3756] +++ exited with 0 +++ [pid 3754] +++ killed by SIGKILL +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3756, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3754, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./696", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./701", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./696", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] umount2("./709", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./701", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 293] openat(AT_FDCWD, "./709", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 293] newfstatat(3, "", [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./696/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 292] umount2("./701/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./696/binderfs", ./strace-static-x86_64: Process 3757 attached [pid 293] umount2("./709/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./701/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./696/binderfs" [pid 293] newfstatat(AT_FDCWD, "./709/binderfs", [pid 292] unlink("./701/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 3757] set_robust_list(0x5555700d1660, 24 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... unlink resumed>) = 0 [pid 3757] <... set_robust_list resumed>) = 0 [pid 3757] chdir("./670") = 0 [pid 3757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3757] setpgid(0, 0) = 0 [pid 3757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3757] write(3, "1000", 4) = 4 [pid 3757] close(3) = 0 [pid 3757] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3757] write(1, "executing program\n", 18executing program ) = 18 [pid 3757] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./696") = 0 [pid 291] mkdir("./697", 0777) = 0 [pid 293] unlink("./709/binderfs" [pid 292] getdents64(3, [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] getdents64(3, [pid 292] close(3 [pid 3755] +++ killed by SIGKILL +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... close resumed>) = 0 [pid 293] close(3 [pid 292] rmdir("./701" [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3758 [pid 293] <... close resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 293] rmdir("./709" [pid 292] mkdir("./702", 0777 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3755, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3758 attached [pid 3757] <... openat resumed>) = 3 [pid 293] <... rmdir resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3758] set_robust_list(0x5555700d1660, 24 [pid 3757] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] mkdir("./710", 0777 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3758] <... set_robust_list resumed>) = 0 [pid 3757] <... ioctl resumed>) = 0 [pid 3758] chdir("./697" [pid 3757] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3758] <... chdir resumed>) = 0 [pid 3757] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./680", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3758] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3757] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3758] <... prctl resumed>) = 0 [pid 3757] <... openat resumed>) = 4 [pid 290] openat(AT_FDCWD, "./680", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3758] setpgid(0, 0 [pid 3757] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3760 attached ./strace-static-x86_64: Process 3759 attached [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3759 [ 65.714323][ T60] tty tty1: SAK: killed process 3751 (syz-executor903): by fd#3 [ 65.714352][ T60] tty tty1: SAK: killed process 3752 (syz-executor903): by fd#3 [ 65.714376][ T60] tty tty1: SAK: killed process 3753 (syz-executor903): by fd#3 [ 65.741587][ T375] tty tty1: SAK: killed process 3754 (syz-executor903): by fd#3 [ 65.741619][ T375] tty tty1: SAK: killed process 3755 (syz-executor903): by fd#3 [pid 3760] set_robust_list(0x5555700d1660, 24 [pid 3759] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3760 [pid 3760] <... set_robust_list resumed>) = 0 [pid 3759] <... set_robust_list resumed>) = 0 [pid 3760] chdir("./710" [pid 3759] chdir("./702" [pid 3760] <... chdir resumed>) = 0 [pid 3760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3759] <... chdir resumed>) = 0 [pid 3760] <... prctl resumed>) = 0 [pid 3760] setpgid(0, 0 [pid 3759] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3760] <... setpgid resumed>) = 0 [pid 3760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3759] <... prctl resumed>) = 0 [pid 3760] <... openat resumed>) = 3 [pid 3760] write(3, "1000", 4 [pid 3759] setpgid(0, 0 [pid 3760] <... write resumed>) = 4 [pid 3760] close(3 [pid 3759] <... setpgid resumed>) = 0 [pid 3760] <... close resumed>) = 0 [pid 3760] symlink("/dev/binderfs", "./binderfs" [pid 3759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3760] <... symlink resumed>) = 0 executing program [pid 3760] write(1, "executing program\n", 18 [pid 3759] <... openat resumed>) = 3 [pid 3760] <... write resumed>) = 18 [pid 3760] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3759] write(3, "1000", 4 [pid 3760] <... openat resumed>) = 3 [pid 3760] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3759] <... write resumed>) = 4 [pid 290] newfstatat(3, "", [pid 3758] <... setpgid resumed>) = 0 [pid 3757] <... write resumed>) = ? [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3760] <... ioctl resumed>) = 0 [pid 3759] close(3 [pid 3758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3760] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3759] <... close resumed>) = 0 [pid 3760] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3759] symlink("/dev/binderfs", "./binderfs" [pid 3760] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3758] <... openat resumed>) = 3 [pid 290] getdents64(3, [pid 3760] <... write resumed>) = ? [pid 3759] <... symlink resumed>) = 0 [pid 3758] write(3, "1000", 4 [pid 3757] +++ killed by SIGKILL +++ [pid 3760] +++ killed by SIGKILL +++ [pid 3759] write(1, "executing program\n", 18executing program [pid 3758] <... write resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3759] <... write resumed>) = 18 [pid 3758] close(3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3760, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./680/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3759] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3757, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3759] <... openat resumed>) = 3 [pid 3758] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3759] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3758] symlink("/dev/binderfs", "./binderfs" [pid 290] newfstatat(AT_FDCWD, "./680/binderfs", [pid 3759] <... ioctl resumed>) = 0 [pid 3759] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3758] <... symlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 3759] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3758] write(1, "executing program\n", 18 [pid 290] unlink("./680/binderfs" [pid 3759] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3758] <... write resumed>) = 18 [pid 3758] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... unlink resumed>) = 0 [pid 3758] <... openat resumed>) = 3 [pid 290] getdents64(3, [pid 3758] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3759] <... openat resumed>) = 4 [pid 3758] <... ioctl resumed>) = 0 [pid 290] close(3 [pid 3759] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3758] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... close resumed>) = 0 [pid 3758] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] rmdir("./680" [pid 3759] <... write resumed>) = 8784 [pid 3758] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... rmdir resumed>) = 0 [pid 3758] <... openat resumed>) = ? [pid 290] mkdir("./681", 0777 [pid 3758] +++ killed by SIGKILL +++ [pid 290] <... mkdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3758, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3761 ./strace-static-x86_64: Process 3761 attached [pid 3761] set_robust_list(0x5555700d1660, 24) = 0 [pid 3761] chdir("./681") = 0 [pid 3761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3761] setpgid(0, 0) = 0 [pid 3761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3761] write(3, "1000", 4) = 4 [pid 3761] close(3) = 0 [pid 3761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./670", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./670", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./670/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] umount2("./697", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./670/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] openat(AT_FDCWD, "./697", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] unlink("./670/binderfs" [pid 291] <... openat resumed>) = 3 [pid 289] <... unlink resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 289] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... close resumed>) = 0 [pid 291] umount2("./697/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] rmdir("./670" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... rmdir resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./697/binderfs", [pid 289] mkdir("./671", 0777 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 291] unlink("./697/binderfs" [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3762 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./697") = 0 [pid 291] mkdir("./698", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3763 executing program [pid 3761] write(1, "executing program\n", 18) = 18 [pid 3761] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./710", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3763 attached ./strace-static-x86_64: Process 3762 attached ) = -1 EINVAL (Invalid argument) [pid 3759] +++ killed by SIGKILL +++ [pid 3763] set_robust_list(0x5555700d1660, 24 [pid 3762] set_robust_list(0x5555700d1660, 24 [pid 293] openat(AT_FDCWD, "./710", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3759, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3763] <... set_robust_list resumed>) = 0 [pid 3762] <... set_robust_list resumed>) = 0 [pid 3761] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] newfstatat(3, "", [pid 3763] chdir("./698" [pid 3762] chdir("./671" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3763] <... chdir resumed>) = 0 [pid 3762] <... chdir resumed>) = 0 [pid 293] getdents64(3, [pid 3763] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3762] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3763] <... prctl resumed>) = 0 [pid 3762] <... prctl resumed>) = 0 [pid 293] umount2("./710/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3763] setpgid(0, 0 [pid 3762] setpgid(0, 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3763] <... setpgid resumed>) = 0 [pid 3762] <... setpgid resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./710/binderfs", [pid 3763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] unlink("./710/binderfs" [pid 3763] <... openat resumed>) = 3 [pid 3762] <... openat resumed>) = 3 [pid 293] <... unlink resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 3763] write(3, "1000", 4 [pid 3762] write(3, "1000", 4 [pid 293] getdents64(3, [pid 3763] <... write resumed>) = 4 [pid 3762] <... write resumed>) = 4 [pid 3761] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3763] close(3 [pid 3762] close(3 [pid 3761] <... ioctl resumed>) = 0 [pid 293] close(3 [pid 292] umount2("./702", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3763] <... close resumed>) = 0 [pid 3762] <... close resumed>) = 0 [pid 3761] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3763] symlink("/dev/binderfs", "./binderfs" [pid 3762] symlink("/dev/binderfs", "./binderfs" [pid 293] rmdir("./710" [pid 292] openat(AT_FDCWD, "./702", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3763] <... symlink resumed>) = 0 [pid 3762] <... symlink resumed>) = 0 [pid 3761] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 293] <... rmdir resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 3763] write(1, "executing program\n", 18 [pid 3762] write(1, "executing program\n", 18executing program [pid 293] mkdir("./711", 0777 [pid 292] newfstatat(3, "", [pid 3763] <... write resumed>) = 18 [pid 3762] <... write resumed>) = 18 [pid 3761] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3763] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3762] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3763] <... openat resumed>) = 3 [pid 3762] <... openat resumed>) = 3 [pid 3761] <... openat resumed>) = 4 [pid 293] <... mkdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3763] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3762] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3763] <... ioctl resumed>) = 0 [pid 3762] <... ioctl resumed>) = 0 [pid 3761] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] getdents64(3, [pid 3763] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3762] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}./strace-static-x86_64: Process 3764 attached [pid 3763] <... ioctl resumed>) = ? [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3764] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3764 [pid 292] umount2("./702/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3764] <... set_robust_list resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3764] chdir("./711" [pid 292] newfstatat(AT_FDCWD, "./702/binderfs", [pid 3764] <... chdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3764] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] unlink("./702/binderfs" [pid 3764] <... prctl resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 3764] setpgid(0, 0 [pid 292] getdents64(3, [pid 3764] <... setpgid resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] close(3 [pid 3764] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 3764] write(3, "1000", 4 [pid 292] rmdir("./702" [pid 3764] <... write resumed>) = 4 [pid 292] <... rmdir resumed>) = 0 [ 65.764567][ T60] tty tty1: SAK: killed process 3757 (syz-executor903): by fd#3 [ 65.774381][ T42] tty tty1: SAK: killed process 3760 (syz-executor903): by fd#3 [ 65.786789][ T42] tty tty1: SAK: killed process 3758 (syz-executor903): by fd#3 [ 65.786823][ T42] tty tty1: SAK: killed process 3759 (syz-executor903): by fd#3 [pid 3764] close(3 [pid 292] mkdir("./703", 0777 [pid 3764] <... close resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 3764] symlink("/dev/binderfs", "./binderfs" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3764] <... symlink resumed>) = 0 [pid 3762] +++ killed by SIGKILL +++ [pid 3764] write(1, "executing program\n", 18 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3765 executing program [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3762, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3764] <... write resumed>) = 18 [pid 3763] +++ killed by SIGKILL +++ [pid 3761] <... write resumed>) = ? [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3764] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3763, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3764] <... openat resumed>) = 3 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3764] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3764] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3764] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3764] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3764] exit_group(0) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./671", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./671", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 291] umount2("./698", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 3765 attached [pid 3764] +++ exited with 0 +++ [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./671/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3764, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] openat(AT_FDCWD, "./698", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... openat resumed>) = 3 [pid 289] newfstatat(AT_FDCWD, "./671/binderfs", [pid 291] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] unlink("./671/binderfs" [pid 291] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 291] umount2("./698/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] close(3 [pid 291] newfstatat(AT_FDCWD, "./698/binderfs", [pid 289] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] rmdir("./671" [pid 291] unlink("./698/binderfs" [pid 289] <... rmdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] mkdir("./672", 0777 [pid 291] getdents64(3, [pid 289] <... mkdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] close(3) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3766 [pid 291] rmdir("./698") = 0 [pid 291] mkdir("./699", 0777 [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 3765] set_robust_list(0x5555700d1660, 24 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3765] <... set_robust_list resumed>) = 0 [pid 3761] +++ killed by SIGKILL +++ [pid 293] umount2("./711", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3761, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3767 attached [pid 3765] chdir("./703" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3767] set_robust_list(0x5555700d1660, 24 [pid 3765] <... chdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "./711", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3767] <... set_robust_list resumed>) = 0 [pid 3765] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3767 [pid 3767] chdir("./699" [pid 3765] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 3765] setpgid(0, 0 [pid 293] newfstatat(3, "", [pid 3765] <... setpgid resumed>) = 0 [pid 3767] <... chdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3767] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, ./strace-static-x86_64: Process 3766 attached [pid 3766] set_robust_list(0x5555700d1660, 24 [pid 3765] <... openat resumed>) = 3 [pid 3766] <... set_robust_list resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3765] write(3, "1000", 4 [pid 293] umount2("./711/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3765] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3765] close(3 [pid 293] newfstatat(AT_FDCWD, "./711/binderfs", [pid 3765] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3765] symlink("/dev/binderfs", "./binderfs" [pid 293] unlink("./711/binderfs" [pid 3766] chdir("./672") = 0 [pid 3765] <... symlink resumed>) = 0 [pid 3766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3766] setpgid(0, 0 [pid 3765] write(1, "executing program\n", 18 [pid 293] <... unlink resumed>) = 0 executing program [pid 3766] <... setpgid resumed>) = 0 [pid 3765] <... write resumed>) = 18 [pid 293] getdents64(3, [pid 3767] <... prctl resumed>) = 0 [pid 3766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3765] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3767] setpgid(0, 0 [pid 3766] <... openat resumed>) = 3 [pid 3765] <... openat resumed>) = 3 [pid 293] close(3 [pid 3766] write(3, "1000", 4 [pid 3765] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3767] <... setpgid resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 3765] <... ioctl resumed>) = 0 [pid 3766] <... write resumed>) = 4 [pid 293] rmdir("./711" [pid 3765] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3766] close(3) = 0 [pid 3766] symlink("/dev/binderfs", "./binderfs" [pid 3767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3765] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... rmdir resumed>) = 0 [pid 3765] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3767] <... openat resumed>) = 3 [pid 293] mkdir("./712", 0777executing program [pid 3767] write(3, "1000", 4 [pid 3765] <... openat resumed>) = 4 [pid 3766] <... symlink resumed>) = 0 [pid 3766] write(1, "executing program\n", 18) = 18 [pid 3766] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3765] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3767] <... write resumed>) = 4 [pid 293] <... mkdir resumed>) = 0 [pid 3766] <... openat resumed>) = 3 [pid 3766] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3765] <... write resumed>) = 8784 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3766] <... ioctl resumed>) = 0 [pid 3766] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3766] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = ? [pid 3766] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3766, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>executing program [pid 3767] close(3) = 0 [pid 3767] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3767] write(1, "executing program\n", 18) = 18 [pid 3767] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3767] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3767] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3767] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3767] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3767] exit_group(0 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./672", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./672", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./672/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./672/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./672/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./672" [pid 3767] <... exit_group resumed>) = ? [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./673", 0777) = 0 [pid 290] umount2("./681", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3769 [pid 290] openat(AT_FDCWD, "./681", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3768 [pid 3767] +++ exited with 0 +++ [pid 290] <... openat resumed>) = 3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3767, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3768 attached [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./681/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./681/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./681/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./681") = 0 [pid 290] mkdir("./682", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3770 ./strace-static-x86_64: Process 3770 attached [pid 3770] set_robust_list(0x5555700d1660, 24) = 0 [pid 3770] chdir("./682") = 0 [pid 3770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3770] setpgid(0, 0) = 0 [pid 3770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3770] write(3, "1000", 4) = 4 [pid 3770] close(3) = 0 [pid 3770] symlink("/dev/binderfs", "./binderfs" [pid 3765] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3769 attached [pid 3768] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3765, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3769] set_robust_list(0x5555700d1660, 24 [pid 3768] <... set_robust_list resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3769] <... set_robust_list resumed>) = 0 [pid 3768] chdir("./673" [pid 3769] chdir("./712" [pid 3768] <... chdir resumed>) = 0 [pid 3769] <... chdir resumed>) = 0 [pid 3768] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3769] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3768] <... prctl resumed>) = 0 [pid 3769] <... prctl resumed>) = 0 [pid 3768] setpgid(0, 0 [pid 3769] setpgid(0, 0 [pid 3768] <... setpgid resumed>) = 0 executing program [pid 3769] <... setpgid resumed>) = 0 [pid 3770] <... symlink resumed>) = 0 [pid 3768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3770] write(1, "executing program\n", 18 [pid 3769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3770] <... write resumed>) = 18 [pid 3768] <... openat resumed>) = 3 [pid 3770] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3769] <... openat resumed>) = 3 [pid 3768] write(3, "1000", 4 [pid 3769] write(3, "1000", 4 [pid 3768] <... write resumed>) = 4 [pid 3769] <... write resumed>) = 4 [pid 3768] close(3 [pid 3769] close(3 [pid 3768] <... close resumed>) = 0 [pid 3769] <... close resumed>) = 0 [pid 3768] symlink("/dev/binderfs", "./binderfs" [pid 3769] symlink("/dev/binderfs", "./binderfs" [pid 3770] <... openat resumed>) = 3 [pid 3768] <... symlink resumed>) = 0 [pid 3770] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3769] <... symlink resumed>) = 0 executing program executing program [pid 3768] write(1, "executing program\n", 18 [pid 3769] write(1, "executing program\n", 18 [pid 3768] <... write resumed>) = 18 [pid 3769] <... write resumed>) = 18 [pid 3768] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3769] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3768] <... openat resumed>) = 3 [pid 3769] <... openat resumed>) = 3 [pid 3768] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3769] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] umount2("./699", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3769] <... ioctl resumed>) = 0 [pid 3768] <... ioctl resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3769] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] openat(AT_FDCWD, "./699", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3769] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3768] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... openat resumed>) = 3 [pid 3769] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3768] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] newfstatat(3, "", [pid 3769] <... openat resumed>) = 4 [pid 3768] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3769] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3768] <... openat resumed>) = 4 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3769] <... write resumed>) = 8784 [pid 291] umount2("./699/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3769] exit_group(0 [pid 3768] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3769] <... exit_group resumed>) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./699/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3768] <... write resumed>) = 8784 [pid 291] unlink("./699/binderfs" [pid 292] umount2("./703", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 292] openat(AT_FDCWD, "./703", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3769] +++ exited with 0 +++ [pid 3768] exit_group(0 [pid 292] <... openat resumed>) = 3 [pid 291] close(3 [pid 3768] <... exit_group resumed>) = ? [pid 292] newfstatat(3, "", [pid 291] <... close resumed>) = 0 [pid 3770] <... ioctl resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] rmdir("./699" [pid 3770] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3768] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3769, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 65.808835][ T42] tty tty1: SAK: killed process 3761 (syz-executor903): by fd#3 [ 65.808861][ T42] tty tty1: SAK: killed process 3762 (syz-executor903): by fd#3 [ 65.808879][ T42] tty tty1: SAK: killed process 3763 (syz-executor903): by fd#3 [ 65.839403][ T42] tty tty1: SAK: killed process 3765 (syz-executor903): by fd#3 [ 65.839430][ T42] tty tty1: SAK: killed process 3766 (syz-executor903): by fd#3 [pid 292] getdents64(3, executing program [pid 291] <... rmdir resumed>) = 0 [pid 3770] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] mkdir("./700", 0777 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3768, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] umount2("./703/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... mkdir resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] newfstatat(AT_FDCWD, "./703/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3771 [pid 292] unlink("./703/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./703") = 0 [pid 292] mkdir("./704", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3772 ./strace-static-x86_64: Process 3772 attached [pid 3772] set_robust_list(0x5555700d1660, 24) = 0 [pid 3772] chdir("./704") = 0 [pid 3772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3772] setpgid(0, 0) = 0 [pid 3772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3772] write(3, "1000", 4) = 4 [pid 3772] close(3) = 0 [pid 3772] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3772] write(1, "executing program\n", 18) = 18 [pid 3772] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3771 attached [pid 3771] set_robust_list(0x5555700d1660, 24) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 289] umount2("./673", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] umount2("./712", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] openat(AT_FDCWD, "./673", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./712", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(3, "", [pid 293] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(3, "", [pid 289] getdents64(3, [pid 3771] chdir("./700" [pid 3770] +++ killed by SIGKILL +++ [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3771] <... chdir resumed>) = 0 [pid 293] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3770, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./673/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3771] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3771] <... prctl resumed>) = 0 [pid 293] umount2("./712/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./673/binderfs", [pid 3771] setpgid(0, 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3771] <... setpgid resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./712/binderfs", [pid 289] unlink("./673/binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] unlink("./712/binderfs" [pid 289] getdents64(3, [pid 293] <... unlink resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 289] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... close resumed>) = 0 [pid 293] close(3 [pid 289] rmdir("./673" [pid 293] <... close resumed>) = 0 [pid 3772] <... openat resumed>) = 3 [pid 3772] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... rmdir resumed>) = 0 [pid 293] rmdir("./712" [pid 289] mkdir("./674", 0777 [pid 3772] <... ioctl resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 3772] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3772] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... mkdir resumed>) = 0 [pid 293] mkdir("./713", 0777 [pid 3771] <... openat resumed>) = 3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3772] <... openat resumed>) = 4 [pid 3772] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3773 attached [pid 3771] write(3, "1000", 4 [pid 293] <... mkdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3771] <... write resumed>) = 4 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3773] set_robust_list(0x5555700d1660, 24 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3773 [pid 3771] close(3 [pid 3772] <... write resumed>) = ? ./strace-static-x86_64: Process 3774 attached [pid 3773] <... set_robust_list resumed>) = 0 [pid 3771] <... close resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3774 [pid 3773] chdir("./674" [pid 3771] symlink("/dev/binderfs", "./binderfs" [pid 290] umount2("./682", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3774] set_robust_list(0x5555700d1660, 24 [pid 3772] +++ killed by SIGKILL +++ [pid 3773] <... chdir resumed>) = 0 [pid 3771] <... symlink resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3773] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3771] write(1, "executing program\n", 18executing program [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3772, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] openat(AT_FDCWD, "./682", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3773] <... prctl resumed>) = 0 [pid 3771] <... write resumed>) = 18 [pid 290] <... openat resumed>) = 3 [pid 3773] setpgid(0, 0 [pid 3771] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(3, "", [pid 3774] <... set_robust_list resumed>) = 0 [pid 3773] <... setpgid resumed>) = 0 [pid 3771] <... openat resumed>) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3774] chdir("./713" [pid 3773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3771] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3773] <... openat resumed>) = 3 [pid 3771] <... ioctl resumed>) = 0 [pid 290] getdents64(3, [pid 3773] write(3, "1000", 4 [pid 3771] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3773] <... write resumed>) = 4 [pid 3771] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3773] close(3 [pid 3771] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3773] <... close resumed>) = 0 [pid 3771] <... openat resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3774] <... chdir resumed>) = 0 [pid 3773] symlink("/dev/binderfs", "./binderfs" [pid 3771] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3771] <... write resumed>) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 290] umount2("./682/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3774] <... prctl resumed>) = 0 [pid 3773] <... symlink resumed>) = 0 executing program [pid 3771] +++ killed by SIGKILL +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3773] write(1, "executing program\n", 18 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3771, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3773] <... write resumed>) = 18 [pid 292] umount2("./704", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./682/binderfs", [pid 3774] setpgid(0, 0 [pid 3773] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3774] <... setpgid resumed>) = 0 [pid 292] openat(AT_FDCWD, "./704", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] umount2("./700", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3773] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 3773] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(3, "", [pid 290] unlink("./682/binderfs" [pid 3774] <... openat resumed>) = 3 [pid 3773] <... ioctl resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] openat(AT_FDCWD, "./700", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3773] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 291] <... openat resumed>) = 3 [pid 290] <... unlink resumed>) = 0 [pid 3774] write(3, "1000", 4 [pid 3773] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] getdents64(3, [pid 291] newfstatat(3, "", [pid 290] getdents64(3, [pid 3773] <... openat resumed>) = 4 [pid 3773] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3774] <... write resumed>) = 4 [pid 3773] <... write resumed>) = ? [pid 292] umount2("./704/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3774] close(3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 290] close(3 [pid 3774] <... close resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./704/binderfs", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... close resumed>) = 0 [pid 3774] symlink("/dev/binderfs", "./binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./700/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] rmdir("./682" [pid 3774] <... symlink resumed>) = 0 [pid 292] unlink("./704/binderfs"executing program [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... rmdir resumed>) = 0 [pid 3774] write(1, "executing program\n", 18 [pid 292] <... unlink resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./700/binderfs", [pid 290] mkdir("./683", 0777 [pid 3774] <... write resumed>) = 18 [pid 292] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 3774] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] unlink("./700/binderfs" [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3774] <... openat resumed>) = 3 [pid 292] close(3 [pid 291] <... unlink resumed>) = 0 [pid 3774] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3775 [pid 3774] <... ioctl resumed>) = 0 [pid 292] rmdir("./704" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3774] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... rmdir resumed>) = 0 [pid 291] close(3 [pid 3774] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] mkdir("./705", 0777 [pid 291] <... close resumed>) = 0 [pid 3774] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... mkdir resumed>) = 0 [pid 291] rmdir("./700"./strace-static-x86_64: Process 3775 attached [pid 3774] <... openat resumed>) = 4 [pid 3773] +++ killed by SIGKILL +++ [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... rmdir resumed>) = 0 [pid 3775] set_robust_list(0x5555700d1660, 24 [pid 3774] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3773, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3776 attached [pid 3775] <... set_robust_list resumed>) = 0 [pid 291] mkdir("./701", 0777 [pid 3775] chdir("./683") = 0 [pid 289] umount2("./674", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3775] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3775] <... prctl resumed>) = 0 [pid 289] openat(AT_FDCWD, "./674", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3775] setpgid(0, 0 [pid 289] <... openat resumed>) = 3 [pid 3775] <... setpgid resumed>) = 0 [pid 289] newfstatat(3, "", [pid 3775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3775] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 3775] write(3, "1000", 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3775] <... write resumed>) = 4 [pid 289] umount2("./674/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3775] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3775] <... close resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./674/binderfs", [pid 3775] symlink("/dev/binderfs", "./binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 3775] <... symlink resumed>) = 0 [pid 289] unlink("./674/binderfs" [pid 3775] write(1, "executing program\n", 18 [pid 289] <... unlink resumed>) = 0 [pid 3775] <... write resumed>) = 18 [pid 289] getdents64(3, [pid 3775] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3775] <... openat resumed>) = 3 [pid 289] close(3 [pid 3775] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... close resumed>) = 0 [pid 3775] <... ioctl resumed>) = 0 [pid 289] rmdir("./674" [pid 3775] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... rmdir resumed>) = 0 [pid 3775] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] mkdir("./675", 0777 [pid 3775] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... mkdir resumed>) = 0 [pid 3775] <... openat resumed>) = 4 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3775] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3777 [pid 3775] exit_group(0) = ? [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3776 [pid 3776] set_robust_list(0x5555700d1660, 24 [pid 3774] <... write resumed>) = ? [pid 291] <... mkdir resumed>) = 0 [pid 3775] +++ exited with 0 +++ ./strace-static-x86_64: Process 3777 attached [pid 3777] set_robust_list(0x5555700d1660, 24 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3775, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3777] <... set_robust_list resumed>) = 0 [pid 3777] chdir("./675") = 0 [pid 3777] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3776] <... set_robust_list resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3778 [pid 3777] <... prctl resumed>) = 0 [pid 3777] setpgid(0, 0) = 0 [ 65.862264][ T42] tty tty1: SAK: killed process 3770 (syz-executor903): by fd#3 [ 65.873227][ T60] tty tty1: SAK: killed process 3772 (syz-executor903): by fd#3 [ 65.885393][ T42] tty tty1: SAK: killed process 3771 (syz-executor903): by fd#3 [ 65.896251][ T42] tty tty1: SAK: killed process 3773 (syz-executor903): by fd#3 [ 65.906163][ T60] tty tty1: SAK: killed process 3774 (syz-executor903): by fd#3 [pid 3777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3777] write(3, "1000", 4) = 4 [pid 3777] close(3) = 0 [pid 3777] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3777] write(1, "executing program\n", 18executing program ) = 18 [pid 3777] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3778 attached [pid 3778] set_robust_list(0x5555700d1660, 24) = 0 [pid 3778] chdir("./701") = 0 [pid 3778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3778] setpgid(0, 0) = 0 [pid 3778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3778] write(3, "1000", 4) = 4 [pid 3778] close(3executing program ) = 0 [pid 3778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3778] write(1, "executing program\n", 18) = 18 [pid 3778] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3776] chdir("./705") = 0 [pid 3776] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3776] setpgid(0, 0) = 0 [pid 3776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3776] write(3, "1000", 4) = 4 [pid 3776] close(3 [pid 290] umount2("./683", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3776] <... close resumed>) = 0 [pid 3776] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3776] write(1, "executing program\n", 18) = 18 [pid 3776] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3776] <... openat resumed>) = 3 [pid 3777] <... openat resumed>) = 3 [pid 3774] +++ killed by SIGKILL +++ [pid 290] openat(AT_FDCWD, "./683", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3774, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... openat resumed>) = 3 [pid 3777] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3776] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] newfstatat(3, "", [pid 3776] <... ioctl resumed>) = 0 [pid 3776] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3777] <... ioctl resumed>) = 0 [pid 290] getdents64(3, [pid 3776] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3776] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3777] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] umount2("./683/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3777] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3776] <... openat resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3776] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3777] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] newfstatat(AT_FDCWD, "./683/binderfs", [pid 3778] <... openat resumed>) = ? [pid 3777] <... openat resumed>) = ? [pid 3776] <... write resumed>) = ? [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3778] +++ killed by SIGKILL +++ [pid 3777] +++ killed by SIGKILL +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 290] unlink("./683/binderfs" [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3777, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- executing program [pid 293] umount2("./713", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3778, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... unlink resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] getdents64(3, [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 291] umount2("./701", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] rmdir("./683" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... rmdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "./701", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] mkdir("./684", 0777 [pid 291] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 291] newfstatat(3, "", [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3779 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./701/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./701/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./701/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./701") = 0 [pid 291] mkdir("./702", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3780 ./strace-static-x86_64: Process 3780 attached [pid 3780] set_robust_list(0x5555700d1660, 24) = 0 [pid 3780] chdir("./702") = 0 [pid 3780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3780] setpgid(0, 0) = 0 [pid 3780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3780] write(3, "1000", 4) = 4 [pid 3780] close(3) = 0 [pid 3780] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3780] write(1, "executing program\n", 18) = 18 [pid 3780] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./713", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./713/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] umount2("./675", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3779 attached ) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./713/binderfs", [pid 289] openat(AT_FDCWD, "./675", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3779] set_robust_list(0x5555700d1660, 24 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./713/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./713") = 0 [pid 293] mkdir("./714", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3781 [pid 289] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./675/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./675/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./675/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./675") = 0 [pid 289] mkdir("./676", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3782 executing program [pid 3779] <... set_robust_list resumed>) = 0 [pid 3779] chdir("./684") = 0 [pid 3779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3779] setpgid(0, 0) = 0 [pid 3779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3779] write(3, "1000", 4) = 4 [pid 3779] close(3) = 0 [pid 3779] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3779] write(1, "executing program\n", 18) = 18 [pid 3779] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3781 attached ./strace-static-x86_64: Process 3782 attached [pid 3782] set_robust_list(0x5555700d1660, 24 [pid 3776] +++ killed by SIGKILL +++ [pid 3782] <... set_robust_list resumed>) = 0 [pid 3782] chdir("./676") = 0 [pid 3782] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3776, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3782] <... prctl resumed>) = 0 [pid 3782] setpgid(0, 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3782] <... setpgid resumed>) = 0 [pid 3782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3781] set_robust_list(0x5555700d1660, 24 [pid 3780] <... openat resumed>) = 3 [pid 3779] <... openat resumed>) = 3 [pid 3781] <... set_robust_list resumed>) = 0 [pid 3782] <... openat resumed>) = 3 [pid 3779] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3782] write(3, "1000", 4) = 4 [pid 3781] chdir("./714" [pid 3782] close(3 [pid 3779] <... ioctl resumed>) = 0 [pid 3782] <... close resumed>) = 0 executing program [pid 3779] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3782] symlink("/dev/binderfs", "./binderfs" [pid 3781] <... chdir resumed>) = 0 [pid 3781] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3782] <... symlink resumed>) = 0 [pid 3781] setpgid(0, 0 [pid 3779] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3782] write(1, "executing program\n", 18) = 18 [pid 3781] <... setpgid resumed>) = 0 [pid 3779] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3782] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3779] <... openat resumed>) = 4 [pid 3781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3782] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3779] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3781] <... openat resumed>) = 3 [pid 3781] write(3, "1000", 4) = 4 [pid 3781] close(3) = 0 [pid 3781] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3782] <... ioctl resumed>) = 0 [pid 3781] write(1, "executing program\n", 18 executing program [pid 3779] <... write resumed>) = 8784 [pid 3782] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3781] <... write resumed>) = 18 [pid 3782] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3781] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3779] exit_group(0 [pid 3782] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3779] <... exit_group resumed>) = ? [pid 3782] <... openat resumed>) = 4 [pid 3781] <... openat resumed>) = 3 [pid 3781] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3781] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3781] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3781] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3782] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3779] +++ exited with 0 +++ [pid 3782] <... write resumed>) = ? [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3779, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3781] <... write resumed>) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./705", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./705", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./705/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] <... restart_syscall resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./705/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./705/binderfs" [pid 290] umount2("./684", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... unlink resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(3, [pid 290] openat(AT_FDCWD, "./684", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... openat resumed>) = 3 [pid 292] close(3 [pid 290] newfstatat(3, "", [pid 292] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] rmdir("./705" [pid 290] getdents64(3, [pid 292] <... rmdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] mkdir("./706", 0777 [pid 290] umount2("./684/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... mkdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] newfstatat(AT_FDCWD, "./684/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3783 [pid 290] unlink("./684/binderfs"./strace-static-x86_64: Process 3783 attached [pid 3781] +++ killed by SIGKILL +++ [pid 3780] +++ killed by SIGKILL +++ [pid 290] <... unlink resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3781, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3780, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] getdents64(3, [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./684" [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./685", 0777) = 0 [ 65.914863][ T60] tty tty1: SAK: killed process 3774 (syz-executor903): by fd#3 [ 65.926687][ T42] tty tty1: SAK: killed process 3776 (syz-executor903): by fd#3 [ 65.926738][ T42] tty tty1: SAK: killed process 3777 (syz-executor903): by fd#3 [ 65.926759][ T42] tty tty1: SAK: killed process 3778 (syz-executor903): by fd#3 [ 65.955761][ T42] tty tty1: SAK: killed process 3780 (syz-executor903): by fd#3 [pid 293] umount2("./714", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./714", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3784 [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./714/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./714/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./714/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./714") = 0 [pid 293] mkdir("./715", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3784 attached [pid 3783] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3785 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./702", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./702", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./702/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./702/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./702/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./702") = 0 [pid 291] mkdir("./703", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3786 ./strace-static-x86_64: Process 3786 attached [pid 3786] set_robust_list(0x5555700d1660, 24) = 0 [pid 3786] chdir("./703") = 0 [pid 3786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 3785 attached [pid 3786] setpgid(0, 0 [pid 3784] set_robust_list(0x5555700d1660, 24 [pid 3783] <... set_robust_list resumed>) = 0 [pid 3782] +++ killed by SIGKILL +++ [pid 3785] set_robust_list(0x5555700d1660, 24 [pid 3784] <... set_robust_list resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3782, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3783] chdir("./706" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3784] chdir("./685" [pid 3783] <... chdir resumed>) = 0 [pid 3785] <... set_robust_list resumed>) = 0 [pid 3784] <... chdir resumed>) = 0 [pid 3783] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3786] <... setpgid resumed>) = 0 [pid 3785] chdir("./715" [pid 3784] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3785] <... chdir resumed>) = 0 [pid 3783] <... prctl resumed>) = 0 [pid 3785] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3784] <... prctl resumed>) = 0 [pid 3785] <... prctl resumed>) = 0 [pid 3783] setpgid(0, 0 [pid 3784] setpgid(0, 0 [pid 3785] setpgid(0, 0 [pid 3784] <... setpgid resumed>) = 0 [pid 3783] <... setpgid resumed>) = 0 [pid 3786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3785] <... setpgid resumed>) = 0 [pid 3784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3786] <... openat resumed>) = 3 [pid 3783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3784] <... openat resumed>) = 3 [pid 3786] write(3, "1000", 4 [pid 3785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3786] <... write resumed>) = 4 [pid 3783] <... openat resumed>) = 3 [pid 3784] write(3, "1000", 4 [pid 3786] close(3 [pid 3785] <... openat resumed>) = 3 [pid 3783] write(3, "1000", 4 [pid 3785] write(3, "1000", 4 [pid 3784] <... write resumed>) = 4 [pid 3783] <... write resumed>) = 4 [pid 3785] <... write resumed>) = 4 [pid 3784] close(3 [pid 3785] close(3 [pid 3783] close(3 [pid 3785] <... close resumed>) = 0 [pid 3784] <... close resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3785] symlink("/dev/binderfs", "./binderfs" [pid 3784] symlink("/dev/binderfs", "./binderfs" [pid 3783] <... close resumed>) = 0 [pid 289] umount2("./676", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3785] <... symlink resumed>) = 0 [pid 3783] symlink("/dev/binderfs", "./binderfs" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./676", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3784] <... symlink resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", executing program executing program [pid 3785] write(1, "executing program\n", 18 [pid 3784] write(1, "executing program\n", 18 [pid 3783] <... symlink resumed>) = 0 executing program [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3785] <... write resumed>) = 18 [pid 3784] <... write resumed>) = 18 [pid 3783] write(1, "executing program\n", 18 [pid 289] getdents64(3, [pid 3785] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3784] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3783] <... write resumed>) = 18 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./676/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3785] <... openat resumed>) = 3 [pid 3784] <... openat resumed>) = 3 [pid 3783] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3785] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] newfstatat(AT_FDCWD, "./676/binderfs", [pid 3785] <... ioctl resumed>) = 0 [pid 3784] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3783] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3785] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] unlink("./676/binderfs" [pid 3785] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3784] <... ioctl resumed>) = 0 [pid 3783] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... unlink resumed>) = 0 [pid 3786] <... close resumed>) = 0 [pid 3785] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3784] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3783] <... ioctl resumed>) = 0 [pid 289] getdents64(3, [pid 3785] <... openat resumed>) = 4 [pid 3784] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3783] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3785] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3784] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3783] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] close(3) = 0 [pid 3783] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] rmdir("./676" [pid 3785] <... write resumed>) = 8784 [pid 3784] <... openat resumed>) = 4 [pid 3783] <... openat resumed>) = 4 [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./677", 0777executing program executing program ) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3787 ./strace-static-x86_64: Process 3787 attached [pid 3787] set_robust_list(0x5555700d1660, 24) = 0 [pid 3787] chdir("./677") = 0 [pid 3787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3787] setpgid(0, 0) = 0 [pid 3787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3787] write(3, "1000", 4) = 4 [pid 3787] close(3) = 0 [pid 3787] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3787] write(1, "executing program\n", 18) = 18 [pid 3787] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3787] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3787] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3787] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3787] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3787] exit_group(0) = ? [pid 3786] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3786] write(1, "executing program\n", 18) = 18 [pid 3786] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3786] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3786] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3786] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3786] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3786] exit_group(0) = ? [pid 3787] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3787, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3784] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3784, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3785] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3785, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3786] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3786, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./677", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./677", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./677/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./677/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./677/binderfs" [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] umount2("./703", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... close resumed>) = 0 [pid 291] openat(AT_FDCWD, "./703", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] rmdir("./677" [pid 291] <... openat resumed>) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] mkdir("./678", 0777 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 291] getdents64(3, [pid 290] umount2("./685", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./703/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./685", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3788 [pid 291] newfstatat(AT_FDCWD, "./703/binderfs", [pid 290] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] unlink("./703/binderfs" [pid 290] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 290] umount2("./685/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] close(3 [pid 290] newfstatat(AT_FDCWD, "./685/binderfs", [pid 291] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] rmdir("./703" [pid 290] unlink("./685/binderfs" [pid 291] <... rmdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 291] mkdir("./704", 0777 [pid 290] getdents64(3, [pid 291] <... mkdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] close(3) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3789 [pid 290] rmdir("./685" [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./686", 0777) = 0 [pid 293] umount2("./715", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./715", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3790 [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./715/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./715/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./715/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./715") = 0 [pid 293] mkdir("./716", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3791 ./strace-static-x86_64: Process 3791 attached ./strace-static-x86_64: Process 3790 attached ./strace-static-x86_64: Process 3789 attached ./strace-static-x86_64: Process 3788 attached [pid 3783] +++ killed by SIGKILL +++ [pid 3790] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3783, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3790] <... set_robust_list resumed>) = 0 [pid 3789] set_robust_list(0x5555700d1660, 24 [pid 3788] set_robust_list(0x5555700d1660, 24 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3791] set_robust_list(0x5555700d1660, 24 [pid 3790] chdir("./686" [pid 3791] <... set_robust_list resumed>) = 0 [pid 3789] <... set_robust_list resumed>) = 0 [pid 3788] <... set_robust_list resumed>) = 0 [pid 3790] <... chdir resumed>) = 0 [pid 3791] chdir("./716" [pid 3790] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3789] chdir("./704" [pid 3788] chdir("./678" [pid 3791] <... chdir resumed>) = 0 [pid 3790] <... prctl resumed>) = 0 [pid 3789] <... chdir resumed>) = 0 [pid 3788] <... chdir resumed>) = 0 [pid 3791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3790] setpgid(0, 0 [pid 3789] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3791] <... prctl resumed>) = 0 [pid 3790] <... setpgid resumed>) = 0 [pid 3789] <... prctl resumed>) = 0 [pid 3788] <... prctl resumed>) = 0 [pid 3791] setpgid(0, 0 [pid 3790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3789] setpgid(0, 0 [pid 3788] setpgid(0, 0 [pid 3791] <... setpgid resumed>) = 0 [pid 3790] <... openat resumed>) = 3 [pid 3789] <... setpgid resumed>) = 0 [pid 3788] <... setpgid resumed>) = 0 [pid 3790] write(3, "1000", 4 [pid 3791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3790] <... write resumed>) = 4 [pid 3789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3791] <... openat resumed>) = 3 [pid 3790] close(3 [pid 3789] <... openat resumed>) = 3 [pid 3791] write(3, "1000", 4 [pid 3788] <... openat resumed>) = 3 [pid 3790] <... close resumed>) = 0 [pid 3789] write(3, "1000", 4 [pid 3791] <... write resumed>) = 4 [pid 3790] symlink("/dev/binderfs", "./binderfs" [pid 3789] <... write resumed>) = 4 [pid 3788] write(3, "1000", 4 [pid 3791] close(3 [pid 3790] <... symlink resumed>) = 0 executing program [pid 3789] close(3 [pid 3788] <... write resumed>) = 4 [pid 3791] <... close resumed>) = 0 [pid 3790] write(1, "executing program\n", 18 [pid 3789] <... close resumed>) = 0 [pid 3788] close(3 [pid 3791] symlink("/dev/binderfs", "./binderfs" [pid 3790] <... write resumed>) = 18 [pid 3789] symlink("/dev/binderfs", "./binderfs" [pid 3788] <... close resumed>) = 0 [pid 3791] <... symlink resumed>) = 0 [pid 3790] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3789] <... symlink resumed>) = 0 [pid 3788] symlink("/dev/binderfs", "./binderfs" [pid 3791] write(1, "executing program\n", 18 [pid 3790] <... openat resumed>) = 3 executing program executing program [pid 3789] write(1, "executing program\n", 18 [pid 3788] <... symlink resumed>) = 0 [pid 3791] <... write resumed>) = 18 [pid 3790] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 3789] <... write resumed>) = 18 [pid 3788] write(1, "executing program\n", 18 [pid 3791] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3790] <... ioctl resumed>) = 0 [pid 3789] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3788] <... write resumed>) = 18 [pid 3791] <... openat resumed>) = 3 [pid 3790] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3789] <... openat resumed>) = 3 [pid 3788] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3791] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3790] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3789] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3788] <... openat resumed>) = 3 [pid 3791] <... ioctl resumed>) = 0 [pid 3790] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3789] <... ioctl resumed>) = 0 [pid 3788] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3791] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3790] <... openat resumed>) = 4 [pid 3789] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3788] <... ioctl resumed>) = 0 [pid 3791] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 65.955794][ T42] tty tty1: SAK: killed process 3781 (syz-executor903): by fd#3 [ 65.955811][ T42] tty tty1: SAK: killed process 3782 (syz-executor903): by fd#3 [ 65.985703][ T42] tty tty1: SAK: killed process 3783 (syz-executor903): by fd#3 [ 65.985729][ T42] tty tty1: SAK: killed process 3784 (syz-executor903): by fd#3 [ 65.985745][ T42] tty tty1: SAK: killed process 3785 (syz-executor903): by fd#3 [pid 3790] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3789] <... ioctl resumed>) = ? [pid 3788] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3788] +++ killed by SIGKILL +++ [pid 292] <... restart_syscall resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3788, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] umount2("./706", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./706", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 289] <... restart_syscall resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./706/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] umount2("./678", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./706/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] openat(AT_FDCWD, "./678", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] unlink("./706/binderfs" [pid 289] <... openat resumed>) = 3 [pid 292] <... unlink resumed>) = 0 [pid 289] newfstatat(3, "", [pid 292] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3790] <... write resumed>) = ? [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] getdents64(3, [pid 292] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... close resumed>) = 0 [pid 289] umount2("./678/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] rmdir("./706" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... rmdir resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./678/binderfs", [pid 292] mkdir("./707", 0777 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 289] unlink("./678/binderfs" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3792 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./678") = 0 [pid 289] mkdir("./679", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3793 ./strace-static-x86_64: Process 3793 attached [pid 3793] set_robust_list(0x5555700d1660, 24) = 0 [pid 3793] chdir("./679"./strace-static-x86_64: Process 3792 attached [pid 3792] set_robust_list(0x5555700d1660, 24) = 0 [pid 3792] chdir("./707" [pid 3793] <... chdir resumed>) = 0 [pid 3789] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3789, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3793] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3791] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3791, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3793] <... prctl resumed>) = 0 [pid 3793] setpgid(0, 0 [pid 3792] <... chdir resumed>) = 0 [pid 3792] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3793] <... setpgid resumed>) = 0 [pid 3792] <... prctl resumed>) = 0 [pid 3793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3792] setpgid(0, 0) = 0 [pid 3792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3793] <... openat resumed>) = 3 [pid 3792] <... openat resumed>) = 3 [pid 3793] write(3, "1000", 4) = 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./704", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./704", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./704/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./704/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./704/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./704") = 0 [pid 291] mkdir("./705", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3794 [pid 3792] write(3, "1000", 4 [pid 293] <... restart_syscall resumed>) = 0 [pid 3793] close(3 [pid 293] umount2("./716", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3793] <... close resumed>) = 0 [pid 3792] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3793] symlink("/dev/binderfs", "./binderfs" [pid 3792] close(3 [pid 293] openat(AT_FDCWD, "./716", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 3793] <... symlink resumed>) = 0 [pid 3792] <... close resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 3793] write(1, "executing program\n", 18 [pid 3792] symlink("/dev/binderfs", "./binderfs" [pid 293] newfstatat(3, "", [pid 3793] <... write resumed>) = 18 [pid 3792] <... symlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 3793] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3792] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 3792] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3792] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./716/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./716/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./716/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./716") = 0 [pid 293] mkdir("./717", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3795 ./strace-static-x86_64: Process 3794 attached [pid 3794] set_robust_list(0x5555700d1660, 24) = 0 [pid 3794] chdir("./705") = 0 ./strace-static-x86_64: Process 3795 attached [pid 3793] <... openat resumed>) = 3 [pid 3792] <... openat resumed>) = 3 [pid 3790] +++ killed by SIGKILL +++ [pid 3794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3795] set_robust_list(0x5555700d1660, 24 [pid 3792] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3795] <... set_robust_list resumed>) = 0 [pid 3794] <... prctl resumed>) = 0 [pid 3793] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3790, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3795] chdir("./717" [pid 3792] <... ioctl resumed>) = 0 [pid 3795] <... chdir resumed>) = 0 [pid 3794] setpgid(0, 0 [pid 3793] <... ioctl resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3793] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3794] <... setpgid resumed>) = 0 [pid 3792] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3795] setpgid(0, 0) = 0 [pid 3795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3795] write(3, "1000", 4) = 4 executing program [pid 3795] close(3) = 0 [pid 3795] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3793] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3792] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3795] write(1, "executing program\n", 18) = 18 [pid 3793] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3792] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... restart_syscall resumed>) = 0 [pid 3795] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3794] <... openat resumed>) = 3 [pid 3795] <... openat resumed>) = 3 [pid 3793] <... openat resumed>) = 4 [pid 3792] <... openat resumed>) = 4 [pid 3795] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3794] write(3, "1000", 4 [pid 3795] <... ioctl resumed>) = 0 [pid 3795] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3794] <... write resumed>) = 4 [pid 3793] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3792] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] umount2("./686", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3795] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3794] close(3) = 0 [pid 3794] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3794] write(1, "executing program\n", 18) = 18 [pid 3794] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3794] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3794] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3794] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3793] <... write resumed>) = ? [pid 3795] <... openat resumed>) = ? [pid 3792] <... write resumed>) = ? [pid 3794] <... openat resumed>) = 4 [pid 290] openat(AT_FDCWD, "./686", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3795] +++ killed by SIGKILL +++ [pid 3792] +++ killed by SIGKILL +++ [pid 290] <... openat resumed>) = 3 [pid 3794] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3793] +++ killed by SIGKILL +++ [pid 3794] <... write resumed>) = 8784 [pid 290] newfstatat(3, "", [pid 3794] exit_group(0) = ? [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3795, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./717", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./717", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./717/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./717/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./717/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [ 66.017247][ T375] tty tty1: SAK: killed process 3788 (syz-executor903): by fd#3 [ 66.017274][ T375] tty tty1: SAK: killed process 3789 (syz-executor903): by fd#3 [ 66.017298][ T375] tty tty1: SAK: killed process 3790 (syz-executor903): by fd#3 [ 66.017318][ T375] tty tty1: SAK: killed process 3791 (syz-executor903): by fd#3 [ 66.053508][ T60] tty tty1: SAK: killed process 3792 (syz-executor903): by fd#3 [pid 293] close(3) = 0 [pid 293] rmdir("./717") = 0 [pid 293] mkdir("./718", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3796 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3792, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3796 attached [pid 292] umount2("./707", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3793, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./707", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./707/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./707/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./707/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./707") = 0 [pid 292] mkdir("./708", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3797 [pid 3796] set_robust_list(0x5555700d1660, 24) = 0 [pid 3796] chdir("./718") = 0 [pid 3796] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3796] setpgid(0, 0) = 0 [pid 3796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3796] write(3, "1000", 4) = 4 [pid 3796] close(3 [pid 290] getdents64(3, [pid 3796] <... close resumed>) = 0 [pid 3796] symlink("/dev/binderfs", "./binderfs" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 3797 attached [pid 3794] +++ exited with 0 +++ [pid 290] umount2("./686/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./679", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3797] set_robust_list(0x5555700d1660, 24 [pid 3796] <... symlink resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3794, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3797] <... set_robust_list resumed>) = 0 executing program [pid 3796] write(1, "executing program\n", 18 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(AT_FDCWD, "./686/binderfs", [pid 289] openat(AT_FDCWD, "./679", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3797] chdir("./708" [pid 3796] <... write resumed>) = 18 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... openat resumed>) = 3 [pid 3797] <... chdir resumed>) = 0 [pid 3796] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] unlink("./686/binderfs" [pid 289] newfstatat(3, "", [pid 3797] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3796] <... openat resumed>) = 3 [pid 290] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3797] <... prctl resumed>) = 0 [pid 3796] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 3797] setpgid(0, 0 [pid 3796] <... ioctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3797] <... setpgid resumed>) = 0 [pid 3796] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] close(3 [pid 289] umount2("./679/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3796] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... close resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3797] <... openat resumed>) = 3 [pid 3796] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] rmdir("./686" [pid 289] newfstatat(AT_FDCWD, "./679/binderfs", [pid 3797] write(3, "1000", 4 [pid 3796] <... openat resumed>) = 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program executing program [pid 3797] <... write resumed>) = 4 [pid 290] <... rmdir resumed>) = 0 [pid 3796] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] unlink("./679/binderfs" [pid 3797] close(3 [pid 290] mkdir("./687", 0777 [pid 289] <... unlink resumed>) = 0 [pid 3797] <... close resumed>) = 0 [pid 3796] <... write resumed>) = 8784 [pid 289] getdents64(3, [pid 3797] symlink("/dev/binderfs", "./binderfs" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3797] <... symlink resumed>) = 0 [pid 289] close(3 [pid 3797] write(1, "executing program\n", 18 [pid 289] <... close resumed>) = 0 [pid 3797] <... write resumed>) = 18 [pid 289] rmdir("./679" [pid 3797] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... rmdir resumed>) = 0 [pid 3797] <... openat resumed>) = 3 [pid 289] mkdir("./680", 0777 [pid 3797] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... mkdir resumed>) = 0 [pid 3797] <... ioctl resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3797] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3798 [pid 3797] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3797] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3797] exit_group(0) = ? ./strace-static-x86_64: Process 3798 attached [pid 3798] set_robust_list(0x5555700d1660, 24) = 0 [pid 3798] chdir("./680") = 0 [pid 3798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3798] setpgid(0, 0) = 0 [pid 3798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3798] write(3, "1000", 4) = 4 [pid 3798] close(3) = 0 [pid 3798] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3798] write(1, "executing program\n", 18) = 18 [pid 3798] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3798] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3798] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3798] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3798] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3798] exit_group(0) = ? [pid 3797] +++ exited with 0 +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3797, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3798] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3798, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... mkdir resumed>) = 0 [pid 291] umount2("./705", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./708", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./705", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./705/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./708", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3799 [pid 3796] +++ killed by SIGKILL +++ [pid 291] newfstatat(AT_FDCWD, "./705/binderfs", [pid 292] <... openat resumed>) = 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3796, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] newfstatat(3, "", [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3799 attached [pid 292] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3799] set_robust_list(0x5555700d1660, 24 [pid 291] unlink("./705/binderfs" [pid 3799] <... set_robust_list resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./708/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 292] newfstatat(AT_FDCWD, "./708/binderfs", [pid 3799] chdir("./687" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] close(3 [pid 292] unlink("./708/binderfs" [pid 3799] <... chdir resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] rmdir("./705" [pid 3799] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] getdents64(3, [pid 3799] <... prctl resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] mkdir("./706", 0777 [pid 292] close(3 [pid 3799] setpgid(0, 0) = 0 [pid 3799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... mkdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] rmdir("./708" [pid 3799] <... openat resumed>) = 3 [pid 3799] write(3, "1000", 4) = 4 [pid 3799] close(3 [pid 289] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 3800 attached [pid 292] <... rmdir resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3800 [pid 292] mkdir("./709", 0777 [pid 289] umount2("./680", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3800] set_robust_list(0x5555700d1660, 24 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./680", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3800] <... set_robust_list resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 289] getdents64(3, [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3799] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3799] symlink("/dev/binderfs", "./binderfs" [pid 289] umount2("./680/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3801 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./680/binderfs", [pid 3800] chdir("./706" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 3801 attached [pid 3800] <... chdir resumed>) = 0 [pid 289] unlink("./680/binderfs" [pid 3800] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... unlink resumed>) = 0 [pid 3800] <... prctl resumed>) = 0 [pid 3801] set_robust_list(0x5555700d1660, 24 [pid 289] getdents64(3, [pid 3801] <... set_robust_list resumed>) = 0 [pid 3800] setpgid(0, 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3800] <... setpgid resumed>) = 0 [pid 289] close(3 [pid 3799] <... symlink resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] rmdir("./680"executing program [pid 3799] write(1, "executing program\n", 18 [pid 289] <... rmdir resumed>) = 0 [pid 3799] <... write resumed>) = 18 [pid 289] mkdir("./681", 0777 [pid 3801] chdir("./709" [pid 3800] <... openat resumed>) = 3 [pid 3799] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3801] <... chdir resumed>) = 0 [pid 3800] write(3, "1000", 4 [pid 289] <... mkdir resumed>) = 0 [pid 3801] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3800] <... write resumed>) = 4 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3801] <... prctl resumed>) = 0 [pid 3800] close(3 [pid 3799] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3799] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3799] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3800] <... close resumed>) = 0 [pid 3801] setpgid(0, 0 [pid 3800] symlink("/dev/binderfs", "./binderfs" [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3802 [pid 3799] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3802 attached [pid 3801] <... setpgid resumed>) = 0 [pid 3800] <... symlink resumed>) = 0 [pid 3799] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 executing program [pid 3801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3800] write(1, "executing program\n", 18 [pid 3802] set_robust_list(0x5555700d1660, 24 [pid 3801] <... openat resumed>) = 3 [pid 3800] <... write resumed>) = 18 [pid 3801] write(3, "1000", 4 [pid 3800] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./718", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3802] <... set_robust_list resumed>) = 0 [pid 3801] <... write resumed>) = 4 [pid 3800] <... openat resumed>) = 3 [pid 3799] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3802] chdir("./681" [pid 3801] close(3 [pid 3800] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] openat(AT_FDCWD, "./718", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3799, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3800] <... ioctl resumed>) = 0 executing program [pid 293] <... openat resumed>) = 3 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3801] <... close resumed>) = 0 [pid 3800] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3801] symlink("/dev/binderfs", "./binderfs" [pid 3800] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] newfstatat(3, "", [pid 3800] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3802] <... chdir resumed>) = 0 [pid 3800] <... openat resumed>) = 4 [pid 3800] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 3802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3802] setpgid(0, 0) = 0 [pid 3800] <... write resumed>) = 8784 [pid 3802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3802] write(3, "1000", 4) = 4 [pid 3802] close(3) = 0 [pid 3802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3802] write(1, "executing program\n", 18) = 18 [pid 3802] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3802] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3802] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3802] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3802] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3802] exit_group(0) = ? [pid 3801] <... symlink resumed>) = 0 executing program [pid 3801] write(1, "executing program\n", 18) = 18 [pid 3801] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3801] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3801] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3801] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3801] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [ 66.053541][ T60] tty tty1: SAK: killed process 3793 (syz-executor903): by fd#3 [ 66.053561][ T60] tty tty1: SAK: killed process 3795 (syz-executor903): by fd#3 [ 66.084105][ T375] tty tty1: SAK: killed process 3796 (syz-executor903): by fd#3 [ 66.101084][ T20] tty tty1: SAK: killed process 3799 (syz-executor903): by fd#3 [pid 3801] exit_group(0) = ? [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./718/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3802] +++ exited with 0 +++ [pid 3801] +++ exited with 0 +++ [pid 293] newfstatat(AT_FDCWD, "./718/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] unlink("./718/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./718") = 0 [pid 293] mkdir("./719", 0777 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3801, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3800] +++ killed by SIGKILL +++ [pid 293] <... mkdir resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3802, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3800, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./687", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3803 attached [pid 292] umount2("./709", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3803] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3803 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./687", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3803] <... set_robust_list resumed>) = 0 [pid 292] openat(AT_FDCWD, "./709", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3803] chdir("./719" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 3803] <... chdir resumed>) = 0 [pid 292] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3803] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./687/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./709/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./687/binderfs", [pid 292] newfstatat(AT_FDCWD, "./709/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./687/binderfs" [pid 3803] <... prctl resumed>) = 0 [pid 292] unlink("./709/binderfs" [pid 290] <... unlink resumed>) = 0 [pid 3803] setpgid(0, 0 [pid 292] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 292] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3803] <... setpgid resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 292] close(3 [pid 290] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 290] rmdir("./687" [pid 3803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] rmdir("./709" [pid 290] <... rmdir resumed>) = 0 [pid 3803] <... openat resumed>) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 290] mkdir("./688", 0777 [pid 3803] write(3, "1000", 4 [pid 292] mkdir("./710", 0777 [pid 290] <... mkdir resumed>) = 0 [pid 3803] <... write resumed>) = 4 [pid 292] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3803] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3804 attached [pid 3803] <... close resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3804 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3805 ./strace-static-x86_64: Process 3805 attached [pid 3805] set_robust_list(0x5555700d1660, 24) = 0 [pid 3805] chdir("./710" [pid 3803] symlink("/dev/binderfs", "./binderfs" [pid 3804] set_robust_list(0x5555700d1660, 24 [pid 3805] <... chdir resumed>) = 0 [pid 3805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3803] <... symlink resumed>) = 0 [pid 3805] setpgid(0, 0) = 0 executing program [pid 3804] <... set_robust_list resumed>) = 0 [pid 3803] write(1, "executing program\n", 18 [pid 3805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3803] <... write resumed>) = 18 [pid 3803] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3805] <... openat resumed>) = 3 [pid 3803] <... openat resumed>) = 3 [pid 3805] write(3, "1000", 4) = 4 [pid 3803] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3805] close(3 [pid 3803] <... ioctl resumed>) = 0 [pid 3805] <... close resumed>) = 0 [pid 3804] chdir("./688" [pid 3803] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3805] symlink("/dev/binderfs", "./binderfs" [pid 3803] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 3803] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3803] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3805] <... symlink resumed>) = 0 [pid 3804] <... chdir resumed>) = 0 [pid 3804] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3803] <... write resumed>) = 8784 [pid 3804] <... prctl resumed>) = 0 [pid 3804] setpgid(0, 0) = 0 [pid 3805] write(1, "executing program\n", 18) = 18 [pid 3805] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3805] <... openat resumed>) = 3 [pid 3805] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3804] <... openat resumed>) = 3 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./681", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./681", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./681/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./681/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./681/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] umount2("./706", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... close resumed>) = 0 [pid 291] openat(AT_FDCWD, "./706", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] rmdir("./681" [pid 291] <... openat resumed>) = 3 [pid 289] <... rmdir resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] mkdir("./682", 0777 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 291] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./706/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3806 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./706/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./706/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./706") = 0 [pid 291] mkdir("./707", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3806 attached [pid 3803] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3807 [pid 3805] <... ioctl resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3803, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3805] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3804] write(3, "1000", 4 [pid 3805] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3804] <... write resumed>) = 4 [pid 3805] <... openat resumed>) = 4 [pid 3804] close(3) = 0 [pid 3805] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3804] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 3807 attached [pid 3806] set_robust_list(0x5555700d1660, 24) = 0 [pid 3804] <... symlink resumed>) = 0 [pid 3804] write(1, "executing program\n", 18 executing program [pid 3806] chdir("./682" [pid 3807] set_robust_list(0x5555700d1660, 24 [pid 3805] <... write resumed>) = ? [pid 3804] <... write resumed>) = 18 [pid 3804] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3806] <... chdir resumed>) = 0 [pid 3807] <... set_robust_list resumed>) = 0 [pid 3804] <... openat resumed>) = 3 [pid 3804] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3804] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3804] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3804] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3804] exit_group(0) = ? [pid 3807] chdir("./707" [pid 3806] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3804] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3804, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3807] <... chdir resumed>) = 0 [pid 3806] <... prctl resumed>) = 0 [pid 293] umount2("./719", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3806] setpgid(0, 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3806] <... setpgid resumed>) = 0 [pid 293] openat(AT_FDCWD, "./719", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... openat resumed>) = 3 [pid 3806] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 3806] write(3, "1000", 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3806] <... write resumed>) = 4 [pid 293] getdents64(3, [pid 3806] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3806] <... close resumed>) = 0 [pid 293] umount2("./719/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3806] symlink("/dev/binderfs", "./binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3807] <... prctl resumed>) = 0 [pid 3806] <... symlink resumed>) = 0 executing program [pid 293] newfstatat(AT_FDCWD, "./719/binderfs", [pid 3807] setpgid(0, 0 [pid 3806] write(1, "executing program\n", 18 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3807] <... setpgid resumed>) = 0 [pid 3806] <... write resumed>) = 18 [pid 293] unlink("./719/binderfs" [pid 3807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3806] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... restart_syscall resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 290] umount2("./688", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] close(3 [pid 290] openat(AT_FDCWD, "./688", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... close resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 293] rmdir("./719" [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./688/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./688/binderfs", [pid 293] <... rmdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] mkdir("./720", 0777 [pid 290] unlink("./688/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./688" [pid 3807] <... openat resumed>) = 3 [pid 293] <... mkdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] mkdir("./689", 0777 [pid 3806] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3808 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3808 attached ./strace-static-x86_64: Process 3809 attached [pid 3807] write(3, "1000", 4 [pid 3806] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3805] +++ killed by SIGKILL +++ [pid 3809] set_robust_list(0x5555700d1660, 24 [pid 3806] <... ioctl resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3805, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3809 [pid 3809] <... set_robust_list resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3809] chdir("./689") = 0 [pid 3809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3809] setpgid(0, 0) = 0 [pid 3806] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3807] <... write resumed>) = 4 [pid 3809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3807] close(3 [pid 3806] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3808] set_robust_list(0x5555700d1660, 24 [pid 3809] <... openat resumed>) = 3 [pid 3807] <... close resumed>) = 0 [ 66.111582][ T375] tty tty1: SAK: killed process 3800 (syz-executor903): by fd#3 [ 66.132268][ T20] tty tty1: SAK: killed process 3803 (syz-executor903): by fd#3 [ 66.142726][ T42] tty tty1: SAK: killed process 3805 (syz-executor903): by fd#3 [ 66.154032][ T42] tty tty1: SAK: killed process 3805 (syz-executor903): by fd#3 [pid 3806] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3809] write(3, "1000", 4 [pid 3806] <... openat resumed>) = 4 [pid 3807] symlink("/dev/binderfs", "./binderfs" [pid 3806] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program executing program [pid 3809] <... write resumed>) = 4 [pid 3809] close(3) = 0 [pid 3809] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3809] write(1, "executing program\n", 18) = 18 [pid 3809] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3809] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3809] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3809] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3808] <... set_robust_list resumed>) = 0 [pid 3808] chdir("./720") = 0 [pid 3808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3808] setpgid(0, 0) = 0 [pid 3808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3808] write(3, "1000", 4) = 4 [pid 3808] close(3) = 0 [pid 3808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3808] write(1, "executing program\n", 18) = 18 [pid 3808] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3808] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3808] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3808] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program [pid 3807] <... symlink resumed>) = 0 [pid 3807] write(1, "executing program\n", 18) = 18 [pid 3807] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3807] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3807] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3807] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3809] <... openat resumed>) = 4 [pid 3808] <... openat resumed>) = 4 [pid 3807] <... openat resumed>) = 4 [pid 3806] <... write resumed>) = ? executing program [pid 3809] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3807] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3806] +++ killed by SIGKILL +++ [pid 3808] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... restart_syscall resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3806, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./682", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./682", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./682/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./682/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./682/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./682") = 0 [pid 289] mkdir("./683", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3810 ./strace-static-x86_64: Process 3810 attached [pid 3810] set_robust_list(0x5555700d1660, 24) = 0 [pid 3810] chdir("./683") = 0 [pid 3810] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3810] setpgid(0, 0) = 0 [pid 3810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3810] write(3, "1000", 4) = 4 [pid 3810] close(3) = 0 [pid 3810] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3810] write(1, "executing program\n", 18) = 18 [pid 3810] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3810] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3810] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3810] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3809] <... write resumed>) = ? [pid 3810] <... openat resumed>) = 4 [pid 3810] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3808] <... write resumed>) = ? [pid 3807] <... write resumed>) = ? [pid 3809] +++ killed by SIGKILL +++ [pid 3810] exit_group(0) = ? [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3809, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./689", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./710", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./689", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./710", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 292] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./689/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./710/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./689/binderfs", [pid 292] newfstatat(AT_FDCWD, "./710/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./689/binderfs" [pid 292] unlink("./710/binderfs" [pid 290] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 3810] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3810, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./710") = 0 [pid 292] mkdir("./711", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3811 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./689") = 0 [pid 290] mkdir("./690", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3812 [pid 3807] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3811 attached ./strace-static-x86_64: Process 3812 attached [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3807, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3812] set_robust_list(0x5555700d1660, 24 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3812] <... set_robust_list resumed>) = 0 [pid 3811] set_robust_list(0x5555700d1660, 24 [pid 3812] chdir("./690" [pid 3811] <... set_robust_list resumed>) = 0 [pid 3808] +++ killed by SIGKILL +++ [pid 3812] <... chdir resumed>) = 0 [pid 3811] chdir("./711" [pid 291] <... restart_syscall resumed>) = 0 [pid 3812] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3811] <... chdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3808, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... restart_syscall resumed>) = 0 [pid 3812] <... prctl resumed>) = 0 [pid 3811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3812] setpgid(0, 0 [pid 3811] <... prctl resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 291] umount2("./707", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3812] <... setpgid resumed>) = 0 [pid 3811] setpgid(0, 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./683", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3811] <... setpgid resumed>) = 0 [pid 291] openat(AT_FDCWD, "./707", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3812] <... openat resumed>) = 3 [pid 3811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] umount2("./720", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] openat(AT_FDCWD, "./683", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3812] write(3, "1000", 4 [pid 3811] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 3812] <... write resumed>) = 4 [pid 3811] write(3, "1000", 4 [pid 293] openat(AT_FDCWD, "./720", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3812] close(3 [pid 3811] <... write resumed>) = 4 [pid 293] <... openat resumed>) = 3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3812] <... close resumed>) = 0 [pid 3811] close(3 [pid 293] newfstatat(3, "", [pid 291] getdents64(3, [pid 289] getdents64(3, [pid 3812] symlink("/dev/binderfs", "./binderfs" [pid 3811] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3812] <... symlink resumed>) = 0 [pid 293] getdents64(3, [pid 289] umount2("./683/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW executing program [pid 3812] write(1, "executing program\n", 18 [pid 3811] symlink("/dev/binderfs", "./binderfs" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./707/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3812] <... write resumed>) = 18 [pid 3811] <... symlink resumed>) = 0 [pid 293] umount2("./720/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./683/binderfs", executing program [pid 3812] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3811] write(1, "executing program\n", 18 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./707/binderfs", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3812] <... openat resumed>) = 3 [pid 3811] <... write resumed>) = 18 [pid 293] newfstatat(AT_FDCWD, "./720/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./683/binderfs" [pid 3812] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3811] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./707/binderfs" [pid 289] <... unlink resumed>) = 0 [pid 3812] <... ioctl resumed>) = 0 [pid 3811] <... openat resumed>) = 3 [pid 293] unlink("./720/binderfs" [pid 289] getdents64(3, [pid 3812] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3811] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3812] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3811] <... ioctl resumed>) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 289] close(3 [pid 3812] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3811] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... close resumed>) = 0 [pid 3812] <... openat resumed>) = 4 [pid 3811] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] close(3 [pid 291] close(3 [pid 289] rmdir("./683" [pid 3812] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3811] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 293] rmdir("./720" [pid 289] mkdir("./684", 0777 [pid 3812] <... write resumed>) = ? [pid 3811] <... openat resumed>) = ? [pid 293] <... rmdir resumed>) = 0 [pid 291] rmdir("./707" [pid 289] <... mkdir resumed>) = 0 [pid 293] mkdir("./721", 0777 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3813 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3814 ./strace-static-x86_64: Process 3814 attached [pid 3814] set_robust_list(0x5555700d1660, 24) = 0 [pid 3814] chdir("./721") = 0 [pid 3814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3814] setpgid(0, 0) = 0 [pid 3814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3814] write(3, "1000", 4) = 4 [pid 3814] close(3) = 0 [pid 3814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3814] write(1, "executing program\n", 18) = 18 [pid 3814] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3814] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}./strace-static-x86_64: Process 3813 attached [pid 3813] set_robust_list(0x5555700d1660, 24) = 0 [pid 3814] <... ioctl resumed>) = 0 [pid 3813] chdir("./684" [pid 3814] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3814] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3813] <... chdir resumed>) = 0 [pid 3814] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3813] setpgid(0, 0) = 0 [pid 3813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3814] <... write resumed>) = 8784 [pid 3813] <... openat resumed>) = 3 [pid 3814] exit_group(0 [pid 3813] write(3, "1000", 4) = 4 [pid 3813] close(3 [pid 3814] <... exit_group resumed>) = ? [pid 3813] <... close resumed>) = 0 [pid 3813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3813] write(1, "executing program\n", 18) = 18 [pid 3813] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3813] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3813] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3813] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3813] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3814] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3814, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3813] exit_group(0 [pid 291] <... rmdir resumed>) = 0 [pid 3813] <... exit_group resumed>) = ? [pid 291] mkdir("./708", 0777 [pid 3812] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3812, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program executing program [pid 3813] +++ exited with 0 +++ ./strace-static-x86_64: Process 3815 attached [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3813, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3815 [ 66.167218][ T20] tty tty1: SAK: killed process 3806 (syz-executor903): by fd#3 [ 66.176054][ T42] tty tty1: SAK: killed process 3807 (syz-executor903): by fd#3 [ 66.176074][ T42] tty tty1: SAK: killed process 3808 (syz-executor903): by fd#3 [ 66.176088][ T42] tty tty1: SAK: killed process 3809 (syz-executor903): by fd#3 [ 66.209704][ T42] tty tty1: SAK: killed process 3811 (syz-executor903): by fd#3 [pid 3815] set_robust_list(0x5555700d1660, 24) = 0 [pid 3815] chdir("./708") = 0 [pid 3815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3815] setpgid(0, 0) = 0 [pid 3815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3815] write(3, "1000", 4) = 4 [pid 3815] close(3) = 0 [pid 3815] symlink("/dev/binderfs", "./binderfs") = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] umount2("./684", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] umount2("./721", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./690", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] openat(AT_FDCWD, "./684", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./721", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./690", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(3, "", [pid 293] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 289] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 289] umount2("./684/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./721/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./690/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./684/binderfs", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(AT_FDCWD, "./721/binderfs", [pid 290] newfstatat(AT_FDCWD, "./690/binderfs", [pid 289] unlink("./684/binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] unlink("./721/binderfs" [pid 290] unlink("./690/binderfs" [pid 289] getdents64(3, [pid 293] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 289] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... close resumed>) = 0 [pid 293] close(3 [pid 290] close(3 [pid 289] rmdir("./684" [pid 293] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 293] rmdir("./721" [pid 290] rmdir("./690"executing program [pid 289] mkdir("./685", 0777 [pid 3815] write(1, "executing program\n", 18 [pid 3811] +++ killed by SIGKILL +++ [pid 293] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3815] <... write resumed>) = 18 [pid 293] mkdir("./722", 0777 [pid 290] mkdir("./691", 0777 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3816 attached [pid 3815] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... mkdir resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3811, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3816 ./strace-static-x86_64: Process 3817 attached [pid 3816] set_robust_list(0x5555700d1660, 24 [pid 3815] <... openat resumed>) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3817 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3818 ./strace-static-x86_64: Process 3818 attached [pid 3817] set_robust_list(0x5555700d1660, 24 [pid 3816] <... set_robust_list resumed>) = 0 [pid 3815] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3818] set_robust_list(0x5555700d1660, 24) = 0 [pid 3818] chdir("./691") = 0 [pid 3818] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3816] chdir("./685" [pid 3815] <... ioctl resumed>) = 0 [pid 292] umount2("./711", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3818] <... prctl resumed>) = 0 [pid 3818] setpgid(0, 0) = 0 [pid 3818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3817] <... set_robust_list resumed>) = 0 [pid 3816] <... chdir resumed>) = 0 [pid 3815] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3818] <... openat resumed>) = 3 [pid 3815] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3816] <... prctl resumed>) = 0 [pid 292] openat(AT_FDCWD, "./711", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3818] write(3, "1000", 4) = 4 [pid 3818] close(3) = 0 [pid 3815] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... openat resumed>) = 3 [pid 3816] setpgid(0, 0 [pid 3818] symlink("/dev/binderfs", "./binderfs" [pid 3816] <... setpgid resumed>) = 0 [pid 3815] <... openat resumed>) = 4 [pid 292] newfstatat(3, "", [pid 3818] <... symlink resumed>) = 0 [pid 3817] chdir("./722" [pid 3816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3815] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3818] write(1, "executing program\n", 18) = 18 [pid 3818] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3815] <... write resumed>) = 8784 [pid 3818] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3818] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = ? [pid 3818] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3818, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3817] <... chdir resumed>) = 0 [pid 3817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3817] setpgid(0, 0) = 0 [pid 3817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3817] write(3, "1000", 4) = 4 [pid 3817] close(3) = 0 [pid 3817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3817] write(1, "executing program\n", 18executing program ) = 18 [pid 3817] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3817] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3817] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3817] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... restart_syscall resumed>) = 0 [pid 3817] <... openat resumed>) = 4 [pid 3817] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3816] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 290] umount2("./691", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3817] exit_group(0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3817] <... exit_group resumed>) = ? [pid 290] openat(AT_FDCWD, "./691", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./691/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./691/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./691/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./691") = 0 [pid 290] mkdir("./692", 0777) = 0 [pid 3817] +++ exited with 0 +++ [pid 3816] write(3, "1000", 4 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3817, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3819 attached [pid 3816] <... write resumed>) = 4 [pid 3815] +++ killed by SIGKILL +++ [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3816] close(3 [pid 292] umount2("./711/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3819 [pid 3816] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3816] symlink("/dev/binderfs", "./binderfs" [pid 292] newfstatat(AT_FDCWD, "./711/binderfs", [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3815, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3819] set_robust_list(0x5555700d1660, 24) = 0 [pid 3819] chdir("./692" [pid 3816] <... symlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./708", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3816] write(1, "executing program\n", 18executing program [pid 292] unlink("./711/binderfs" [pid 3816] <... write resumed>) = 18 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3816] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... unlink resumed>) = 0 [pid 291] openat(AT_FDCWD, "./708", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3819] <... chdir resumed>) = 0 [pid 3819] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3816] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 291] <... openat resumed>) = 3 [pid 3819] <... prctl resumed>) = 0 [pid 3816] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(3, "", [pid 3816] <... ioctl resumed>) = 0 [pid 292] close(3 [pid 3819] setpgid(0, 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3819] <... setpgid resumed>) = 0 [pid 3816] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 3819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3816] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] rmdir("./711" [pid 3819] <... openat resumed>) = 3 [pid 3816] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] umount2("./722", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3819] write(3, "1000", 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3819] <... write resumed>) = 4 [pid 293] openat(AT_FDCWD, "./722", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3819] close(3 [pid 293] <... openat resumed>) = 3 [pid 3819] <... close resumed>) = 0 [pid 293] newfstatat(3, "", [pid 3819] symlink("/dev/binderfs", "./binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 3819] <... symlink resumed>) = 0 [pid 3816] <... openat resumed>) = 4 [pid 293] getdents64(3, [pid 292] <... rmdir resumed>) = 0 [pid 291] umount2("./708/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3819] write(1, "executing program\n", 18 [pid 3816] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] mkdir("./712", 0777 [pid 3819] <... write resumed>) = 18 [pid 293] umount2("./722/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3819] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3816] <... write resumed>) = 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3819] <... openat resumed>) = 3 [pid 3816] exit_group(0 [pid 293] newfstatat(AT_FDCWD, "./722/binderfs", [pid 292] <... mkdir resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./708/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3819] +++ killed by SIGKILL +++ [pid 293] unlink("./722/binderfs") = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3819, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] getdents64(3, [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./722") = 0 [pid 293] mkdir("./723", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3820 ./strace-static-x86_64: Process 3820 attached [pid 3820] set_robust_list(0x5555700d1660, 24) = 0 [pid 3820] chdir("./723") = 0 [pid 3820] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./692", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./692", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./692/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./692/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./692/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./692" [pid 3816] <... exit_group resumed>) = ? [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./693", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3821 [pid 3820] <... prctl resumed>) = 0 [pid 3820] setpgid(0, 0) = 0 [pid 3820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3820] write(3, "1000", 4) = 4 [pid 3820] close(3) = 0 [pid 3820] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3820] write(1, "executing program\n", 18executing program ) = 18 [pid 3820] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3820] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [ 66.209736][ T42] tty tty1: SAK: killed process 3812 (syz-executor903): by fd#3 [ 66.234296][ T42] tty tty1: SAK: killed process 3815 (syz-executor903): by fd#3 [ 66.234328][ T42] tty tty1: SAK: killed process 3818 (syz-executor903): by fd#3 [ 66.256155][ T42] tty tty1: SAK: killed process 3816 (syz-executor903): by fd#3 [pid 3820] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3820] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3820] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3820] exit_group(0) = ? ./strace-static-x86_64: Process 3821 attached [pid 3816] +++ killed by SIGKILL +++ [pid 291] unlink("./708/binderfs" [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3816, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3822 attached [pid 3822] set_robust_list(0x5555700d1660, 24) = 0 [pid 3822] chdir("./712") = 0 [pid 3822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3822] setpgid(0, 0) = 0 [pid 3822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./685", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./685", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./685/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./685/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./685/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./685") = 0 [pid 289] mkdir("./686", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3823 [pid 3822] <... openat resumed>) = 3 [pid 3822] write(3, "1000", 4) = 4 [pid 3822] close(3) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3822 [pid 291] <... unlink resumed>) = 0 [pid 3821] set_robust_list(0x5555700d1660, 24 [pid 291] getdents64(3, ./strace-static-x86_64: Process 3823 attached [pid 3821] <... set_robust_list resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3823] set_robust_list(0x5555700d1660, 24) = 0 [pid 3821] chdir("./693" [pid 291] close(3 [pid 3821] <... chdir resumed>) = 0 [pid 3820] +++ exited with 0 +++ [pid 291] <... close resumed>) = 0 [pid 3823] chdir("./686" [pid 3821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3820, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3823] <... chdir resumed>) = 0 [pid 3821] <... prctl resumed>) = 0 [pid 291] rmdir("./708" [pid 3823] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3821] setpgid(0, 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3822] symlink("/dev/binderfs", "./binderfs" [pid 291] <... rmdir resumed>) = 0 [pid 3823] <... prctl resumed>) = 0 [pid 3821] <... setpgid resumed>) = 0 [pid 291] mkdir("./709", 0777 [pid 3823] setpgid(0, 0 [pid 3821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3822] <... symlink resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 executing program [pid 3823] <... setpgid resumed>) = 0 [pid 3821] <... openat resumed>) = 3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3822] write(1, "executing program\n", 18 [pid 3823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3822] <... write resumed>) = 18 [pid 3821] write(3, "1000", 4 [pid 3822] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3821] <... write resumed>) = 4 [pid 3823] <... openat resumed>) = 3 [pid 3822] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3821] close(3 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3824 [pid 3823] write(3, "1000", 4 [pid 3821] <... close resumed>) = 0 executing program [pid 3823] <... write resumed>) = 4 [pid 3821] symlink("/dev/binderfs", "./binderfs" [pid 3823] close(3 [pid 3822] <... ioctl resumed>) = 0 [pid 3822] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3821] <... symlink resumed>) = 0 [pid 3823] <... close resumed>) = 0 [pid 3821] write(1, "executing program\n", 18 [pid 3823] symlink("/dev/binderfs", "./binderfs" [pid 3821] <... write resumed>) = 18 [pid 3822] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3822] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3823] <... symlink resumed>) = 0 [pid 3822] <... openat resumed>) = 4 [pid 3823] write(1, "executing program\n", 18executing program [pid 3821] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3823] <... write resumed>) = 18 [pid 3822] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3823] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3821] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3824 attached [pid 3823] <... openat resumed>) = ? [pid 3822] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 3823] +++ killed by SIGKILL +++ [pid 3821] +++ killed by SIGKILL +++ [pid 3824] set_robust_list(0x5555700d1660, 24 [pid 293] umount2("./723", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3824] <... set_robust_list resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3824] chdir("./709" [pid 293] openat(AT_FDCWD, "./723", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3824] <... chdir resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 3824] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] newfstatat(3, "", [pid 3824] <... prctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3824] setpgid(0, 0 [pid 293] getdents64(3, [pid 3824] <... setpgid resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] umount2("./723/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3824] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3824] write(3, "1000", 4 [pid 293] newfstatat(AT_FDCWD, "./723/binderfs", [pid 3824] <... write resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3824] close(3 [pid 293] unlink("./723/binderfs" [pid 3824] <... close resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 3824] symlink("/dev/binderfs", "./binderfs" [pid 293] getdents64(3, [pid 3824] <... symlink resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 3824] write(1, "executing program\n", 18 [pid 293] close(3 [pid 3824] <... write resumed>) = 18 [pid 293] <... close resumed>) = 0 [pid 3824] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] rmdir("./723" [pid 3824] <... openat resumed>) = 3 [pid 293] <... rmdir resumed>) = 0 [pid 3824] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] mkdir("./724", 0777 [pid 3824] <... ioctl resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 3824] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3822] +++ killed by SIGKILL +++ [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3821, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3823, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3824] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3822, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3824] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3825 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3824] <... openat resumed>) = 4 [pid 3824] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3824] exit_group(0) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./712", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./712", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./712/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./712/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./712/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./712") = 0 [pid 292] mkdir("./713", 0777./strace-static-x86_64: Process 3825 attached ) = 0 [pid 3825] set_robust_list(0x5555700d1660, 24 [pid 3824] +++ exited with 0 +++ [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3825] <... set_robust_list resumed>) = 0 [pid 290] umount2("./693", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./686", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3825] chdir("./724" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3824, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3825] <... chdir resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3826 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] openat(AT_FDCWD, "./693", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./686", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3826 attached [pid 3825] <... prctl resumed>) = 0 [pid 290] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3825] setpgid(0, 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3825] <... setpgid resumed>) = 0 [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 3825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3826] set_robust_list(0x5555700d1660, 24 [pid 3825] <... openat resumed>) = 3 [pid 290] umount2("./693/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./686/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3825] write(3, "1000", 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3826] <... set_robust_list resumed>) = 0 [pid 3825] <... write resumed>) = 4 [pid 290] newfstatat(AT_FDCWD, "./693/binderfs", [pid 289] newfstatat(AT_FDCWD, "./686/binderfs", [pid 3825] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3825] <... close resumed>) = 0 [pid 290] unlink("./693/binderfs" [pid 289] unlink("./686/binderfs" [pid 3826] chdir("./713" [pid 3825] symlink("/dev/binderfs", "./binderfs" [pid 290] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3826] <... chdir resumed>) = 0 [pid 3825] <... symlink resumed>) = 0 [pid 290] getdents64(3, executing program [pid 289] getdents64(3, [pid 3825] write(1, "executing program\n", 18 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3825] <... write resumed>) = 18 [pid 290] close(3 [pid 289] close(3 [pid 3825] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3826] <... prctl resumed>) = 0 [pid 3825] <... openat resumed>) = 3 [pid 290] rmdir("./693" [pid 289] rmdir("./686" [pid 3826] setpgid(0, 0 [pid 3825] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... rmdir resumed>) = 0 [pid 3825] <... ioctl resumed>) = 0 [pid 290] mkdir("./694", 0777 [pid 3826] <... setpgid resumed>) = 0 [pid 3825] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3825] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] mkdir("./687", 0777 [pid 3826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3825] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3827 [ 66.256180][ T42] tty tty1: SAK: killed process 3819 (syz-executor903): by fd#3 [ 66.273110][ T42] tty tty1: SAK: killed process 3820 (syz-executor903): by fd#3 [ 66.284899][ T20] tty tty1: SAK: killed process 3821 (syz-executor903): by fd#3 [ 66.284930][ T20] tty tty1: SAK: killed process 3822 (syz-executor903): by fd#3 [ 66.284948][ T20] tty tty1: SAK: killed process 3823 (syz-executor903): by fd#3 [pid 3825] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3827 attached [pid 3826] <... openat resumed>) = 3 [pid 291] umount2("./709", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... mkdir resumed>) = 0 [pid 3827] set_robust_list(0x5555700d1660, 24 [pid 3826] write(3, "1000", 4 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3827] <... set_robust_list resumed>) = 0 [pid 3826] <... write resumed>) = 4 [pid 3825] <... write resumed>) = ? [pid 291] openat(AT_FDCWD, "./709", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3828 attached [pid 3827] chdir("./694" [pid 3826] close(3 [pid 3825] +++ killed by SIGKILL +++ [pid 291] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 3827] <... chdir resumed>) = 0 [pid 3826] <... close resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3828 [pid 3828] set_robust_list(0x5555700d1660, 24 [pid 3827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3826] symlink("/dev/binderfs", "./binderfs" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3825, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3828] <... set_robust_list resumed>) = 0 [pid 291] umount2("./709/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3828] chdir("./687" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3828] <... chdir resumed>) = 0 [pid 3826] <... symlink resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./709/binderfs", [pid 3828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3828] <... prctl resumed>) = 0 [pid 291] unlink("./709/binderfs"executing program [pid 3827] <... prctl resumed>) = 0 [pid 3826] write(1, "executing program\n", 18 [pid 3828] setpgid(0, 0 [pid 3827] setpgid(0, 0 [pid 3826] <... write resumed>) = 18 [pid 291] <... unlink resumed>) = 0 [pid 3827] <... setpgid resumed>) = 0 [pid 3826] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3828] <... setpgid resumed>) = 0 [pid 3827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] getdents64(3, [pid 3828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3826] <... openat resumed>) = 3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3828] <... openat resumed>) = 3 [pid 3827] <... openat resumed>) = 3 [pid 3826] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] close(3 [pid 3826] <... ioctl resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 3826] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] rmdir("./709" [pid 3828] write(3, "1000", 4 [pid 3827] write(3, "1000", 4 [pid 3826] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3828] <... write resumed>) = 4 [pid 291] <... rmdir resumed>) = 0 [pid 3826] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3828] close(3 [pid 291] mkdir("./710", 0777 [pid 3827] <... write resumed>) = 4 [pid 3826] <... openat resumed>) = 4 [pid 3828] <... close resumed>) = 0 [pid 3827] close(3 [pid 3826] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... mkdir resumed>) = 0 [pid 3828] symlink("/dev/binderfs", "./binderfs" [pid 3827] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3828] <... symlink resumed>) = 0 [pid 3828] write(1, "executing program\n", 18 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3829 [pid 3828] <... write resumed>) = 18 [pid 3828] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3828] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3828] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3828] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3828] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3828] exit_group(0) = ? ./strace-static-x86_64: Process 3829 attached [pid 3829] set_robust_list(0x5555700d1660, 24) = 0 [pid 3829] chdir("./710") = 0 [pid 3829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3829] setpgid(0, 0) = 0 [pid 3829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3829] write(3, "1000", 4) = 4 [pid 3829] close(3) = 0 [pid 3829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3829] write(1, "executing program\n", 18) = 18 [pid 3829] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3829] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3829] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3829] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3829] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3829] exit_group(0) = ? executing program executing program executing program [pid 3827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3827] write(1, "executing program\n", 18) = 18 [pid 3827] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3827] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3827] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3827] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3828] +++ exited with 0 +++ [pid 3826] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 3827] <... openat resumed>) = ? [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3828, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3827] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3827, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3829] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3829, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] umount2("./724", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./724", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./724/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./724/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./724/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./724") = 0 [pid 293] mkdir("./725", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3830 [pid 289] umount2("./687", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./687", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./687/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./687/binderfs", ./strace-static-x86_64: Process 3830 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3830] set_robust_list(0x5555700d1660, 24) = 0 [pid 3830] chdir("./725" [pid 3826] +++ killed by SIGKILL +++ [pid 289] unlink("./687/binderfs" [pid 3830] <... chdir resumed>) = 0 [pid 3830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3830] setpgid(0, 0) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3826, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... unlink resumed>) = 0 [pid 3830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3830] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 3830] write(3, "1000", 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3830] <... write resumed>) = 4 [pid 289] close(3 [pid 3830] close(3 [pid 289] <... close resumed>) = 0 [pid 3830] <... close resumed>) = 0 [pid 289] rmdir("./687" [pid 3830] symlink("/dev/binderfs", "./binderfs" [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./688", 0777 [pid 3830] <... symlink resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3830] write(1, "executing program\n", 18 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 3831 attached [pid 3830] <... write resumed>) = 18 [pid 3830] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] umount2("./710", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./694", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3831 [pid 3831] set_robust_list(0x5555700d1660, 24 [pid 3830] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3830] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] openat(AT_FDCWD, "./710", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3831] <... set_robust_list resumed>) = 0 [pid 290] openat(AT_FDCWD, "./694", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3830] <... ioctl resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 3830] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 3831] chdir("./688" [pid 3830] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3831] <... chdir resumed>) = 0 [pid 3830] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 3831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3830] <... openat resumed>) = 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3831] <... prctl resumed>) = 0 [pid 3830] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] umount2("./710/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./694/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3830] <... write resumed>) = 8784 [pid 291] newfstatat(AT_FDCWD, "./710/binderfs", [pid 290] newfstatat(AT_FDCWD, "./694/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./710/binderfs" [pid 290] unlink("./694/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 290] close(3 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 291] rmdir("./710" [pid 290] rmdir("./694" [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 291] mkdir("./711", 0777 [pid 290] mkdir("./695", 0777 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3832 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3833 [pid 292] umount2("./713", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./713", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./713/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./713/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./713/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./713") = 0 [pid 292] mkdir("./714", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3834 ./strace-static-x86_64: Process 3833 attached [pid 3833] set_robust_list(0x5555700d1660, 24) = 0 [pid 3833] chdir("./695") = 0 [pid 3833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3833] setpgid(0, 0) = 0 [pid 3833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3831] setpgid(0, 0 [pid 3833] <... openat resumed>) = 3 [pid 3833] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 3832 attached [pid 3833] close(3) = 0 [pid 3832] set_robust_list(0x5555700d1660, 24 [pid 3833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3831] <... setpgid resumed>) = 0 [pid 3832] <... set_robust_list resumed>) = 0 [pid 3832] chdir("./711" [pid 3831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3832] <... chdir resumed>) = 0 [pid 3833] write(1, "executing program\n", 18 [pid 3831] <... openat resumed>) = 3 executing program [pid 3832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3833] <... write resumed>) = 18 [pid 3832] <... prctl resumed>) = 0 [pid 3833] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3831] write(3, "1000", 4 [pid 3830] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3830, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3832] setpgid(0, 0 [pid 3831] <... write resumed>) = 4 ./strace-static-x86_64: Process 3834 attached [pid 3833] <... openat resumed>) = 3 [pid 3831] close(3 [pid 3834] set_robust_list(0x5555700d1660, 24 [pid 3832] <... setpgid resumed>) = 0 [pid 3832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3834] <... set_robust_list resumed>) = 0 [pid 3831] <... close resumed>) = 0 [pid 3833] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3831] symlink("/dev/binderfs", "./binderfs" [pid 3832] <... openat resumed>) = 3 [pid 3833] <... ioctl resumed>) = 0 [pid 3831] <... symlink resumed>) = 0 [pid 3832] write(3, "1000", 4 [pid 3831] write(1, "executing program\n", 18executing program [pid 3833] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3831] <... write resumed>) = 18 [pid 3832] <... write resumed>) = 4 [pid 3831] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3832] close(3 [pid 3831] <... openat resumed>) = 3 [pid 3833] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3832] <... close resumed>) = 0 [pid 3831] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3833] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3832] symlink("/dev/binderfs", "./binderfs" [pid 3831] <... ioctl resumed>) = 0 [pid 3834] chdir("./714" [pid 3833] <... openat resumed>) = 4 [pid 3832] <... symlink resumed>) = 0 [pid 3831] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3833] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3832] write(1, "executing program\n", 18 [pid 3831] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [ 66.318423][ T60] tty tty1: SAK: killed process 3825 (syz-executor903): by fd#3 [ 66.333002][ T42] tty tty1: SAK: killed process 3826 (syz-executor903): by fd#3 [ 66.341059][ T42] tty tty1: SAK: killed process 3826 (syz-executor903): by fd#3 [ 66.341078][ T42] tty tty1: SAK: killed process 3827 (syz-executor903): by fd#3 [ 66.362181][ T42] tty tty1: SAK: killed process 3830 (syz-executor903): by fd#3 executing program [pid 3834] <... chdir resumed>) = 0 [pid 3833] <... write resumed>) = ? [pid 3832] <... write resumed>) = 18 [pid 3834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3832] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3831] +++ killed by SIGKILL +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 3834] <... prctl resumed>) = 0 [pid 3832] <... openat resumed>) = 3 [pid 3834] setpgid(0, 0 [pid 3832] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3831, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3834] <... setpgid resumed>) = 0 [pid 3833] +++ killed by SIGKILL +++ [pid 3832] <... ioctl resumed>) = 0 [pid 289] umount2("./688", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3832] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3834] <... openat resumed>) = 3 [pid 3832] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] openat(AT_FDCWD, "./688", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3834] write(3, "1000", 4 [pid 3832] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... openat resumed>) = 3 [pid 3834] <... write resumed>) = 4 [pid 3832] <... openat resumed>) = 4 [pid 289] newfstatat(3, "", [pid 3834] close(3 [pid 3832] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3834] <... close resumed>) = 0 [pid 3832] <... write resumed>) = 8784 [pid 289] getdents64(3, [pid 3834] symlink("/dev/binderfs", "./binderfs" [pid 3832] exit_group(0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 executing program [pid 3834] <... symlink resumed>) = 0 [pid 3832] <... exit_group resumed>) = ? [pid 289] umount2("./688/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3834] write(1, "executing program\n", 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3834] <... write resumed>) = 18 [pid 289] newfstatat(AT_FDCWD, "./688/binderfs", [pid 3834] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3834] <... openat resumed>) = 3 [pid 289] unlink("./688/binderfs" [pid 3834] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... unlink resumed>) = 0 [pid 3834] <... ioctl resumed>) = 0 [pid 289] getdents64(3, [pid 3834] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3834] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] close(3 [pid 3834] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... close resumed>) = 0 [pid 3834] <... openat resumed>) = 4 [pid 289] rmdir("./688" [pid 3834] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3832] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3833, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... rmdir resumed>) = 0 [pid 3834] <... write resumed>) = 8784 [pid 289] mkdir("./689", 0777 [pid 3834] exit_group(0 [pid 289] <... mkdir resumed>) = 0 [pid 3834] <... exit_group resumed>) = ? executing program [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] umount2("./725", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3832, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3835 ./strace-static-x86_64: Process 3835 attached [pid 3835] set_robust_list(0x5555700d1660, 24) = 0 [pid 3835] chdir("./689") = 0 [pid 3835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3835] setpgid(0, 0) = 0 [pid 3835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3835] write(3, "1000", 4) = 4 [pid 3835] close(3) = 0 [pid 3835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3835] write(1, "executing program\n", 18) = 18 [pid 3835] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3835] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3835] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3835] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3835] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3835] exit_group(0) = ? [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./725", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./725/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./725/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./725/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./725") = 0 [pid 3834] +++ exited with 0 +++ [pid 293] mkdir("./726", 0777 [pid 291] umount2("./711", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./695", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... mkdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3834, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] openat(AT_FDCWD, "./711", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./695", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3835] +++ exited with 0 +++ [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3835, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3836 [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3836 attached [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./711/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./695/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3836] set_robust_list(0x5555700d1660, 24 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3836] <... set_robust_list resumed>) = 0 [pid 3836] chdir("./726") = 0 [pid 291] newfstatat(AT_FDCWD, "./711/binderfs", [pid 290] newfstatat(AT_FDCWD, "./695/binderfs", [pid 3836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3836] setpgid(0, 0) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./689", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./689", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] unlink("./711/binderfs" [pid 290] unlink("./695/binderfs" [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./689/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./689/binderfs", [pid 290] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] unlink("./689/binderfs" [pid 290] getdents64(3, [pid 291] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./689" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./690", 0777 [pid 3836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] close(3 [pid 290] close(3 [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3837 ./strace-static-x86_64: Process 3837 attached [pid 3836] <... openat resumed>) = 3 [pid 291] rmdir("./711" [pid 290] rmdir("./695" [pid 3836] write(3, "1000", 4) = 4 [pid 3836] close(3) = 0 [pid 3836] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3836] write(1, "executing program\n", 18) = 18 [pid 3836] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3836] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3836] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 291] <... rmdir resumed>) = 0 [pid 290] mkdir("./696", 0777 [pid 3836] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3836] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3837] set_robust_list(0x5555700d1660, 24 [pid 3836] <... write resumed>) = ? [pid 291] mkdir("./712", 0777 [pid 290] <... mkdir resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3838 [pid 292] umount2("./714", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3839 [pid 3837] <... set_robust_list resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3837] chdir("./690" [pid 292] openat(AT_FDCWD, "./714", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3839 attached ./strace-static-x86_64: Process 3838 attached [pid 3839] set_robust_list(0x5555700d1660, 24 [pid 3838] set_robust_list(0x5555700d1660, 24 [pid 3839] <... set_robust_list resumed>) = 0 [pid 3838] <... set_robust_list resumed>) = 0 [pid 3839] chdir("./712" [pid 3838] chdir("./696" [pid 3839] <... chdir resumed>) = 0 [pid 3838] <... chdir resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 3837] <... chdir resumed>) = 0 [pid 3836] +++ killed by SIGKILL +++ [pid 292] newfstatat(3, "", [pid 3839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3839] <... prctl resumed>) = 0 [pid 3838] <... prctl resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3836, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 3839] setpgid(0, 0 [pid 3838] setpgid(0, 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3839] <... setpgid resumed>) = 0 [pid 3838] <... setpgid resumed>) = 0 [pid 3839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3839] <... openat resumed>) = 3 [pid 3837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3838] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3837] <... prctl resumed>) = 0 [pid 292] getdents64(3, [pid 3837] setpgid(0, 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3837] <... setpgid resumed>) = 0 [pid 292] umount2("./714/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3839] write(3, "1000", 4 [pid 3838] write(3, "1000", 4 [pid 3837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3839] <... write resumed>) = 4 [pid 3838] <... write resumed>) = 4 [pid 3837] <... openat resumed>) = 3 [pid 292] newfstatat(AT_FDCWD, "./714/binderfs", [pid 3837] write(3, "1000", 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3837] <... write resumed>) = 4 [pid 292] unlink("./714/binderfs" [pid 3839] close(3 [pid 3838] close(3 [pid 3837] close(3 [pid 292] <... unlink resumed>) = 0 [pid 3839] <... close resumed>) = 0 [pid 3838] <... close resumed>) = 0 [pid 3839] symlink("/dev/binderfs", "./binderfs" [pid 3838] symlink("/dev/binderfs", "./binderfs" [pid 3839] <... symlink resumed>) = 0 [pid 3838] <... symlink resumed>) = 0 [pid 3837] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 3839] write(1, "executing program\n", 18 [pid 3838] write(1, "executing program\n", 18 [pid 3837] symlink("/dev/binderfs", "./binderfs"executing program executing program executing program [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3839] <... write resumed>) = 18 [pid 3838] <... write resumed>) = 18 [pid 292] close(3 [pid 3839] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3838] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... close resumed>) = 0 [pid 292] rmdir("./714" [pid 3837] <... symlink resumed>) = 0 [pid 3839] <... openat resumed>) = 3 [pid 3838] <... openat resumed>) = 3 [pid 3837] write(1, "executing program\n", 18 [pid 292] <... rmdir resumed>) = 0 [pid 3839] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3838] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3837] <... write resumed>) = 18 [pid 292] mkdir("./715", 0777 [pid 3839] <... ioctl resumed>) = 0 [pid 3838] <... ioctl resumed>) = 0 [pid 3839] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3838] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3839] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3838] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3839] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3838] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3839] <... openat resumed>) = 4 [pid 3838] <... openat resumed>) = 4 [pid 292] <... mkdir resumed>) = 0 [pid 3837] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3839] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [ 66.375332][ T60] tty tty1: SAK: killed process 3831 (syz-executor903): by fd#3 [ 66.375361][ T60] tty tty1: SAK: killed process 3833 (syz-executor903): by fd#3 [ 66.392795][ T60] tty tty1: SAK: killed process 3834 (syz-executor903): by fd#3 [ 66.408945][ T42] tty tty1: SAK: killed process 3836 (syz-executor903): by fd#3 [pid 3838] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3840 attached [pid 3839] <... write resumed>) = ? [pid 3838] <... write resumed>) = ? [pid 3837] <... openat resumed>) = 3 [pid 293] <... restart_syscall resumed>) = 0 [pid 3840] set_robust_list(0x5555700d1660, 24 [pid 3837] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3840 [pid 3840] <... set_robust_list resumed>) = 0 [pid 3837] <... ioctl resumed>) = 0 [pid 3840] chdir("./715" [pid 3837] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] umount2("./726", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3840] <... chdir resumed>) = 0 [pid 3837] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3840] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3837] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] openat(AT_FDCWD, "./726", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3840] <... prctl resumed>) = 0 [pid 3837] <... openat resumed>) = 4 [pid 293] <... openat resumed>) = 3 [pid 3840] setpgid(0, 0 [pid 3837] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] newfstatat(3, "", [pid 3840] <... setpgid resumed>) = 0 [pid 3839] +++ killed by SIGKILL +++ [pid 3837] <... write resumed>) = ? [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3839, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3840] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3840] write(3, "1000", 4 [pid 293] umount2("./726/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3840] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3840] close(3 [pid 293] newfstatat(AT_FDCWD, "./726/binderfs", [pid 3840] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3840] symlink("/dev/binderfs", "./binderfs" [pid 293] unlink("./726/binderfs" [pid 3840] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 executing program [pid 3840] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 3840] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3840] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] close(3 [pid 3840] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 3840] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] rmdir("./726" [pid 3840] <... ioctl resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 3840] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] mkdir("./727", 0777 [pid 3840] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3837] +++ killed by SIGKILL +++ [pid 3838] +++ killed by SIGKILL +++ [pid 293] <... mkdir resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3837, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3840] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3838, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3840] <... openat resumed>) = 4 [pid 3840] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program ./strace-static-x86_64: Process 3841 attached ) = 8784 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3841 [pid 3841] set_robust_list(0x5555700d1660, 24 [pid 291] umount2("./712", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./696", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3841] <... set_robust_list resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3841] chdir("./727" [pid 291] openat(AT_FDCWD, "./712", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./696", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3841] <... chdir resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 3841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 3841] <... prctl resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3841] setpgid(0, 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 3841] <... setpgid resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] umount2("./712/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./696/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3841] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3841] write(3, "1000", 4 [pid 291] newfstatat(AT_FDCWD, "./712/binderfs", [pid 290] newfstatat(AT_FDCWD, "./696/binderfs", [pid 3841] <... write resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3841] close(3 [pid 291] unlink("./712/binderfs" [pid 290] unlink("./696/binderfs" [pid 3841] <... close resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3841] symlink("/dev/binderfs", "./binderfs" [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 3841] <... symlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3841] write(1, "executing program\n", 18 [pid 291] close(3 [pid 290] close(3 [pid 3841] <... write resumed>) = 18 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 3841] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] rmdir("./712" [pid 290] rmdir("./696" [pid 3841] <... openat resumed>) = 3 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3841] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] mkdir("./713", 0777 [pid 290] mkdir("./697", 0777 [pid 3841] <... ioctl resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 3841] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3841] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3841] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3842 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3843 [pid 3841] <... openat resumed>) = 4 [pid 3841] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3841] exit_group(0) = ? [pid 3841] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3841, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3843 attached [pid 289] umount2("./690", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3843] set_robust_list(0x5555700d1660, 24 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3843] <... set_robust_list resumed>) = 0 [pid 289] openat(AT_FDCWD, "./690", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", [pid 3843] chdir("./697" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 3843] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 3842 attached [pid 3843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... restart_syscall resumed>) = 0 [pid 289] umount2("./690/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3843] <... prctl resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3843] setpgid(0, 0 [pid 289] newfstatat(AT_FDCWD, "./690/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3843] <... setpgid resumed>) = 0 [pid 289] unlink("./690/binderfs" [pid 293] umount2("./727", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... unlink resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] getdents64(3, [pid 293] openat(AT_FDCWD, "./727", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] close(3 [pid 293] <... openat resumed>) = 3 [pid 289] <... close resumed>) = 0 [pid 293] newfstatat(3, "", [pid 289] rmdir("./690" [pid 3843] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3843] write(3, "1000", 4 [pid 293] umount2("./727/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... rmdir resumed>) = 0 [pid 3843] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] mkdir("./691", 0777 [pid 293] newfstatat(AT_FDCWD, "./727/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./727/binderfs" [pid 3843] close(3 [pid 293] <... unlink resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 293] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3843] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./727" [pid 3843] symlink("/dev/binderfs", "./binderfs" [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./728", 0777 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3844 ./strace-static-x86_64: Process 3844 attached [pid 3843] <... symlink resumed>) = 0 [pid 3840] +++ killed by SIGKILL +++ [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3840, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- executing program [pid 3844] set_robust_list(0x5555700d1660, 24 [pid 3843] write(1, "executing program\n", 18 [pid 3842] set_robust_list(0x5555700d1660, 24 [pid 292] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3845 attached [pid 3844] <... set_robust_list resumed>) = 0 [pid 3843] <... write resumed>) = 18 [pid 3842] <... set_robust_list resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3845 [pid 3844] chdir("./691" [pid 3845] set_robust_list(0x5555700d1660, 24 [pid 3843] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3844] <... chdir resumed>) = 0 [pid 3844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3844] setpgid(0, 0) = 0 [pid 3844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3845] <... set_robust_list resumed>) = 0 [pid 3843] <... openat resumed>) = 3 [pid 3844] <... openat resumed>) = 3 [pid 3843] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3844] write(3, "1000", 4) = 4 [pid 3844] close(3) = 0 [pid 3844] symlink("/dev/binderfs", "./binderfs" [pid 3845] chdir("./728" [pid 3843] <... ioctl resumed>) = 0 [pid 3842] chdir("./713" [pid 3844] <... symlink resumed>) = 0 [pid 3843] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3844] write(1, "executing program\n", 18executing program [pid 3843] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3844] <... write resumed>) = 18 [pid 3843] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3844] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3843] <... openat resumed>) = 4 [pid 3844] <... openat resumed>) = 3 [pid 3843] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3844] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3843] <... write resumed>) = 8784 [pid 3843] exit_group(0) = ? [pid 3844] <... ioctl resumed>) = 0 [pid 3843] +++ killed by SIGKILL +++ [pid 3845] <... chdir resumed>) = 0 [pid 3842] <... chdir resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3843, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3845] setpgid(0, 0) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./715", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./715", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./715/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./715/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./715/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./715") = 0 [pid 292] mkdir("./716", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3846 [pid 3845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3845] write(3, "1000", 4) = 4 [ 66.424481][ T42] tty tty1: SAK: killed process 3838 (syz-executor903): by fd#3 [ 66.424503][ T42] tty tty1: SAK: killed process 3839 (syz-executor903): by fd#3 [ 66.440346][ T42] tty tty1: SAK: killed process 3837 (syz-executor903): by fd#3 [ 66.449888][ T42] tty tty1: SAK: killed process 3840 (syz-executor903): by fd#3 [pid 3845] close(3 [pid 3842] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3846 attached ) = 0 [pid 3845] <... close resumed>) = 0 [pid 3845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3845] write(1, "executing program\n", 18executing program ) = 18 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./697", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./697", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3845] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./697/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./697/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./697/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./697") = 0 [pid 290] mkdir("./698", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3847 [pid 3846] set_robust_list(0x5555700d1660, 24) = 0 [pid 3846] chdir("./716") = 0 [pid 3846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3846] setpgid(0, 0) = 0 [pid 3846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3846] write(3, "1000", 4./strace-static-x86_64: Process 3847 attached ) = 4 [pid 3844] +++ killed by SIGKILL +++ [pid 3842] setpgid(0, 0) = 0 [pid 3842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3846] close(3 [pid 3845] <... openat resumed>) = 3 [pid 3842] <... openat resumed>) = 3 [pid 3846] <... close resumed>) = 0 [pid 3842] write(3, "1000", 4 [pid 3845] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3842] <... write resumed>) = 4 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3844, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3846] symlink("/dev/binderfs", "./binderfs" [pid 3845] <... ioctl resumed>) = 0 [pid 3842] close(3 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3842] <... close resumed>) = 0 [pid 3842] symlink("/dev/binderfs", "./binderfs" [pid 3846] <... symlink resumed>) = 0 executing program [pid 3845] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3842] <... symlink resumed>) = 0 [pid 3846] write(1, "executing program\n", 18 [pid 3842] write(1, "executing program\n", 18executing program [pid 3846] <... write resumed>) = 18 [pid 3845] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3842] <... write resumed>) = 18 [pid 3846] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3845] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3842] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3846] <... openat resumed>) = 3 [pid 3842] <... openat resumed>) = 3 [pid 3846] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3845] <... openat resumed>) = 4 [pid 3842] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 3846] <... ioctl resumed>) = 0 [pid 3845] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3842] <... ioctl resumed>) = 0 [pid 3846] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3842] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3842] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3845] <... write resumed>) = 8784 [pid 3842] <... openat resumed>) = 4 [pid 3842] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 3847] set_robust_list(0x5555700d1660, 24) = 0 [pid 3847] chdir("./698") = 0 [pid 3847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3847] setpgid(0, 0) = 0 [pid 3847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3847] write(3, "1000", 4) = 4 [pid 3847] close(3) = 0 [pid 3847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3847] write(1, "executing program\n", 18) = 18 [pid 3847] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3847] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3847] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3847] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3847] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3847] exit_group(0) = ? [pid 3846] <... ioctl resumed>) = ? [pid 3846] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3846, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3842] +++ killed by SIGKILL +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3842, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./713", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./713", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] umount2("./716", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(3, "", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] openat(AT_FDCWD, "./716", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] getdents64(3, [pid 292] <... openat resumed>) = 3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(3, "", [pid 291] umount2("./713/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(3, [pid 291] newfstatat(AT_FDCWD, "./713/binderfs", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./716/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] unlink("./713/binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... unlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./716/binderfs", [pid 291] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] unlink("./716/binderfs" [pid 291] close(3 [pid 292] <... unlink resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 291] rmdir("./713" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 292] close(3 [pid 291] mkdir("./714", 0777 [pid 292] <... close resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 292] rmdir("./716" [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3845] +++ killed by SIGKILL +++ [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./717", 0777 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3848 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3849 ./strace-static-x86_64: Process 3848 attached [pid 3848] set_robust_list(0x5555700d1660, 24) = 0 [pid 3848] chdir("./714") = 0 [pid 3848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3848] setpgid(0, 0) = 0 [pid 3848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3848] write(3, "1000", 4) = 4 [pid 3848] close(3) = 0 [pid 3848] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3848] write(1, "executing program\n", 18) = 18 [pid 3848] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3845, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./728", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./728", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./728/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] umount2("./691", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3849 attached [pid 3847] +++ exited with 0 +++ [pid 293] newfstatat(AT_FDCWD, "./728/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./728/binderfs" [pid 3849] set_robust_list(0x5555700d1660, 24 [pid 293] <... unlink resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3847, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] openat(AT_FDCWD, "./691", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3849] <... set_robust_list resumed>) = 0 [pid 293] getdents64(3, [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... openat resumed>) = 3 [pid 293] close(3) = 0 [pid 293] rmdir("./728" [pid 3849] chdir("./717" [pid 289] newfstatat(3, "", [pid 3849] <... chdir resumed>) = 0 [pid 3848] <... openat resumed>) = 3 [pid 293] <... rmdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] mkdir("./729", 0777 [pid 289] getdents64(3, [pid 3849] <... prctl resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3849] setpgid(0, 0 [pid 289] umount2("./691/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3849] <... setpgid resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... mkdir resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./691/binderfs", [pid 3849] <... openat resumed>) = 3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3849] write(3, "1000", 4 [pid 3848] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] unlink("./691/binderfs" [pid 3849] <... write resumed>) = 4 [pid 289] <... unlink resumed>) = 0 [pid 3849] close(3 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3850 [pid 289] getdents64(3, [pid 3849] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3849] symlink("/dev/binderfs", "./binderfs" [pid 289] close(3./strace-static-x86_64: Process 3850 attached [pid 3849] <... symlink resumed>) = 0 [pid 3848] <... ioctl resumed>) = 0 [pid 289] <... close resumed>) = 0 executing program [pid 3849] write(1, "executing program\n", 18 [pid 289] rmdir("./691" [pid 3850] set_robust_list(0x5555700d1660, 24 [pid 3849] <... write resumed>) = 18 [pid 3848] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3849] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... rmdir resumed>) = 0 [pid 3849] <... openat resumed>) = 3 [pid 3848] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3850] <... set_robust_list resumed>) = 0 [pid 289] mkdir("./692", 0777 [pid 3850] chdir("./729" [pid 3849] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3848] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3849] <... ioctl resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3849] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3848] <... openat resumed>) = 4 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3850] <... chdir resumed>) = 0 [pid 3849] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3848] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3851 attached [pid 3850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3849] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program executing program ) = 4 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3851 [pid 3849] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 3850] <... prctl resumed>) = 0 [pid 3851] set_robust_list(0x5555700d1660, 24 [pid 3850] setpgid(0, 0 [pid 3851] <... set_robust_list resumed>) = 0 [pid 3851] chdir("./692" [pid 3850] <... setpgid resumed>) = 0 [pid 3851] <... chdir resumed>) = 0 [pid 3850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3850] <... openat resumed>) = 3 [pid 3851] <... prctl resumed>) = 0 [pid 3850] write(3, "1000", 4 [pid 3851] setpgid(0, 0 [pid 3850] <... write resumed>) = 4 [pid 3851] <... setpgid resumed>) = 0 [pid 3850] close(3 [pid 3851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3850] <... close resumed>) = 0 [pid 3851] <... openat resumed>) = 3 [pid 3850] symlink("/dev/binderfs", "./binderfs" [pid 3851] write(3, "1000", 4 [pid 3850] <... symlink resumed>) = 0 [pid 3851] <... write resumed>) = 4 [pid 3850] write(1, "executing program\n", 18 [pid 3851] close(3 [pid 3850] <... write resumed>) = 18 [pid 3851] <... close resumed>) = 0 [pid 3850] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3851] symlink("/dev/binderfs", "./binderfs" [pid 3850] <... openat resumed>) = 3 [pid 3851] <... symlink resumed>) = 0 [pid 3850] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3851] write(1, "executing program\n", 18 [pid 3850] <... ioctl resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3851] <... write resumed>) = 18 [pid 3850] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3851] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3850] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3851] <... openat resumed>) = 3 [pid 3850] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] umount2("./698", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3851] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3851] <... ioctl resumed>) = 0 [pid 290] openat(AT_FDCWD, "./698", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3851] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... openat resumed>) = 3 [pid 3851] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] newfstatat(3, "", [pid 3851] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./698/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./698/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./698/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./698") = 0 [pid 290] mkdir("./699", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3852 [pid 3851] <... openat resumed>) = 4 [pid 3850] <... openat resumed>) = 4 [pid 3848] <... write resumed>) = ? [ 66.467876][ T42] tty tty1: SAK: killed process 3843 (syz-executor903): by fd#3 [ 66.467902][ T42] tty tty1: SAK: killed process 3844 (syz-executor903): by fd#3 [ 66.487099][ T60] tty tty1: SAK: killed process 3842 (syz-executor903): by fd#3 [ 66.487131][ T60] tty tty1: SAK: killed process 3845 (syz-executor903): by fd#3 [ 66.487148][ T60] tty tty1: SAK: killed process 3846 (syz-executor903): by fd#3 executing program [pid 3851] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3850] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3849] +++ killed by SIGKILL +++ [pid 3848] +++ killed by SIGKILL +++ [pid 3851] <... write resumed>) = 8784 [pid 3850] <... write resumed>) = 8784 [pid 3851] exit_group(0 [pid 3850] exit_group(0 [pid 3851] <... exit_group resumed>) = ? [pid 3850] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 3852 attached [pid 3852] set_robust_list(0x5555700d1660, 24) = 0 [pid 3852] chdir("./699") = 0 [pid 3852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3852] setpgid(0, 0) = 0 [pid 3852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3852] write(3, "1000", 4) = 4 [pid 3852] close(3) = 0 [pid 3852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3852] write(1, "executing program\n", 18) = 18 [pid 3852] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3852] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3852] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3852] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3852] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3852] exit_group(0) = ? [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3849, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./717", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./717", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./717/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./717/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./717/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./717") = 0 [pid 292] mkdir("./718", 0777 [pid 3851] +++ exited with 0 +++ [pid 3852] +++ exited with 0 +++ [pid 3850] +++ exited with 0 +++ [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3852, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3851, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3853 attached [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3848, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3850, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3853 [pid 290] <... restart_syscall resumed>) = 0 [pid 3853] set_robust_list(0x5555700d1660, 24 [pid 293] umount2("./729", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3853] <... set_robust_list resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./699", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./714", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./729", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./699", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(3, "", [pid 291] openat(AT_FDCWD, "./714", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] umount2("./699/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./699/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./699/binderfs" [pid 3853] chdir("./718" [pid 293] getdents64(3, [pid 291] newfstatat(3, "", [pid 290] <... unlink resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 293] umount2("./729/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 290] close(3 [pid 289] <... restart_syscall resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./729/binderfs", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... close resumed>) = 0 [pid 3853] <... chdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./714/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] rmdir("./699" [pid 3853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] unlink("./729/binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... rmdir resumed>) = 0 [pid 3853] <... prctl resumed>) = 0 [pid 290] mkdir("./700", 0777 [pid 289] umount2("./692", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3853] setpgid(0, 0 [pid 293] <... unlink resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./714/binderfs", [pid 290] <... mkdir resumed>) = 0 [pid 3853] <... setpgid resumed>) = 0 [pid 293] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3854 attached [pid 3853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] unlink("./714/binderfs" [pid 289] openat(AT_FDCWD, "./692", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3853] <... openat resumed>) = 3 [pid 293] close(3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3854 [pid 3853] write(3, "1000", 4 [pid 291] <... unlink resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3853] <... write resumed>) = 4 [pid 3853] close(3) = 0 [pid 3853] symlink("/dev/binderfs", "./binderfs" [pid 3854] set_robust_list(0x5555700d1660, 24 [pid 293] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 289] newfstatat(3, "", [pid 3854] <... set_robust_list resumed>) = 0 [pid 3853] <... symlink resumed>) = 0 [pid 293] rmdir("./729" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3853] write(1, "executing program\n", 18executing program ) = 18 [pid 3853] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3853] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... rmdir resumed>) = 0 [pid 291] close(3 [pid 289] getdents64(3, [pid 3853] <... ioctl resumed>) = 0 [pid 3853] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3853] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3853] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... close resumed>) = 0 [pid 293] mkdir("./730", 0777 [pid 3854] chdir("./700" [pid 3853] <... write resumed>) = ? [pid 293] <... mkdir resumed>) = 0 [pid 291] rmdir("./714" [pid 289] umount2("./692/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3854] <... chdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... rmdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] mkdir("./715", 0777 [pid 289] newfstatat(AT_FDCWD, "./692/binderfs", [pid 3854] <... prctl resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3855 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3854] setpgid(0, 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] unlink("./692/binderfs"./strace-static-x86_64: Process 3855 attached [pid 3854] <... setpgid resumed>) = 0 [pid 3853] +++ killed by SIGKILL +++ [pid 289] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 3856 attached [pid 3855] set_robust_list(0x5555700d1660, 24 [pid 3854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3853, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3856 [pid 289] getdents64(3, [pid 3854] <... openat resumed>) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3855] <... set_robust_list resumed>) = 0 [pid 3854] write(3, "1000", 4 [pid 289] close(3 [pid 3854] <... write resumed>) = 4 [pid 289] <... close resumed>) = 0 [pid 3854] close(3 [pid 289] rmdir("./692" [pid 3854] <... close resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3855] chdir("./730" [pid 3854] symlink("/dev/binderfs", "./binderfs" [pid 289] mkdir("./693", 0777 [pid 3856] set_robust_list(0x5555700d1660, 24 [pid 3855] <... chdir resumed>) = 0 [pid 3854] <... symlink resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3854] write(1, "executing program\n", 18 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3856] <... set_robust_list resumed>) = 0 executing program [pid 3855] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3857 attached [pid 3854] <... write resumed>) = 18 [pid 3857] set_robust_list(0x5555700d1660, 24 [pid 3854] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3857 [pid 3857] <... set_robust_list resumed>) = 0 [pid 3855] <... prctl resumed>) = 0 [pid 3854] <... openat resumed>) = 3 [pid 3857] chdir("./693" [pid 3855] setpgid(0, 0 [pid 3854] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3857] <... chdir resumed>) = 0 [pid 3856] chdir("./715" [pid 3854] <... ioctl resumed>) = 0 [pid 3857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3854] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3857] <... prctl resumed>) = 0 [pid 3854] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3857] setpgid(0, 0 [pid 3854] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3857] <... setpgid resumed>) = 0 [pid 3854] <... openat resumed>) = 4 [pid 3857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3854] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3856] <... chdir resumed>) = 0 [pid 3855] <... setpgid resumed>) = 0 [pid 3856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3856] <... prctl resumed>) = 0 [pid 3855] <... openat resumed>) = 3 [pid 3856] setpgid(0, 0 [pid 3855] write(3, "1000", 4 [pid 3856] <... setpgid resumed>) = 0 [pid 3855] <... write resumed>) = 4 [pid 3856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3855] close(3 [pid 3856] <... openat resumed>) = 3 [pid 3855] <... close resumed>) = 0 [pid 3856] write(3, "1000", 4 [pid 3855] symlink("/dev/binderfs", "./binderfs" [pid 3856] <... write resumed>) = 4 [pid 3855] <... symlink resumed>) = 0 [pid 3856] close(3 [pid 3855] write(1, "executing program\n", 18executing program [pid 3856] <... close resumed>) = 0 [pid 3855] <... write resumed>) = 18 [pid 3856] symlink("/dev/binderfs", "./binderfs" [pid 3855] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3856] <... symlink resumed>) = 0 [pid 3855] <... openat resumed>) = 3 [pid 3856] write(1, "executing program\n", 18 [pid 3855] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 3856] <... write resumed>) = 18 [pid 3855] <... ioctl resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 3857] <... openat resumed>) = 3 [pid 3855] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3854] <... write resumed>) = ? [pid 3857] write(3, "1000", 4 [pid 3856] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3855] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3856] <... openat resumed>) = 3 [pid 3855] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3857] <... write resumed>) = 4 [pid 3855] <... openat resumed>) = 4 [pid 3854] +++ killed by SIGKILL +++ [ 66.518879][ T42] tty tty1: SAK: killed process 3848 (syz-executor903): by fd#3 [ 66.518907][ T42] tty tty1: SAK: killed process 3849 (syz-executor903): by fd#3 [ 66.545265][ T20] tty tty1: SAK: killed process 3853 (syz-executor903): by fd#3 [ 66.560561][ T42] tty tty1: SAK: killed process 3854 (syz-executor903): by fd#3 [pid 292] umount2("./718", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3857] close(3 [pid 3856] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} executing program executing program [pid 3855] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3854, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3857] <... close resumed>) = 0 [pid 292] openat(AT_FDCWD, "./718", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3857] symlink("/dev/binderfs", "./binderfs" [pid 3855] <... write resumed>) = 8784 [pid 292] <... openat resumed>) = 3 [pid 3857] <... symlink resumed>) = 0 [pid 292] newfstatat(3, "", [pid 3857] write(1, "executing program\n", 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3857] <... write resumed>) = 18 [pid 292] getdents64(3, [pid 3857] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3857] <... openat resumed>) = 3 [pid 292] umount2("./718/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3857] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3857] <... ioctl resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./718/binderfs", [pid 3857] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3857] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] unlink("./718/binderfs" [pid 3857] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... unlink resumed>) = 0 [pid 3857] <... openat resumed>) = 4 [pid 292] getdents64(3, [pid 3857] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3857] <... write resumed>) = 8784 [pid 292] close(3 [pid 3857] exit_group(0 [pid 292] <... close resumed>) = 0 [pid 3857] <... exit_group resumed>) = ? [pid 292] rmdir("./718") = 0 [pid 292] mkdir("./719", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3858 ./strace-static-x86_64: Process 3858 attached [pid 3858] set_robust_list(0x5555700d1660, 24) = 0 [pid 3858] chdir("./719") = 0 [pid 3858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3858] setpgid(0, 0) = 0 [pid 3858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3858] write(3, "1000", 4) = 4 [pid 3858] close(3) = 0 [pid 3858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3858] write(1, "executing program\n", 18) = 18 [pid 3858] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3858] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3858] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3858] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3858] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3858] exit_group(0) = ? [pid 3857] +++ exited with 0 +++ [pid 3856] <... ioctl resumed>) = ? [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3857, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 289] umount2("./693", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./693", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./693/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./693/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./693/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./693") = 0 [pid 289] mkdir("./694", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3859 [pid 3858] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3858, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3856] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3856, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./700", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./700", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./700/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./700/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./700/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./700") = 0 [pid 290] mkdir("./701", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3859 attached ./strace-static-x86_64: Process 3860 attached , child_tidptr=0x5555700d1650) = 3860 [pid 3855] +++ killed by SIGKILL +++ [pid 3859] set_robust_list(0x5555700d1660, 24 [pid 3860] set_robust_list(0x5555700d1660, 24 [pid 3859] <... set_robust_list resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3855, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3860] <... set_robust_list resumed>) = 0 [pid 3859] chdir("./694") = 0 [pid 3859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3860] chdir("./701" [pid 3859] setpgid(0, 0) = 0 [pid 3860] <... chdir resumed>) = 0 [pid 3860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3860] setpgid(0, 0) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 3859] <... openat resumed>) = 3 [pid 3859] write(3, "1000", 4 [pid 293] umount2("./730", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./719", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./715", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] openat(AT_FDCWD, "./730", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./719", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./715", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3860] <... openat resumed>) = 3 [pid 3859] <... write resumed>) = 4 [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 3860] write(3, "1000", 4 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 3860] <... write resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3860] close(3 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 3860] <... close resumed>) = 0 [pid 3859] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3860] symlink("/dev/binderfs", "./binderfs" [pid 3859] <... close resumed>) = 0 [pid 293] umount2("./730/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./715/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 3860] <... symlink resumed>) = 0 [pid 3859] symlink("/dev/binderfs", "./binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./719/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3860] write(1, "executing program\n", 18 [pid 293] newfstatat(AT_FDCWD, "./730/binderfs", [pid 291] newfstatat(AT_FDCWD, "./715/binderfs", [pid 3860] <... write resumed>) = 18 [pid 3859] <... symlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3860] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3859] write(1, "executing program\n", 18 [pid 293] unlink("./730/binderfs"executing program [pid 292] newfstatat(AT_FDCWD, "./719/binderfs", [pid 291] unlink("./715/binderfs" [pid 3860] <... openat resumed>) = 3 [pid 3859] <... write resumed>) = 18 [pid 293] <... unlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... unlink resumed>) = 0 [pid 3860] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3859] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] getdents64(3, [pid 292] unlink("./719/binderfs" [pid 291] getdents64(3, [pid 3860] <... ioctl resumed>) = 0 [pid 3859] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3860] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] close(3 [pid 292] <... unlink resumed>) = 0 [pid 291] close(3 [pid 3860] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3859] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... close resumed>) = 0 [pid 3860] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3859] <... ioctl resumed>) = 0 [pid 293] rmdir("./730" [pid 291] rmdir("./715" [pid 3860] <... openat resumed>) = 4 [pid 3859] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 3860] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3859] <... ioctl resumed>) = -1 (errno 18446744073709551615) [pid 293] mkdir("./731", 0777 [pid 292] close(3 [pid 291] mkdir("./716", 0777 [pid 3860] <... write resumed>) = ? [pid 3859] +++ killed by SIGKILL +++ [pid 293] <... mkdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] rmdir("./719" [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3859, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./720", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3862 ./strace-static-x86_64: Process 3862 attached [pid 3862] set_robust_list(0x5555700d1660, 24) = 0 [pid 3862] chdir("./720") = 0 [pid 3862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3862] setpgid(0, 0) = 0 [pid 3862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3862] write(3, "1000", 4) = 4 [pid 3862] close(3) = 0 [pid 3862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3862] write(1, "executing program\n", 18executing program ) = 18 [pid 3862] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3861 attached [pid 3861] set_robust_list(0x5555700d1660, 24) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3861 [pid 3860] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3863 [pid 289] umount2("./694", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3860, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3862] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./694", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... openat resumed>) = 3 [pid 3862] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] newfstatat(3, "", [pid 3862] <... ioctl resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3862] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3861] chdir("./731" [pid 3862] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] getdents64(3, ./strace-static-x86_64: Process 3863 attached [pid 3861] <... chdir resumed>) = 0 [pid 3861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3861] setpgid(0, 0) = 0 [pid 3862] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./694/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3862] <... openat resumed>) = 4 [pid 3861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3862] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3861] write(3, "1000", 4) = 4 [pid 289] newfstatat(AT_FDCWD, "./694/binderfs", [pid 3861] close(3) = 0 [pid 3861] symlink("/dev/binderfs", "./binderfs" [pid 3862] <... write resumed>) = 8784 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./694/binderfs" [pid 3862] exit_group(0 [pid 289] <... unlink resumed>) = 0 executing program [pid 3862] <... exit_group resumed>) = ? [pid 3861] <... symlink resumed>) = 0 [pid 3861] write(1, "executing program\n", 18) = 18 [pid 3861] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] getdents64(3, [pid 3861] <... openat resumed>) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3862] +++ exited with 0 +++ [pid 290] umount2("./701", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] close(3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3862, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./701", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 289] <... close resumed>) = 0 [pid 292] umount2("./720", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./701/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] rmdir("./694" [pid 292] openat(AT_FDCWD, "./720", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./701/binderfs", [pid 292] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 66.570833][ T20] tty tty1: SAK: killed process 3855 (syz-executor903): by fd#3 [ 66.570865][ T20] tty tty1: SAK: killed process 3856 (syz-executor903): by fd#3 [ 66.587805][ T20] tty tty1: SAK: killed process 3856 (syz-executor903): by fd#3 [ 66.604399][ T42] tty tty1: SAK: killed process 3859 (syz-executor903): by fd#3 [ 66.604429][ T42] tty tty1: SAK: killed process 3860 (syz-executor903): by fd#3 [pid 290] unlink("./701/binderfs"executing program executing program [pid 289] mkdir("./695", 0777 [pid 292] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 292] umount2("./720/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] close(3 [pid 292] newfstatat(AT_FDCWD, "./720/binderfs", [pid 290] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] rmdir("./701" [pid 292] unlink("./720/binderfs" [pid 290] <... rmdir resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] mkdir("./702", 0777 [pid 292] getdents64(3, [pid 290] <... mkdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] close(3) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3864 [pid 292] rmdir("./720") = 0 [pid 292] mkdir("./721", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3865 ./strace-static-x86_64: Process 3864 attached [pid 3864] set_robust_list(0x5555700d1660, 24) = 0 [pid 3864] chdir("./702") = 0 [pid 3864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3864] setpgid(0, 0) = 0 [pid 3864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3864] write(3, "1000", 4) = 4 [pid 3864] close(3) = 0 [pid 3864] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3864] write(1, "executing program\n", 18) = 18 [pid 3864] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3863] set_robust_list(0x5555700d1660, 24) = 0 [pid 3863] chdir("./716") = 0 [pid 3863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3863] setpgid(0, 0) = 0 [pid 3863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3863] write(3, "1000", 4) = 4 [pid 3863] close(3) = 0 [pid 3863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3863] write(1, "executing program\n", 18) = 18 [pid 3863] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3865 attached ./strace-static-x86_64: Process 3866 attached [pid 3865] set_robust_list(0x5555700d1660, 24 [pid 3861] +++ killed by SIGKILL +++ [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3866 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3861, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3865] <... set_robust_list resumed>) = 0 [pid 3864] <... openat resumed>) = 3 [pid 3865] chdir("./721") = 0 [pid 3864] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3865] setpgid(0, 0) = 0 [pid 3865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3864] <... ioctl resumed>) = 0 [pid 3866] set_robust_list(0x5555700d1660, 24 [pid 3863] <... openat resumed>) = 3 [pid 3865] <... openat resumed>) = 3 [pid 3865] write(3, "1000", 4) = 4 [pid 3865] close(3) = 0 [pid 3865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3865] write(1, "executing program\n", 18 [pid 3864] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3865] <... write resumed>) = 18 [pid 3865] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program ) = 3 [pid 3865] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3865] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3865] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3865] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3864] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3866] <... set_robust_list resumed>) = 0 [pid 3865] <... write resumed>) = ? [pid 3864] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3864, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./702", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./702", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./702/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./702/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./702/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./702") = 0 [pid 290] mkdir("./703", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3867 [pid 3863] +++ killed by SIGKILL +++ [pid 3866] chdir("./695") = 0 [pid 3866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3866] setpgid(0, 0) = 0 [pid 3866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3866] write(3, "1000", 4) = 4 [pid 3866] close(3) = 0 [pid 3866] symlink("/dev/binderfs", "./binderfs" [pid 293] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 3867 attached [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3863, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./731", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3866] <... symlink resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./716", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] openat(AT_FDCWD, "./731", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3866] write(1, "executing program\n", 18 [pid 293] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./716", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(3, "", [pid 291] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 291] newfstatat(3, "", [pid 293] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3866] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 293] umount2("./731/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3866] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(AT_FDCWD, "./731/binderfs", [pid 291] umount2("./716/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./731/binderfs" [pid 3867] set_robust_list(0x5555700d1660, 24 [pid 291] newfstatat(AT_FDCWD, "./716/binderfs", [pid 293] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3867] <... set_robust_list resumed>) = 0 [pid 293] getdents64(3, [pid 291] unlink("./716/binderfs" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] <... unlink resumed>) = 0 [pid 3867] chdir("./703" [pid 293] <... close resumed>) = 0 [pid 291] getdents64(3, executing program [pid 3867] <... chdir resumed>) = 0 [pid 3867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3867] setpgid(0, 0) = 0 [pid 3867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3867] write(3, "1000", 4) = 4 [pid 3867] close(3) = 0 [pid 3867] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3867] write(1, "executing program\n", 18) = 18 [pid 3867] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] rmdir("./731") = 0 [pid 293] mkdir("./732", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3868 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./716") = 0 [pid 291] mkdir("./717", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3869 ./strace-static-x86_64: Process 3869 attached ./strace-static-x86_64: Process 3868 attached [pid 3869] set_robust_list(0x5555700d1660, 24) = 0 [pid 3869] chdir("./717") = 0 [pid 3869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3869] setpgid(0, 0) = 0 [pid 3869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3869] write(3, "1000", 4) = 4 [pid 3869] close(3) = 0 [pid 3869] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3869] write(1, "executing program\n", 18) = 18 [pid 3869] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3868] set_robust_list(0x5555700d1660, 24) = 0 [pid 3868] chdir("./732") = 0 [pid 3868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3868] setpgid(0, 0) = 0 [pid 3868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3868] write(3, "1000", 4) = 4 [pid 3868] close(3) = 0 [pid 3868] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 3868] write(1, "executing program\n", 18) = 18 [pid 3868] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3865] +++ killed by SIGKILL +++ [pid 3869] <... openat resumed>) = 3 [pid 3868] <... openat resumed>) = 3 [pid 3867] <... openat resumed>) = 3 [pid 3866] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3865, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3869] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3868] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3867] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3866] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3869] <... ioctl resumed>) = 0 [pid 3868] <... ioctl resumed>) = 0 [pid 3867] <... ioctl resumed>) = 0 [pid 3866] <... ioctl resumed>) = 0 [pid 3869] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3868] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3867] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3866] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3869] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3868] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3867] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3866] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3869] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3868] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3867] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3866] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3869] <... openat resumed>) = 4 [pid 3868] <... openat resumed>) = 4 [pid 3867] <... openat resumed>) = 4 [pid 3869] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3868] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3867] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3866] <... openat resumed>) = 4 [pid 3866] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3869] <... write resumed>) = 8784 [pid 3868] <... write resumed>) = 8784 [pid 3869] exit_group(0 [pid 3867] <... write resumed>) = 8784 [pid 3869] <... exit_group resumed>) = ? [pid 3869] +++ exited with 0 +++ [pid 3866] <... write resumed>) = ? [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3869, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3868] +++ killed by SIGKILL +++ [pid 292] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3868, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./732", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./721", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./732", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./721", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] <... restart_syscall resumed>) = 0 [ 66.627277][ T42] tty tty1: SAK: killed process 3861 (syz-executor903): by fd#3 [ 66.640120][ T42] tty tty1: SAK: killed process 3863 (syz-executor903): by fd#3 [ 66.640146][ T42] tty tty1: SAK: killed process 3864 (syz-executor903): by fd#3 [ 66.640168][ T42] tty tty1: SAK: killed process 3865 (syz-executor903): by fd#3 [ 66.670106][ T42] tty tty1: SAK: killed process 3866 (syz-executor903): by fd#3 [pid 291] umount2("./717", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./717", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./717/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./717/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./717/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./717") = 0 [pid 291] mkdir("./718", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3870 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./721/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./721/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./721/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./721"./strace-static-x86_64: Process 3870 attached [pid 3866] +++ killed by SIGKILL +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./722", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3871 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3866, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 289] umount2("./695", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./695", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./695/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./695/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./695/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./695") = 0 [pid 289] mkdir("./696", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3872 ./strace-static-x86_64: Process 3872 attached [pid 3872] set_robust_list(0x5555700d1660, 24) = 0 [pid 3872] chdir("./696" [pid 293] umount2("./732/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3871 attached [pid 3870] set_robust_list(0x5555700d1660, 24 [pid 3872] <... chdir resumed>) = 0 [pid 3871] set_robust_list(0x5555700d1660, 24 [pid 3870] <... set_robust_list resumed>) = 0 [pid 3867] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3871] <... set_robust_list resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3867, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 3870] chdir("./718" [pid 293] newfstatat(AT_FDCWD, "./732/binderfs", [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3871] chdir("./722" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3871] <... chdir resumed>) = 0 [pid 3870] <... chdir resumed>) = 0 [pid 293] unlink("./732/binderfs" [pid 3871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] <... unlink resumed>) = 0 [pid 3871] <... prctl resumed>) = 0 [pid 3870] <... prctl resumed>) = 0 [pid 293] getdents64(3, [pid 3872] setpgid(0, 0 [pid 3871] setpgid(0, 0 [pid 3870] setpgid(0, 0 [pid 3871] <... setpgid resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3870] <... setpgid resumed>) = 0 [pid 293] close(3 [pid 3872] <... setpgid resumed>) = 0 [pid 3872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3871] <... openat resumed>) = 3 [pid 3870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3871] write(3, "1000", 4 [pid 293] <... close resumed>) = 0 [pid 3872] <... openat resumed>) = 3 [pid 3871] <... write resumed>) = 4 [pid 3870] <... openat resumed>) = 3 executing program [pid 293] rmdir("./732" [pid 3871] close(3 [pid 3870] write(3, "1000", 4 [pid 3872] write(3, "1000", 4) = 4 [pid 3872] close(3) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 3870] <... write resumed>) = 4 [pid 3871] <... close resumed>) = 0 [pid 293] mkdir("./733", 0777 [pid 3870] close(3 [pid 3871] symlink("/dev/binderfs", "./binderfs" [pid 3872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3872] write(1, "executing program\n", 18 [pid 3870] <... close resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 3872] <... write resumed>) = 18 executing program [pid 3872] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3871] <... symlink resumed>) = 0 [pid 3870] symlink("/dev/binderfs", "./binderfs" [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3871] write(1, "executing program\n", 18 [pid 3870] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 3873 attached [pid 3872] <... openat resumed>) = 3 executing program [pid 3871] <... write resumed>) = 18 [pid 3870] write(1, "executing program\n", 18 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3873 [pid 3871] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3870] <... write resumed>) = 18 [pid 3872] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3871] <... openat resumed>) = 3 [pid 3870] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3871] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3870] <... openat resumed>) = 3 [pid 3873] set_robust_list(0x5555700d1660, 24 [pid 3872] <... ioctl resumed>) = 0 [pid 3871] <... ioctl resumed>) = 0 [pid 3870] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3871] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3870] <... ioctl resumed>) = 0 [pid 3872] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3871] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3870] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3872] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3871] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3870] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3871] <... openat resumed>) = 4 [pid 3870] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3871] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3870] <... openat resumed>) = 4 [pid 3873] <... set_robust_list resumed>) = 0 [pid 3872] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3871] <... write resumed>) = 8784 [pid 3870] syscall_0x2250(0xffffff00, 0x7ffebc599050, 0x862b01, 0, 0xf, 0x7 [pid 3873] chdir("./733" [pid 3872] <... openat resumed>) = ? [pid 290] <... restart_syscall resumed>) = 0 [pid 3872] +++ killed by SIGKILL +++ [pid 3870] +++ killed by SIGKILL +++ [pid 3873] <... chdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3870, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3872, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./703", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3873] <... prctl resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... restart_syscall resumed>) = 0 [pid 3873] setpgid(0, 0 [pid 290] openat(AT_FDCWD, "./703", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3873] <... setpgid resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 3873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] umount2("./718", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(3, "", [pid 289] umount2("./696", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3873] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3873] write(3, "1000", 4 [pid 291] openat(AT_FDCWD, "./718", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] getdents64(3, [pid 289] openat(AT_FDCWD, "./696", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3873] <... write resumed>) = 4 [pid 291] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... openat resumed>) = 3 [pid 3873] close(3 [pid 291] newfstatat(3, "", [pid 290] umount2("./703/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(3, "", [pid 3873] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3873] symlink("/dev/binderfs", "./binderfs" [pid 291] getdents64(3, [pid 290] newfstatat(AT_FDCWD, "./703/binderfs", [pid 289] getdents64(3, [pid 3873] <... symlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 executing program [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3873] write(1, "executing program\n", 18 [pid 291] umount2("./718/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] unlink("./703/binderfs" [pid 289] umount2("./696/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3873] <... write resumed>) = 18 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... unlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3873] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] newfstatat(AT_FDCWD, "./718/binderfs", [pid 290] getdents64(3, [pid 289] newfstatat(AT_FDCWD, "./696/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./718/binderfs" [pid 290] close(3 [pid 289] unlink("./696/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 290] rmdir("./703" [pid 289] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 290] mkdir("./704", 0777 [pid 289] close(3 [pid 291] <... close resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 291] rmdir("./718" [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] rmdir("./696" [pid 291] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 291] mkdir("./719", 0777 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3874 [pid 289] mkdir("./697", 0777 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3874 attached ./strace-static-x86_64: Process 3875 attached [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3875 [pid 3873] <... openat resumed>) = 3 [pid 3871] +++ killed by SIGKILL +++ [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3876 ./strace-static-x86_64: Process 3876 attached [pid 3875] set_robust_list(0x5555700d1660, 24 [pid 3874] set_robust_list(0x5555700d1660, 24 [pid 3873] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3871, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3876] set_robust_list(0x5555700d1660, 24 [pid 3875] <... set_robust_list resumed>) = 0 [pid 3874] <... set_robust_list resumed>) = 0 [pid 3873] <... ioctl resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3873] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3874] chdir("./704" [pid 3873] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3876] <... set_robust_list resumed>) = 0 [pid 3875] chdir("./719" [pid 3874] <... chdir resumed>) = 0 [pid 3873] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3875] <... chdir resumed>) = 0 [pid 3874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3873] <... openat resumed>) = 4 [pid 3876] chdir("./697" [pid 3874] <... prctl resumed>) = 0 [pid 3873] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3876] <... chdir resumed>) = 0 [pid 3875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3874] setpgid(0, 0 [pid 3876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3875] <... prctl resumed>) = 0 [pid 3874] <... setpgid resumed>) = 0 [pid 3876] <... prctl resumed>) = 0 [pid 3875] setpgid(0, 0 [pid 3874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3876] setpgid(0, 0 [pid 3875] <... setpgid resumed>) = 0 [ 66.670135][ T42] tty tty1: SAK: killed process 3867 (syz-executor903): by fd#3 [ 66.670154][ T42] tty tty1: SAK: killed process 3868 (syz-executor903): by fd#3 [ 66.700949][ T42] tty tty1: SAK: killed process 3870 (syz-executor903): by fd#3 [ 66.700981][ T42] tty tty1: SAK: killed process 3871 (syz-executor903): by fd#3 [ 66.701001][ T42] tty tty1: SAK: killed process 3872 (syz-executor903): by fd#3 [pid 3874] <... openat resumed>) = 3 [pid 3876] <... setpgid resumed>) = 0 [pid 3875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3874] write(3, "1000", 4 [pid 3876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3875] <... openat resumed>) = 3 [pid 3874] <... write resumed>) = 4 [pid 3876] <... openat resumed>) = 3 [pid 3875] write(3, "1000", 4 [pid 3874] close(3 [pid 3876] write(3, "1000", 4 [pid 3875] <... write resumed>) = 4 [pid 3874] <... close resumed>) = 0 [pid 3876] <... write resumed>) = 4 [pid 3875] close(3 [pid 3874] symlink("/dev/binderfs", "./binderfs" [pid 3876] close(3 [pid 3875] <... close resumed>) = 0 [pid 3874] <... symlink resumed>) = 0 [pid 3876] <... close resumed>) = 0 [pid 3875] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 3874] write(1, "executing program\n", 18 [pid 3876] symlink("/dev/binderfs", "./binderfs" [pid 3875] <... symlink resumed>) = 0 [pid 3874] <... write resumed>) = 18 [pid 3876] <... symlink resumed>) = 0 [pid 3875] write(1, "executing program\n", 18executing program [pid 3874] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3876] write(1, "executing program\n", 18 [pid 3875] <... write resumed>) = 18 [pid 3874] <... openat resumed>) = 3 [pid 3876] <... write resumed>) = 18 [pid 3875] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3874] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3876] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3875] <... openat resumed>) = 3 [pid 3874] <... ioctl resumed>) = 0 [pid 3876] <... openat resumed>) = 3 [pid 3875] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3874] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3876] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3875] <... ioctl resumed>) = 0 [pid 3874] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3876] <... ioctl resumed>) = 0 [pid 3875] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3874] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3876] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3875] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3876] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3875] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3876] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3875] <... openat resumed>) = 4 [pid 3874] <... openat resumed>) = 4 [pid 3873] <... write resumed>) = ? [pid 3876] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3875] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3874] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3873] +++ killed by SIGKILL +++ [pid 292] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3873, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] umount2("./722", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] umount2("./733", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./722", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./733", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 293] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./722/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] umount2("./733/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./722/binderfs", [pid 293] newfstatat(AT_FDCWD, "./733/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./722/binderfs" [pid 293] unlink("./733/binderfs" [pid 292] <... unlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] getdents64(3, [pid 293] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3 [pid 293] close(3 [pid 292] <... close resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 292] rmdir("./722" [pid 293] rmdir("./733" [pid 292] <... rmdir resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] mkdir("./723", 0777 [pid 293] mkdir("./734", 0777 [pid 292] <... mkdir resumed>) = 0 [pid 3876] <... write resumed>) = ? [pid 3875] <... write resumed>) = ? [pid 3874] <... write resumed>) = ? [pid 293] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3877 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3878 ./strace-static-x86_64: Process 3877 attached [pid 3877] set_robust_list(0x5555700d1660, 24) = 0 [pid 3877] chdir("./723") = 0 [pid 3877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3877] setpgid(0, 0./strace-static-x86_64: Process 3878 attached [pid 3876] +++ killed by SIGKILL +++ [pid 3874] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3874, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3876, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./704", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./697", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3878] set_robust_list(0x5555700d1660, 24 [pid 3877] <... setpgid resumed>) = 0 [pid 3875] +++ killed by SIGKILL +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3878] <... set_robust_list resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3878] chdir("./734" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3875, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] openat(AT_FDCWD, "./704", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./697", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3878] <... chdir resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... openat resumed>) = 3 [pid 3878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... openat resumed>) = 3 [pid 3878] <... prctl resumed>) = 0 [pid 3878] setpgid(0, 0 [pid 290] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 3878] <... setpgid resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3878] <... openat resumed>) = 3 [pid 3877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 3878] write(3, "1000", 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3878] <... write resumed>) = 4 [pid 290] umount2("./704/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./697/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3878] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3878] <... close resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./704/binderfs", [pid 289] newfstatat(AT_FDCWD, "./697/binderfs", [pid 3878] symlink("/dev/binderfs", "./binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3878] <... symlink resumed>) = 0 executing program [pid 290] unlink("./704/binderfs" [pid 289] unlink("./697/binderfs" [pid 3878] write(1, "executing program\n", 18 [pid 3877] <... openat resumed>) = 3 [pid 290] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3878] <... write resumed>) = 18 [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 3878] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3878] <... openat resumed>) = 3 [pid 3877] write(3, "1000", 4 [pid 290] close(3 [pid 289] close(3 [pid 3878] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3878] <... ioctl resumed>) = 0 [pid 3877] <... write resumed>) = 4 [pid 290] rmdir("./704" [pid 289] rmdir("./697" [pid 3878] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 290] <... rmdir resumed>) = 0 [pid 3878] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3877] close(3 [pid 290] mkdir("./705", 0777executing program [pid 289] <... rmdir resumed>) = 0 [pid 3878] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3877] <... close resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./698", 0777 [pid 3877] symlink("/dev/binderfs", "./binderfs" [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 [pid 3877] <... symlink resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3877] write(1, "executing program\n", 18 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3879 [pid 3877] <... write resumed>) = 18 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3880 [pid 3877] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3877] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3877] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3877] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3877] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3877] exit_group(0) = ? ./strace-static-x86_64: Process 3879 attached [pid 3879] set_robust_list(0x5555700d1660, 24 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./719", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./719", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./719/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./719/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./719/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./719") = 0 [pid 291] mkdir("./720", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3881 [pid 3879] <... set_robust_list resumed>) = 0 [pid 3879] chdir("./705") = 0 [pid 3879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3879] setpgid(0, 0) = 0 [pid 3879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3877] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3877, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3879] write(3, "1000", 4) = 4 [pid 3879] close(3) = 0 [pid 3879] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3879] write(1, "executing program\n", 18) = 18 [pid 3879] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3881 attached [pid 3881] set_robust_list(0x5555700d1660, 24) = 0 [pid 3881] chdir("./720"./strace-static-x86_64: Process 3880 attached [pid 3878] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3878, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3881] <... chdir resumed>) = 0 [pid 3881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3880] set_robust_list(0x5555700d1660, 24 [pid 3881] setpgid(0, 0) = 0 [pid 3880] <... set_robust_list resumed>) = 0 [pid 3879] <... openat resumed>) = 3 [pid 3881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3880] chdir("./698" [pid 3881] <... openat resumed>) = 3 [pid 3880] <... chdir resumed>) = 0 [pid 3881] write(3, "1000", 4) = 4 [pid 3881] close(3) = 0 [pid 3881] symlink("/dev/binderfs", "./binderfs" [pid 3880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3879] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3880] <... prctl resumed>) = 0 [pid 3881] <... symlink resumed>) = 0 [pid 3880] setpgid(0, 0 [pid 3879] <... ioctl resumed>) = 0 [pid 3880] <... setpgid resumed>) = 0 [pid 3880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3880] write(3, "1000", 4) = 4 [pid 3880] close(3) = 0 [pid 3880] symlink("/dev/binderfs", "./binderfs" [pid 3881] write(1, "executing program\n", 18 [pid 3879] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3880] <... symlink resumed>) = 0 [pid 3879] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3879] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3880] write(1, "executing program\n", 18 [pid 3879] <... openat resumed>) = 4 [pid 3879] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [ 66.728374][ T20] tty tty1: SAK: killed process 3873 (syz-executor903): by fd#3 [ 66.737247][ T42] tty tty1: SAK: killed process 3874 (syz-executor903): by fd#3 [ 66.737273][ T42] tty tty1: SAK: killed process 3875 (syz-executor903): by fd#3 [ 66.737289][ T42] tty tty1: SAK: killed process 3876 (syz-executor903): by fd#3 [ 66.766916][ T42] tty tty1: SAK: killed process 3878 (syz-executor903): by fd#3 executing program [pid 3881] <... write resumed>) = 18 [pid 3880] <... write resumed>) = 18 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 3879] <... write resumed>) = ? [pid 3880] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./734", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./723", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3880] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./734", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./723", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 3880] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 3880] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3880] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 3880] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3880] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] umount2("./734/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./723/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3880] <... openat resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3880] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] newfstatat(AT_FDCWD, "./734/binderfs", [pid 292] newfstatat(AT_FDCWD, "./723/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./734/binderfs" [pid 292] unlink("./723/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 3880] <... write resumed>) = 8784 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3880] exit_group(0 [pid 293] close(3 [pid 292] close(3 [pid 3880] <... exit_group resumed>) = ? [pid 293] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 293] rmdir("./734" [pid 292] rmdir("./723" [pid 293] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 293] mkdir("./735", 0777 [pid 292] mkdir("./724", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3882 ./strace-static-x86_64: Process 3883 attached [pid 3883] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3883 [pid 3883] <... set_robust_list resumed>) = 0 [pid 3880] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3880, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3883] chdir("./735") = 0 [pid 3883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3883] setpgid(0, 0) = 0 [pid 3883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3883] write(3, "1000", 4) = 4 [pid 3879] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3879, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3883] close(3) = 0 [pid 3883] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 3882 attached [pid 3881] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3883] <... symlink resumed>) = 0 [pid 3883] write(1, "executing program\n", 18 [pid 3881] <... openat resumed>) = 3 executing program [pid 3882] set_robust_list(0x5555700d1660, 24 [pid 3883] <... write resumed>) = 18 [pid 3883] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3881] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3883] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3883] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3882] <... set_robust_list resumed>) = 0 [pid 3881] <... ioctl resumed>) = 0 [pid 3883] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3883] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3883] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3881] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3882] chdir("./724" [pid 3881] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3883] <... write resumed>) = 8784 [pid 3882] <... chdir resumed>) = 0 [pid 3881] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = ? [pid 3882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3882] setpgid(0, 0) = 0 [pid 3882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3882] write(3, "1000", 4) = 4 [pid 3882] close(3) = 0 [pid 3882] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3882] write(1, "executing program\n", 18) = 18 [pid 3882] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./698", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./698", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./698/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./698/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./698/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./698") = 0 [pid 289] mkdir("./699", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3884 [pid 3882] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3882] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3882] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3882] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3881] +++ killed by SIGKILL +++ [pid 290] <... restart_syscall resumed>) = 0 [pid 3882] <... write resumed>) = 8784 [pid 3883] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3881, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3883, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3882] exit_group(0) = ? executing program ./strace-static-x86_64: Process 3884 attached [pid 3884] set_robust_list(0x5555700d1660, 24) = 0 [pid 3884] chdir("./699") = 0 [pid 3884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3884] setpgid(0, 0) = 0 [pid 3884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3884] write(3, "1000", 4) = 4 [pid 3884] close(3) = 0 [pid 3884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3884] write(1, "executing program\n", 18) = 18 [pid 3884] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3884] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3884] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3884] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3884] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3884] exit_group(0) = ? [pid 291] umount2("./720", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./720", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./720/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./720/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./720/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./720") = 0 [pid 291] mkdir("./721", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3885 [pid 290] umount2("./705", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./705", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./705/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./705/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./705/binderfs" [pid 3882] +++ exited with 0 +++ [pid 290] <... unlink resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3882, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] getdents64(3, [pid 293] <... restart_syscall resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 293] umount2("./735", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] rmdir("./705"./strace-static-x86_64: Process 3885 attached [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... rmdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "./735", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] mkdir("./706", 0777 [pid 3885] set_robust_list(0x5555700d1660, 24 [pid 293] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 293] newfstatat(3, "", [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3885] <... set_robust_list resumed>) = 0 [pid 3884] +++ exited with 0 +++ [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 3886 attached [pid 293] getdents64(3, [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3886 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3884, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3885] chdir("./721" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] umount2("./735/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./735/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./735/binderfs" [pid 3885] <... chdir resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./735") = 0 [pid 293] mkdir("./736", 0777 [pid 3886] set_robust_list(0x5555700d1660, 24 [pid 3885] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3886] <... set_robust_list resumed>) = 0 [pid 3885] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 3887 attached [pid 3887] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3887 [pid 3887] <... set_robust_list resumed>) = 0 [pid 3887] chdir("./736") = 0 [pid 3885] setpgid(0, 0 [pid 3887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3887] setpgid(0, 0) = 0 [pid 3887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3887] write(3, "1000", 4) = 4 [pid 3887] close(3) = 0 [pid 3887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3885] <... setpgid resumed>) = 0 [pid 3887] write(1, "executing program\n", 18executing program ) = 18 [pid 3887] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... restart_syscall resumed>) = 0 [pid 3887] <... openat resumed>) = 3 [pid 3885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3887] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] umount2("./724", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3887] <... ioctl resumed>) = 0 [pid 3885] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3887] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] openat(AT_FDCWD, "./724", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3887] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... openat resumed>) = 3 [pid 3887] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] newfstatat(3, "", [pid 3887] <... openat resumed>) = 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3887] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] getdents64(3, [pid 3886] chdir("./706" [pid 3885] write(3, "1000", 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3886] <... chdir resumed>) = 0 [pid 3885] <... write resumed>) = 4 [pid 3886] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3885] close(3 [pid 3886] <... prctl resumed>) = 0 [pid 3885] <... close resumed>) = 0 [pid 3886] setpgid(0, 0 [pid 3885] symlink("/dev/binderfs", "./binderfs" [pid 3886] <... setpgid resumed>) = 0 [pid 3885] <... symlink resumed>) = 0 executing program [pid 3886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3885] write(1, "executing program\n", 18 [pid 3886] <... openat resumed>) = 3 [pid 3885] <... write resumed>) = 18 [pid 3886] write(3, "1000", 4 [pid 3885] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3886] <... write resumed>) = 4 [pid 3885] <... openat resumed>) = 3 [pid 3886] close(3 [pid 3885] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3886] <... close resumed>) = 0 [pid 3885] <... ioctl resumed>) = 0 [pid 3886] symlink("/dev/binderfs", "./binderfs" [pid 3885] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3886] <... symlink resumed>) = 0 [pid 3885] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3886] write(1, "executing program\n", 18 [pid 3885] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program [pid 3886] <... write resumed>) = 18 [pid 3886] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3886] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3886] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3886] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3887] <... write resumed>) = ? [pid 3886] <... openat resumed>) = 4 [pid 3885] <... openat resumed>) = 4 [ 66.780090][ T20] tty tty1: SAK: killed process 3879 (syz-executor903): by fd#3 [ 66.796786][ T20] tty tty1: SAK: killed process 3881 (syz-executor903): by fd#3 [ 66.796821][ T20] tty tty1: SAK: killed process 3883 (syz-executor903): by fd#3 [ 66.821730][ T42] tty tty1: SAK: killed process 3887 (syz-executor903): by fd#3 [pid 289] <... restart_syscall resumed>) = 0 [pid 3885] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 292] umount2("./724/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3885] <... write resumed>) = 8784 [pid 292] newfstatat(AT_FDCWD, "./724/binderfs", [pid 289] umount2("./699", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] unlink("./724/binderfs" [pid 289] openat(AT_FDCWD, "./699", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... unlink resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 289] newfstatat(3, "", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] close(3 [pid 289] getdents64(3, [pid 292] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] rmdir("./724" [pid 289] umount2("./699/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... rmdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] mkdir("./725", 0777 [pid 289] newfstatat(AT_FDCWD, "./699/binderfs", [pid 292] <... mkdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] unlink("./699/binderfs") = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3888 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./699") = 0 [pid 289] mkdir("./700", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3889 ./strace-static-x86_64: Process 3889 attached [pid 3889] set_robust_list(0x5555700d1660, 24) = 0 [pid 3889] chdir("./700") = 0 [pid 3889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3889] setpgid(0, 0) = 0 [pid 3889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3889] write(3, "1000", 4) = 4 [pid 3889] close(3./strace-static-x86_64: Process 3888 attached ) = 0 [pid 3888] set_robust_list(0x5555700d1660, 24 [pid 3889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3888] <... set_robust_list resumed>) = 0 [pid 3888] chdir("./725") = 0 [pid 3889] write(1, "executing program\n", 18) = 18 [pid 3889] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3889] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3889] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3889] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3889] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3888] setpgid(0, 0 [pid 3889] <... write resumed>) = 8784 [pid 3888] <... setpgid resumed>) = 0 [pid 3885] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3885, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3889] exit_group(0 [pid 3888] <... openat resumed>) = 3 [pid 3889] <... exit_group resumed>) = ? executing program [pid 3888] write(3, "1000", 4) = 4 [pid 3888] close(3 [pid 291] <... restart_syscall resumed>) = 0 [pid 3886] +++ killed by SIGKILL +++ [pid 291] umount2("./721", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3886, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./721", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./721/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./721/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./721/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./721") = 0 [pid 291] mkdir("./722", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3890 [pid 3888] <... close resumed>) = 0 [pid 3888] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3888] write(1, "executing program\n", 18) = 18 [pid 3888] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3888] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3888] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3888] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3888] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3888] exit_group(0) = ? ./strace-static-x86_64: Process 3890 attached [pid 3890] set_robust_list(0x5555700d1660, 24) = 0 [pid 3890] chdir("./722") = 0 [pid 3890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3890] setpgid(0, 0) = 0 [pid 3890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3890] write(3, "1000", 4) = 4 [pid 3889] +++ exited with 0 +++ [pid 3887] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3887, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3889, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3890] close(3) = 0 executing program [pid 3890] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3890] write(1, "executing program\n", 18) = 18 [pid 3890] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./736", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./736", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./706", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 290] openat(AT_FDCWD, "./706", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 290] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./736/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(AT_FDCWD, "./736/binderfs", [pid 290] umount2("./706/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./736/binderfs" [pid 290] newfstatat(AT_FDCWD, "./706/binderfs", [pid 293] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 290] unlink("./706/binderfs" [pid 289] <... restart_syscall resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... unlink resumed>) = 0 [pid 293] close(3 [pid 290] getdents64(3, [pid 293] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] umount2("./700", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3890] <... openat resumed>) = 3 [pid 3888] +++ exited with 0 +++ [pid 293] rmdir("./736" [pid 290] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3890] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... rmdir resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3888, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] openat(AT_FDCWD, "./700", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3890] <... ioctl resumed>) = 0 [pid 293] mkdir("./737", 0777 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... close resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3890] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... mkdir resumed>) = 0 [pid 290] rmdir("./706" [pid 289] newfstatat(3, "", [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3890] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... rmdir resumed>) = 0 [pid 289] getdents64(3, [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3891 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./700/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./700/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./700/binderfs"./strace-static-x86_64: Process 3891 attached [pid 3890] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] mkdir("./707", 0777 [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./700") = 0 [pid 289] mkdir("./701", 0777) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3891] set_robust_list(0x5555700d1660, 24 [pid 3890] <... openat resumed>) = 4 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3892 ./strace-static-x86_64: Process 3892 attached [pid 3892] set_robust_list(0x5555700d1660, 24) = 0 [pid 3892] chdir("./701") = 0 [pid 3892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3892] setpgid(0, 0) = 0 executing program executing program executing program [pid 3892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3890] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3892] <... openat resumed>) = 3 [pid 3892] write(3, "1000", 4) = 4 [pid 3892] close(3) = 0 [pid 3892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3890] <... write resumed>) = 8784 [pid 3892] write(1, "executing program\n", 18) = 18 [pid 3892] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3892] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3892, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3893 attached [pid 3893] set_robust_list(0x5555700d1660, 24) = 0 [pid 3893] chdir("./707") = 0 [pid 3893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3893] setpgid(0, 0) = 0 [pid 3893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3893] write(3, "1000", 4) = 4 [pid 3893] close(3) = 0 [pid 3893] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3893] write(1, "executing program\n", 18) = 18 [pid 3893] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3893] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3893] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3893] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3893] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3893] exit_group(0) = ? [pid 3891] <... set_robust_list resumed>) = 0 [pid 3891] chdir("./737") = 0 [pid 3891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3891] setpgid(0, 0) = 0 [pid 3891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3891] write(3, "1000", 4) = 4 [pid 3891] close(3) = 0 [pid 3891] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3891] write(1, "executing program\n", 18) = 18 [pid 3891] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3891] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3891] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3891] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3891] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3891] exit_group(0) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3893 [pid 3891] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3891, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3893] +++ exited with 0 +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./701", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3893, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./701", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./701/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./701/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./701/binderfs" [pid 292] umount2("./725", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./701") = 0 [pid 289] mkdir("./702", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3894 ./strace-static-x86_64: Process 3894 attached [pid 3894] set_robust_list(0x5555700d1660, 24) = 0 [pid 3894] chdir("./702") = 0 [pid 3894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3894] setpgid(0, 0) = 0 [pid 3894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3894] write(3, "1000", 4) = 4 [pid 3894] close(3) = 0 [pid 3894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3894] write(1, "executing program\n", 18) = 18 [pid 3894] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./725", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./725/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./725/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./725/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./725") = 0 [pid 292] mkdir("./726", 0777 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3895 attached [pid 3890] +++ killed by SIGKILL +++ [pid 293] umount2("./737", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3895 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3890, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] openat(AT_FDCWD, "./737", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./737/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./737/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./737/binderfs" [pid 3895] set_robust_list(0x5555700d1660, 24 [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./737" [pid 3895] <... set_robust_list resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./738", 0777 [pid 3895] chdir("./726" [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3895] <... chdir resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3896 ./strace-static-x86_64: Process 3896 attached [pid 3895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3894] <... openat resumed>) = 3 [pid 3894] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3895] <... prctl resumed>) = 0 [pid 3894] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3894] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [ 66.830416][ T20] tty tty1: SAK: killed process 3885 (syz-executor903): by fd#3 [ 66.830444][ T20] tty tty1: SAK: killed process 3886 (syz-executor903): by fd#3 [ 66.830463][ T20] tty tty1: SAK: killed process 3887 (syz-executor903): by fd#3 [ 66.863570][ T20] tty tty1: SAK: killed process 3890 (syz-executor903): by fd#3 [ 66.863598][ T20] tty tty1: SAK: killed process 3892 (syz-executor903): by fd#3 [pid 3894] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3896] set_robust_list(0x5555700d1660, 24 [pid 3895] setpgid(0, 0 [pid 3894] <... write resumed>) = ? [pid 3895] <... setpgid resumed>) = 0 [pid 3895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] umount2("./707", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3896] <... set_robust_list resumed>) = 0 [pid 3895] write(3, "1000", 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3896] chdir("./738" [pid 3895] <... write resumed>) = 4 [pid 3896] <... chdir resumed>) = 0 [pid 291] umount2("./722", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3896] <... prctl resumed>) = 0 [pid 291] openat(AT_FDCWD, "./722", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./707", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3896] setpgid(0, 0 [pid 291] <... openat resumed>) = 3 [pid 3896] <... setpgid resumed>) = 0 [pid 291] newfstatat(3, "", [pid 3896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3896] <... openat resumed>) = 3 [pid 3895] close(3 [pid 3894] +++ killed by SIGKILL +++ [pid 291] getdents64(3, [pid 290] <... openat resumed>) = 3 [pid 3895] <... close resumed>) = 0 [pid 290] newfstatat(3, "", [pid 3895] symlink("/dev/binderfs", "./binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3896] write(3, "1000", 4 [pid 3895] <... symlink resumed>) = 0 [pid 291] umount2("./722/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, executing program [pid 3895] write(1, "executing program\n", 18 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3894, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3895] <... write resumed>) = 18 [pid 291] newfstatat(AT_FDCWD, "./722/binderfs", [pid 290] umount2("./707/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3895] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./702", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3896] <... write resumed>) = 4 [pid 3895] <... openat resumed>) = 3 [pid 291] unlink("./722/binderfs" [pid 290] newfstatat(AT_FDCWD, "./707/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3895] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] openat(AT_FDCWD, "./702", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3895] <... ioctl resumed>) = 0 [pid 291] getdents64(3, [pid 290] unlink("./707/binderfs" [pid 3896] close(3 [pid 3895] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3896] <... close resumed>) = 0 [pid 3895] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] close(3 [pid 290] getdents64(3, [pid 289] newfstatat(3, "", [pid 3896] symlink("/dev/binderfs", "./binderfs" [pid 3895] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... close resumed>) = 0 [pid 290] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3895] <... openat resumed>) = 4 [pid 291] rmdir("./722" [pid 290] <... close resumed>) = 0 [pid 3895] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] rmdir("./707" [pid 289] getdents64(3, [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] mkdir("./708", 0777 [pid 3895] <... write resumed>) = 8784 [pid 291] mkdir("./723", 0777 [pid 290] <... mkdir resumed>) = 0 [pid 289] umount2("./702/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3897 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] newfstatat(AT_FDCWD, "./702/binderfs", ./strace-static-x86_64: Process 3897 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3897] set_robust_list(0x5555700d1660, 24) = 0 [pid 3897] chdir("./708") = 0 [pid 3897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] unlink("./702/binderfs" [pid 3897] <... prctl resumed>) = 0 [pid 3897] setpgid(0, 0) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3898 [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./702" [pid 3897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 289] <... rmdir resumed>) = 0 [pid 3897] write(3, "1000", 4 executing program [pid 289] mkdir("./703", 0777 [pid 3897] <... write resumed>) = 4 [pid 3897] close(3) = 0 [pid 3897] symlink("/dev/binderfs", "./binderfs" [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3897] <... symlink resumed>) = 0 [pid 3897] write(1, "executing program\n", 18) = 18 [pid 3897] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3898 attached [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3899 [pid 3898] set_robust_list(0x5555700d1660, 24) = 0 executing program executing program executing program [pid 3898] chdir("./723") = 0 [pid 3898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3898] setpgid(0, 0) = 0 [pid 3898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3898] write(3, "1000", 4) = 4 [pid 3898] close(3) = 0 [pid 3898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3898] write(1, "executing program\n", 18) = 18 [pid 3898] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3899 attached [pid 3899] set_robust_list(0x5555700d1660, 24) = 0 [pid 3899] chdir("./703") = 0 [pid 3899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3899] setpgid(0, 0) = 0 [pid 3899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3899] write(3, "1000", 4) = 4 [pid 3899] close(3) = 0 [pid 3899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3899] write(1, "executing program\n", 18) = 18 [pid 3899] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3896] <... symlink resumed>) = 0 [pid 3896] write(1, "executing program\n", 18) = 18 [pid 3896] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3895] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3895, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3897] <... openat resumed>) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3898] <... openat resumed>) = 3 [pid 3897] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3898] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3897] <... ioctl resumed>) = 0 [pid 3897] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3898] <... ioctl resumed>) = 0 [pid 3897] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3899] <... openat resumed>) = 3 [pid 3897] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3898] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3896] <... openat resumed>) = 3 [pid 3897] <... openat resumed>) = 4 [pid 3898] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3897] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3898] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3896] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3897] <... write resumed>) = 8784 [pid 3898] <... openat resumed>) = 4 [pid 3896] <... ioctl resumed>) = 0 [pid 3898] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3897] exit_group(0) = ? [pid 3896] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3896] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3899] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3899] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3899] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3898] <... write resumed>) = 8784 [pid 3896] <... openat resumed>) = 4 [pid 3898] exit_group(0 [pid 3896] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3897] +++ exited with 0 +++ [pid 3898] <... exit_group resumed>) = ? [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3897, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3896] <... write resumed>) = 8784 [pid 3896] exit_group(0 [pid 3899] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3896] <... exit_group resumed>) = ? [pid 3899] <... write resumed>) = ? [pid 3898] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3898, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] umount2("./708", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./726", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./708", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./726", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 292] getdents64(3, [pid 291] umount2("./723", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./726/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] openat(AT_FDCWD, "./723", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./708/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./726/binderfs", [pid 291] newfstatat(3, "", [pid 290] newfstatat(AT_FDCWD, "./708/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./726/binderfs" [pid 291] getdents64(3, [pid 290] unlink("./708/binderfs" [pid 292] <... unlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... unlink resumed>) = 0 [pid 292] getdents64(3, [pid 291] umount2("./723/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3 [pid 291] newfstatat(AT_FDCWD, "./723/binderfs", [pid 290] close(3 [pid 292] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... close resumed>) = 0 [pid 292] rmdir("./726" [pid 291] unlink("./723/binderfs" [pid 290] rmdir("./708" [pid 292] <... rmdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 292] mkdir("./727", 0777 [pid 291] getdents64(3, [pid 290] mkdir("./709", 0777 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] close(3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... close resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3900 [pid 291] rmdir("./723" [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3901 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./724", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3902 [pid 3899] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3900 attached [pid 3900] set_robust_list(0x5555700d1660, 24 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3899, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3901 attached [pid 3896] +++ exited with 0 +++ [pid 3901] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 3902 attached [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3896, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] umount2("./703", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3901] <... set_robust_list resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3900] <... set_robust_list resumed>) = 0 [pid 289] openat(AT_FDCWD, "./703", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3901] chdir("./709" [pid 289] <... openat resumed>) = 3 [pid 3902] set_robust_list(0x5555700d1660, 24 [pid 3901] <... chdir resumed>) = 0 [pid 289] newfstatat(3, "", [pid 3902] <... set_robust_list resumed>) = 0 [pid 3901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3900] chdir("./727" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3900] <... chdir resumed>) = 0 [pid 3901] <... prctl resumed>) = 0 [pid 289] getdents64(3, [pid 3902] chdir("./724" [pid 3901] setpgid(0, 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 3902] <... chdir resumed>) = 0 [pid 3901] <... setpgid resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./738", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./703/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./738", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 289] newfstatat(AT_FDCWD, "./703/binderfs", [pid 3902] <... prctl resumed>) = 0 [pid 3901] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3902] setpgid(0, 0 [pid 3901] write(3, "1000", 4 [pid 293] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3902] <... setpgid resumed>) = 0 [pid 3901] <... write resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] unlink("./703/binderfs" [pid 3901] close(3 [pid 293] umount2("./738/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./738/binderfs", [pid 3902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3901] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3901] symlink("/dev/binderfs", "./binderfs" [pid 3900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] unlink("./738/binderfs" [pid 289] getdents64(3, [pid 3902] <... openat resumed>) = 3 [pid 3901] <... symlink resumed>) = 0 [pid 3900] <... prctl resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3902] write(3, "1000", 4 [pid 3901] write(1, "executing program\n", 18 [pid 3900] setpgid(0, 0 [pid 293] getdents64(3, executing program [pid 289] close(3 [pid 3902] <... write resumed>) = 4 [pid 3901] <... write resumed>) = 18 [pid 3900] <... setpgid resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3902] close(3 [pid 3901] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] close(3 [pid 289] <... close resumed>) = 0 [pid 3902] <... close resumed>) = 0 [pid 3901] <... openat resumed>) = 3 [pid 3900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... close resumed>) = 0 [pid 289] rmdir("./703" [pid 3902] symlink("/dev/binderfs", "./binderfs" [pid 3901] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3900] <... openat resumed>) = 3 [pid 293] rmdir("./738" [pid 289] <... rmdir resumed>) = 0 [pid 3901] <... ioctl resumed>) = 0 [pid 289] mkdir("./704", 0777 [pid 3901] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... rmdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3902] <... symlink resumed>) = 0 [pid 3901] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3900] write(3, "1000", 4 [pid 293] mkdir("./739", 0777 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3902] write(1, "executing program\n", 18 [pid 3901] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program [pid 3900] <... write resumed>) = 4 [pid 293] <... mkdir resumed>) = 0 [pid 3901] <... openat resumed>) = 4 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3902] <... write resumed>) = 18 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3903 [pid 3900] close(3 [pid 3901] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3903 attached [ 66.885419][ T42] tty tty1: SAK: killed process 3894 (syz-executor903): by fd#3 [ 66.900214][ T42] tty tty1: SAK: killed process 3895 (syz-executor903): by fd#3 [ 66.915028][ T42] tty tty1: SAK: killed process 3896 (syz-executor903): by fd#3 [ 66.915056][ T42] tty tty1: SAK: killed process 3899 (syz-executor903): by fd#3 [pid 3902] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3900] <... close resumed>) = 0 [pid 3903] set_robust_list(0x5555700d1660, 24 [pid 3902] <... openat resumed>) = 3 [pid 3900] symlink("/dev/binderfs", "./binderfs" [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3904 [pid 3903] <... set_robust_list resumed>) = 0 [pid 3902] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3900] <... symlink resumed>) = 0 [pid 3903] chdir("./704" [pid 3902] <... ioctl resumed>) = 0 [pid 3900] write(1, "executing program\n", 18executing program [pid 3903] <... chdir resumed>) = 0 [pid 3902] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3900] <... write resumed>) = 18 [pid 3903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3902] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3900] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3903] <... prctl resumed>) = 0 [pid 3902] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3900] <... openat resumed>) = 3 [pid 3903] setpgid(0, 0 [pid 3900] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3903] <... setpgid resumed>) = 0 [pid 3900] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 3904 attached [pid 3903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3902] <... openat resumed>) = 4 [pid 3901] <... write resumed>) = ? [pid 3900] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3904] set_robust_list(0x5555700d1660, 24 [pid 3903] <... openat resumed>) = 3 [pid 3902] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3900] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3901] +++ killed by SIGKILL +++ [pid 3904] <... set_robust_list resumed>) = 0 [pid 3903] write(3, "1000", 4 [pid 3902] <... write resumed>) = 8784 [pid 3900] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3901, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3904] chdir("./739" [pid 3903] <... write resumed>) = 4 [pid 3900] <... openat resumed>) = ? [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3903] close(3) = 0 [pid 3903] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3903] write(1, "executing program\n", 18) = 18 [pid 3903] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3903] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3903] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3903] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3903] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3903] exit_group(0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3903] <... exit_group resumed>) = ? [pid 3903] +++ exited with 0 +++ [pid 3900] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3900, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./709", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3903, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3904] <... chdir resumed>) = 0 [pid 290] openat(AT_FDCWD, "./709", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./709/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./709/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./709/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./709") = 0 [pid 290] mkdir("./710", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3905 ./strace-static-x86_64: Process 3905 attached [pid 3905] set_robust_list(0x5555700d1660, 24) = 0 [pid 3905] chdir("./710") = 0 [pid 3905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3905] setpgid(0, 0) = 0 [pid 3905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3905] write(3, "1000", 4) = 4 [pid 3905] close(3) = 0 [pid 3904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3902] +++ killed by SIGKILL +++ [pid 3904] <... prctl resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3902, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3904] setpgid(0, 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] umount2("./704", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3904] <... setpgid resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3905] symlink("/dev/binderfs", "./binderfs" [pid 3904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] openat(AT_FDCWD, "./704", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3904] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 3904] write(3, "1000", 4 [pid 289] newfstatat(3, "", [pid 3904] <... write resumed>) = 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3904] close(3 [pid 289] getdents64(3, [pid 3904] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3904] symlink("/dev/binderfs", "./binderfs" [pid 289] umount2("./704/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3905] <... symlink resumed>) = 0 [pid 3905] write(1, "executing program\n", 18 [pid 3904] <... symlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3904] write(1, "executing program\n", 18executing program executing program [pid 289] newfstatat(AT_FDCWD, "./704/binderfs", [pid 3904] <... write resumed>) = 18 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3905] <... write resumed>) = 18 [pid 3904] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] unlink("./704/binderfs" [pid 3905] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3904] <... openat resumed>) = 3 [pid 3905] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... unlink resumed>) = 0 [pid 3905] <... ioctl resumed>) = 0 [pid 3904] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 3904] <... ioctl resumed>) = 0 [pid 3904] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3904] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... restart_syscall resumed>) = 0 [pid 3904] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] umount2("./727", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] close(3 [pid 3904] <... openat resumed>) = 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3904] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] openat(AT_FDCWD, "./727", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] umount2("./724", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3904] <... write resumed>) = 8784 [pid 292] newfstatat(3, "", [pid 291] openat(AT_FDCWD, "./724", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] rmdir("./704" [pid 3904] exit_group(0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... openat resumed>) = 3 [pid 3904] <... exit_group resumed>) = ? [pid 292] getdents64(3, [pid 291] newfstatat(3, "", [pid 289] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./727/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(AT_FDCWD, "./727/binderfs", [pid 291] umount2("./724/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3904] +++ exited with 0 +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] mkdir("./705", 0777 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3904, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] unlink("./727/binderfs" [pid 291] newfstatat(AT_FDCWD, "./724/binderfs", [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3905] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] getdents64(3, [pid 291] unlink("./724/binderfs" [pid 289] <... mkdir resumed>) = 0 [pid 3905] <... ioctl resumed>) = ? [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... unlink resumed>) = 0 [pid 292] close(3executing program [pid 291] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] rmdir("./727" [pid 291] close(3 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 292] mkdir("./728", 0777 [pid 291] rmdir("./724" [pid 292] <... mkdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] mkdir("./725", 0777 [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3906 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] umount2("./739", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3907 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./739", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./739/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./739/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./739/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./739") = 0 [pid 293] mkdir("./740", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3908 ./strace-static-x86_64: Process 3907 attached [pid 3907] set_robust_list(0x5555700d1660, 24) = 0 [pid 3907] chdir("./725") = 0 [pid 3907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3907] setpgid(0, 0) = 0 [pid 3907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3907] write(3, "1000", 4) = 4 [pid 3907] close(3) = 0 [pid 3907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3907] write(1, "executing program\n", 18) = 18 [pid 3907] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3909 ./strace-static-x86_64: Process 3909 attached [pid 3909] set_robust_list(0x5555700d1660, 24) = 0 [pid 3909] chdir("./705") = 0 [pid 3909] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3908 attached ./strace-static-x86_64: Process 3906 attached [pid 3905] +++ killed by SIGKILL +++ [pid 3908] set_robust_list(0x5555700d1660, 24 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3905, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3908] <... set_robust_list resumed>) = 0 [pid 3906] set_robust_list(0x5555700d1660, 24 [pid 3907] <... openat resumed>) = 3 [pid 3907] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3908] chdir("./740" [pid 3907] <... ioctl resumed>) = 0 [pid 3907] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3907] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3908] <... chdir resumed>) = 0 [pid 3906] <... set_robust_list resumed>) = 0 [pid 3908] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3907] <... openat resumed>) = 4 [ 66.937731][ T42] tty tty1: SAK: killed process 3901 (syz-executor903): by fd#3 [ 66.947271][ T42] tty tty1: SAK: killed process 3900 (syz-executor903): by fd#3 [ 66.947300][ T42] tty tty1: SAK: killed process 3902 (syz-executor903): by fd#3 [ 66.969994][ T42] tty tty1: SAK: killed process 3905 (syz-executor903): by fd#3 [pid 3907] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3909] <... prctl resumed>) = 0 [pid 3908] <... prctl resumed>) = 0 [pid 3907] <... write resumed>) = ? [pid 3906] chdir("./728" [pid 290] <... restart_syscall resumed>) = 0 [pid 3908] setpgid(0, 0 [pid 3906] <... chdir resumed>) = 0 [pid 290] umount2("./710", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3908] <... setpgid resumed>) = 0 [pid 3906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./710", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... openat resumed>) = 3 [pid 3906] <... prctl resumed>) = 0 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3908] <... openat resumed>) = 3 [pid 290] umount2("./710/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./710/binderfs", [pid 3908] write(3, "1000", 4 [pid 3906] setpgid(0, 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./710/binderfs" [pid 3908] <... write resumed>) = 4 [pid 3906] <... setpgid resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./710" [pid 3909] setpgid(0, 0 [pid 3908] close(3 [pid 3906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3909] <... setpgid resumed>) = 0 [pid 3908] <... close resumed>) = 0 [pid 3907] +++ killed by SIGKILL +++ [pid 3906] <... openat resumed>) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3907, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] mkdir("./711", 0777 [pid 3909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3908] symlink("/dev/binderfs", "./binderfs" [pid 3906] write(3, "1000", 4 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3908] <... symlink resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 3909] <... openat resumed>) = 3 [pid 3908] write(1, "executing program\n", 18 [pid 3906] <... write resumed>) = 4 ./strace-static-x86_64: Process 3910 attached [pid 3908] <... write resumed>) = 18 [pid 3909] write(3, "1000", 4 [pid 3908] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3906] close(3 [pid 3910] set_robust_list(0x5555700d1660, 24 [pid 3908] <... openat resumed>) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3910 [pid 3910] <... set_robust_list resumed>) = 0 [pid 3908] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3906] <... close resumed>) = 0 [pid 3908] <... ioctl resumed>) = 0 [pid 3906] symlink("/dev/binderfs", "./binderfs" [pid 3908] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program [pid 3906] <... symlink resumed>) = 0 [pid 3908] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3906] write(1, "executing program\n", 18 [pid 3908] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3906] <... write resumed>) = 18 [pid 3908] <... openat resumed>) = 4 [pid 3906] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3908] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3906] <... openat resumed>) = 3 [pid 3910] chdir("./711" [pid 3909] <... write resumed>) = 4 [pid 3908] <... write resumed>) = 8784 [pid 3906] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3910] <... chdir resumed>) = 0 [pid 3906] <... ioctl resumed>) = ? [pid 3910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3909] close(3 [pid 3910] setpgid(0, 0 [pid 3909] <... close resumed>) = 0 [pid 3909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3910] <... setpgid resumed>) = 0 [pid 3910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3909] write(1, "executing program\n", 18executing program ) = 18 [pid 3909] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3910] write(3, "1000", 4 [pid 3909] <... openat resumed>) = 3 [pid 3910] <... write resumed>) = 4 [pid 3909] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... restart_syscall resumed>) = 0 [pid 3910] close(3 [pid 3909] <... ioctl resumed>) = 0 [pid 3910] <... close resumed>) = 0 [pid 3909] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3910] symlink("/dev/binderfs", "./binderfs" [pid 3909] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] umount2("./725", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3910] <... symlink resumed>) = 0 [pid 3909] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3910] write(1, "executing program\n", 18 [pid 3909] <... openat resumed>) = 4 [pid 291] openat(AT_FDCWD, "./725", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3910] <... write resumed>) = 18 [pid 3909] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... openat resumed>) = 3 [pid 3910] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3909] <... write resumed>) = 8784 [pid 291] newfstatat(3, "", [pid 3910] <... openat resumed>) = 3 [pid 3909] exit_group(0 [pid 3908] +++ killed by SIGKILL +++ [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3910] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3909] <... exit_group resumed>) = ? [pid 3906] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3908, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] getdents64(3, [pid 3910] <... ioctl resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3906, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3910] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] umount2("./725/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3910] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3910] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] newfstatat(AT_FDCWD, "./725/binderfs", [pid 3910] <... openat resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3910] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] unlink("./725/binderfs" [pid 3910] <... write resumed>) = 8784 [pid 291] <... unlink resumed>) = 0 [pid 3910] exit_group(0 [pid 291] getdents64(3, [pid 3910] <... exit_group resumed>) = ? [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./725") = 0 [pid 291] mkdir("./726", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3911 ./strace-static-x86_64: Process 3911 attached [pid 3909] +++ exited with 0 +++ [pid 3911] set_robust_list(0x5555700d1660, 24 [pid 3910] +++ exited with 0 +++ [pid 293] umount2("./740", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./728", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3911] <... set_robust_list resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3910, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3909, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3911] chdir("./726" [pid 293] openat(AT_FDCWD, "./740", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./728", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] umount2("./705", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3911] <... chdir resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] newfstatat(3, "", [pid 289] openat(AT_FDCWD, "./705", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3911] <... prctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 3911] setpgid(0, 0 [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(3, "", [pid 3911] <... setpgid resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 289] getdents64(3, [pid 3911] <... openat resumed>) = 3 [pid 293] umount2("./740/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3911] write(3, "1000", 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./728/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3911] <... write resumed>) = 4 [pid 293] newfstatat(AT_FDCWD, "./740/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3911] close(3 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./728/binderfs", [pid 289] umount2("./705/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3911] <... close resumed>) = 0 [pid 293] unlink("./740/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3911] symlink("/dev/binderfs", "./binderfs" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... unlink resumed>) = 0 [pid 292] unlink("./728/binderfs" [pid 3911] <... symlink resumed>) = 0 [pid 293] getdents64(3, [pid 292] <... unlink resumed>) = 0 executing program [pid 289] newfstatat(AT_FDCWD, "./705/binderfs", [pid 3911] write(1, "executing program\n", 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3911] <... write resumed>) = 18 [pid 293] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] unlink("./705/binderfs" [pid 3911] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... close resumed>) = 0 [pid 292] close(3 [pid 289] <... unlink resumed>) = 0 [pid 3911] <... openat resumed>) = 3 [pid 293] rmdir("./740" [pid 292] <... close resumed>) = 0 [pid 289] getdents64(3, [pid 3911] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3911] <... ioctl resumed>) = 0 [pid 289] close(3 [pid 3911] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... close resumed>) = 0 [pid 3911] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... rmdir resumed>) = 0 [pid 292] rmdir("./728" [pid 289] rmdir("./705" [pid 3911] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] mkdir("./741", 0777 [pid 292] <... rmdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3911] <... openat resumed>) = 4 [pid 289] mkdir("./706", 0777 [pid 3911] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... mkdir resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] mkdir("./729", 0777 [pid 3911] <... write resumed>) = ? [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./711", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3912 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3913 [pid 290] openat(AT_FDCWD, "./711", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./711/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./711/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./711/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./711") = 0 [pid 290] mkdir("./712", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3914 ./strace-static-x86_64: Process 3913 attached [pid 3913] set_robust_list(0x5555700d1660, 24) = 0 [pid 3913] chdir("./729") = 0 [pid 3913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3913] setpgid(0, 0) = 0 [pid 3913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3915 ./strace-static-x86_64: Process 3914 attached ./strace-static-x86_64: Process 3912 attached [pid 3911] +++ killed by SIGKILL +++ [pid 3914] set_robust_list(0x5555700d1660, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3911, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3915 attached [pid 3914] <... set_robust_list resumed>) = 0 [pid 3912] set_robust_list(0x5555700d1660, 24 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3915] set_robust_list(0x5555700d1660, 24 [pid 3914] chdir("./712" [pid 3913] <... openat resumed>) = 3 [pid 3912] <... set_robust_list resumed>) = 0 [pid 3914] <... chdir resumed>) = 0 [pid 3912] chdir("./741" [pid 3915] <... set_robust_list resumed>) = 0 [pid 3914] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3912] <... chdir resumed>) = 0 [pid 3914] <... prctl resumed>) = 0 [pid 3912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3914] setpgid(0, 0 [pid 3912] <... prctl resumed>) = 0 [pid 3914] <... setpgid resumed>) = 0 [pid 3912] setpgid(0, 0 [pid 3914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3912] <... setpgid resumed>) = 0 [pid 3914] <... openat resumed>) = 3 [pid 3912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3914] write(3, "1000", 4 [pid 3912] <... openat resumed>) = 3 [pid 3915] chdir("./706" [pid 3914] <... write resumed>) = 4 [pid 3912] write(3, "1000", 4 [pid 3914] close(3 [pid 3912] <... write resumed>) = 4 [pid 3914] <... close resumed>) = 0 [pid 3912] close(3 [pid 3915] <... chdir resumed>) = 0 [pid 3914] symlink("/dev/binderfs", "./binderfs" [pid 3912] <... close resumed>) = 0 [pid 3915] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3913] write(3, "1000", 4 [pid 3912] symlink("/dev/binderfs", "./binderfs" [pid 3915] <... prctl resumed>) = 0 [pid 3914] <... symlink resumed>) = 0 [pid 3913] <... write resumed>) = 4 [pid 3912] <... symlink resumed>) = 0 [pid 3914] write(1, "executing program\n", 18) = 18 [pid 3912] write(1, "executing program\n", 18 executing program executing program [pid 3914] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3913] close(3 [pid 3912] <... write resumed>) = 18 [pid 3915] setpgid(0, 0 [pid 3912] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3914] <... openat resumed>) = 3 [pid 3913] <... close resumed>) = 0 [pid 3912] <... openat resumed>) = 3 [pid 3914] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3915] <... setpgid resumed>) = 0 [pid 3913] symlink("/dev/binderfs", "./binderfs" [pid 3915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3914] <... ioctl resumed>) = 0 [pid 3912] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3915] <... openat resumed>) = 3 [pid 3914] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3913] <... symlink resumed>) = 0 [pid 3912] <... ioctl resumed>) = 0 [pid 3915] write(3, "1000", 4 [pid 3914] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3912] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3915] <... write resumed>) = 4 executing program [pid 3914] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3913] write(1, "executing program\n", 18 [pid 3912] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3915] close(3 [pid 3914] <... openat resumed>) = 4 [pid 3913] <... write resumed>) = 18 [pid 3912] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3915] <... close resumed>) = 0 [pid 3914] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3913] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3912] <... openat resumed>) = 4 [pid 3912] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 3915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3912] <... write resumed>) = ? [pid 3915] write(1, "executing program\n", 18 [pid 291] <... restart_syscall resumed>) = 0 [pid 3915] <... write resumed>) = 18 [pid 3915] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 291] umount2("./726", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3915] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3915] <... ioctl resumed>) = 0 [pid 291] openat(AT_FDCWD, "./726", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3915] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... openat resumed>) = 3 [pid 3915] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] newfstatat(3, "", [pid 3915] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./726/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./726/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./726/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [ 66.981003][ T20] tty tty1: SAK: killed process 3907 (syz-executor903): by fd#3 [ 66.996071][ T42] tty tty1: SAK: killed process 3906 (syz-executor903): by fd#3 [ 66.996098][ T42] tty tty1: SAK: killed process 3908 (syz-executor903): by fd#3 [ 67.019257][ T42] tty tty1: SAK: killed process 3911 (syz-executor903): by fd#3 [pid 291] rmdir("./726") = 0 [pid 291] mkdir("./727", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3916 [pid 3915] <... openat resumed>) = 4 [pid 3914] <... write resumed>) = ? ./strace-static-x86_64: Process 3916 attached [pid 3915] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3914] +++ killed by SIGKILL +++ [pid 3913] <... openat resumed>) = 3 [pid 3912] +++ killed by SIGKILL +++ [pid 3915] <... write resumed>) = 8784 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3912, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3914, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3915] exit_group(0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3915] <... exit_group resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./741", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./741", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./741/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./741/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./741/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./741") = 0 [pid 293] mkdir("./742", 0777) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3917 [pid 290] umount2("./712", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./712", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3915] +++ exited with 0 +++ [pid 290] <... openat resumed>) = 3 [pid 3913] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] newfstatat(3, "", [pid 3916] set_robust_list(0x5555700d1660, 24 [pid 3913] <... ioctl resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./712/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3915, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3916] <... set_robust_list resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./712/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./712/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./712") = 0 [pid 290] mkdir("./713", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3918 ./strace-static-x86_64: Process 3917 attached [pid 3917] set_robust_list(0x5555700d1660, 24) = 0 [pid 3917] chdir("./742") = 0 [pid 3917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3917] setpgid(0, 0./strace-static-x86_64: Process 3918 attached ) = 0 [pid 3917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3918] set_robust_list(0x5555700d1660, 24) = 0 [pid 3918] chdir("./713" [pid 3917] <... openat resumed>) = 3 [pid 3918] <... chdir resumed>) = 0 [pid 3918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3918] setpgid(0, 0 [pid 3917] write(3, "1000", 4) = 4 [pid 3918] <... setpgid resumed>) = 0 [pid 3917] close(3 [pid 289] umount2("./706", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3916] chdir("./727" [pid 3918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3917] <... close resumed>) = 0 [pid 3916] <... chdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3913] +++ killed by SIGKILL +++ [pid 3916] <... prctl resumed>) = 0 [pid 289] openat(AT_FDCWD, "./706", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3916] setpgid(0, 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3913, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 3916] <... setpgid resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... openat resumed>) = 3 [pid 3918] <... openat resumed>) = 3 [pid 3917] symlink("/dev/binderfs", "./binderfs" [pid 3918] write(3, "1000", 4 [pid 3916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] newfstatat(3, "", [pid 3918] <... write resumed>) = 4 [pid 3916] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3918] close(3 [pid 3916] write(3, "1000", 4) = 4 [pid 289] getdents64(3, [pid 3918] <... close resumed>) = 0 [pid 3916] close(3 [pid 3918] symlink("/dev/binderfs", "./binderfs" [pid 3917] <... symlink resumed>) = 0 [pid 3916] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3916] symlink("/dev/binderfs", "./binderfs"executing program [pid 289] umount2("./706/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3917] write(1, "executing program\n", 18 [pid 3916] <... symlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 3918] <... symlink resumed>) = 0 [pid 3917] <... write resumed>) = 18 [pid 3916] write(1, "executing program\n", 18 [pid 289] newfstatat(AT_FDCWD, "./706/binderfs", [pid 3916] <... write resumed>) = 18 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3916] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] unlink("./706/binderfs" [pid 3918] write(1, "executing program\n", 18 [pid 3917] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3916] <... openat resumed>) = 3 executing program [pid 289] <... unlink resumed>) = 0 [pid 3918] <... write resumed>) = 18 [pid 3917] <... openat resumed>) = 3 [pid 3916] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 3918] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3917] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3916] <... ioctl resumed>) = 0 [pid 3918] <... openat resumed>) = 3 [pid 3917] <... ioctl resumed>) = 0 [pid 3916] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3918] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3917] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3916] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] close(3 [pid 3916] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3918] <... ioctl resumed>) = 0 [pid 3917] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3916] <... openat resumed>) = 4 [pid 289] <... close resumed>) = 0 [pid 3916] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 289] rmdir("./706" [pid 3918] +++ killed by SIGKILL +++ [pid 3917] +++ killed by SIGKILL +++ [pid 289] <... rmdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3917, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] mkdir("./707", 0777 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] umount2("./729", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3918, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... mkdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./713", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] openat(AT_FDCWD, "./729", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./713", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3919 [pid 292] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(3, "", [pid 293] umount2("./742", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 293] openat(AT_FDCWD, "./742", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] umount2("./729/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./713/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] newfstatat(3, "", [pid 292] newfstatat(AT_FDCWD, "./729/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./713/binderfs", [pid 293] getdents64(3, [pid 292] unlink("./729/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... unlink resumed>) = 0 [pid 290] unlink("./713/binderfs" [pid 293] umount2("./742/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 293] newfstatat(AT_FDCWD, "./742/binderfs", [pid 292] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... close resumed>) = 0 [pid 290] close(3 [pid 293] unlink("./742/binderfs" [pid 292] rmdir("./729" [pid 290] <... close resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 290] rmdir("./713" [pid 293] getdents64(3, [pid 292] mkdir("./730", 0777 [pid 290] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 3919 attached [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] mkdir("./714", 0777 [pid 293] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] rmdir("./742" [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3920 [pid 293] <... rmdir resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3921 [pid 293] mkdir("./743", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3922 ./strace-static-x86_64: Process 3921 attached [pid 3921] set_robust_list(0x5555700d1660, 24) = 0 [pid 3921] chdir("./714") = 0 [pid 3921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3921] setpgid(0, 0) = 0 [pid 3921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3919] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 3922 attached ./strace-static-x86_64: Process 3920 attached ) = 0 [pid 3922] set_robust_list(0x5555700d1660, 24 [pid 3919] chdir("./707" [pid 3916] +++ killed by SIGKILL +++ [pid 3922] <... set_robust_list resumed>) = 0 [pid 3919] <... chdir resumed>) = 0 [pid 3922] chdir("./743" [pid 3921] write(3, "1000", 4 [pid 3919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3922] <... chdir resumed>) = 0 [pid 3920] set_robust_list(0x5555700d1660, 24 [pid 3919] <... prctl resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3916, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3919] setpgid(0, 0 [pid 3922] <... prctl resumed>) = 0 [pid 3920] <... set_robust_list resumed>) = 0 [pid 3919] <... setpgid resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3922] setpgid(0, 0 [pid 3919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3922] <... setpgid resumed>) = 0 [pid 3920] chdir("./730" [pid 3919] <... openat resumed>) = 3 [pid 3922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3919] write(3, "1000", 4 [pid 3921] <... write resumed>) = 4 [pid 3920] <... chdir resumed>) = 0 [pid 3919] <... write resumed>) = 4 [pid 3920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3919] close(3 [pid 3922] <... openat resumed>) = 3 [pid 3919] <... close resumed>) = 0 [pid 3920] <... prctl resumed>) = 0 [pid 3922] write(3, "1000", 4 [pid 3919] symlink("/dev/binderfs", "./binderfs" [pid 3920] setpgid(0, 0) = 0 [pid 3922] <... write resumed>) = 4 [pid 3920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3919] <... symlink resumed>) = 0 [pid 3922] close(3 executing program [pid 3920] <... openat resumed>) = 3 [pid 3919] write(1, "executing program\n", 18 [pid 3920] write(3, "1000", 4 [pid 3919] <... write resumed>) = 18 [pid 3922] <... close resumed>) = 0 [pid 3919] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3920] <... write resumed>) = 4 [pid 3920] close(3) = 0 [pid 3922] symlink("/dev/binderfs", "./binderfs" [pid 3919] <... openat resumed>) = 3 [pid 3920] symlink("/dev/binderfs", "./binderfs" [pid 3922] <... symlink resumed>) = 0 [pid 3920] <... symlink resumed>) = 0 [pid 3919] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3920] write(1, "executing program\n", 18 executing program executing program [pid 3922] write(1, "executing program\n", 18 [pid 3919] <... ioctl resumed>) = 0 [pid 3921] close(3 [pid 3922] <... write resumed>) = 18 [pid 3920] <... write resumed>) = 18 [pid 3919] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3922] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3921] <... close resumed>) = 0 [pid 3920] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3919] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3922] <... openat resumed>) = 3 [pid 3921] symlink("/dev/binderfs", "./binderfs" [pid 3920] <... openat resumed>) = 3 [pid 3919] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3922] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3920] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3919] <... openat resumed>) = 4 [pid 3921] <... symlink resumed>) = 0 [pid 3922] <... ioctl resumed>) = 0 [ 67.033291][ T42] tty tty1: SAK: killed process 3912 (syz-executor903): by fd#3 [ 67.033329][ T42] tty tty1: SAK: killed process 3914 (syz-executor903): by fd#3 [ 67.049647][ T42] tty tty1: SAK: killed process 3913 (syz-executor903): by fd#3 [ 67.062634][ T42] tty tty1: SAK: killed process 3916 (syz-executor903): by fd#3 [ 67.062662][ T42] tty tty1: SAK: killed process 3917 (syz-executor903): by fd#3 [ 67.062685][ T42] tty tty1: SAK: killed process 3918 (syz-executor903): by fd#3 [pid 3919] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 3921] write(1, "executing program\n", 18 [pid 3920] <... ioctl resumed>) = ? [pid 3919] <... write resumed>) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 3922] +++ killed by SIGKILL +++ [pid 3921] <... write resumed>) = 18 [pid 3920] +++ killed by SIGKILL +++ [pid 3921] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3922, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3920, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./727", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3921] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./743", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./730", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3921] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./727", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3921] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] openat(AT_FDCWD, "./743", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./730", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 3921] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 3921] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3921] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 3921] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3921] <... write resumed>) = 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./727/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3921] exit_group(0 [pid 293] umount2("./743/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./730/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3921] <... exit_group resumed>) = ? [pid 3919] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./727/binderfs", [pid 293] newfstatat(AT_FDCWD, "./743/binderfs", [pid 292] newfstatat(AT_FDCWD, "./730/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3919, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./727/binderfs" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] unlink("./743/binderfs" [pid 292] unlink("./730/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 293] close(3 [pid 292] close(3 [pid 291] <... close resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] rmdir("./727" [pid 293] rmdir("./743" [pid 292] rmdir("./730" [pid 291] <... rmdir resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] mkdir("./728", 0777 [pid 289] <... restart_syscall resumed>) = 0 [pid 293] mkdir("./744", 0777 [pid 292] mkdir("./731", 0777 [pid 291] <... mkdir resumed>) = 0 [pid 3921] +++ exited with 0 +++ [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3921, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] umount2("./707", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3924 ./strace-static-x86_64: Process 3925 attached ./strace-static-x86_64: Process 3924 attached ./strace-static-x86_64: Process 3923 attached [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3923 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3925] set_robust_list(0x5555700d1660, 24 [pid 3924] set_robust_list(0x5555700d1660, 24 [pid 3923] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3925 [pid 289] openat(AT_FDCWD, "./707", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3925] <... set_robust_list resumed>) = 0 [pid 3924] <... set_robust_list resumed>) = 0 [pid 3923] <... set_robust_list resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 3925] chdir("./744" [pid 289] newfstatat(3, "", [pid 3925] <... chdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3923] chdir("./728" [pid 3925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3923] <... chdir resumed>) = 0 [pid 289] getdents64(3, [pid 3924] chdir("./731" [pid 3925] <... prctl resumed>) = 0 [pid 3923] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3925] setpgid(0, 0 [pid 3923] <... prctl resumed>) = 0 [pid 3924] <... chdir resumed>) = 0 [pid 289] umount2("./707/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3924] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3925] <... setpgid resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3923] setpgid(0, 0 [pid 289] newfstatat(AT_FDCWD, "./707/binderfs", [pid 3924] <... prctl resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3924] setpgid(0, 0 [pid 289] unlink("./707/binderfs" [pid 3925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3923] <... setpgid resumed>) = 0 [pid 3924] <... setpgid resumed>) = 0 [pid 3924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... unlink resumed>) = 0 [pid 3925] <... openat resumed>) = 3 [pid 3924] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 3925] write(3, "1000", 4 [pid 3923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC executing program [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3924] write(3, "1000", 4 [pid 289] close(3 [pid 3925] <... write resumed>) = 4 [pid 3924] <... write resumed>) = 4 [pid 3925] close(3 [pid 289] <... close resumed>) = 0 [pid 3923] <... openat resumed>) = 3 [pid 289] rmdir("./707" [pid 3925] <... close resumed>) = 0 [pid 3924] close(3) = 0 [pid 3924] symlink("/dev/binderfs", "./binderfs" [pid 3925] symlink("/dev/binderfs", "./binderfs" [pid 3924] <... symlink resumed>) = 0 [pid 3923] write(3, "1000", 4 [pid 289] <... rmdir resumed>) = 0 [pid 3924] write(1, "executing program\n", 18 [pid 289] mkdir("./708", 0777 [pid 3924] <... write resumed>) = 18 [pid 3924] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 289] <... mkdir resumed>) = 0 [pid 3925] <... symlink resumed>) = 0 [pid 3924] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3923] <... write resumed>) = 4 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3924] <... ioctl resumed>) = 0 [pid 3924] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3924] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3924] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program ./strace-static-x86_64: Process 3926 attached [pid 3925] write(1, "executing program\n", 18 [pid 3924] <... write resumed>) = ? [pid 3923] close(3 [pid 3926] set_robust_list(0x5555700d1660, 24 [pid 3925] <... write resumed>) = 18 [pid 3923] <... close resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3926 [pid 3926] <... set_robust_list resumed>) = 0 [pid 3925] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3923] symlink("/dev/binderfs", "./binderfs" [pid 3926] chdir("./708" [pid 3925] <... openat resumed>) = 3 [pid 3923] <... symlink resumed>) = 0 [pid 3926] <... chdir resumed>) = 0 [pid 3925] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 3923] write(1, "executing program\n", 18 [pid 3926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3925] <... ioctl resumed>) = 0 [pid 3923] <... write resumed>) = 18 [pid 3926] <... prctl resumed>) = 0 [pid 3925] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3923] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3926] setpgid(0, 0 [pid 3925] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3923] <... openat resumed>) = 3 [pid 3926] <... setpgid resumed>) = 0 [pid 3925] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3923] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3925] <... openat resumed>) = 4 [pid 3923] <... ioctl resumed>) = 0 [pid 3926] <... openat resumed>) = 3 [pid 3925] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3924] +++ killed by SIGKILL +++ [pid 3923] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] umount2("./714", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3923] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3924, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] umount2("./731", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./731", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./731/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./731/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./731/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./731") = 0 [ 67.091744][ T42] tty tty1: SAK: killed process 3919 (syz-executor903): by fd#3 [ 67.091770][ T42] tty tty1: SAK: killed process 3920 (syz-executor903): by fd#3 [ 67.091791][ T42] tty tty1: SAK: killed process 3922 (syz-executor903): by fd#3 [ 67.121516][ T42] tty tty1: SAK: killed process 3924 (syz-executor903): by fd#3 [ 67.130096][ T20] tty tty1: SAK: killed process 3923 (syz-executor903): by fd#3 [pid 292] mkdir("./732", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3927 [pid 3926] write(3, "1000", 4) = 4 [pid 3926] close(3) = 0 executing program [pid 3926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3926] write(1, "executing program\n", 18) = 18 [pid 3926] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3926] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3923, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3927 attached [pid 3926] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3925] <... write resumed>) = ? [pid 290] openat(AT_FDCWD, "./714", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3927] set_robust_list(0x5555700d1660, 24 [pid 3926] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3926] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3926] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3927] <... set_robust_list resumed>) = 0 [pid 3926] <... write resumed>) = ? [pid 290] <... openat resumed>) = 3 [pid 3927] chdir("./732" [pid 290] newfstatat(3, "", [pid 3927] <... chdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] getdents64(3, [pid 3927] <... prctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3927] setpgid(0, 0 [pid 290] umount2("./714/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3927] <... setpgid resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] newfstatat(AT_FDCWD, "./714/binderfs", [pid 3927] <... openat resumed>) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3927] write(3, "1000", 4 [pid 290] unlink("./714/binderfs" [pid 3927] <... write resumed>) = 4 [pid 290] <... unlink resumed>) = 0 [pid 3927] close(3 [pid 290] getdents64(3, [pid 3927] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3927] symlink("/dev/binderfs", "./binderfs"executing program [pid 290] close(3 [pid 3927] <... symlink resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 3927] write(1, "executing program\n", 18 [pid 290] rmdir("./714" [pid 3927] <... write resumed>) = 18 [pid 290] <... rmdir resumed>) = 0 [pid 3927] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] mkdir("./715", 0777 [pid 3927] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 3927] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3927] <... ioctl resumed>) = 0 [pid 3927] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3928 [pid 3927] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3927] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3926] +++ killed by SIGKILL +++ [pid 3925] +++ killed by SIGKILL +++ [pid 3927] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3925, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 3928 attached [pid 3927] <... write resumed>) = ? [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3926, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3928] set_robust_list(0x5555700d1660, 24) = 0 [pid 3928] chdir("./715" [pid 289] umount2("./708", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3928] <... chdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] openat(AT_FDCWD, "./708", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3928] <... prctl resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... openat resumed>) = 3 [pid 3928] setpgid(0, 0 [pid 289] newfstatat(3, "", [pid 3928] <... setpgid resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] getdents64(3, [pid 3928] <... openat resumed>) = 3 [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3928] write(3, "1000", 4 [pid 289] umount2("./708/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3928] <... write resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3928] close(3 [pid 289] newfstatat(AT_FDCWD, "./708/binderfs", [pid 3928] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3928] symlink("/dev/binderfs", "./binderfs" [pid 289] unlink("./708/binderfs" [pid 3928] <... symlink resumed>) = 0 [pid 3927] +++ killed by SIGKILL +++ [pid 289] <... unlink resumed>) = 0 [pid 3928] write(1, "executing program\n", 18executing program [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3927, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] getdents64(3, [pid 3928] <... write resumed>) = 18 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3928] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] close(3 [pid 3928] <... openat resumed>) = 3 [pid 289] <... close resumed>) = 0 [pid 3928] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] rmdir("./708" [pid 293] umount2("./744", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3928] <... ioctl resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] umount2("./728", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... rmdir resumed>) = 0 [pid 3928] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] mkdir("./709", 0777 [pid 3928] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... mkdir resumed>) = 0 [pid 3928] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] umount2("./732", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3928] <... openat resumed>) = 4 [pid 293] openat(AT_FDCWD, "./744", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./728", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3929 attached [pid 3928] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./732", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./744/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./728/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./744/binderfs", [pid 291] newfstatat(AT_FDCWD, "./728/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./744/binderfs" [pid 291] unlink("./728/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] close(3 [pid 293] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 3928] <... write resumed>) = ? [pid 293] rmdir("./744" [pid 292] <... openat resumed>) = 3 [pid 291] rmdir("./728" [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3929 [pid 3929] set_robust_list(0x5555700d1660, 24 [pid 3928] +++ killed by SIGKILL +++ [pid 293] <... rmdir resumed>) = 0 [pid 292] newfstatat(3, "", [pid 3929] <... set_robust_list resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3929] chdir("./709" [pid 293] mkdir("./745", 0777 [pid 292] getdents64(3, [pid 291] <... rmdir resumed>) = 0 [pid 3929] <... chdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... mkdir resumed>) = 0 [pid 291] mkdir("./729", 0777 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3928, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3929] <... prctl resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./732/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3929] setpgid(0, 0) = 0 [pid 3929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... mkdir resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3929] write(3, "1000", 4) = 4 [pid 3929] close(3) = 0 [pid 3929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] newfstatat(AT_FDCWD, "./732/binderfs", executing program [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... restart_syscall resumed>) = 0 [pid 3929] write(1, "executing program\n", 18 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3930 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3929] <... write resumed>) = 18 [pid 3929] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3929] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] unlink("./732/binderfs" [pid 3929] <... ioctl resumed>) = 0 [pid 3929] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3929] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... unlink resumed>) = 0 [pid 3929] <... openat resumed>) = 4 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3931 [pid 292] getdents64(3, [pid 3929] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3931 attached ./strace-static-x86_64: Process 3930 attached ) = ? [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] umount2("./715", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... close resumed>) = 0 [pid 290] openat(AT_FDCWD, "./715", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] rmdir("./732" [pid 290] <... openat resumed>) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 292] mkdir("./733", 0777 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3931] set_robust_list(0x5555700d1660, 24) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] getdents64(3, [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3931] chdir("./729" [pid 290] umount2("./715/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3932 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./715/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./715/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./715" [pid 3931] <... chdir resumed>) = 0 [pid 3931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./716", 0777 [pid 3931] <... prctl resumed>) = 0 [pid 3931] setpgid(0, 0 [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3929] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3929, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3931] <... setpgid resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3933 [pid 3930] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 3932 attached ) = 0 [pid 3931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3930] chdir("./745" [pid 3932] set_robust_list(0x5555700d1660, 24 [pid 3931] <... openat resumed>) = 3 [pid 3930] <... chdir resumed>) = 0 [pid 3932] <... set_robust_list resumed>) = 0 [pid 3931] write(3, "1000", 4 [pid 3930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3932] chdir("./733" [pid 3930] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 3933 attached [pid 3931] <... write resumed>) = 4 [pid 3932] <... chdir resumed>) = 0 [pid 3931] close(3 [pid 3930] setpgid(0, 0 [pid 3933] set_robust_list(0x5555700d1660, 24 [pid 3932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3930] <... setpgid resumed>) = 0 [pid 3931] <... close resumed>) = 0 [pid 3932] <... prctl resumed>) = 0 [pid 3933] <... set_robust_list resumed>) = 0 [pid 3930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3932] setpgid(0, 0 [pid 3931] symlink("/dev/binderfs", "./binderfs" [pid 3930] <... openat resumed>) = 3 [pid 3932] <... setpgid resumed>) = 0 [pid 3933] chdir("./716" [pid 3931] <... symlink resumed>) = 0 [pid 3930] write(3, "1000", 4 [pid 3932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 3931] write(1, "executing program\n", 18 [pid 3930] <... write resumed>) = 4 [pid 3930] close(3 [pid 3933] <... chdir resumed>) = 0 [pid 3933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3932] <... openat resumed>) = 3 [pid 3930] <... close resumed>) = 0 [pid 3931] <... write resumed>) = 18 [pid 3932] write(3, "1000", 4 [pid 3933] <... prctl resumed>) = 0 [pid 3930] symlink("/dev/binderfs", "./binderfs" [pid 3931] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3932] <... write resumed>) = 4 [pid 3933] setpgid(0, 0) = 0 [pid 3930] <... symlink resumed>) = 0 [pid 3933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3931] <... openat resumed>) = 3 executing program [pid 3932] close(3 [pid 3930] write(1, "executing program\n", 18) = 18 [pid 3932] <... close resumed>) = 0 [pid 3930] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3932] symlink("/dev/binderfs", "./binderfs" [pid 3931] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3930] <... openat resumed>) = 3 [pid 3933] <... openat resumed>) = 3 [pid 3933] write(3, "1000", 4 [pid 3932] <... symlink resumed>) = 0 [pid 3933] <... write resumed>) = 4 [pid 3930] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3932] write(1, "executing program\n", 18 [pid 3931] <... ioctl resumed>) = 0 executing program [pid 3930] <... ioctl resumed>) = 0 [pid 3933] close(3 [pid 3930] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3932] <... write resumed>) = 18 [pid 3931] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3930] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3933] <... close resumed>) = 0 [pid 3930] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3932] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3931] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3933] symlink("/dev/binderfs", "./binderfs" [pid 3932] <... openat resumed>) = 3 [pid 3931] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3930] <... openat resumed>) = 4 [pid 3933] <... symlink resumed>) = 0 [ 67.130123][ T20] tty tty1: SAK: killed process 3925 (syz-executor903): by fd#3 [ 67.147544][ T42] tty tty1: SAK: killed process 3926 (syz-executor903): by fd#3 [ 67.156253][ T20] tty tty1: SAK: killed process 3927 (syz-executor903): by fd#3 [ 67.169830][ T42] tty tty1: SAK: killed process 3928 (syz-executor903): by fd#3 [ 67.182468][ T42] tty tty1: SAK: killed process 3929 (syz-executor903): by fd#3 [pid 3932] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 3930] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3931] <... openat resumed>) = 4 [pid 3933] write(1, "executing program\n", 18) = 18 [pid 3933] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3933] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = ? [pid 3933] +++ killed by SIGKILL +++ [pid 3932] <... ioctl resumed>) = ? [pid 3932] +++ killed by SIGKILL +++ [pid 3930] <... write resumed>) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3932, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3933, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./709", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./709", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./709/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./709/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./709/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./709") = 0 [pid 289] mkdir("./710", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3934 [pid 292] umount2("./733", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./733", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./733/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./733/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./733/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./733") = 0 [pid 292] mkdir("./734", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3935 [pid 290] umount2("./716", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./716", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./716/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./716/binderfs", ./strace-static-x86_64: Process 3934 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 3935 attached [pid 3934] set_robust_list(0x5555700d1660, 24 [pid 290] unlink("./716/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./716") = 0 [pid 290] mkdir("./717", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3936 [pid 3930] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3930, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3935] set_robust_list(0x5555700d1660, 24) = 0 [pid 3935] chdir("./734") = 0 [pid 3935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3935] setpgid(0, 0) = 0 [pid 3935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3935] write(3, "1000", 4) = 4 [pid 3935] close(3executing program ) = 0 [pid 3935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 3935] write(1, "executing program\n", 18) = 18 [pid 3935] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./745", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3935] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3935] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] openat(AT_FDCWD, "./745", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3935] <... ioctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 3935] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] newfstatat(3, "", ./strace-static-x86_64: Process 3936 attached [pid 3935] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3934] <... set_robust_list resumed>) = 0 [pid 3931] +++ killed by SIGKILL +++ [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3935] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] getdents64(3, [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3931, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3935] <... openat resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3935] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./745/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3935] <... write resumed>) = 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3935] exit_group(0 [pid 293] newfstatat(AT_FDCWD, "./745/binderfs", [pid 3935] <... exit_group resumed>) = ? [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./745/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./745") = 0 [pid 293] mkdir("./746", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3937 [pid 3936] set_robust_list(0x5555700d1660, 24) = 0 [pid 3936] chdir("./717") = 0 [pid 3936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3936] setpgid(0, 0) = 0 [pid 3936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3934] chdir("./710"./strace-static-x86_64: Process 3937 attached [pid 3936] write(3, "1000", 4 [pid 3935] +++ exited with 0 +++ [pid 3934] <... chdir resumed>) = 0 [pid 3937] set_robust_list(0x5555700d1660, 24 [pid 3936] <... write resumed>) = 4 [pid 3934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3935, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3937] <... set_robust_list resumed>) = 0 [pid 3936] close(3 [pid 3934] <... prctl resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... restart_syscall resumed>) = 0 [pid 3937] chdir("./746" [pid 3936] <... close resumed>) = 0 [pid 3934] setpgid(0, 0 [pid 3937] <... chdir resumed>) = 0 [pid 3936] symlink("/dev/binderfs", "./binderfs" [pid 3934] <... setpgid resumed>) = 0 [pid 3937] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3937] <... prctl resumed>) = 0 [pid 3936] <... symlink resumed>) = 0 [pid 3934] <... openat resumed>) = 3 [pid 3937] setpgid(0, 0executing program [pid 3936] write(1, "executing program\n", 18 [pid 3934] write(3, "1000", 4 [pid 291] umount2("./729", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3937] <... setpgid resumed>) = 0 [pid 3936] <... write resumed>) = 18 [pid 3934] <... write resumed>) = 4 [pid 3934] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3936] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3934] <... close resumed>) = 0 [pid 3934] symlink("/dev/binderfs", "./binderfs" executing program [pid 291] openat(AT_FDCWD, "./729", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3937] <... openat resumed>) = 3 [pid 3936] <... openat resumed>) = 3 [pid 3934] <... symlink resumed>) = 0 [pid 3934] write(1, "executing program\n", 18 [pid 291] <... openat resumed>) = 3 [pid 3936] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3934] <... write resumed>) = 18 [pid 3937] write(3, "1000", 4 [pid 3936] <... ioctl resumed>) = 0 [pid 3934] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] newfstatat(3, "", [pid 3937] <... write resumed>) = 4 [pid 3936] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3934] <... openat resumed>) = 3 [pid 3937] close(3 [pid 3936] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3934] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3937] <... close resumed>) = 0 [pid 3936] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3934] <... ioctl resumed>) = 0 [pid 291] getdents64(3, [pid 3937] symlink("/dev/binderfs", "./binderfs" [pid 3936] <... openat resumed>) = 4 [pid 3934] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./729/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3937] <... symlink resumed>) = 0 [pid 3936] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3934] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... restart_syscall resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./729/binderfs", [pid 3937] write(1, "executing program\n", 18 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3936] <... write resumed>) = 8784 [pid 3934] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] unlink("./729/binderfs" [pid 292] umount2("./734", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 292] openat(AT_FDCWD, "./734", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] close(3 [pid 292] newfstatat(3, "", [pid 291] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] rmdir("./729" [pid 292] getdents64(3, [pid 291] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] mkdir("./730", 0777 [pid 292] umount2("./734/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... mkdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] newfstatat(AT_FDCWD, "./734/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3938 [pid 292] unlink("./734/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./734") = 0 [pid 292] mkdir("./735", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3939 ./strace-static-x86_64: Process 3938 attached [pid 3938] set_robust_list(0x5555700d1660, 24) = 0 [pid 3938] chdir("./730") = 0 [pid 3938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3938] setpgid(0, 0executing program ) = 0 [pid 3934] <... openat resumed>) = ? [pid 3937] <... write resumed>) = 18 [pid 3938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3938] write(3, "1000", 4 [pid 3934] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3934, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3938] <... write resumed>) = 4 [pid 3938] close(3) = 0 [pid 3938] symlink("/dev/binderfs", "./binderfs" [pid 3937] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3938] <... symlink resumed>) = 0 [pid 3938] write(1, "executing program\n", 18) = 18 [pid 3938] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3939 attached [pid 3939] set_robust_list(0x5555700d1660, 24) = 0 [pid 3939] chdir("./735") = 0 [pid 3939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3939] setpgid(0, 0) = 0 [pid 3939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3939] write(3, "1000", 4) = 4 [ 67.198571][ T20] tty tty1: SAK: killed process 3930 (syz-executor903): by fd#3 [ 67.198596][ T20] tty tty1: SAK: killed process 3931 (syz-executor903): by fd#3 [ 67.198613][ T20] tty tty1: SAK: killed process 3932 (syz-executor903): by fd#3 [ 67.198629][ T20] tty tty1: SAK: killed process 3933 (syz-executor903): by fd#3 [ 67.236362][ T60] tty tty1: SAK: killed process 3934 (syz-executor903): by fd#3 [pid 3939] close(3executing program ) = 0 [pid 3939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3939] write(1, "executing program\n", 18) = 18 [pid 3939] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./710", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./710", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./710/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./710/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3936] +++ killed by SIGKILL +++ [pid 289] unlink("./710/binderfs" [pid 3938] <... openat resumed>) = 3 [pid 3937] <... openat resumed>) = 3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3936, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... unlink resumed>) = 0 [pid 3937] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] getdents64(3, [pid 3938] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3937] <... ioctl resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3937] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] close(3 [pid 3938] <... ioctl resumed>) = 0 [pid 3937] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./710" [pid 3939] <... openat resumed>) = 3 [pid 3938] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3937] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3938] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3937] <... openat resumed>) = 4 [pid 289] <... rmdir resumed>) = 0 [pid 3939] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3938] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3937] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3939] <... ioctl resumed>) = 0 [pid 289] mkdir("./711", 0777 [pid 3938] <... openat resumed>) = ? [pid 289] <... mkdir resumed>) = 0 [pid 3937] <... write resumed>) = ? [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3939] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3939, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3940 [pid 292] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3940 attached [pid 3940] set_robust_list(0x5555700d1660, 24) = 0 [pid 3940] chdir("./711") = 0 [pid 3940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3940] setpgid(0, 0) = 0 [pid 3940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./717", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./717", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./717/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./717/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./717/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] rmdir("./717") = 0 [pid 290] mkdir("./718", 0777 [pid 3937] +++ killed by SIGKILL +++ [pid 292] umount2("./735", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... mkdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3937, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] openat(AT_FDCWD, "./735", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3941 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./735/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./735/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./735/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./735") = 0 [pid 292] mkdir("./736", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3942 [pid 3940] write(3, "1000", 4) = 4 [pid 3940] close(3) = 0 [pid 3940] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3940] write(1, "executing program\n", 18) = 18 [pid 3940] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./746", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./746", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./746/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3942 attached ./strace-static-x86_64: Process 3941 attached [pid 293] newfstatat(AT_FDCWD, "./746/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./746/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./746") = 0 [pid 293] mkdir("./747", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3943 ./strace-static-x86_64: Process 3943 attached [pid 3943] set_robust_list(0x5555700d1660, 24) = 0 [pid 3943] chdir("./747") = 0 [pid 3943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3943] setpgid(0, 0) = 0 [pid 3943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3943] write(3, "1000", 4) = 4 [pid 3943] close(3) = 0 executing program [pid 3943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3943] write(1, "executing program\n", 18) = 18 [pid 3943] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3942] set_robust_list(0x5555700d1660, 24) = 0 [pid 3942] chdir("./736") = 0 [pid 3942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3942] setpgid(0, 0) = 0 [pid 3942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3941] set_robust_list(0x5555700d1660, 24 [pid 3942] <... openat resumed>) = 3 [pid 3941] <... set_robust_list resumed>) = 0 [pid 3938] +++ killed by SIGKILL +++ [pid 3942] write(3, "1000", 4 [pid 3940] <... openat resumed>) = 3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3938, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3942] <... write resumed>) = 4 [pid 3941] chdir("./718" [pid 3942] close(3) = 0 [pid 3942] symlink("/dev/binderfs", "./binderfs" [pid 3940] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3941] <... chdir resumed>) = 0 [pid 3940] <... ioctl resumed>) = 0 [pid 3941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3943] <... openat resumed>) = 3 [pid 3941] <... prctl resumed>) = 0 [pid 3940] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3942] <... symlink resumed>) = 0 [pid 3941] setpgid(0, 0 [pid 3940] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3943] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3942] write(1, "executing program\n", 18 [pid 3941] <... setpgid resumed>) = 0 executing program [pid 3940] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3943] <... ioctl resumed>) = 0 [pid 3942] <... write resumed>) = 18 [pid 3941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3940] <... openat resumed>) = 4 [pid 3943] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3942] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3941] <... openat resumed>) = 3 [pid 3940] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3942] <... openat resumed>) = 3 [pid 3941] write(3, "1000", 4 [pid 3940] <... write resumed>) = 8784 [pid 3941] <... write resumed>) = 4 [pid 3940] exit_group(0 [pid 3942] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3941] close(3 [pid 3940] <... exit_group resumed>) = ? [pid 3943] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3942] <... ioctl resumed>) = 0 [pid 3941] <... close resumed>) = 0 [pid 3942] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3942] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3941] symlink("/dev/binderfs", "./binderfs" [pid 3942] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3940] +++ exited with 0 +++ [pid 3942] <... write resumed>) = ? [pid 3941] <... symlink resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3940, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3943] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3943, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...>executing program [pid 3941] write(1, "executing program\n", 18) = 18 [pid 3941] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3941] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3941] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3941] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3941] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3941] exit_group(0) = ? [pid 3942] +++ killed by SIGKILL +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3942, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./730", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./711", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./736", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./730", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./711", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./736", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 289] getdents64(3, [pid 293] <... restart_syscall resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./730/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./711/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./736/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./747", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./730/binderfs", [pid 289] newfstatat(AT_FDCWD, "./711/binderfs", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.236389][ T60] tty tty1: SAK: killed process 3936 (syz-executor903): by fd#3 [ 67.256366][ T60] tty tty1: SAK: killed process 3937 (syz-executor903): by fd#3 [ 67.256394][ T60] tty tty1: SAK: killed process 3938 (syz-executor903): by fd#3 [ 67.256416][ T60] tty tty1: SAK: killed process 3939 (syz-executor903): by fd#3 [ 67.285352][ T60] tty tty1: SAK: killed process 3942 (syz-executor903): by fd#3 [pid 292] newfstatat(AT_FDCWD, "./736/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] openat(AT_FDCWD, "./747", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./730/binderfs" [pid 289] unlink("./711/binderfs" [pid 293] <... openat resumed>) = 3 [pid 292] unlink("./736/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] newfstatat(3, "", [pid 292] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 289] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3941] +++ exited with 0 +++ [pid 293] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 289] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] close(3 [pid 291] <... close resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3941, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] rmdir("./730" [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] rmdir("./711" [pid 293] umount2("./747/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] rmdir("./736" [pid 291] <... rmdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./747/binderfs", [pid 289] <... rmdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] mkdir("./731", 0777 [pid 289] mkdir("./712", 0777 [pid 293] unlink("./747/binderfs" [pid 292] mkdir("./737", 0777 [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] <... mkdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./747") = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 [pid 293] mkdir("./748", 0777 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3946 ./strace-static-x86_64: Process 3945 attached [pid 3945] set_robust_list(0x5555700d1660, 24 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3945 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3944 [pid 3945] <... set_robust_list resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3947 [pid 3945] chdir("./737") = 0 [pid 3945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3945] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 3946 attached ./strace-static-x86_64: Process 3947 attached ./strace-static-x86_64: Process 3944 attached [pid 3945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3946] set_robust_list(0x5555700d1660, 24 [pid 3945] <... openat resumed>) = 3 [pid 3944] set_robust_list(0x5555700d1660, 24 [pid 3947] set_robust_list(0x5555700d1660, 24 [pid 3945] write(3, "1000", 4) = 4 [pid 3945] close(3) = 0 [pid 3944] <... set_robust_list resumed>) = 0 [pid 3945] symlink("/dev/binderfs", "./binderfs" [pid 3947] <... set_robust_list resumed>) = 0 [pid 3946] <... set_robust_list resumed>) = 0 [pid 3945] <... symlink resumed>) = 0 executing program [pid 3944] chdir("./731" [pid 3945] write(1, "executing program\n", 18) = 18 [pid 3945] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3944] <... chdir resumed>) = 0 [pid 3947] chdir("./712" [pid 3946] chdir("./748" [pid 3945] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3945] <... ioctl resumed>) = 0 [pid 3945] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3945] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3945] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3947] <... chdir resumed>) = 0 [pid 3946] <... chdir resumed>) = 0 [pid 3945] <... write resumed>) = ? [pid 3944] <... prctl resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3944] setpgid(0, 0 [pid 3947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3946] <... prctl resumed>) = 0 [pid 3944] <... setpgid resumed>) = 0 [pid 3947] <... prctl resumed>) = 0 [pid 3946] setpgid(0, 0 [pid 3944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] umount2("./718", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3947] setpgid(0, 0 [pid 3946] <... setpgid resumed>) = 0 [pid 3945] +++ killed by SIGKILL +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./718", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3945, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3947] <... setpgid resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... openat resumed>) = 3 [pid 3947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] newfstatat(3, "", [pid 3946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3947] <... openat resumed>) = 3 [pid 290] getdents64(3, [pid 3947] write(3, "1000", 4 [pid 3944] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3947] <... write resumed>) = 4 [pid 290] umount2("./718/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3946] <... openat resumed>) = 3 [pid 3944] write(3, "1000", 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3947] close(3 [pid 290] newfstatat(AT_FDCWD, "./718/binderfs", [pid 3944] <... write resumed>) = 4 [pid 3946] write(3, "1000", 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3944] close(3 [pid 3946] <... write resumed>) = 4 [pid 290] unlink("./718/binderfs" [pid 3944] <... close resumed>) = 0 [pid 3947] <... close resumed>) = 0 [pid 3947] symlink("/dev/binderfs", "./binderfs" [pid 290] <... unlink resumed>) = 0 [pid 3946] close(3 [pid 3944] symlink("/dev/binderfs", "./binderfs" [pid 290] getdents64(3, [pid 3946] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3947] <... symlink resumed>) = 0 executing program [pid 3946] symlink("/dev/binderfs", "./binderfs" [pid 3944] <... symlink resumed>) = 0 [pid 290] close(3 [pid 3947] write(1, "executing program\n", 18 [pid 290] <... close resumed>) = 0 [pid 3947] <... write resumed>) = 18 [pid 290] rmdir("./718" [pid 3947] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 3946] <... symlink resumed>) = 0 executing program [pid 3944] write(1, "executing program\n", 18 [pid 290] mkdir("./719", 0777 [pid 3947] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3947] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3947] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 executing program [pid 3946] write(1, "executing program\n", 18 [pid 3944] <... write resumed>) = 18 [pid 290] <... mkdir resumed>) = 0 [pid 3947] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3944] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3948 attached [pid 3947] <... write resumed>) = ? [pid 3946] <... write resumed>) = 18 [pid 3944] <... openat resumed>) = 3 [pid 3948] set_robust_list(0x5555700d1660, 24 [pid 3947] +++ killed by SIGKILL +++ [pid 3946] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3944] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3948 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3947, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 3948] <... set_robust_list resumed>) = 0 [pid 3946] <... openat resumed>) = 3 [pid 3944] <... ioctl resumed>) = 0 [pid 292] umount2("./737", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3948] chdir("./719" [pid 3946] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3944] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./712", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3948] <... chdir resumed>) = 0 [pid 3944] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] openat(AT_FDCWD, "./737", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3946] <... ioctl resumed>) = 0 [pid 3944] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./712", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 3944] <... openat resumed>) = 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(3, "", [pid 3946] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3944] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 292] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3946] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] getdents64(3, [pid 3948] setpgid(0, 0) = 0 [pid 3948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3948] write(3, "1000", 4) = 4 [pid 3948] close(3) = 0 [pid 3948] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3948] write(1, "executing program\n", 18) = 18 [pid 3948] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3948] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3948] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3948] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3944] <... write resumed>) = ? [pid 3948] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] umount2("./737/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3948] <... write resumed>) = 8784 [pid 3948] exit_group(0) = ? [pid 3944] +++ killed by SIGKILL +++ [pid 3948] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./712/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./737/binderfs", [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3944, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 67.285384][ T60] tty tty1: SAK: killed process 3943 (syz-executor903): by fd#3 [ 67.308843][ T20] tty tty1: SAK: killed process 3945 (syz-executor903): by fd#3 [ 67.321665][ T20] tty tty1: SAK: killed process 3947 (syz-executor903): by fd#3 [ 67.332534][ T42] tty tty1: SAK: killed process 3944 (syz-executor903): by fd#3 [ 67.332559][ T42] tty tty1: SAK: killed process 3946 (syz-executor903): by fd#3 [pid 292] unlink("./737/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./737") = 0 [pid 292] mkdir("./738", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3949 [pid 291] umount2("./731", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./731", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./731/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./731/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./731/binderfs"./strace-static-x86_64: Process 3949 attached ) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3948, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] newfstatat(AT_FDCWD, "./712/binderfs", [pid 3949] set_robust_list(0x5555700d1660, 24 [pid 291] getdents64(3, [pid 290] umount2("./719", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3949] <... set_robust_list resumed>) = 0 [pid 3946] +++ killed by SIGKILL +++ [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] unlink("./712/binderfs" [pid 3949] chdir("./738" [pid 291] close(3 [pid 290] openat(AT_FDCWD, "./719", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... unlink resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3946, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... close resumed>) = 0 [pid 3949] <... chdir resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] rmdir("./731" [pid 290] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 3949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] newfstatat(3, "", [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3949] <... prctl resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] close(3 [pid 3949] setpgid(0, 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] getdents64(3, [pid 289] <... close resumed>) = 0 [pid 3949] <... setpgid resumed>) = 0 [pid 291] mkdir("./732", 0777 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] rmdir("./712" [pid 3949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... mkdir resumed>) = 0 [pid 290] umount2("./719/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] newfstatat(AT_FDCWD, "./719/binderfs", [pid 289] <... rmdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./719/binderfs" [pid 3949] <... openat resumed>) = 3 [pid 289] mkdir("./713", 0777./strace-static-x86_64: Process 3950 attached [pid 3949] write(3, "1000", 4 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3950 [pid 290] <... unlink resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 3949] <... write resumed>) = 4 [pid 290] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3950] set_robust_list(0x5555700d1660, 24 [pid 3949] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3949] <... close resumed>) = 0 [pid 290] close(3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3951 [pid 3949] symlink("/dev/binderfs", "./binderfs" [pid 290] <... close resumed>) = 0 ./strace-static-x86_64: Process 3951 attached [pid 3950] <... set_robust_list resumed>) = 0 [pid 3949] <... symlink resumed>) = 0 [pid 3949] write(1, "executing program\n", 18executing program ) = 18 [pid 3949] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 290] rmdir("./719" [pid 3949] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3949] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3949] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 290] <... rmdir resumed>) = 0 [pid 3949] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3951] set_robust_list(0x5555700d1660, 24 [pid 3950] chdir("./732" [pid 3949] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 290] mkdir("./720", 0777 [pid 3951] <... set_robust_list resumed>) = 0 [pid 3951] chdir("./713") = 0 [pid 3951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3951] setpgid(0, 0) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 3951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3951] <... openat resumed>) = 3 [pid 293] umount2("./748", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3951] write(3, "1000", 4) = 4 [pid 3951] close(3) = 0 [pid 3951] symlink("/dev/binderfs", "./binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3952 [pid 293] openat(AT_FDCWD, "./748", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3950] <... chdir resumed>) = 0 [pid 293] <... openat resumed>) = 3 executing program [pid 3951] <... symlink resumed>) = 0 [pid 3951] write(1, "executing program\n", 18) = 18 [pid 3951] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] newfstatat(3, "", [pid 3951] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3951] <... ioctl resumed>) = 0 [pid 3951] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 293] getdents64(3, [pid 3951] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3951] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3950] <... prctl resumed>) = 0 [pid 3950] setpgid(0, 0 [pid 293] umount2("./748/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3952 attached [pid 3951] <... write resumed>) = ? [pid 3950] <... setpgid resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] newfstatat(AT_FDCWD, "./748/binderfs", [pid 3950] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3950] write(3, "1000", 4 [pid 293] unlink("./748/binderfs" [pid 3950] <... write resumed>) = 4 [pid 293] <... unlink resumed>) = 0 [pid 3950] close(3 [pid 293] getdents64(3, [pid 3950] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3950] symlink("/dev/binderfs", "./binderfs" [pid 293] close(3 [pid 3950] <... symlink resumed>) = 0 [pid 293] <... close resumed>) = 0 executing program [pid 3950] write(1, "executing program\n", 18 [pid 293] rmdir("./748" [pid 3950] <... write resumed>) = 18 [pid 293] <... rmdir resumed>) = 0 [pid 3950] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] mkdir("./749", 0777 [pid 3950] <... openat resumed>) = 3 [pid 293] <... mkdir resumed>) = 0 [pid 3950] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3950] <... ioctl resumed>) = 0 [pid 3950] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3953 [pid 3950] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3950] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3950] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3949] +++ killed by SIGKILL +++ [pid 3952] set_robust_list(0x5555700d1660, 24 [pid 3950] <... write resumed>) = 8784 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3949, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3950] exit_group(0) = ? [pid 292] umount2("./738", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./738", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./738/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./738/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./738/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./738") = 0 [pid 292] mkdir("./739", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3954 [pid 3950] +++ exited with 0 +++ [pid 3952] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3954 attached ./strace-static-x86_64: Process 3953 attached [pid 3952] chdir("./720" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3950, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3954] set_robust_list(0x5555700d1660, 24) = 0 [pid 3954] chdir("./739") = 0 [pid 3954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3954] setpgid(0, 0) = 0 [pid 3954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3954] write(3, "1000", 4) = 4 [pid 3954] close(3) = 0 executing program [pid 3954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3954] write(1, "executing program\n", 18) = 18 [pid 3954] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3954] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3954] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3954] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3954] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3954] exit_group(0) = ? [pid 3953] set_robust_list(0x5555700d1660, 24 [pid 3952] <... chdir resumed>) = 0 [pid 291] umount2("./732", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3953] <... set_robust_list resumed>) = 0 [pid 3952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3953] chdir("./749" [pid 3952] <... prctl resumed>) = 0 [pid 291] openat(AT_FDCWD, "./732", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3953] <... chdir resumed>) = 0 [pid 3952] setpgid(0, 0 [pid 3953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... openat resumed>) = 3 [pid 3952] <... setpgid resumed>) = 0 [pid 3953] <... prctl resumed>) = 0 [pid 3951] +++ killed by SIGKILL +++ [pid 291] newfstatat(3, "", [pid 3953] setpgid(0, 0 [pid 3952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3954] +++ exited with 0 +++ [pid 3953] <... setpgid resumed>) = 0 [pid 3952] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3954, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] getdents64(3, [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3951, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3952] write(3, "1000", 4 [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3953] <... openat resumed>) = 3 [pid 3952] <... write resumed>) = 4 [pid 3953] write(3, "1000", 4 [pid 3952] close(3 [pid 291] umount2("./732/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3953] <... write resumed>) = 4 [pid 3952] <... close resumed>) = 0 [pid 292] umount2("./739", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3953] close(3 [pid 3952] symlink("/dev/binderfs", "./binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3953] <... close resumed>) = 0 [pid 292] openat(AT_FDCWD, "./739", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", [pid 3953] symlink("/dev/binderfs", "./binderfs" [pid 3952] <... symlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(AT_FDCWD, "./732/binderfs", [pid 292] getdents64(3, [pid 3953] <... symlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program executing program [pid 3953] write(1, "executing program\n", 18 [pid 3952] write(1, "executing program\n", 18 [pid 292] umount2("./739/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] unlink("./732/binderfs" [pid 3953] <... write resumed>) = 18 [pid 3952] <... write resumed>) = 18 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./739/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3953] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] unlink("./739/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 3953] <... openat resumed>) = 3 [pid 3952] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 3953] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] getdents64(3, [pid 3953] <... ioctl resumed>) = 0 [pid 3952] <... openat resumed>) = 3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3953] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3952] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] close(3 [pid 3953] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3952] <... ioctl resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] close(3 [pid 3953] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3952] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] rmdir("./739" [pid 3953] <... openat resumed>) = 4 [pid 3952] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... rmdir resumed>) = 0 [pid 291] <... close resumed>) = 0 [ 67.348799][ T42] tty tty1: SAK: killed process 3946 (syz-executor903): by fd#3 [ 67.363314][ T42] tty tty1: SAK: killed process 3949 (syz-executor903): by fd#3 [ 67.374596][ T42] tty tty1: SAK: killed process 3949 (syz-executor903): by fd#3 [ 67.374633][ T42] tty tty1: SAK: killed process 3951 (syz-executor903): by fd#3 [ 67.391193][ T42] tty tty1: SAK: killed process 3951 (syz-executor903): by fd#3 executing program [pid 3953] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3952] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] mkdir("./740", 0777 [pid 291] rmdir("./732" [pid 3953] <... write resumed>) = 8784 [pid 3952] <... openat resumed>) = 4 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... rmdir resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3955 ./strace-static-x86_64: Process 3955 attached [pid 3955] set_robust_list(0x5555700d1660, 24) = 0 [pid 3955] chdir("./740") = 0 [pid 3955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3955] setpgid(0, 0) = 0 [pid 3955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3955] write(3, "1000", 4) = 4 [pid 3955] close(3) = 0 [pid 3955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3955] write(1, "executing program\n", 18) = 18 [pid 3955] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3955] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3955] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3955] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3955] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3955] exit_group(0) = ? [pid 291] mkdir("./733", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3956 [pid 289] <... restart_syscall resumed>) = 0 [pid 3953] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3953, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3955] +++ exited with 0 +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3955, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] umount2("./713", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] umount2("./749", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3956 attached [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./749", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./749/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./749/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./749/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./749" [pid 292] <... restart_syscall resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./750", 0777) = 0 [pid 292] umount2("./740", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./740", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3957 [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./740/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./740/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./740/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./740") = 0 [pid 292] mkdir("./741", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3958 ./strace-static-x86_64: Process 3958 attached [pid 3958] set_robust_list(0x5555700d1660, 24) = 0 [pid 3958] chdir("./741") = 0 [pid 3958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] openat(AT_FDCWD, "./713", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3956] set_robust_list(0x5555700d1660, 24 [pid 289] <... openat resumed>) = 3 [pid 3956] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3957 attached [pid 3952] +++ killed by SIGKILL +++ [pid 289] newfstatat(3, "", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3952, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3956] chdir("./733" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3957] set_robust_list(0x5555700d1660, 24 [pid 3956] <... chdir resumed>) = 0 [pid 3957] <... set_robust_list resumed>) = 0 [pid 289] getdents64(3, [pid 3956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3956] <... prctl resumed>) = 0 [pid 3957] chdir("./750" [pid 3956] setpgid(0, 0 [pid 289] umount2("./713/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3957] <... chdir resumed>) = 0 [pid 3956] <... setpgid resumed>) = 0 [pid 3957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3957] <... prctl resumed>) = 0 [pid 3956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3957] setpgid(0, 0 [pid 289] newfstatat(AT_FDCWD, "./713/binderfs", [pid 3957] <... setpgid resumed>) = 0 [pid 3956] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3956] write(3, "1000", 4 [pid 3958] <... prctl resumed>) = 0 [pid 3957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] unlink("./713/binderfs" [pid 3956] <... write resumed>) = 4 [pid 3958] setpgid(0, 0) = 0 [pid 3957] <... openat resumed>) = 3 [pid 3958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... unlink resumed>) = 0 [pid 3957] write(3, "1000", 4 [pid 3956] close(3 [pid 289] getdents64(3, [pid 3957] <... write resumed>) = 4 [pid 3956] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3957] close(3 [pid 3956] symlink("/dev/binderfs", "./binderfs" [pid 289] close(3 [pid 3957] <... close resumed>) = 0 [pid 3956] <... symlink resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 3957] symlink("/dev/binderfs", "./binderfs"executing program executing program executing program [pid 3956] write(1, "executing program\n", 18 [pid 289] rmdir("./713" [pid 3958] <... openat resumed>) = 3 [pid 3958] write(3, "1000", 4 [pid 3957] <... symlink resumed>) = 0 [pid 3958] <... write resumed>) = 4 [pid 3958] close(3) = 0 [pid 3958] symlink("/dev/binderfs", "./binderfs" [pid 289] <... rmdir resumed>) = 0 [pid 3957] write(1, "executing program\n", 18 [pid 3956] <... write resumed>) = 18 [pid 289] mkdir("./714", 0777 [pid 3957] <... write resumed>) = 18 [pid 3956] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3958] <... symlink resumed>) = 0 [pid 3958] write(1, "executing program\n", 18) = 18 [pid 289] <... mkdir resumed>) = 0 [pid 3958] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3956] <... openat resumed>) = 3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3957] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... restart_syscall resumed>) = 0 [pid 3956] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] umount2("./720", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3956] <... ioctl resumed>) = 0 [pid 290] openat(AT_FDCWD, "./720", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3957] <... openat resumed>) = 3 [pid 3956] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... openat resumed>) = 3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3959 [pid 3957] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3956] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] newfstatat(3, "", [pid 3957] <... ioctl resumed>) = 0 [pid 3956] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3957] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] getdents64(3, [pid 3957] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3956] <... openat resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3957] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3956] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] umount2("./720/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3957] <... openat resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./720/binderfs", [pid 3956] <... write resumed>) = 8784 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./720/binderfs" [pid 3957] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3956] exit_group(0 [pid 290] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 3959 attached [pid 3958] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3957] <... write resumed>) = 8784 [pid 290] getdents64(3, [pid 3956] <... exit_group resumed>) = ? [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./720") = 0 [pid 290] mkdir("./721", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3957] +++ killed by SIGKILL +++ [pid 3956] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3957, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3956, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3960 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3959] set_robust_list(0x5555700d1660, 24) = 0 [pid 3959] chdir("./714" [pid 3958] <... ioctl resumed>) = ? [pid 3959] <... chdir resumed>) = 0 [pid 3959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3959] setpgid(0, 0) = 0 [pid 3959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3959] write(3, "1000", 4) = 4 [pid 3959] close(3) = 0 [pid 3959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3959] write(1, "executing program\n", 18executing program ) = 18 [pid 3959] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3960 attached [pid 3960] set_robust_list(0x5555700d1660, 24) = 0 [pid 3960] chdir("./721") = 0 [pid 3960] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3960] setpgid(0, 0) = 0 [pid 3960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 293] umount2("./750", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./733", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./750", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./733", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./750/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./733/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./750/binderfs", [pid 291] newfstatat(AT_FDCWD, "./733/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./750/binderfs" [pid 291] unlink("./733/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] close(3 [pid 293] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 293] rmdir("./750" [pid 291] rmdir("./733" [pid 293] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 293] mkdir("./751", 0777 [pid 291] mkdir("./734", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3961 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3962 [pid 3960] write(3, "1000", 4) = 4 [pid 3960] close(3) = 0 [pid 3960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3960] write(1, "executing program\n", 18executing program ) = 18 [pid 3960] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 3961 attached [pid 3961] set_robust_list(0x5555700d1660, 24) = 0 [pid 3961] chdir("./751") = 0 [pid 3961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3961] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 3962 attached [pid 3961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3961] write(3, "1000", 4) = 4 [ 67.404676][ T42] tty tty1: SAK: killed process 3952 (syz-executor903): by fd#3 [ 67.404703][ T42] tty tty1: SAK: killed process 3953 (syz-executor903): by fd#3 [ 67.438656][ T42] tty tty1: SAK: killed process 3956 (syz-executor903): by fd#3 [ 67.438687][ T42] tty tty1: SAK: killed process 3957 (syz-executor903): by fd#3 [pid 3961] close(3) = 0 [pid 3961] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3961] write(1, "executing program\n", 18) = 18 [pid 3961] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3962] set_robust_list(0x5555700d1660, 24) = 0 [pid 3962] chdir("./734") = 0 [pid 3962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3962] setpgid(0, 0) = 0 [pid 3962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3962] write(3, "1000", 4) = 4 [pid 3962] close(3) = 0 [pid 3962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3962] write(1, "executing program\n", 18) = 18 [pid 3962] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3958] +++ killed by SIGKILL +++ [pid 3960] <... openat resumed>) = 3 [pid 3959] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3958, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3960] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3959] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3962] <... openat resumed>) = 3 [pid 3961] <... openat resumed>) = 3 [pid 3960] <... ioctl resumed>) = 0 [pid 3959] <... ioctl resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 3962] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3961] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3960] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3959] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3962] <... ioctl resumed>) = 0 [pid 3960] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3959] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3962] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3961] <... ioctl resumed>) = 0 [pid 3960] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3959] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3962] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3961] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3960] <... openat resumed>) = 4 [pid 3959] <... openat resumed>) = 4 [pid 3962] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3960] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3959] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3962] <... openat resumed>) = 4 [pid 3961] <... ioctl resumed>) = 4 [pid 3960] <... write resumed>) = 4 [pid 3961] +++ killed by SIGKILL +++ [pid 3959] <... write resumed>) = ? [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3961, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./741", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./741", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./741/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./741/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./741/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./741") = 0 [pid 292] mkdir("./742", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3963 ./strace-static-x86_64: Process 3963 attached [pid 3962] +++ killed by SIGKILL +++ [pid 3960] +++ killed by SIGKILL +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 3963] set_robust_list(0x5555700d1660, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3962, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3960, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3963] <... set_robust_list resumed>) = 0 [pid 3963] chdir("./742" [pid 293] umount2("./751", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3963] <... chdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./734", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./721", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./751", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3963] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./734", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./721", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3963] setpgid(0, 0 [pid 293] newfstatat(3, "", [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 3963] <... setpgid resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 3963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3963] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 3963] write(3, "1000", 4 [pid 293] umount2("./751/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3963] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./734/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./721/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3963] close(3 [pid 293] newfstatat(AT_FDCWD, "./751/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3963] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./734/binderfs", [pid 290] newfstatat(AT_FDCWD, "./721/binderfs", [pid 3963] symlink("/dev/binderfs", "./binderfs" [pid 293] unlink("./751/binderfs" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3963] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 291] unlink("./734/binderfs" [pid 290] unlink("./721/binderfs"executing program [pid 3963] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3963] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 3963] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... close resumed>) = 0 [pid 291] close(3 [pid 290] close(3 [pid 293] rmdir("./751" [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] rmdir("./734" [pid 290] rmdir("./721" [pid 293] mkdir("./752", 0777 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 291] mkdir("./735", 0777 [pid 290] mkdir("./722", 0777 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3964 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3965 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3966 ./strace-static-x86_64: Process 3966 attached [pid 3966] set_robust_list(0x5555700d1660, 24) = 0 [pid 3966] chdir("./722"./strace-static-x86_64: Process 3964 attached [pid 3963] <... openat resumed>) = 3 [pid 3959] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3965 attached [pid 3964] set_robust_list(0x5555700d1660, 24 [pid 3963] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3959, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3963] <... ioctl resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3963] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3964] <... set_robust_list resumed>) = 0 [pid 3965] set_robust_list(0x5555700d1660, 24 [pid 3963] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3966] <... chdir resumed>) = 0 [pid 3965] <... set_robust_list resumed>) = 0 [pid 3964] chdir("./752") = 0 [pid 3963] <... openat resumed>) = 4 [pid 3966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3963] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3963] <... write resumed>) = 8784 [pid 3964] <... prctl resumed>) = 0 [pid 3964] setpgid(0, 0) = 0 [pid 3964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3964] write(3, "1000", 4) = 4 [pid 3964] close(3) = 0 [pid 3964] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3964] write(1, "executing program\n", 18executing program ) = 18 [pid 3964] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3964] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3964] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3964] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3964] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3964] exit_group(0) = ? [pid 3965] chdir("./735") = 0 [pid 3965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3965] setpgid(0, 0) = 0 [pid 3965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3965] write(3, "1000", 4) = 4 [pid 3965] close(3) = 0 [ 67.438705][ T42] tty tty1: SAK: killed process 3958 (syz-executor903): by fd#3 [ 67.465176][ T42] tty tty1: SAK: killed process 3959 (syz-executor903): by fd#3 [ 67.465204][ T42] tty tty1: SAK: killed process 3960 (syz-executor903): by fd#3 [ 67.465225][ T42] tty tty1: SAK: killed process 3961 (syz-executor903): by fd#3 [ 67.465244][ T42] tty tty1: SAK: killed process 3962 (syz-executor903): by fd#3 executing program [pid 3965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3965] write(1, "executing program\n", 18) = 18 [pid 3965] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3966] <... prctl resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 3964] +++ exited with 0 +++ [pid 3965] <... openat resumed>) = 3 [pid 3965] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3964, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3965] <... ioctl resumed>) = 0 [pid 3965] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3963] +++ killed by SIGKILL +++ [pid 3965] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3963, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3965] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] umount2("./714", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3966] setpgid(0, 0 [pid 293] umount2("./752", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3965] <... openat resumed>) = 4 [pid 3965] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3965] exit_group(0) = ? [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./714", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./714/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./714/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./714/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./714") = 0 [pid 289] mkdir("./715", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3967 executing program [pid 3966] <... setpgid resumed>) = 0 [pid 3966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3966] write(3, "1000", 4) = 4 [pid 3966] close(3) = 0 [pid 3966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3966] write(1, "executing program\n", 18) = 18 [pid 3966] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3966] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3966] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3966] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3966] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3966] exit_group(0) = ? ./strace-static-x86_64: Process 3967 attached [pid 3965] +++ exited with 0 +++ [pid 3966] +++ exited with 0 +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3967] set_robust_list(0x5555700d1660, 24 [pid 293] openat(AT_FDCWD, "./752", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3965, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3966, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3967] <... set_robust_list resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] newfstatat(3, "", [pid 3967] chdir("./715" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3967] <... chdir resumed>) = 0 [pid 293] getdents64(3, [pid 3967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3967] <... prctl resumed>) = 0 [pid 293] umount2("./752/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3967] setpgid(0, 0) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 3967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] newfstatat(AT_FDCWD, "./752/binderfs", [pid 3967] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3967] write(3, "1000", 4 [pid 293] unlink("./752/binderfs" [pid 292] umount2("./742", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./735", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3967] <... write resumed>) = 4 [pid 293] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3967] close(3 [pid 293] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./722", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./742", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3967] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] openat(AT_FDCWD, "./735", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3967] symlink("/dev/binderfs", "./binderfs"executing program [pid 293] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3967] <... symlink resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./722", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3967] write(1, "executing program\n", 18 [pid 293] rmdir("./752" [pid 292] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 3967] <... write resumed>) = 18 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... openat resumed>) = 3 [pid 3967] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] mkdir("./753", 0777 [pid 292] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3967] <... openat resumed>) = 3 [pid 293] <... mkdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] newfstatat(3, "", [pid 3967] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./742/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, ./strace-static-x86_64: Process 3968 attached [pid 3967] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3968] set_robust_list(0x5555700d1660, 24 [pid 3967] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3968 [pid 292] newfstatat(AT_FDCWD, "./742/binderfs", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3968] <... set_robust_list resumed>) = 0 [pid 3967] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] getdents64(3, [pid 3968] chdir("./753" [pid 3967] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] unlink("./742/binderfs" [pid 291] umount2("./735/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3968] <... chdir resumed>) = 0 [pid 3967] <... openat resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3967] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... unlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./722/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3967] <... write resumed>) = ? [pid 292] getdents64(3, [pid 291] newfstatat(AT_FDCWD, "./735/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./722/binderfs", [pid 292] close(3 [pid 291] unlink("./735/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... close resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] unlink("./722/binderfs" [pid 292] rmdir("./742" [pid 291] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 292] mkdir("./743", 0777 [pid 291] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] rmdir("./735" [pid 290] <... close resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] rmdir("./722" [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3969 [pid 291] mkdir("./736", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] mkdir("./723", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 3970 attached ./strace-static-x86_64: Process 3969 attached [pid 3968] <... prctl resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3968] setpgid(0, 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3970 [pid 3968] <... setpgid resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3971 [pid 3967] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3971 attached [pid 3968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3971] set_robust_list(0x5555700d1660, 24) = 0 [pid 3968] <... openat resumed>) = 3 [pid 3970] set_robust_list(0x5555700d1660, 24 [pid 3968] write(3, "1000", 4 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3967, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3970] <... set_robust_list resumed>) = 0 [pid 3969] set_robust_list(0x5555700d1660, 24 [pid 3968] <... write resumed>) = 4 executing program [pid 3971] chdir("./723" [pid 3970] chdir("./736" [pid 3968] close(3 [pid 3969] <... set_robust_list resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3968] <... close resumed>) = 0 [pid 3970] <... chdir resumed>) = 0 [pid 3968] symlink("/dev/binderfs", "./binderfs" [pid 3970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3971] <... chdir resumed>) = 0 [pid 3971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3968] <... symlink resumed>) = 0 [pid 3970] <... prctl resumed>) = 0 [pid 3968] write(1, "executing program\n", 18 [pid 3970] setpgid(0, 0) = 0 [pid 3968] <... write resumed>) = 18 [pid 3969] chdir("./743" [pid 3968] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3971] setpgid(0, 0) = 0 [pid 3968] <... openat resumed>) = 3 [pid 3971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3968] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3969] <... chdir resumed>) = 0 [pid 3971] <... openat resumed>) = 3 [pid 3971] write(3, "1000", 4) = 4 [pid 3971] close(3) = 0 [pid 3971] symlink("/dev/binderfs", "./binderfs" [pid 3968] <... ioctl resumed>) = 0 [pid 3968] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3970] <... openat resumed>) = 3 [pid 3969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3968] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3970] write(3, "1000", 4 [pid 3968] <... openat resumed>) = 4 [pid 3970] <... write resumed>) = 4 executing program [pid 3969] <... prctl resumed>) = 0 [pid 3968] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3970] close(3 [pid 3971] <... symlink resumed>) = 0 [pid 3971] write(1, "executing program\n", 18) = 18 [pid 3968] <... write resumed>) = 8784 [pid 3971] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3968] exit_group(0 [pid 3971] <... openat resumed>) = 3 [pid 3971] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = ? [pid 3971] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3971, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3969] setpgid(0, 0) = 0 [pid 3969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3969] write(3, "1000", 4) = 4 [pid 3969] close(3) = 0 [pid 3969] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3969] write(1, "executing program\n", 18executing program ) = 18 [pid 3969] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3969] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3969] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3969] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3969] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3969] exit_group(0) = ? executing program [pid 3970] <... close resumed>) = 0 [pid 3970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3970] write(1, "executing program\n", 18) = 18 [pid 3970] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3970] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3970] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./723", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./723", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./723/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./723/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./723/binderfs") = 0 [pid 290] getdents64(3, [pid 289] <... restart_syscall resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3968] <... exit_group resumed>) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./723") = 0 [pid 290] mkdir("./724", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3972 [pid 3970] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3970] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3970] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3970] exit_group(0) = ? [pid 3969] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3969, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3972 attached ) = 0 [pid 3972] set_robust_list(0x5555700d1660, 24 [pid 289] umount2("./715", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3972] <... set_robust_list resumed>) = 0 [pid 3970] +++ exited with 0 +++ [pid 3968] +++ killed by SIGKILL +++ [pid 292] umount2("./743", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3972] chdir("./724" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3970, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3972] <... chdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3968, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] openat(AT_FDCWD, "./743", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] openat(AT_FDCWD, "./715", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... openat resumed>) = 3 [pid 291] <... restart_syscall resumed>) = 0 [pid 3972] <... prctl resumed>) = 0 [pid 292] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 3972] setpgid(0, 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(3, "", [pid 3972] <... setpgid resumed>) = 0 [pid 292] getdents64(3, [pid 291] umount2("./736", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3972] <... openat resumed>) = 3 [pid 292] umount2("./743/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] openat(AT_FDCWD, "./736", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3972] write(3, "1000", 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 3972] <... write resumed>) = 4 [pid 292] newfstatat(AT_FDCWD, "./743/binderfs", [pid 291] newfstatat(3, "", [pid 3972] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3972] <... close resumed>) = 0 [pid 292] unlink("./743/binderfs" [pid 291] getdents64(3, [pid 3972] symlink("/dev/binderfs", "./binderfs" [pid 289] umount2("./715/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3972] <... symlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 executing program [pid 3972] write(1, "executing program\n", 18 [pid 292] getdents64(3, [pid 291] umount2("./736/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3972] <... write resumed>) = 18 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3972] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] close(3 [pid 291] newfstatat(AT_FDCWD, "./736/binderfs", [pid 289] newfstatat(AT_FDCWD, "./715/binderfs", [pid 3972] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3972] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] rmdir("./743" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./715/binderfs" [pid 3972] <... ioctl resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 3972] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] getdents64(3, [pid 3972] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3972] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... rmdir resumed>) = 0 [pid 291] unlink("./736/binderfs" [pid 289] close(3 [pid 3972] <... openat resumed>) = 4 [pid 292] mkdir("./744", 0777 [pid 289] <... close resumed>) = 0 [pid 3972] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... unlink resumed>) = 0 [pid 289] rmdir("./715" [pid 3972] <... write resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [ 67.499145][ T20] tty tty1: SAK: killed process 3963 (syz-executor903): by fd#3 [ 67.507570][ T20] tty tty1: SAK: killed process 3963 (syz-executor903): by fd#3 [ 67.524780][ T42] tty tty1: SAK: killed process 3967 (syz-executor903): by fd#3 [ 67.536728][ T42] tty tty1: SAK: killed process 3968 (syz-executor903): by fd#3 [ 67.536759][ T42] tty tty1: SAK: killed process 3971 (syz-executor903): by fd#3 [pid 291] getdents64(3, [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3973 [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./736") = 0 [pid 291] mkdir("./737", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3974 ./strace-static-x86_64: Process 3973 attached [pid 3973] set_robust_list(0x5555700d1660, 24) = 0 [pid 3973] chdir("./744") = 0 [pid 3973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3973] setpgid(0, 0) = 0 [pid 3973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3973] write(3, "1000", 4) = 4 [pid 3973] close(3) = 0 [pid 3973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3973] write(1, "executing program\n", 18executing program ) = 18 [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3973] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] mkdir("./716", 0777 [pid 3973] <... openat resumed>) = 3 [pid 3973] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}./strace-static-x86_64: Process 3974 attached [pid 3972] +++ killed by SIGKILL +++ [pid 293] umount2("./753", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... mkdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3972, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3974] set_robust_list(0x5555700d1660, 24 [pid 3973] <... ioctl resumed>) = 0 [pid 293] openat(AT_FDCWD, "./753", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3974] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3975 attached [pid 3974] chdir("./737" [pid 3973] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... openat resumed>) = 3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3975 [pid 3973] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] newfstatat(3, "", [pid 3974] <... chdir resumed>) = 0 [pid 3973] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... restart_syscall resumed>) = 0 [pid 3974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3973] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3974] <... prctl resumed>) = 0 executing program executing program executing program [pid 3973] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 3974] setpgid(0, 0 [pid 290] umount2("./724", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3974] <... setpgid resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] umount2("./753/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./724", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3974] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 3974] write(3, "1000", 4 [pid 290] newfstatat(3, "", [pid 3974] <... write resumed>) = 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3974] close(3 [pid 290] getdents64(3, [pid 3974] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3974] symlink("/dev/binderfs", "./binderfs" [pid 290] umount2("./724/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3974] <... symlink resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3974] write(1, "executing program\n", 18 [pid 290] newfstatat(AT_FDCWD, "./724/binderfs", [pid 3974] <... write resumed>) = 18 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3974] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] unlink("./724/binderfs" [pid 3974] <... openat resumed>) = 3 [pid 290] <... unlink resumed>) = 0 [pid 3974] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] getdents64(3, [pid 3974] <... ioctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3974] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] close(3 [pid 3974] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... close resumed>) = 0 [pid 3974] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] rmdir("./724") = 0 [pid 290] mkdir("./725", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3976 ./strace-static-x86_64: Process 3976 attached [pid 3976] set_robust_list(0x5555700d1660, 24) = 0 [pid 3976] chdir("./725") = 0 [pid 3976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3976] setpgid(0, 0) = 0 [pid 3976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3976] write(3, "1000", 4) = 4 [pid 3976] close(3) = 0 [pid 3976] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3976] write(1, "executing program\n", 18) = 18 [pid 3976] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3976] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3976] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3976] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3975] set_robust_list(0x5555700d1660, 24) = 0 [pid 3975] chdir("./716") = 0 [pid 3975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3975] setpgid(0, 0) = 0 [pid 3975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3975] write(3, "1000", 4) = 4 [pid 3975] close(3) = 0 [pid 3975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3975] write(1, "executing program\n", 18 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3975] <... write resumed>) = 18 [pid 3975] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] newfstatat(AT_FDCWD, "./753/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./753/binderfs" [pid 3974] <... openat resumed>) = 4 [pid 3974] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3973] <... write resumed>) = ? [pid 293] <... unlink resumed>) = 0 [pid 3974] exit_group(0 [pid 293] getdents64(3, [pid 3974] <... exit_group resumed>) = ? [pid 3973] +++ killed by SIGKILL +++ [pid 3974] +++ exited with 0 +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3973, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3974, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] <... close resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3976] <... openat resumed>) = ? [pid 293] rmdir("./753") = 0 [pid 3975] <... openat resumed>) = 3 [pid 3975] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./744", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./744", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./744/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./744/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./744/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./744") = 0 [pid 292] mkdir("./745", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... restart_syscall resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3977 [pid 291] umount2("./737", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./737", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./737/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./737/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./737/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./737") = 0 [pid 291] mkdir("./738", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3978 [pid 3975] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3975] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3975] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3975] exit_group(0) = ? ./strace-static-x86_64: Process 3978 attached [pid 3978] set_robust_list(0x5555700d1660, 24 [pid 3976] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3976, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 3978] <... set_robust_list resumed>) = 0 [pid 293] mkdir("./754", 0777./strace-static-x86_64: Process 3977 attached [pid 3975] +++ exited with 0 +++ [pid 3978] chdir("./738") = 0 [pid 3978] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3978] setpgid(0, 0 [pid 293] <... mkdir resumed>) = 0 [pid 3978] <... setpgid resumed>) = 0 [pid 3978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3975, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3977] set_robust_list(0x5555700d1660, 24 [pid 3978] <... openat resumed>) = 3 [pid 3978] write(3, "1000", 4 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3978] <... write resumed>) = 4 [pid 3978] close(3) = 0 [pid 3978] symlink("/dev/binderfs", "./binderfs" [pid 3977] <... set_robust_list resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3979 [pid 3978] <... symlink resumed>) = 0 [pid 3978] write(1, "executing program\n", 18 [pid 3977] chdir("./745"executing program [pid 3978] <... write resumed>) = 18 [pid 3978] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3977] <... chdir resumed>) = 0 [pid 3978] <... openat resumed>) = 3 [pid 3978] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3978] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3978] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3978] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3977] <... prctl resumed>) = 0 [pid 3977] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 3979 attached [pid 3978] <... write resumed>) = ? [pid 3977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... restart_syscall resumed>) = 0 [pid 3977] <... openat resumed>) = 3 [pid 3977] write(3, "1000", 4) = 4 [pid 289] umount2("./716", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3977] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... restart_syscall resumed>) = 0 [pid 3977] <... close resumed>) = 0 [pid 289] openat(AT_FDCWD, "./716", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3979] set_robust_list(0x5555700d1660, 24 [pid 3977] symlink("/dev/binderfs", "./binderfs" [pid 289] <... openat resumed>) = 3 [pid 3979] <... set_robust_list resumed>) = 0 [pid 3977] <... symlink resumed>) = 0 [pid 290] umount2("./725", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(3, "", executing program [pid 3979] chdir("./754" [pid 3978] +++ killed by SIGKILL +++ [pid 3977] write(1, "executing program\n", 18 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3977] <... write resumed>) = 18 [pid 290] openat(AT_FDCWD, "./725", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] getdents64(3, [pid 3977] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3978, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3979] <... chdir resumed>) = 0 [pid 3977] <... openat resumed>) = 3 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(3, "", [pid 289] umount2("./716/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3977] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3977] <... ioctl resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(AT_FDCWD, "./716/binderfs", [pid 3977] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3977] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] unlink("./716/binderfs" [pid 3979] <... prctl resumed>) = 0 [pid 3977] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... unlink resumed>) = 0 [pid 290] umount2("./725/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3977] <... openat resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] getdents64(3, [pid 3977] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] newfstatat(AT_FDCWD, "./725/binderfs", [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./725/binderfs" [pid 3977] <... write resumed>) = 8784 [pid 290] <... unlink resumed>) = 0 [pid 289] close(3 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 3977] exit_group(0 [pid 290] close(3) = 0 [pid 289] <... close resumed>) = 0 [pid 3977] <... exit_group resumed>) = ? [pid 290] rmdir("./725" [pid 289] rmdir("./716" [pid 290] <... rmdir resumed>) = 0 [pid 3979] setpgid(0, 0 [pid 290] mkdir("./726", 0777 [pid 3979] <... setpgid resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 3979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3977] +++ exited with 0 +++ [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] mkdir("./717", 0777 [pid 3979] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3977, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... mkdir resumed>) = 0 [pid 3979] write(3, "1000", 4 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3980 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3979] <... write resumed>) = 4 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3981 [pid 3979] close(3./strace-static-x86_64: Process 3981 attached ./strace-static-x86_64: Process 3980 attached ) = 0 [pid 3980] set_robust_list(0x5555700d1660, 24) = 0 [pid 3980] chdir("./726") = 0 [pid 3980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3980] setpgid(0, 0) = 0 [pid 3980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3979] symlink("/dev/binderfs", "./binderfs" [pid 3981] set_robust_list(0x5555700d1660, 24 [pid 3980] <... openat resumed>) = 3 [pid 3980] write(3, "1000", 4) = 4 [pid 3980] close(3) = 0 [pid 3980] symlink("/dev/binderfs", "./binderfs" [pid 3979] <... symlink resumed>) = 0 [pid 3979] write(1, "executing program\n", 18 [pid 3981] <... set_robust_list resumed>) = 0 executing program [pid 3980] <... symlink resumed>) = 0 [pid 3980] write(1, "executing program\n", 18) = 18 [pid 3980] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 3979] <... write resumed>) = 18 [pid 3980] <... openat resumed>) = 3 [pid 3980] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3980] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3980] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [ 67.559322][ T42] tty tty1: SAK: killed process 3972 (syz-executor903): by fd#3 [ 67.570762][ T42] tty tty1: SAK: killed process 3973 (syz-executor903): by fd#3 [ 67.580643][ T42] tty tty1: SAK: killed process 3976 (syz-executor903): by fd#3 [ 67.593148][ T20] tty tty1: SAK: killed process 3978 (syz-executor903): by fd#3 [pid 3980] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3981] chdir("./717" [pid 3980] <... write resumed>) = ? [pid 3979] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 3981] <... chdir resumed>) = 0 [pid 292] umount2("./745", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./738", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./745", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./738", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 3981] <... prctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3981] setpgid(0, 0) = 0 [pid 3981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3981] write(3, "1000", 4) = 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./745/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./738/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3979] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3981] close(3 [pid 292] newfstatat(AT_FDCWD, "./745/binderfs", [pid 291] newfstatat(AT_FDCWD, "./738/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./745/binderfs" [pid 3979] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] unlink("./738/binderfs" [pid 3981] <... close resumed>) = 0 [pid 3981] symlink("/dev/binderfs", "./binderfs" [pid 292] <... unlink resumed>) = 0 [pid 3981] <... symlink resumed>) = 0 [pid 3979] <... ioctl resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 292] close(3 [pid 3979] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... close resumed>) = 0 [pid 291] close(3 [pid 3979] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] rmdir("./745"executing program [pid 291] <... close resumed>) = 0 [pid 3981] write(1, "executing program\n", 18) = 18 [pid 3981] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 291] rmdir("./738" [pid 3979] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] mkdir("./746", 0777 [pid 3981] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3981] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... rmdir resumed>) = 0 [pid 3981] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3981] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3981] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... mkdir resumed>) = 0 [pid 291] mkdir("./739", 0777 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3981] <... write resumed>) = 8784 [pid 3981] exit_group(0) = ? ./strace-static-x86_64: Process 3982 attached [pid 3981] +++ exited with 0 +++ [pid 3979] <... openat resumed>) = ? [pid 291] <... mkdir resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3982 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3983 [pid 3982] set_robust_list(0x5555700d1660, 24) = 0 [pid 3982] chdir("./746") = 0 [pid 3982] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3982] setpgid(0, 0) = 0 [pid 3982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3982] write(3, "1000", 4) = 4 [pid 3982] close(3) = 0 [pid 3982] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3979] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 3983 attached [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3979, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3981, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 3982] write(1, "executing program\n", 18) = 18 [pid 3982] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3983] set_robust_list(0x5555700d1660, 24) = 0 [pid 3983] chdir("./739") = 0 [pid 3983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3983] setpgid(0, 0) = 0 [pid 3983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3983] write(3, "1000", 4) = 4 [pid 3983] close(3) = 0 [pid 3983] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 3983] write(1, "executing program\n", 18) = 18 [pid 3983] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./754", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./754", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 3980] +++ killed by SIGKILL +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./754/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./717", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3983] <... openat resumed>) = 3 [pid 3982] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3980, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./717", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(AT_FDCWD, "./754/binderfs", [pid 289] <... openat resumed>) = 3 [pid 3983] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3982] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(3, "", [pid 3983] <... ioctl resumed>) = 0 [pid 3982] <... ioctl resumed>) = 0 [pid 293] unlink("./754/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3983] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3982] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] getdents64(3, [pid 3983] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3982] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... unlink resumed>) = 0 [pid 290] umount2("./726", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3983] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3982] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./717/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 3983] <... openat resumed>) = 4 [pid 3982] <... openat resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] openat(AT_FDCWD, "./726", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3983] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3982] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] close(3 [pid 290] <... openat resumed>) = 3 [pid 289] newfstatat(AT_FDCWD, "./717/binderfs", [pid 293] <... close resumed>) = 0 [pid 290] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./717/binderfs" [pid 3982] <... write resumed>) = ? [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./717") = 0 [pid 289] mkdir("./718", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3984 ./strace-static-x86_64: Process 3984 attached [pid 3984] set_robust_list(0x5555700d1660, 24) = 0 [pid 3984] chdir("./718") = 0 [pid 3984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3984] setpgid(0, 0) = 0 [pid 3984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3984] write(3, "1000", 4) = 4 [pid 3984] close(3) = 0 [pid 3984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3984] write(1, "executing program\n", 18) = 18 [pid 3984] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3984] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3984] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3984] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3983] <... write resumed>) = ? [pid 3982] +++ killed by SIGKILL +++ [pid 3984] <... openat resumed>) = 4 [pid 3983] +++ killed by SIGKILL +++ [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] rmdir("./754" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3982, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3983, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] getdents64(3, [pid 3984] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3984] exit_group(0) = ? [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./755", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3985 [pid 292] umount2("./746", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./746", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./746/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./746/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./746/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./746") = 0 [pid 292] mkdir("./747", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3986 [pid 291] umount2("./739", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./739", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./739/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./739/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./739/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./739") = 0 [pid 291] mkdir("./740", 0777./strace-static-x86_64: Process 3986 attached ./strace-static-x86_64: Process 3985 attached ) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3986] set_robust_list(0x5555700d1660, 24 [pid 3985] set_robust_list(0x5555700d1660, 24 [pid 290] umount2("./726/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3986] <... set_robust_list resumed>) = 0 [pid 3985] <... set_robust_list resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3987 [pid 3984] +++ exited with 0 +++ [pid 3986] chdir("./747" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3986] <... chdir resumed>) = 0 [pid 3985] chdir("./755" [pid 290] newfstatat(AT_FDCWD, "./726/binderfs", [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3984, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 3985] <... chdir resumed>) = 0 [pid 3986] <... prctl resumed>) = 0 [pid 3985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] unlink("./726/binderfs"./strace-static-x86_64: Process 3987 attached [pid 3987] set_robust_list(0x5555700d1660, 24) = 0 [pid 290] <... unlink resumed>) = 0 [pid 3985] <... prctl resumed>) = 0 [pid 3986] setpgid(0, 0 [pid 290] getdents64(3, [pid 3986] <... setpgid resumed>) = 0 [pid 3985] setpgid(0, 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 3985] <... setpgid resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 3987] chdir("./740" [pid 3985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] rmdir("./726" [pid 3986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3987] <... chdir resumed>) = 0 [pid 3987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3987] setpgid(0, 0) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 3985] <... openat resumed>) = 3 [pid 290] mkdir("./727", 0777 [pid 3987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3986] <... openat resumed>) = 3 [pid 3987] <... openat resumed>) = 3 [pid 3987] write(3, "1000", 4) = 4 [pid 290] <... mkdir resumed>) = 0 [pid 3986] write(3, "1000", 4 [pid 3985] write(3, "1000", 4executing program [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3986] <... write resumed>) = 4 [pid 3985] <... write resumed>) = 4 [pid 3987] close(3) = 0 [pid 3987] symlink("/dev/binderfs", "./binderfs" [pid 3985] close(3 [pid 3986] close(3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 3988 [pid 3985] <... close resumed>) = 0 [pid 3986] <... close resumed>) = 0 [pid 3985] symlink("/dev/binderfs", "./binderfs" [pid 3986] symlink("/dev/binderfs", "./binderfs" [pid 3987] <... symlink resumed>) = 0 [pid 3987] write(1, "executing program\n", 18) = 18 [pid 3987] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3985] <... symlink resumed>) = 0 [pid 3986] <... symlink resumed>) = 0 executing program executing program [pid 3985] write(1, "executing program\n", 18 [pid 3986] write(1, "executing program\n", 18 [pid 3985] <... write resumed>) = 18 [pid 3986] <... write resumed>) = 18 [pid 3985] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3986] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3987] <... openat resumed>) = 3 [pid 3985] <... openat resumed>) = 3 [pid 3987] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3986] <... openat resumed>) = 3 [pid 3985] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3987] <... ioctl resumed>) = 0 [pid 3987] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3986] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3985] <... ioctl resumed>) = 0 [pid 3986] <... ioctl resumed>) = 0 [ 67.611612][ T42] tty tty1: SAK: killed process 3980 (syz-executor903): by fd#3 [ 67.624353][ T42] tty tty1: SAK: killed process 3979 (syz-executor903): by fd#3 [ 67.624379][ T42] tty tty1: SAK: killed process 3980 (syz-executor903): by fd#3 [ 67.642590][ T20] tty tty1: SAK: killed process 3982 (syz-executor903): by fd#3 [ 67.642630][ T20] tty tty1: SAK: killed process 3983 (syz-executor903): by fd#3 [pid 3986] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3985] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3986] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3985] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3986] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3985] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3986] <... openat resumed>) = 4 [pid 3986] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3985] <... openat resumed>) = 4 [pid 3987] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3987] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 3988 attached [pid 3985] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3988] set_robust_list(0x5555700d1660, 24) = 0 [pid 3986] <... write resumed>) = 8784 [pid 3988] chdir("./727" [pid 3985] <... write resumed>) = 8784 [pid 3987] <... openat resumed>) = 4 [pid 3986] exit_group(0 [pid 3987] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3985] exit_group(0 [pid 3986] <... exit_group resumed>) = ? [pid 3987] <... write resumed>) = ? [pid 3985] <... exit_group resumed>) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./718", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./718", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./718/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./718/binderfs", [pid 3986] +++ killed by SIGKILL +++ [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3985] +++ killed by SIGKILL +++ [pid 289] unlink("./718/binderfs" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3986, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... unlink resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3985, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] getdents64(3, [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./718" [pid 292] umount2("./747", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... rmdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] mkdir("./719", 0777 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] openat(AT_FDCWD, "./747", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... mkdir resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 293] umount2("./755", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(3, "", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] openat(AT_FDCWD, "./755", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] getdents64(3, [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3989 [pid 293] <... openat resumed>) = 3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(3, "", [pid 292] umount2("./747/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(3, [pid 292] newfstatat(AT_FDCWD, "./747/binderfs", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./755/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] unlink("./747/binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... unlink resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./755/binderfs", [pid 292] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] unlink("./755/binderfs" [pid 292] close(3 [pid 293] <... unlink resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 293] getdents64(3, [pid 292] rmdir("./747" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 293] close(3 [pid 292] mkdir("./748", 0777 [pid 293] <... close resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 293] rmdir("./755" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./756", 0777 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3990 [pid 293] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3991 [pid 3988] <... chdir resumed>) = 0 [pid 3988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3988] setpgid(0, 0) = 0 [pid 3988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3988] write(3, "1000", 4) = 4 [pid 3988] close(3) = 0 [pid 3988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3988] write(1, "executing program\n", 18) = 18 [pid 3988] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3988] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3987] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3987, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 3988] <... ioctl resumed>) = 0 [pid 3988] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3988] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3988] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 3989 attached ) = -1 (errno 18446744073709551615) ./strace-static-x86_64: Process 3991 attached ./strace-static-x86_64: Process 3990 attached [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./740", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./740", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./740/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./740/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./740/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./740") = 0 [pid 291] mkdir("./741", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3992 [pid 3991] set_robust_list(0x5555700d1660, 24 [pid 3990] set_robust_list(0x5555700d1660, 24 [pid 3989] set_robust_list(0x5555700d1660, 24 [pid 3990] <... set_robust_list resumed>) = 0 [pid 3991] <... set_robust_list resumed>) = 0 [pid 3990] chdir("./748" [pid 3991] chdir("./756" [pid 3989] <... set_robust_list resumed>) = 0 [pid 3989] chdir("./719" [pid 3990] <... chdir resumed>) = 0 [pid 3991] <... chdir resumed>) = 0 [pid 3989] <... chdir resumed>) = 0 [pid 3991] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3990] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3991] <... prctl resumed>) = 0 [pid 3990] <... prctl resumed>) = 0 [pid 3989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3991] setpgid(0, 0 [pid 3990] setpgid(0, 0 [pid 3989] <... prctl resumed>) = 0 [pid 3989] setpgid(0, 0 [pid 3991] <... setpgid resumed>) = 0 [pid 3990] <... setpgid resumed>) = 0 [pid 3991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3989] <... setpgid resumed>) = 0 [pid 3989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3990] <... openat resumed>) = 3 [pid 3989] <... openat resumed>) = 3 [pid 3991] <... openat resumed>) = 3 [pid 3989] write(3, "1000", 4 [pid 3990] write(3, "1000", 4 [pid 3991] write(3, "1000", 4 [pid 3989] <... write resumed>) = 4 [pid 3990] <... write resumed>) = 4 [pid 3991] <... write resumed>) = 4 [pid 3989] close(3 [pid 3990] close(3 [pid 3991] close(3 [pid 3989] <... close resumed>) = 0 [pid 3990] <... close resumed>) = 0 [pid 3991] <... close resumed>) = 0 [pid 3990] symlink("/dev/binderfs", "./binderfs" [pid 3989] symlink("/dev/binderfs", "./binderfs" [pid 3991] symlink("/dev/binderfs", "./binderfs" [pid 3990] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 3992 attached [pid 3991] <... symlink resumed>) = 0 [pid 3988] +++ killed by SIGKILL +++ [pid 3992] set_robust_list(0x5555700d1660, 24 executing program executing program [pid 3989] <... symlink resumed>) = 0 [pid 3991] write(1, "executing program\n", 18 [pid 3989] write(1, "executing program\n", 18 [pid 3991] <... write resumed>) = 18 [pid 3989] <... write resumed>) = 18 [pid 3991] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3989] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3988, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3991] <... openat resumed>) = 3 [pid 3990] write(1, "executing program\n", 18 [pid 3989] <... openat resumed>) = 3 [pid 3992] <... set_robust_list resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...>executing program [pid 3991] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3990] <... write resumed>) = 18 [pid 3989] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3991] <... ioctl resumed>) = 0 [pid 3990] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3989] <... ioctl resumed>) = 0 [pid 3991] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3990] <... openat resumed>) = 3 [pid 3989] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3991] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3990] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3989] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3991] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3990] <... ioctl resumed>) = 0 [pid 3989] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3992] chdir("./741" [pid 3991] <... openat resumed>) = 4 [pid 3990] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3989] <... openat resumed>) = 4 [pid 3991] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3990] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3989] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3992] <... chdir resumed>) = 0 [pid 3990] ????( [pid 3992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3992] setpgid(0, 0) = 0 [pid 3992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3992] write(3, "1000", 4) = 4 [pid 3992] close(3) = 0 [pid 3992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3992] write(1, "executing program\n", 18executing program ) = 18 [pid 3992] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3992] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3992] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3992] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3991] <... write resumed>) = ? [pid 3992] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 290] <... restart_syscall resumed>) = 0 [pid 3992] exit_group(0 [pid 3990] <... ???? resumed>) = ? [pid 3989] <... write resumed>) = ? [pid 3992] <... exit_group resumed>) = ? [pid 290] umount2("./727", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./727", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [ 67.665247][ T20] tty tty1: SAK: killed process 3985 (syz-executor903): by fd#3 [ 67.665275][ T20] tty tty1: SAK: killed process 3986 (syz-executor903): by fd#3 [ 67.665292][ T20] tty tty1: SAK: killed process 3987 (syz-executor903): by fd#3 [ 67.692230][ T20] tty tty1: SAK: killed process 3988 (syz-executor903): by fd#3 [ 67.705086][ T42] tty tty1: SAK: killed process 3989 (syz-executor903): by fd#3 [pid 290] umount2("./727/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./727/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./727/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./727") = 0 [pid 290] mkdir("./728", 0777 [pid 3992] +++ exited with 0 +++ [pid 3990] +++ killed by SIGKILL +++ [pid 3989] +++ killed by SIGKILL +++ [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 3993 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3990, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3992, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] umount2("./741", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./741", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./741/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./741/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./741/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./741") = 0 [pid 291] mkdir("./742", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3994 attached ./strace-static-x86_64: Process 3993 attached [pid 3991] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3989, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3994] set_robust_list(0x5555700d1660, 24 [pid 3993] set_robust_list(0x5555700d1660, 24 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3994 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3991, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3994] <... set_robust_list resumed>) = 0 [pid 3993] <... set_robust_list resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3994] chdir("./742" [pid 3993] chdir("./728" [pid 3994] <... chdir resumed>) = 0 [pid 3993] <... chdir resumed>) = 0 [pid 3994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3994] <... prctl resumed>) = 0 [pid 3993] <... prctl resumed>) = 0 [pid 3994] setpgid(0, 0 [pid 3993] setpgid(0, 0 [pid 3994] <... setpgid resumed>) = 0 [pid 3993] <... setpgid resumed>) = 0 [pid 3993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3993] <... openat resumed>) = 3 [pid 3994] <... openat resumed>) = 3 [pid 3993] write(3, "1000", 4 [pid 3994] write(3, "1000", 4 [pid 3993] <... write resumed>) = 4 [pid 3994] <... write resumed>) = 4 [pid 3993] close(3 [pid 3994] close(3 [pid 3993] <... close resumed>) = 0 [pid 3994] <... close resumed>) = 0 [pid 3993] symlink("/dev/binderfs", "./binderfs" [pid 3994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3993] <... symlink resumed>) = 0 executing program [pid 3994] write(1, "executing program\n", 18 [pid 3993] write(1, "executing program\n", 18) = 18 [pid 3993] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 executing program [pid 3993] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3994] <... write resumed>) = 18 [pid 3993] <... ioctl resumed>) = 0 [pid 3993] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3993] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3993] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3994] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3993] <... write resumed>) = 8784 [pid 293] <... restart_syscall resumed>) = 0 [pid 3994] <... openat resumed>) = 3 [pid 3994] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 293] umount2("./756", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./748", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3994] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3994] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] openat(AT_FDCWD, "./756", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./748", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3994] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 3994] <... openat resumed>) = 4 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 3994] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3994] <... write resumed>) = 8784 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 3994] exit_group(0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3994] <... exit_group resumed>) = ? [pid 293] umount2("./756/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./748/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./756/binderfs", [pid 292] newfstatat(AT_FDCWD, "./748/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./756/binderfs" [pid 292] unlink("./748/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 292] close(3 [pid 293] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 3994] +++ exited with 0 +++ [pid 293] rmdir("./756" [pid 292] rmdir("./748"executing program [pid 293] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3994, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] mkdir("./757", 0777 [pid 292] mkdir("./749", 0777 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3995 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 3996 ./strace-static-x86_64: Process 3995 attached [pid 3995] set_robust_list(0x5555700d1660, 24) = 0 [pid 3995] chdir("./757") = 0 [pid 3995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3995] setpgid(0, 0) = 0 [pid 3995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3995] write(3, "1000", 4) = 4 [pid 3995] close(3) = 0 [pid 3995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3995] write(1, "executing program\n", 18) = 18 [pid 3995] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3995] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 3995] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 3995] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3995] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 3995] exit_group(0) = ? [pid 289] umount2("./719", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./719", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./719/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./719/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./719/binderfs") = 0 ./strace-static-x86_64: Process 3996 attached [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./719" [pid 3996] set_robust_list(0x5555700d1660, 24 [pid 3995] +++ exited with 0 +++ [pid 289] <... rmdir resumed>) = 0 [pid 3996] <... set_robust_list resumed>) = 0 [pid 3993] +++ killed by SIGKILL +++ [pid 289] mkdir("./720", 0777 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3995, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3993, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3996] chdir("./749" [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 3996] <... chdir resumed>) = 0 [pid 3996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... restart_syscall resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... mkdir resumed>) = 0 [pid 3996] <... prctl resumed>) = 0 [pid 3996] setpgid(0, 0) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] umount2("./742", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3996] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./742", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 3997 [pid 291] <... openat resumed>) = 3 [pid 3996] write(3, "1000", 4 [pid 291] newfstatat(3, "", [pid 3996] <... write resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 3996] close(3 [pid 291] getdents64(3, [pid 3996] <... close resumed>) = 0 ./strace-static-x86_64: Process 3997 attached [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3996] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 291] umount2("./742/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3996] write(1, "executing program\n", 18) = 18 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3996] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] newfstatat(AT_FDCWD, "./742/binderfs", [pid 3997] set_robust_list(0x5555700d1660, 24 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 3996] <... openat resumed>) = 3 [pid 291] unlink("./742/binderfs" [pid 3997] <... set_robust_list resumed>) = 0 [pid 3996] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 3996] <... ioctl resumed>) = 0 [pid 291] getdents64(3, [pid 3996] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] umount2("./757", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] close(3 [pid 3996] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... close resumed>) = 0 [pid 293] openat(AT_FDCWD, "./757", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] rmdir("./742" [pid 3996] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... openat resumed>) = 3 [pid 3996] <... openat resumed>) = 4 [pid 3996] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 293] newfstatat(3, "", [pid 291] <... rmdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] mkdir("./743", 0777 [pid 293] getdents64(3, [pid 3996] exit_group(0) = ? [pid 3997] chdir("./720" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... mkdir resumed>) = 0 [pid 293] umount2("./757/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./728", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3997] <... chdir resumed>) = 0 [pid 3996] +++ exited with 0 +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] openat(AT_FDCWD, "./728", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(AT_FDCWD, "./757/binderfs", [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3996, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 3998 [pid 290] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] unlink("./757/binderfs" [pid 290] newfstatat(3, "", ./strace-static-x86_64: Process 3998 attached [pid 3997] setpgid(0, 0 [pid 3998] set_robust_list(0x5555700d1660, 24 [pid 3997] <... setpgid resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] close(3 [pid 290] umount2("./728/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] rmdir("./757" [pid 290] newfstatat(AT_FDCWD, "./728/binderfs", [pid 3998] <... set_robust_list resumed>) = 0 [pid 3997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... rmdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] mkdir("./758", 0777 [pid 290] unlink("./728/binderfs" [pid 3998] chdir("./743") = 0 [pid 3998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... mkdir resumed>) = 0 [pid 3998] <... prctl resumed>) = 0 [pid 3998] setpgid(0, 0) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... unlink resumed>) = 0 [pid 3998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3997] <... openat resumed>) = 3 [pid 3997] write(3, "1000", 4) = 4 [pid 3997] close(3 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 3999 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 3997] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 3997] symlink("/dev/binderfs", "./binderfs" [pid 290] rmdir("./728" [pid 3998] <... openat resumed>) = 3 [pid 3997] <... symlink resumed>) = 0 [pid 3998] write(3, "1000", 4) = 4 [pid 290] <... rmdir resumed>) = 0 [pid 3998] close(3executing program [pid 290] mkdir("./729", 0777 [pid 3998] <... close resumed>) = 0 [pid 3998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3997] write(1, "executing program\n", 18 [pid 290] <... mkdir resumed>) = 0 [pid 3997] <... write resumed>) = 18 executing program [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3997] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 3998] write(1, "executing program\n", 18) = 18 [pid 3998] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 3997] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4000 [pid 3998] <... openat resumed>) = 3 [pid 3997] <... ioctl resumed>) = 0 [pid 3997] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 3998] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3997] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3997] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 3998] <... ioctl resumed>) = 0 [pid 3997] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 3998] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}./strace-static-x86_64: Process 4000 attached ./strace-static-x86_64: Process 3999 attached ) = ? [pid 3997] <... write resumed>) = ? [pid 3999] set_robust_list(0x5555700d1660, 24) = 0 [pid 3999] chdir("./758" [pid 292] <... restart_syscall resumed>) = 0 [pid 3999] <... chdir resumed>) = 0 [pid 3999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 292] umount2("./749", MNT_FORCE|UMOUNT_NOFOLLOW [pid 3999] setpgid(0, 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3999] <... setpgid resumed>) = 0 [ 67.705114][ T42] tty tty1: SAK: killed process 3990 (syz-executor903): by fd#3 [ 67.705137][ T42] tty tty1: SAK: killed process 3991 (syz-executor903): by fd#3 [ 67.733884][ T42] tty tty1: SAK: killed process 3993 (syz-executor903): by fd#3 [ 67.742655][ T42] tty tty1: SAK: killed process 3993 (syz-executor903): by fd#3 [pid 292] openat(AT_FDCWD, "./749", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... openat resumed>) = 3 [pid 4000] set_robust_list(0x5555700d1660, 24 [pid 3999] <... openat resumed>) = 3 [pid 3998] +++ killed by SIGKILL +++ [pid 292] newfstatat(3, "", [pid 4000] <... set_robust_list resumed>) = 0 [pid 3999] write(3, "1000", 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3998, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4000] chdir("./729" [pid 3999] <... write resumed>) = 4 [pid 292] getdents64(3, [pid 4000] <... chdir resumed>) = 0 [pid 3999] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3999] <... close resumed>) = 0 [pid 292] umount2("./749/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./743", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4000] <... prctl resumed>) = 0 [pid 3999] symlink("/dev/binderfs", "./binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4000] setpgid(0, 0 [pid 3999] <... symlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./749/binderfs", [pid 291] openat(AT_FDCWD, "./743", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 4000] <... setpgid resumed>) = 0 [pid 3999] write(1, "executing program\n", 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... openat resumed>) = 3 [pid 4000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3999] <... write resumed>) = 18 [pid 292] unlink("./749/binderfs" [pid 291] newfstatat(3, "", [pid 4000] <... openat resumed>) = 3 [pid 3999] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4000] write(3, "1000", 4 [pid 3999] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 3997] +++ killed by SIGKILL +++ [pid 4000] <... write resumed>) = 4 [pid 4000] close(3) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 3999] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] close(3 [pid 3999] <... ioctl resumed>) = 0 [pid 291] umount2("./743/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... close resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3997, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 3999] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program [pid 292] rmdir("./749" [pid 3999] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... rmdir resumed>) = 0 [pid 3999] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] newfstatat(AT_FDCWD, "./743/binderfs", [pid 292] mkdir("./750", 0777 [pid 3999] <... openat resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4000] write(1, "executing program\n", 18) = 18 [pid 4000] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4000] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 3999] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... mkdir resumed>) = 0 [pid 291] unlink("./743/binderfs" [pid 4000] <... ioctl resumed>) = 0 [pid 4000] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4000] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 3999] <... write resumed>) = ? [pid 4000] <... openat resumed>) = ? [pid 4000] +++ killed by SIGKILL +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4000, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./743") = 0 [pid 291] mkdir("./744", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4001 [pid 290] umount2("./729", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./729", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./729/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./729/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./729/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./729") = 0 [pid 290] mkdir("./730", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4002 [pid 289] umount2("./720", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4002 attached ./strace-static-x86_64: Process 4001 attached ) = -1 EINVAL (Invalid argument) [pid 4002] set_robust_list(0x5555700d1660, 24 [pid 289] openat(AT_FDCWD, "./720", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 4003 attached [pid 4002] <... set_robust_list resumed>) = 0 [pid 4001] set_robust_list(0x5555700d1660, 24 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4003 [pid 289] <... openat resumed>) = 3 [pid 4002] chdir("./730" [pid 4001] <... set_robust_list resumed>) = 0 [pid 289] newfstatat(3, "", [pid 4002] <... chdir resumed>) = 0 [pid 3999] +++ killed by SIGKILL +++ [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4003] set_robust_list(0x5555700d1660, 24 [pid 4002] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4001] chdir("./744" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3999, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] getdents64(3, [pid 4003] <... set_robust_list resumed>) = 0 [pid 4002] <... prctl resumed>) = 0 [pid 4001] <... chdir resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4002] setpgid(0, 0 [pid 4001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] umount2("./720/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4003] chdir("./750" [pid 4002] <... setpgid resumed>) = 0 [pid 4001] <... prctl resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./720/binderfs", [pid 4002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4003] <... chdir resumed>) = 0 [pid 4001] setpgid(0, 0 [pid 289] unlink("./720/binderfs" [pid 4003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4002] <... openat resumed>) = 3 [pid 4001] <... setpgid resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 4003] <... prctl resumed>) = 0 [pid 4002] write(3, "1000", 4 [pid 289] getdents64(3, [pid 4002] <... write resumed>) = 4 [pid 4001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4003] setpgid(0, 0 [pid 4002] close(3 [pid 4001] <... openat resumed>) = 3 [pid 293] <... restart_syscall resumed>) = 0 [pid 289] close(3 [pid 4003] <... setpgid resumed>) = 0 [pid 4002] <... close resumed>) = 0 [pid 4001] write(3, "1000", 4 [pid 289] <... close resumed>) = 0 [pid 4003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4002] symlink("/dev/binderfs", "./binderfs" [pid 4001] <... write resumed>) = 4 [pid 289] rmdir("./720" [pid 4003] <... openat resumed>) = 3 [pid 4002] <... symlink resumed>) = 0 [pid 4001] close(3 [pid 293] umount2("./758", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... rmdir resumed>) = 0 [pid 4003] write(3, "1000", 4 executing program [pid 4002] write(1, "executing program\n", 18 [pid 4001] <... close resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] mkdir("./721", 0777 [pid 4003] <... write resumed>) = 4 [pid 4002] <... write resumed>) = 18 [pid 4001] symlink("/dev/binderfs", "./binderfs" [pid 293] openat(AT_FDCWD, "./758", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4003] close(3 [pid 4002] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4001] <... symlink resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 289] <... mkdir resumed>) = 0 executing program [pid 4003] <... close resumed>) = 0 [pid 4002] <... openat resumed>) = 3 [pid 4001] write(1, "executing program\n", 18 [pid 293] newfstatat(3, "", [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4003] symlink("/dev/binderfs", "./binderfs" [pid 4002] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4001] <... write resumed>) = 18 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4003] <... symlink resumed>) = 0 [pid 4002] <... ioctl resumed>) = 0 [pid 4001] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4003] write(1, "executing program\n", 18 [pid 4002] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program [pid 4001] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4004 [pid 4003] <... write resumed>) = 18 [pid 4002] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4001] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4003] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4002] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4001] <... ioctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 4004 attached [pid 4003] <... openat resumed>) = 3 [pid 4002] <... openat resumed>) = 4 [pid 4001] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4004] set_robust_list(0x5555700d1660, 24 [pid 4003] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4002] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./758/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4004] <... set_robust_list resumed>) = 0 [pid 4001] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4004] chdir("./721" [pid 4002] <... write resumed>) = 8784 [pid 293] newfstatat(AT_FDCWD, "./758/binderfs", [pid 4004] <... chdir resumed>) = 0 [pid 4002] exit_group(0 [pid 4001] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] unlink("./758/binderfs" [pid 4004] <... prctl resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 4004] setpgid(0, 0 [pid 293] getdents64(3, [pid 4004] <... setpgid resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] close(3 [pid 4004] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 4004] write(3, "1000", 4 [pid 293] rmdir("./758" [pid 4004] <... write resumed>) = 4 [pid 293] <... rmdir resumed>) = 0 [pid 4004] close(3 [pid 293] mkdir("./759", 0777 [pid 4004] <... close resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 4004] symlink("/dev/binderfs", "./binderfs" [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4004] <... symlink resumed>) = 0 executing program [pid 4004] write(1, "executing program\n", 18 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4005 [pid 4004] <... write resumed>) = 18 [pid 4004] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4004] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4004] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4004] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4004] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4004] exit_group(0) = ? ./strace-static-x86_64: Process 4005 attached [pid 4005] set_robust_list(0x5555700d1660, 24) = 0 [pid 4004] +++ exited with 0 +++ [pid 4003] <... ioctl resumed>) = ? [pid 4002] <... exit_group resumed>) = ? [pid 4001] <... openat resumed>) = ? [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4004, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4005] chdir("./759") = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./721", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./721", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 67.763890][ T42] tty tty1: SAK: killed process 3997 (syz-executor903): by fd#3 [ 67.763922][ T42] tty tty1: SAK: killed process 3998 (syz-executor903): by fd#3 [ 67.782078][ T20] tty tty1: SAK: killed process 3999 (syz-executor903): by fd#3 [ 67.782107][ T20] tty tty1: SAK: killed process 4000 (syz-executor903): by fd#3 [ 67.807009][ T20] tty tty1: SAK: killed process 4001 (syz-executor903): by fd#3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./721/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./721/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./721/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./721") = 0 [pid 289] mkdir("./722", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4006 [pid 4005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4005] setpgid(0, 0) = 0 [pid 4005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4005] write(3, "1000", 4) = 4 [pid 4005] close(3 [pid 4003] +++ killed by SIGKILL +++ [pid 4005] <... close resumed>) = 0 [pid 4005] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4005] write(1, "executing program\n", 18) = 18 [pid 4005] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4005] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4005] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4001] +++ killed by SIGKILL +++ [pid 4005] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4002] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4003, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4001, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4005] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4002, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4005] <... openat resumed>) = 4 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4005] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4005] exit_group(0) = ? ./strace-static-x86_64: Process 4006 attached [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./744", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./744", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4006] set_robust_list(0x5555700d1660, 24 [pid 291] umount2("./744/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4006] <... set_robust_list resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4006] chdir("./722" [pid 291] newfstatat(AT_FDCWD, "./744/binderfs", [pid 4006] <... chdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] unlink("./744/binderfs" [pid 4006] <... prctl resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 4006] setpgid(0, 0 [pid 291] getdents64(3, [pid 4006] <... setpgid resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] close(3 [pid 4006] <... openat resumed>) = 3 [pid 291] <... close resumed>) = 0 [pid 4006] write(3, "1000", 4 [pid 291] rmdir("./744" [pid 4006] <... write resumed>) = 4 [pid 291] <... rmdir resumed>) = 0 [pid 4006] close(3 [pid 291] mkdir("./745", 0777 [pid 4006] <... close resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 4006] symlink("/dev/binderfs", "./binderfs" [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4007 attached [pid 4006] <... symlink resumed>) = 0 [pid 4005] +++ exited with 0 +++ [pid 292] umount2("./750", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 4006] write(1, "executing program\n", 18 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4005, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4007 [pid 290] umount2("./730", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4006] <... write resumed>) = 18 [pid 292] openat(AT_FDCWD, "./750", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4006] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./730", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4007] set_robust_list(0x5555700d1660, 24 [pid 4006] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 4006] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(3, "", [pid 4007] <... set_robust_list resumed>) = 0 [pid 4006] <... ioctl resumed>) = 0 [pid 292] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4006] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 4006] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] umount2("./750/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4006] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] umount2("./730/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4006] <... openat resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4006] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./730/binderfs", [pid 4007] chdir("./745" [pid 292] newfstatat(AT_FDCWD, "./750/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4006] <... write resumed>) = ? [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./730/binderfs" [pid 4007] <... chdir resumed>) = 0 [pid 292] unlink("./750/binderfs" [pid 4007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4006] +++ killed by SIGKILL +++ [pid 290] <... unlink resumed>) = 0 [pid 293] umount2("./759", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 4007] <... prctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4006, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] openat(AT_FDCWD, "./759", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 289] umount2("./722", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 292] close(3 [pid 290] <... close resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 290] rmdir("./730" [pid 289] openat(AT_FDCWD, "./722", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4007] setpgid(0, 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... close resumed>) = 0 [pid 293] getdents64(3, [pid 292] rmdir("./750" [pid 290] <... rmdir resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4007] <... setpgid resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] mkdir("./731", 0777 [pid 289] newfstatat(3, "", [pid 293] umount2("./759/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... rmdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] mkdir("./751", 0777 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] getdents64(3, [pid 293] newfstatat(AT_FDCWD, "./759/binderfs", [pid 292] <... mkdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4008 [pid 289] umount2("./722/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] unlink("./759/binderfs" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... unlink resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./722/binderfs", [pid 293] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4009 [pid 289] unlink("./722/binderfs" [pid 293] close(3 [pid 289] <... unlink resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 289] getdents64(3, [pid 293] rmdir("./759" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 4009 attached [pid 4007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... rmdir resumed>) = 0 [pid 289] close(3 [pid 293] mkdir("./760", 0777 [pid 289] <... close resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 289] rmdir("./722"./strace-static-x86_64: Process 4008 attached [pid 4009] set_robust_list(0x5555700d1660, 24 [pid 4007] <... openat resumed>) = 3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 4010 attached [pid 4009] <... set_robust_list resumed>) = 0 [pid 4008] set_robust_list(0x5555700d1660, 24 [pid 4007] write(3, "1000", 4 [pid 289] mkdir("./723", 0777 [pid 4010] set_robust_list(0x5555700d1660, 24 [pid 4009] chdir("./751" [pid 4008] <... set_robust_list resumed>) = 0 [pid 4007] <... write resumed>) = 4 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4010 [pid 289] <... mkdir resumed>) = 0 [pid 4010] <... set_robust_list resumed>) = 0 [pid 4007] close(3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4010] chdir("./760" [pid 4009] <... chdir resumed>) = 0 [pid 4008] chdir("./731" [pid 4007] <... close resumed>) = 0 ./strace-static-x86_64: Process 4011 attached [pid 4010] <... chdir resumed>) = 0 [pid 4011] set_robust_list(0x5555700d1660, 24 [pid 4010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4011 [pid 4011] <... set_robust_list resumed>) = 0 [pid 4010] <... prctl resumed>) = 0 [pid 4011] chdir("./723" [pid 4010] setpgid(0, 0 [pid 4011] <... chdir resumed>) = 0 [pid 4010] <... setpgid resumed>) = 0 [pid 4011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4011] <... prctl resumed>) = 0 [pid 4010] <... openat resumed>) = 3 [pid 4011] setpgid(0, 0 [pid 4010] write(3, "1000", 4 [pid 4011] <... setpgid resumed>) = 0 [pid 4010] <... write resumed>) = 4 [pid 4007] symlink("/dev/binderfs", "./binderfs" [pid 4011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4010] close(3 [pid 4011] <... openat resumed>) = 3 [pid 4010] <... close resumed>) = 0 [pid 4011] write(3, "1000", 4 [pid 4010] symlink("/dev/binderfs", "./binderfs" [pid 4011] <... write resumed>) = 4 [pid 4010] <... symlink resumed>) = 0 [pid 4007] <... symlink resumed>) = 0 [pid 4011] close(3executing program [pid 4010] write(1, "executing program\n", 18 [pid 4011] <... close resumed>) = 0 [pid 4010] <... write resumed>) = 18 [pid 4011] symlink("/dev/binderfs", "./binderfs" [pid 4010] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4008] <... chdir resumed>) = 0 executing program [pid 4007] write(1, "executing program\n", 18 [pid 4011] <... symlink resumed>) = 0 [pid 4010] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4007] <... write resumed>) = 18 [pid 4010] <... ioctl resumed>) = 0 [pid 4008] <... prctl resumed>) = 0 [pid 4007] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4010] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4008] setpgid(0, 0 [pid 4007] <... openat resumed>) = 3 [pid 4010] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4008] <... setpgid resumed>) = 0 [pid 4007] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 4011] write(1, "executing program\n", 18 [pid 4010] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4009] <... prctl resumed>) = 0 [pid 4008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4007] <... ioctl resumed>) = 0 [pid 4010] <... openat resumed>) = 4 [pid 4009] setpgid(0, 0 [pid 4008] <... openat resumed>) = 3 [pid 4007] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} executing program [pid 4010] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4008] write(3, "1000", 4 [pid 4007] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4009] <... setpgid resumed>) = 0 [pid 4008] <... write resumed>) = 4 [pid 4007] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4010] <... write resumed>) = 8784 [pid 4008] close(3 [pid 4007] <... openat resumed>) = 4 [pid 4008] <... close resumed>) = 0 [pid 4007] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4008] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4008] write(1, "executing program\n", 18) = 18 [pid 4008] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4008] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4008] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4008] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4008] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4008] exit_group(0) = ? [pid 4011] <... write resumed>) = 18 [pid 4011] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4011] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4011] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4011] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4011] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4011] exit_group(0) = ? [pid 4009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4009] write(3, "1000", 4) = 4 [pid 4009] close(3) = 0 [pid 4009] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4009] write(1, "executing program\n", 18) = 18 [pid 4009] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4009] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4007] +++ killed by SIGKILL +++ [pid 4009] <... ioctl resumed>) = 0 [pid 4009] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4009] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4009] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [ 67.807035][ T20] tty tty1: SAK: killed process 4002 (syz-executor903): by fd#3 [ 67.807052][ T20] tty tty1: SAK: killed process 4003 (syz-executor903): by fd#3 [ 67.836332][ T42] tty tty1: SAK: killed process 4006 (syz-executor903): by fd#3 [ 67.858066][ T42] tty tty1: SAK: killed process 4007 (syz-executor903): by fd#3 [pid 4009] exit_group(0) = ? [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4007, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./745", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./745", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./745/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./745/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./745/binderfs") = 0 [pid 291] getdents64(3, [pid 4008] +++ exited with 0 +++ [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4010] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4008, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4010, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] close(3 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... close resumed>) = 0 [pid 4009] +++ exited with 0 +++ [pid 291] rmdir("./745" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4009, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./746", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4011] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4011, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4012 ./strace-static-x86_64: Process 4012 attached [pid 4012] set_robust_list(0x5555700d1660, 24) = 0 [pid 4012] chdir("./746") = 0 [pid 4012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4012] setpgid(0, 0) = 0 [pid 4012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4012] write(3, "1000", 4) = 4 [pid 4012] close(3) = 0 [pid 4012] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4012] write(1, "executing program\n", 18) = 18 [pid 4012] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4012] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4012] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4012] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 executing program [pid 4012] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./751", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./751", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./751/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./751/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./751/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./751") = 0 [pid 292] mkdir("./752", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4013 ./strace-static-x86_64: Process 4013 attached [pid 4013] set_robust_list(0x5555700d1660, 24) = 0 [pid 4013] chdir("./752") = 0 [pid 4013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4013] setpgid(0, 0) = 0 [pid 4013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4013] write(3, "1000", 4) = 4 [pid 4013] close(3) = 0 [pid 4013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4013] write(1, "executing program\n", 18) = 18 [pid 4013] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4013] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4013] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4013] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 293] umount2("./760", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./760", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./731", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./723", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./731", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./723", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(3, "", [pid 290] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 290] umount2("./731/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4012] <... write resumed>) = ? [pid 289] umount2("./723/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./731/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 290] unlink("./731/binderfs" [pid 289] newfstatat(AT_FDCWD, "./723/binderfs", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./760/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] getdents64(3, [pid 289] unlink("./723/binderfs" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./760/binderfs", [pid 290] close(3 [pid 289] <... unlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... close resumed>) = 0 [pid 289] getdents64(3, [pid 290] rmdir("./731" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] unlink("./760/binderfs") = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] close(3 [pid 290] mkdir("./732", 0777 [pid 289] <... close resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./760") = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] rmdir("./723" [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] mkdir("./761", 0777) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] mkdir("./724", 0777 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4014 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4015 [pid 4013] <... openat resumed>) = 4 [pid 4013] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4013] <... write resumed>) = 8784 [pid 4013] exit_group(0) = ? [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4016 ./strace-static-x86_64: Process 4016 attached ./strace-static-x86_64: Process 4015 attached ./strace-static-x86_64: Process 4014 attached [pid 4012] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4012, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4016] set_robust_list(0x5555700d1660, 24 [pid 4014] set_robust_list(0x5555700d1660, 24 [pid 4016] <... set_robust_list resumed>) = 0 [pid 291] umount2("./746", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4014] <... set_robust_list resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4016] chdir("./724" [pid 4014] chdir("./732" [pid 291] openat(AT_FDCWD, "./746", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4016] <... chdir resumed>) = 0 [pid 4014] <... chdir resumed>) = 0 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] getdents64(3, [pid 4016] <... prctl resumed>) = 0 [pid 4014] <... prctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./746/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./746/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./746/binderfs") = 0 [pid 4014] setpgid(0, 0 [pid 4016] setpgid(0, 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./746" [pid 4016] <... setpgid resumed>) = 0 [pid 4014] <... setpgid resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./747", 0777 [pid 4016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4013] +++ killed by SIGKILL +++ [pid 291] <... mkdir resumed>) = 0 [pid 4016] <... openat resumed>) = 3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4017 attached [pid 4016] write(3, "1000", 4 [pid 4014] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4013, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4017 [pid 4015] set_robust_list(0x5555700d1660, 24 [pid 4016] <... write resumed>) = 4 [pid 4014] write(3, "1000", 4 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4015] <... set_robust_list resumed>) = 0 [pid 4017] set_robust_list(0x5555700d1660, 24 [pid 4016] close(3 [pid 4014] <... write resumed>) = 4 [pid 4015] chdir("./761") = 0 [pid 4015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4015] setpgid(0, 0) = 0 [pid 4016] <... close resumed>) = 0 [pid 4014] close(3 [pid 4017] <... set_robust_list resumed>) = 0 [pid 4014] <... close resumed>) = 0 [pid 4016] symlink("/dev/binderfs", "./binderfs" [pid 4015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4014] symlink("/dev/binderfs", "./binderfs" [pid 4016] <... symlink resumed>) = 0 [pid 4014] <... symlink resumed>) = 0 [pid 4016] write(1, "executing program\n", 18 [pid 4015] <... openat resumed>) = 3 [pid 4015] write(3, "1000", 4) = 4 [pid 4015] close(3) = 0 [pid 4015] symlink("/dev/binderfs", "./binderfs"executing program [pid 4016] <... write resumed>) = 18 [pid 4014] write(1, "executing program\n", 18executing program [pid 4015] <... symlink resumed>) = 0 [pid 4014] <... write resumed>) = 18 [pid 4016] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR executing program [pid 4014] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4015] write(1, "executing program\n", 18) = 18 [pid 4015] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4014] <... openat resumed>) = 3 [pid 4016] <... openat resumed>) = 3 [pid 4014] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4016] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4014] <... ioctl resumed>) = 0 [pid 4016] <... ioctl resumed>) = 0 [pid 4014] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4016] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4014] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4016] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4014] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4016] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4015] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4014] <... openat resumed>) = 4 [pid 4016] <... openat resumed>) = 4 [pid 4014] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4016] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4015] <... ioctl resumed>) = 0 [pid 4015] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4014] <... write resumed>) = 8784 [pid 4015] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4015] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4016] <... write resumed>) = 8784 [pid 4015] <... openat resumed>) = 4 [pid 4014] exit_group(0 [pid 4016] exit_group(0 [pid 4015] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4014] <... exit_group resumed>) = ? executing program [pid 4015] <... write resumed>) = 8784 [pid 4015] exit_group(0) = ? [pid 4016] <... exit_group resumed>) = ? [pid 4017] chdir("./747" [pid 292] <... restart_syscall resumed>) = 0 [pid 4014] +++ exited with 0 +++ [pid 4015] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4015, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4014, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] umount2("./752", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4017] <... chdir resumed>) = 0 [pid 4017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4017] setpgid(0, 0) = 0 [pid 4017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4017] write(3, "1000", 4) = 4 [pid 4017] close(3) = 0 [pid 4017] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4017] write(1, "executing program\n", 18) = 18 [pid 4017] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./752", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [ 67.858101][ T42] tty tty1: SAK: killed process 4010 (syz-executor903): by fd#3 [ 67.880414][ T42] tty tty1: SAK: killed process 4012 (syz-executor903): by fd#3 [ 67.893598][ T42] tty tty1: SAK: killed process 4013 (syz-executor903): by fd#3 [pid 292] umount2("./752/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./752/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./752/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./752") = 0 [pid 292] mkdir("./753", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4018 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./732", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./732", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./732/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4018 attached ) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./732/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./732/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./732") = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 290] mkdir("./733", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] umount2("./761", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4019 [pid 293] openat(AT_FDCWD, "./761", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./761/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./761/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./761/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./761") = 0 [pid 293] mkdir("./762", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4020 [pid 4018] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 4019 attached [pid 4017] <... openat resumed>) = 3 [pid 4016] +++ killed by SIGKILL +++ [pid 4018] <... set_robust_list resumed>) = 0 [pid 4019] set_robust_list(0x5555700d1660, 24 [pid 4018] chdir("./753" [pid 4017] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4019] <... set_robust_list resumed>) = 0 [pid 4018] <... chdir resumed>) = 0 [pid 4017] <... ioctl resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4016, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4019] chdir("./733" [pid 4018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4017] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4019] <... chdir resumed>) = 0 [pid 4018] <... prctl resumed>) = 0 [pid 4017] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4018] setpgid(0, 0 [pid 4017] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4019] <... prctl resumed>) = 0 [pid 4018] <... setpgid resumed>) = 0 [pid 4019] setpgid(0, 0 [pid 4017] <... openat resumed>) = 4 [pid 4018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4017] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4019] <... setpgid resumed>) = 0 [pid 4019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4018] <... openat resumed>) = 3 [pid 4017] <... write resumed>) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 4019] <... openat resumed>) = 3 [pid 4018] write(3, "1000", 4 [pid 4019] write(3, "1000", 4 [pid 4018] <... write resumed>) = 4 ./strace-static-x86_64: Process 4020 attached [pid 4019] <... write resumed>) = 4 [pid 4018] close(3 [pid 289] umount2("./724", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4020] set_robust_list(0x5555700d1660, 24 [pid 4019] close(3 [pid 4018] <... close resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4020] <... set_robust_list resumed>) = 0 [pid 4019] <... close resumed>) = 0 [pid 4018] symlink("/dev/binderfs", "./binderfs" [pid 289] openat(AT_FDCWD, "./724", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4019] symlink("/dev/binderfs", "./binderfs" [pid 4018] <... symlink resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4020] chdir("./762" [pid 4019] <... symlink resumed>) = 0 [pid 4018] write(1, "executing program\n", 18 [pid 289] newfstatat(3, "", executing program executing program [pid 4020] <... chdir resumed>) = 0 [pid 4019] write(1, "executing program\n", 18 [pid 4018] <... write resumed>) = 18 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4019] <... write resumed>) = 18 [pid 4018] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] getdents64(3, [pid 4020] <... prctl resumed>) = 0 [pid 4019] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4018] <... openat resumed>) = 3 [pid 4017] +++ killed by SIGKILL +++ [pid 4020] setpgid(0, 0 [pid 4019] <... openat resumed>) = 3 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4017, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4018] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4020] <... setpgid resumed>) = 0 [pid 4019] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4018] <... ioctl resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4019] <... ioctl resumed>) = 0 [pid 4018] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] umount2("./724/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4019] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4018] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4020] <... openat resumed>) = 3 [pid 4019] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4018] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] newfstatat(AT_FDCWD, "./724/binderfs", [pid 4019] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4018] <... openat resumed>) = 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4019] <... openat resumed>) = 4 [pid 4018] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] unlink("./724/binderfs" [pid 4020] write(3, "1000", 4 [pid 4019] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4018] <... write resumed>) = 8784 [pid 4020] <... write resumed>) = 4 [pid 4020] close(3) = 0 [pid 4020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4019] <... write resumed>) = ? [pid 289] <... unlink resumed>) = 0 executing program [pid 4020] write(1, "executing program\n", 18) = 18 [pid 4020] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4020] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4020] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4020] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4020] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4020] exit_group(0) = ? [pid 4020] +++ exited with 0 +++ [pid 4019] +++ killed by SIGKILL +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 289] getdents64(3, [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4020, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4019, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] umount2("./747", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] umount2("./762", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./733", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./747", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./762", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./733", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./747/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./762/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./733/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./747/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./762/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./733/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./747/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./762/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 290] unlink("./733/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] <... close resumed>) = 0 [pid 290] close(3 [pid 293] <... close resumed>) = 0 [pid 291] rmdir("./747" [pid 290] <... close resumed>) = 0 [pid 4018] +++ killed by SIGKILL +++ [pid 293] rmdir("./762" [pid 291] <... rmdir resumed>) = 0 [pid 290] rmdir("./733" [pid 289] close(3) = 0 [pid 289] rmdir("./724" [pid 293] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4018, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] mkdir("./763", 0777 [pid 291] mkdir("./748", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 289] mkdir("./725", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 290] mkdir("./734", 0777 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4021 ./strace-static-x86_64: Process 4021 attached [pid 4021] set_robust_list(0x5555700d1660, 24) = 0 [pid 4021] chdir("./725") = 0 [pid 4021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4022 [pid 290] <... mkdir resumed>) = 0 [pid 4021] setpgid(0, 0) = 0 [pid 4021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4023 [pid 4021] <... openat resumed>) = 3 [pid 4021] write(3, "1000", 4) = 4 [pid 4021] close(3) = 0 [pid 4021] symlink("/dev/binderfs", "./binderfs" [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4024 executing program [pid 292] umount2("./753", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./753", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4021] <... symlink resumed>) = 0 [pid 4021] write(1, "executing program\n", 18) = 18 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4021] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./753/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./753/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./753/binderfs" [pid 4021] <... openat resumed>) = 3 ./strace-static-x86_64: Process 4024 attached ./strace-static-x86_64: Process 4023 attached ./strace-static-x86_64: Process 4022 attached [pid 292] <... unlink resumed>) = 0 [pid 4021] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] getdents64(3, [pid 4021] <... ioctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4021] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4021] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] close(3 [pid 4021] <... openat resumed>) = 4 [pid 292] <... close resumed>) = 0 [pid 4021] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [ 67.913958][ T42] tty tty1: SAK: killed process 4015 (syz-executor903): by fd#3 [ 67.913983][ T42] tty tty1: SAK: killed process 4016 (syz-executor903): by fd#3 [ 67.932782][ T60] tty tty1: SAK: killed process 4017 (syz-executor903): by fd#3 [ 67.945031][ T42] tty tty1: SAK: killed process 4018 (syz-executor903): by fd#3 [ 67.945058][ T42] tty tty1: SAK: killed process 4019 (syz-executor903): by fd#3 [pid 292] rmdir("./753"executing program executing program [pid 4024] set_robust_list(0x5555700d1660, 24 [pid 4023] set_robust_list(0x5555700d1660, 24 [pid 4022] set_robust_list(0x5555700d1660, 24 [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./754", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4025 [pid 4022] <... set_robust_list resumed>) = 0 [pid 4022] chdir("./763") = 0 [pid 4022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4022] setpgid(0, 0) = 0 [pid 4022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4022] write(3, "1000", 4) = 4 [pid 4022] close(3) = 0 [pid 4022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4022] write(1, "executing program\n", 18) = 18 [pid 4022] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4022] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4022] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4022] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4022] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4022] exit_group(0) = ? [pid 4023] <... set_robust_list resumed>) = 0 [pid 4023] chdir("./748") = 0 [pid 4023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4023] setpgid(0, 0) = 0 [pid 4023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4023] write(3, "1000", 4) = 4 [pid 4023] close(3) = 0 [pid 4023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4023] write(1, "executing program\n", 18) = 18 [pid 4023] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4023] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4023] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4023] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4023] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4021] <... write resumed>) = ? [pid 4022] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4022, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4024] <... set_robust_list resumed>) = 0 [pid 4021] +++ killed by SIGKILL +++ [pid 4024] chdir("./734") = 0 [pid 4023] <... write resumed>) = ? [pid 4024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4024] setpgid(0, 0) = 0 [pid 4024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4024] write(3, "1000", 4) = 4 [pid 4024] close(3) = 0 [pid 4024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4024] write(1, "executing program\n", 18executing program ) = 18 [pid 4024] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4024] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4024] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4024] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4024] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4024] exit_group(0) = ? ./strace-static-x86_64: Process 4025 attached [pid 4025] set_robust_list(0x5555700d1660, 24) = 0 [pid 4025] chdir("./754") = 0 [pid 4025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4025] setpgid(0, 0) = 0 [pid 4023] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4021, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4023, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4025] write(3, "1000", 4) = 4 [pid 4025] close(3) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 293] umount2("./763", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] umount2("./748", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] openat(AT_FDCWD, "./763", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./748", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(3, "", [pid 291] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(3, "", [pid 293] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 293] umount2("./763/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./748/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] newfstatat(AT_FDCWD, "./763/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./748/binderfs", [pid 293] unlink("./763/binderfs" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... unlink resumed>) = 0 [pid 291] unlink("./748/binderfs" [pid 293] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 293] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... close resumed>) = 0 [pid 291] close(3 [pid 293] rmdir("./763" [pid 291] <... close resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] rmdir("./748" [pid 293] mkdir("./764", 0777 [pid 291] <... rmdir resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 291] mkdir("./749", 0777 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4026 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4027 [pid 4025] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4025] write(1, "executing program\n", 18) = 18 [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4027 attached ./strace-static-x86_64: Process 4026 attached [pid 4025] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4024] +++ exited with 0 +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 4027] set_robust_list(0x5555700d1660, 24 [pid 4026] set_robust_list(0x5555700d1660, 24 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4024, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4027] <... set_robust_list resumed>) = 0 [pid 4026] <... set_robust_list resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4027] chdir("./749" [pid 4026] chdir("./764" [pid 4025] <... openat resumed>) = 3 [pid 289] umount2("./725", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4027] <... chdir resumed>) = 0 [pid 4026] <... chdir resumed>) = 0 [pid 4027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4026] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4027] <... prctl resumed>) = 0 [pid 4026] <... prctl resumed>) = 0 [pid 289] openat(AT_FDCWD, "./725", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4027] setpgid(0, 0 [pid 4026] setpgid(0, 0 [pid 4027] <... setpgid resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4026] <... setpgid resumed>) = 0 [pid 4027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4025] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] newfstatat(3, "", [pid 4026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4025] <... ioctl resumed>) = 0 [pid 4027] <... openat resumed>) = 3 [pid 4025] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] getdents64(3, [pid 4026] <... openat resumed>) = 3 [pid 4025] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4025] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4027] write(3, "1000", 4 [pid 4026] write(3, "1000", 4 [pid 4027] <... write resumed>) = 4 [pid 289] umount2("./725/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4026] <... write resumed>) = 4 [pid 4027] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4027] <... close resumed>) = 0 [pid 4026] close(3 [pid 289] newfstatat(AT_FDCWD, "./725/binderfs", [pid 4027] symlink("/dev/binderfs", "./binderfs" [pid 4026] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4027] <... symlink resumed>) = 0 [pid 4026] symlink("/dev/binderfs", "./binderfs" [pid 4025] <... openat resumed>) = 4 [pid 289] unlink("./725/binderfs" [pid 4027] write(1, "executing program\n", 18 [pid 4025] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4026] <... symlink resumed>) = 0 executing program executing program [pid 4027] <... write resumed>) = 18 [pid 4026] write(1, "executing program\n", 18 [pid 4025] <... write resumed>) = ? [pid 289] <... unlink resumed>) = 0 [pid 4027] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4026] <... write resumed>) = 18 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] getdents64(3, [pid 4027] <... openat resumed>) = 3 [pid 4026] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4027] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4026] <... openat resumed>) = 3 [pid 4025] +++ killed by SIGKILL +++ [pid 289] close(3 [pid 4027] <... ioctl resumed>) = 0 [pid 4026] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... close resumed>) = 0 [pid 4027] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4026] <... ioctl resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4025, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./734", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] rmdir("./725" [pid 4027] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4026] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] umount2("./754", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./734", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4027] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4026] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] openat(AT_FDCWD, "./754", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 289] <... rmdir resumed>) = 0 [pid 4027] <... openat resumed>) = 4 [pid 4026] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", executing program [pid 4027] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4026] <... openat resumed>) = 4 [pid 292] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] mkdir("./726", 0777 [pid 4027] <... write resumed>) = 8784 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4026] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] getdents64(3, [pid 292] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./734/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./754/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... mkdir resumed>) = 0 [pid 4026] <... write resumed>) = 8784 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./734/binderfs", [pid 4027] exit_group(0 [pid 4026] exit_group(0 [pid 292] newfstatat(AT_FDCWD, "./754/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./734/binderfs" [pid 4026] <... exit_group resumed>) = ? [pid 292] unlink("./754/binderfs" [pid 290] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 292] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 292] close(3 [pid 290] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 290] rmdir("./734" [pid 4027] <... exit_group resumed>) = ? [pid 4026] +++ killed by SIGKILL +++ [pid 292] rmdir("./754" [pid 290] <... rmdir resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4028 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4026, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... rmdir resumed>) = 0 [pid 290] mkdir("./735", 0777 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] mkdir("./755", 0777 [pid 290] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4029 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4030 ./strace-static-x86_64: Process 4028 attached [pid 4028] set_robust_list(0x5555700d1660, 24) = 0 [pid 4028] chdir("./726") = 0 [pid 4028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4028] setpgid(0, 0) = 0 [pid 4028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4028] write(3, "1000", 4) = 4 [pid 4028] close(3) = 0 [pid 4028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4028] write(1, "executing program\n", 18) = 18 [pid 4028] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4028] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4028] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4028] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4028] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4028] exit_group(0) = ? ./strace-static-x86_64: Process 4029 attached [pid 4029] set_robust_list(0x5555700d1660, 24) = 0 [pid 4029] chdir("./735") = 0 [pid 4029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4029] setpgid(0, 0) = 0 [pid 4029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./764", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./764", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./764/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./764/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./764/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [ 67.967267][ T42] tty tty1: SAK: killed process 4021 (syz-executor903): by fd#3 [ 67.975479][ T42] tty tty1: SAK: killed process 4021 (syz-executor903): by fd#3 [ 67.975502][ T42] tty tty1: SAK: killed process 4023 (syz-executor903): by fd#3 [ 67.995146][ T60] tty tty1: SAK: killed process 4025 (syz-executor903): by fd#3 [ 68.006914][ T42] tty tty1: SAK: killed process 4026 (syz-executor903): by fd#3 [pid 293] rmdir("./764"executing program executing program ) = 0 [pid 293] mkdir("./765", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4031 [pid 4028] +++ exited with 0 +++ [pid 4029] <... openat resumed>) = 3 [pid 4029] write(3, "1000", 4) = 4 [pid 4029] close(3) = 0 [pid 4029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4029] write(1, "executing program\n", 18) = 18 [pid 4029] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4029] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4029] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4029] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4029] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4029] exit_group(0) = ? ./strace-static-x86_64: Process 4031 attached [pid 4031] set_robust_list(0x5555700d1660, 24) = 0 [pid 4031] chdir("./765") = 0 [pid 4031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4031] setpgid(0, 0) = 0 [pid 4031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4031] write(3, "1000", 4) = 4 [pid 4031] close(3) = 0 [pid 4031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4031] write(1, "executing program\n", 18) = 18 [pid 4031] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4031] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4031] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4031] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4031] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4031] exit_group(0) = ? ./strace-static-x86_64: Process 4030 attached [pid 4030] set_robust_list(0x5555700d1660, 24) = 0 [pid 4030] chdir("./755" [pid 4029] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4028, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4027] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4029, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4027, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./749", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./749", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4031] +++ exited with 0 +++ [pid 291] umount2("./749/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4030] <... chdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4031, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... restart_syscall resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./749/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./749/binderfs") = 0 [pid 291] getdents64(3, [pid 289] umount2("./726", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./749") = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] mkdir("./750", 0777 [pid 289] openat(AT_FDCWD, "./726", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] newfstatat(3, "", [pid 293] umount2("./765", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4032 [pid 4030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4030] setpgid(0, 0) = 0 [pid 293] openat(AT_FDCWD, "./765", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] getdents64(3, ./strace-static-x86_64: Process 4032 attached [pid 4030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4030] <... openat resumed>) = 3 [pid 4030] write(3, "1000", 4) = 4 [pid 4030] close(3) = 0 [pid 4032] set_robust_list(0x5555700d1660, 24 [pid 293] newfstatat(3, "", [pid 289] umount2("./726/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4030] symlink("/dev/binderfs", "./binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4032] <... set_robust_list resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4030] <... symlink resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 4032] chdir("./750" [pid 293] getdents64(3, [pid 289] newfstatat(AT_FDCWD, "./726/binderfs", [pid 290] umount2("./735", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./735", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./735/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./735/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] unlink("./735/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4032] <... chdir resumed>) = 0 [pid 293] umount2("./765/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... unlink resumed>) = 0 [pid 289] unlink("./726/binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 293] newfstatat(AT_FDCWD, "./765/binderfs", [pid 290] <... close resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] rmdir("./735" [pid 289] getdents64(3, [pid 4032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] unlink("./765/binderfs" [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./736", 0777 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4032] <... prctl resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 293] getdents64(3, [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] close(3 [pid 4032] setpgid(0, 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4033 executing program [pid 4030] write(1, "executing program\n", 18) = 18 [pid 293] close(3 [pid 289] <... close resumed>) = 0 ./strace-static-x86_64: Process 4033 attached [pid 4032] <... setpgid resumed>) = 0 [pid 4030] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... close resumed>) = 0 [pid 289] rmdir("./726" [pid 4030] <... openat resumed>) = 3 [pid 293] rmdir("./765" [pid 289] <... rmdir resumed>) = 0 [pid 4030] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4030] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 293] <... rmdir resumed>) = 0 [pid 289] mkdir("./727", 0777 [pid 4030] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4030] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4033] set_robust_list(0x5555700d1660, 24 [pid 4032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] mkdir("./766", 0777 [pid 289] <... mkdir resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4033] <... set_robust_list resumed>) = 0 [pid 4032] <... openat resumed>) = 3 [pid 4030] <... write resumed>) = ? [pid 4033] chdir("./736" [pid 4032] write(3, "1000", 4 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4034 attached [pid 4034] set_robust_list(0x5555700d1660, 24) = 0 [pid 4034] chdir("./727") = 0 [pid 4034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4034 [pid 4034] <... prctl resumed>) = 0 [pid 4034] setpgid(0, 0) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4035 [pid 4032] <... write resumed>) = 4 [pid 4033] <... chdir resumed>) = 0 [pid 4030] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4030, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4032] close(3./strace-static-x86_64: Process 4035 attached [pid 4034] <... openat resumed>) = 3 [pid 4033] <... prctl resumed>) = 0 [pid 4033] setpgid(0, 0) = 0 [pid 4033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4032] <... close resumed>) = 0 [pid 4035] set_robust_list(0x5555700d1660, 24 [pid 4034] write(3, "1000", 4 [pid 4033] <... openat resumed>) = 3 [pid 4035] <... set_robust_list resumed>) = 0 [pid 4032] symlink("/dev/binderfs", "./binderfs" [pid 4033] write(3, "1000", 4) = 4 [pid 4033] close(3) = 0 [pid 4033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4032] <... symlink resumed>) = 0 [pid 4033] write(1, "executing program\n", 18executing program ) = 18 [pid 4033] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4032] write(1, "executing program\n", 18executing program [pid 4033] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4032] <... write resumed>) = 18 [pid 4034] <... write resumed>) = 4 [pid 4033] <... ioctl resumed>) = 0 [pid 4033] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4033] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4035] chdir("./766" [pid 4034] close(3 [pid 4032] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4033] <... openat resumed>) = 4 [pid 4033] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4035] <... chdir resumed>) = 0 [pid 4034] <... close resumed>) = 0 [pid 4032] <... openat resumed>) = 3 [pid 4032] +++ killed by SIGKILL +++ [pid 4034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4035] setpgid(0, 0) = 0 executing program [pid 4035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4034] write(1, "executing program\n", 18) = 18 [pid 4035] <... openat resumed>) = 3 [pid 4034] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4035] write(3, "1000", 4 [pid 4034] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4035] <... write resumed>) = 4 [pid 4035] close(3) = 0 [pid 4035] symlink("/dev/binderfs", "./binderfs" [pid 4034] <... ioctl resumed>) = 0 [pid 4035] <... symlink resumed>) = 0 [pid 4034] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program ) = -1 EBADF (Bad file descriptor) [pid 4034] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4035] write(1, "executing program\n", 18) = 18 [pid 4035] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4035] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4035] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4035] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4034] <... openat resumed>) = 4 [pid 4033] <... write resumed>) = ? [pid 4035] <... openat resumed>) = 4 [pid 4034] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... restart_syscall resumed>) = 0 [pid 4035] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4034] <... write resumed>) = 8784 [pid 4033] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4032, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4035] <... write resumed>) = 8784 [pid 4034] exit_group(0 [pid 4035] exit_group(0 [pid 4034] <... exit_group resumed>) = ? [pid 4035] <... exit_group resumed>) = ? [pid 292] umount2("./755", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./755", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./755/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./755/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./755/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./755") = 0 [pid 292] mkdir("./756", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4036 ./strace-static-x86_64: Process 4036 attached [pid 4034] +++ exited with 0 +++ [pid 4035] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4033, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4034, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4036] set_robust_list(0x5555700d1660, 24 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4035, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] umount2("./750", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./736", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 291] openat(AT_FDCWD, "./750", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./736", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] umount2("./766", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 289] <... restart_syscall resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 293] openat(AT_FDCWD, "./766", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 293] newfstatat(3, "", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./750/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./736/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./727", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./750/binderfs", [pid 290] newfstatat(AT_FDCWD, "./736/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] openat(AT_FDCWD, "./727", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4036] <... set_robust_list resumed>) = 0 [pid 293] umount2("./766/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] unlink("./750/binderfs" [pid 290] unlink("./736/binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 293] newfstatat(AT_FDCWD, "./766/binderfs", [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 289] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] unlink("./766/binderfs" [pid 291] close(3 [pid 290] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... unlink resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 293] getdents64(3, [pid 291] rmdir("./750" [pid 290] rmdir("./736" [pid 289] getdents64(3, [pid 4036] chdir("./756" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4036] <... chdir resumed>) = 0 [pid 293] close(3 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] umount2("./727/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... close resumed>) = 0 [pid 291] mkdir("./751", 0777 [pid 290] mkdir("./737", 0777 [pid 4036] <... prctl resumed>) = 0 [pid 293] rmdir("./766" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4036] setpgid(0, 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./727/binderfs", [pid 4036] <... setpgid resumed>) = 0 [pid 293] mkdir("./767", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 4036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 4037 attached ./strace-static-x86_64: Process 4038 attached [pid 4036] <... openat resumed>) = 3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4037 [pid 289] unlink("./727/binderfs" [pid 4038] set_robust_list(0x5555700d1660, 24 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4038 [pid 4038] <... set_robust_list resumed>) = 0 [pid 4038] chdir("./737" [pid 4036] write(3, "1000", 4 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4039 [pid 289] <... unlink resumed>) = 0 [pid 4038] <... chdir resumed>) = 0 [pid 289] getdents64(3, [pid 4036] <... write resumed>) = 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4038] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4036] close(3 [pid 289] close(3 [pid 4038] <... prctl resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 4036] <... close resumed>) = 0 [pid 289] rmdir("./727" [pid 4038] setpgid(0, 0) = 0 [pid 4038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4036] symlink("/dev/binderfs", "./binderfs" [pid 289] <... rmdir resumed>) = 0 [pid 4038] <... openat resumed>) = 3 [pid 289] mkdir("./728", 0777 [pid 4038] write(3, "1000", 4 [pid 4036] <... symlink resumed>) = 0 [pid 4038] <... write resumed>) = 4 [pid 4038] close(3) = 0 [pid 4038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4036] write(1, "executing program\n", 18executing program executing program [pid 289] <... mkdir resumed>) = 0 [pid 4038] write(1, "executing program\n", 18 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4036] <... write resumed>) = 18 [pid 4038] <... write resumed>) = 18 [pid 4038] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4038] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4036] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4040 [pid 4038] <... ioctl resumed>) = 0 [pid 4036] <... openat resumed>) = 3 [pid 4038] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4036] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4038] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4038] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4036] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 4040 attached [pid 4037] set_robust_list(0x5555700d1660, 24 [pid 4038] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4039 attached [pid 4040] set_robust_list(0x5555700d1660, 24 [pid 4038] <... write resumed>) = ? [pid 4037] <... set_robust_list resumed>) = 0 [ 68.006941][ T42] tty tty1: SAK: killed process 4027 (syz-executor903): by fd#3 [ 68.036939][ T60] tty tty1: SAK: killed process 4030 (syz-executor903): by fd#3 [ 68.051936][ T60] tty tty1: SAK: killed process 4032 (syz-executor903): by fd#3 [ 68.051972][ T60] tty tty1: SAK: killed process 4033 (syz-executor903): by fd#3 [pid 4040] <... set_robust_list resumed>) = 0 [pid 4039] set_robust_list(0x5555700d1660, 24 [pid 4037] chdir("./751" [pid 4036] +++ killed by SIGKILL +++ [pid 4040] chdir("./728" [pid 4039] <... set_robust_list resumed>) = 0 [pid 4037] <... chdir resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4036, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4040] <... chdir resumed>) = 0 [pid 4039] chdir("./767" [pid 4037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4039] <... chdir resumed>) = 0 [pid 4037] <... prctl resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 4040] <... prctl resumed>) = 0 [pid 4039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4037] setpgid(0, 0 [pid 4040] setpgid(0, 0 [pid 4039] <... prctl resumed>) = 0 [pid 4037] <... setpgid resumed>) = 0 [pid 4040] <... setpgid resumed>) = 0 [pid 4039] setpgid(0, 0 [pid 4037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] umount2("./756", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4039] <... setpgid resumed>) = 0 [pid 4037] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4040] <... openat resumed>) = 3 [pid 4039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4037] write(3, "1000", 4 [pid 292] openat(AT_FDCWD, "./756", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4040] write(3, "1000", 4 [pid 4039] <... openat resumed>) = 3 [pid 4037] <... write resumed>) = 4 [pid 292] <... openat resumed>) = 3 [pid 4040] <... write resumed>) = 4 [pid 4039] write(3, "1000", 4 [pid 4037] close(3 [pid 292] newfstatat(3, "", [pid 4040] close(3 [pid 4039] <... write resumed>) = 4 [pid 4037] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4040] <... close resumed>) = 0 [pid 4039] close(3 [pid 4038] +++ killed by SIGKILL +++ [pid 4037] symlink("/dev/binderfs", "./binderfs" [pid 292] getdents64(3, [pid 4040] symlink("/dev/binderfs", "./binderfs" [pid 4039] <... close resumed>) = 0 [pid 4037] <... symlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4038, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 4039] symlink("/dev/binderfs", "./binderfs"executing program [pid 4037] write(1, "executing program\n", 18 [pid 292] umount2("./756/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4040] <... symlink resumed>) = 0 [pid 4039] <... symlink resumed>) = 0 [pid 4037] <... write resumed>) = 18 executing program [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4039] write(1, "executing program\n", 18 [pid 4037] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR executing program [pid 292] newfstatat(AT_FDCWD, "./756/binderfs", [pid 4040] write(1, "executing program\n", 18 [pid 4039] <... write resumed>) = 18 [pid 4037] <... openat resumed>) = 3 [pid 4040] <... write resumed>) = 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4039] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4037] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] unlink("./756/binderfs" [pid 4040] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4039] <... openat resumed>) = 3 [pid 4037] <... ioctl resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 4040] <... openat resumed>) = 3 [pid 4039] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4037] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] getdents64(3, [pid 4040] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4039] <... ioctl resumed>) = 0 [pid 4037] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4040] <... ioctl resumed>) = 0 [pid 4039] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4037] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] close(3 [pid 4040] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4039] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4037] <... openat resumed>) = 4 [pid 292] <... close resumed>) = 0 [pid 4040] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4039] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4037] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] rmdir("./756" [pid 4040] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4039] <... openat resumed>) = 4 [pid 4040] <... openat resumed>) = 4 [pid 4037] <... write resumed>) = ? [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./757", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4041 [pid 4040] +++ killed by SIGKILL +++ [pid 4039] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4039, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4040, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./767", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./728", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./737", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4041 attached [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./767", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./728", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./737", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 4041] set_robust_list(0x5555700d1660, 24 [pid 293] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./737/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./737/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./737/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./737" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] newfstatat(3, "", [pid 290] mkdir("./738", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4042 [pid 4041] <... set_robust_list resumed>) = 0 [pid 4041] chdir("./757") = 0 [pid 4041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4041] setpgid(0, 0) = 0 [pid 4041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4041] write(3, "1000", 4) = 4 [pid 4041] close(3) = 0 [pid 4041] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4041] write(1, "executing program\n", 18executing program ) = 18 [pid 4041] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./767/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./767/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./767/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./767") = 0 [pid 293] mkdir("./768", 0777./strace-static-x86_64: Process 4042 attached [pid 4037] +++ killed by SIGKILL +++ [pid 293] <... mkdir resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4042] set_robust_list(0x5555700d1660, 24 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] getdents64(3, [pid 4042] <... set_robust_list resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4042] chdir("./738" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4037, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./728/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4042] <... chdir resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4043 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] newfstatat(AT_FDCWD, "./728/binderfs", [pid 4042] <... prctl resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4042] setpgid(0, 0 [pid 4041] <... openat resumed>) = 3 [pid 289] unlink("./728/binderfs" [pid 4042] <... setpgid resumed>) = 0 [pid 289] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 4043 attached [pid 4042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4041] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 4043] set_robust_list(0x5555700d1660, 24 [pid 4042] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4042] write(3, "1000", 4 [pid 4041] <... ioctl resumed>) = 0 [pid 289] close(3 [pid 4042] <... write resumed>) = 4 [pid 289] <... close resumed>) = 0 [pid 4042] close(3 [pid 289] rmdir("./728" [pid 4043] <... set_robust_list resumed>) = 0 [pid 4042] <... close resumed>) = 0 [pid 4041] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4042] symlink("/dev/binderfs", "./binderfs" [pid 289] <... rmdir resumed>) = 0 [pid 4043] chdir("./768" [pid 4041] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 4042] <... symlink resumed>) = 0 [pid 289] mkdir("./729", 0777 [pid 4042] write(1, "executing program\n", 18 [pid 4043] <... chdir resumed>) = 0 [pid 4041] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4041] <... openat resumed>) = 4 [pid 4043] <... prctl resumed>) = 0 [pid 4041] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... mkdir resumed>) = 0 [pid 4042] <... write resumed>) = 18 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4042] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [ 68.080683][ T20] tty tty1: SAK: killed process 4036 (syz-executor903): by fd#3 [ 68.080718][ T20] tty tty1: SAK: killed process 4038 (syz-executor903): by fd#3 [ 68.101371][ T42] tty tty1: SAK: killed process 4037 (syz-executor903): by fd#3 [ 68.101403][ T42] tty tty1: SAK: killed process 4039 (syz-executor903): by fd#3 [ 68.101429][ T42] tty tty1: SAK: killed process 4040 (syz-executor903): by fd#3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4044 [pid 4042] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4042] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4042] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 4044 attached [pid 4044] set_robust_list(0x5555700d1660, 24) = 0 [pid 4044] chdir("./729") = 0 [pid 4044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4044] setpgid(0, 0) = 0 [pid 4044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4044] write(3, "1000", 4) = 4 [pid 4044] close(3executing program ) = 0 [pid 4044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4044] write(1, "executing program\n", 18) = 18 [pid 4044] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4044] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4044] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4044] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4043] setpgid(0, 0) = 0 [pid 4043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4043] write(3, "1000", 4) = 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 4043] close(3 [pid 291] umount2("./751", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4042] <... openat resumed>) = 4 [pid 4041] <... write resumed>) = ? [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4044] <... openat resumed>) = 4 [pid 4043] <... close resumed>) = 0 [pid 4042] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] openat(AT_FDCWD, "./751", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4043] symlink("/dev/binderfs", "./binderfs" [pid 4042] <... write resumed>) = ? [pid 291] <... openat resumed>) = 3 [pid 4041] +++ killed by SIGKILL +++ [pid 291] newfstatat(3, "", [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4041, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] getdents64(3, [pid 4043] <... symlink resumed>) = 0 [pid 4043] write(1, "executing program\n", 18executing program ) = 18 [pid 4043] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4044] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4044, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4043] <... openat resumed>) = 3 [pid 4043] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4043] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4043] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4043] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4043] exit_group(0) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./757", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./757", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./757/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./757/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./757/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./757") = 0 [pid 292] mkdir("./758", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4045 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./751/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./751/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./751/binderfs") = 0 [pid 4042] +++ killed by SIGKILL +++ [pid 291] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4042, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4045 attached [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./751") = 0 [pid 291] mkdir("./752", 0777) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4046 [pid 289] umount2("./729", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./729", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./729/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./729/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./729/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./729") = 0 [pid 289] mkdir("./730", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4047 ./strace-static-x86_64: Process 4047 attached [pid 4047] set_robust_list(0x5555700d1660, 24) = 0 [pid 4047] chdir("./730") = 0 [pid 4047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4047] setpgid(0, 0 [pid 4045] set_robust_list(0x5555700d1660, 24 [pid 290] umount2("./738", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4046 attached [pid 4045] <... set_robust_list resumed>) = 0 [pid 4043] +++ exited with 0 +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4045] chdir("./758" [pid 290] openat(AT_FDCWD, "./738", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4046] set_robust_list(0x5555700d1660, 24 [pid 4045] <... chdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4043, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4046] <... set_robust_list resumed>) = 0 [pid 4045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... openat resumed>) = 3 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4047] <... setpgid resumed>) = 0 [pid 4046] chdir("./752" [pid 4045] <... prctl resumed>) = 0 [pid 290] newfstatat(3, "", [pid 4046] <... chdir resumed>) = 0 [pid 4045] setpgid(0, 0 [pid 4046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4045] <... setpgid resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4046] <... prctl resumed>) = 0 [pid 4045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4046] setpgid(0, 0 [pid 290] getdents64(3, [pid 4045] <... openat resumed>) = 3 [pid 4045] write(3, "1000", 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4046] <... setpgid resumed>) = 0 [pid 4045] <... write resumed>) = 4 [pid 290] umount2("./738/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4045] close(3 [pid 4047] <... openat resumed>) = 3 [pid 4046] <... openat resumed>) = 3 [pid 4045] <... close resumed>) = 0 executing program [pid 290] newfstatat(AT_FDCWD, "./738/binderfs", [pid 4046] write(3, "1000", 4 [pid 4045] symlink("/dev/binderfs", "./binderfs" [pid 4046] <... write resumed>) = 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4047] write(3, "1000", 4) = 4 [pid 4047] close(3) = 0 [pid 4047] symlink("/dev/binderfs", "./binderfs" [pid 4045] <... symlink resumed>) = 0 [pid 290] unlink("./738/binderfs" [pid 4046] close(3 [pid 4045] write(1, "executing program\n", 18 [pid 4047] <... symlink resumed>) = 0 [pid 4046] <... close resumed>) = 0 [pid 4045] <... write resumed>) = 18 [pid 290] <... unlink resumed>) = 0 [pid 4046] symlink("/dev/binderfs", "./binderfs" [pid 290] getdents64(3, [pid 4045] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 4046] <... symlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4047] write(1, "executing program\n", 18 executing program [pid 4046] write(1, "executing program\n", 18 [pid 4045] <... openat resumed>) = 3 [pid 290] close(3 [pid 4047] <... write resumed>) = 18 [pid 4046] <... write resumed>) = 18 [pid 4045] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... close resumed>) = 0 [pid 4046] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4045] <... ioctl resumed>) = 0 [pid 290] rmdir("./738" [pid 4047] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4046] <... openat resumed>) = 3 [pid 4045] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... rmdir resumed>) = 0 [pid 4046] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4045] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] mkdir("./739", 0777 [pid 4047] <... openat resumed>) = 3 [pid 4046] <... ioctl resumed>) = 0 [pid 4045] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... mkdir resumed>) = 0 [pid 4046] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4045] <... openat resumed>) = 4 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4047] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4046] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4045] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4048 attached [pid 4047] <... ioctl resumed>) = ? [pid 4045] <... write resumed>) = ? [pid 4048] set_robust_list(0x5555700d1660, 24 [pid 4047] +++ killed by SIGKILL +++ [pid 4046] +++ killed by SIGKILL +++ [pid 4048] <... set_robust_list resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4046, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4048] chdir("./739" [pid 293] <... restart_syscall resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [ 68.130418][ T20] tty tty1: SAK: killed process 4041 (syz-executor903): by fd#3 [ 68.140062][ T20] tty tty1: SAK: killed process 4041 (syz-executor903): by fd#3 [ 68.140087][ T20] tty tty1: SAK: killed process 4042 (syz-executor903): by fd#3 [ 68.140109][ T20] tty tty1: SAK: killed process 4044 (syz-executor903): by fd#3 [ 68.172452][ T20] tty tty1: SAK: killed process 4045 (syz-executor903): by fd#3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4048 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4047, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4048] <... chdir resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] umount2("./730", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4048] <... prctl resumed>) = 0 [pid 289] openat(AT_FDCWD, "./730", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4048] setpgid(0, 0 [pid 291] umount2("./752", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... openat resumed>) = 3 [pid 4048] <... setpgid resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(3, "", [pid 4048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] openat(AT_FDCWD, "./752", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4048] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 4048] write(3, "1000", 4 [pid 291] newfstatat(3, "", [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4048] <... write resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] umount2("./730/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4048] close(3 [pid 291] getdents64(3, [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4048] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] newfstatat(AT_FDCWD, "./730/binderfs", [pid 4048] symlink("/dev/binderfs", "./binderfs" [pid 291] umount2("./752/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4048] <... symlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] unlink("./730/binderfs" executing program [pid 4048] write(1, "executing program\n", 18 [pid 291] newfstatat(AT_FDCWD, "./752/binderfs", [pid 289] <... unlink resumed>) = 0 [pid 4048] <... write resumed>) = 18 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] getdents64(3, [pid 4048] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] unlink("./752/binderfs" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] close(3 [pid 291] getdents64(3, [pid 289] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] rmdir("./730" [pid 291] close(3 [pid 289] <... rmdir resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 289] mkdir("./731", 0777 [pid 291] rmdir("./752" [pid 289] <... mkdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] mkdir("./753", 0777) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4049 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4050 [pid 293] umount2("./768", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./768", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 4050 attached ./strace-static-x86_64: Process 4049 attached [pid 4045] +++ killed by SIGKILL +++ [pid 293] umount2("./768/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4050] set_robust_list(0x5555700d1660, 24 [pid 4049] set_robust_list(0x5555700d1660, 24 [pid 4048] <... openat resumed>) = 3 [pid 4050] <... set_robust_list resumed>) = 0 [pid 4049] <... set_robust_list resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4045, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4050] chdir("./753" [pid 4049] chdir("./731" [pid 4048] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] newfstatat(AT_FDCWD, "./768/binderfs", [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4050] <... chdir resumed>) = 0 [pid 4049] <... chdir resumed>) = 0 [pid 4048] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4048] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] unlink("./768/binderfs" [pid 4050] <... prctl resumed>) = 0 [pid 4049] <... prctl resumed>) = 0 [pid 4048] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4050] setpgid(0, 0) = 0 [pid 4050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4049] setpgid(0, 0 [pid 4048] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... unlink resumed>) = 0 [pid 4050] <... openat resumed>) = 3 [pid 4049] <... setpgid resumed>) = 0 [pid 293] getdents64(3, [pid 4050] write(3, "1000", 4 [pid 4048] <... openat resumed>) = 4 [pid 4050] <... write resumed>) = 4 [pid 4050] close(3 [pid 4049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4050] <... close resumed>) = 0 [pid 4048] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4049] <... openat resumed>) = 3 [pid 293] close(3 [pid 4050] write(1, "executing program\n", 18) = 18 [pid 4050] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4050] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4050] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4050] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program ) = 4 [pid 4048] <... write resumed>) = ? [pid 4050] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4049] write(3, "1000", 4 [pid 293] <... close resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 4049] <... write resumed>) = 4 [pid 293] rmdir("./768" [pid 292] umount2("./758", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./758", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./758/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./758/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./758/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./758") = 0 [pid 292] mkdir("./759", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4051 [pid 4049] close(3) = 0 [pid 4049] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4049] write(1, "executing program\n", 18) = 18 [pid 4049] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4050] +++ killed by SIGKILL +++ [pid 4049] <... openat resumed>) = 3 ./strace-static-x86_64: Process 4051 attached [pid 4049] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4050, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4049] <... ioctl resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4049] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4049] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4049] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4049] exit_group(0) = ? [pid 4051] set_robust_list(0x5555700d1660, 24) = 0 [pid 4051] chdir("./759") = 0 [pid 4051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4051] setpgid(0, 0) = 0 [pid 4051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4051] write(3, "1000", 4) = 4 [pid 4051] close(3executing program ) = 0 [pid 4051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4051] write(1, "executing program\n", 18) = 18 [pid 4051] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4051] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4051] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4051] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4051] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4051] exit_group(0) = ? [pid 4049] +++ exited with 0 +++ [pid 4051] +++ exited with 0 +++ [pid 4048] +++ killed by SIGKILL +++ [pid 293] mkdir("./769", 0777 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4049, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 289] umount2("./731", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... mkdir resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4048, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4051, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] openat(AT_FDCWD, "./731", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 291] umount2("./753", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4052 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./731/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./759", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] openat(AT_FDCWD, "./753", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./731/binderfs", [pid 292] openat(AT_FDCWD, "./759", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 289] unlink("./731/binderfs" [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... unlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 289] getdents64(3, [pid 292] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] close(3 [pid 292] umount2("./759/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./753/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] rmdir("./731" [pid 292] newfstatat(AT_FDCWD, "./759/binderfs", [pid 291] newfstatat(AT_FDCWD, "./753/binderfs", [pid 289] <... rmdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] mkdir("./732", 0777 [pid 292] unlink("./759/binderfs" [pid 291] unlink("./753/binderfs" [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4053 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3 [pid 291] close(3./strace-static-x86_64: Process 4052 attached [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 292] rmdir("./759" [pid 291] rmdir("./753" [pid 4052] set_robust_list(0x5555700d1660, 24) = 0 [pid 4052] chdir("./769" [pid 292] <... rmdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 4052] <... chdir resumed>) = 0 [pid 4052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4052] setpgid(0, 0) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 292] mkdir("./760", 0777 [pid 291] mkdir("./754", 0777 [pid 4052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4052] write(3, "1000", 4) = 4 [pid 291] <... mkdir resumed>) = 0 [pid 290] umount2("./739", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4052] close(3) = 0 [pid 4052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 4054 attached ./strace-static-x86_64: Process 4053 attached executing program [pid 4052] write(1, "executing program\n", 18 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] openat(AT_FDCWD, "./739", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4053] set_robust_list(0x5555700d1660, 24 [pid 4052] <... write resumed>) = 18 [pid 4053] <... set_robust_list resumed>) = 0 [pid 4052] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4054 [pid 4053] chdir("./732" [pid 4052] <... openat resumed>) = 3 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4055 [pid 290] <... openat resumed>) = 3 [pid 4054] set_robust_list(0x5555700d1660, 24 [pid 290] newfstatat(3, "", [pid 4053] <... chdir resumed>) = 0 [pid 4052] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4053] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4052] <... ioctl resumed>) = 0 [pid 290] getdents64(3, [pid 4053] <... prctl resumed>) = 0 [pid 4052] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4053] setpgid(0, 0 [pid 4052] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] umount2("./739/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4053] <... setpgid resumed>) = 0 [pid 4052] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 4055 attached [pid 4054] <... set_robust_list resumed>) = 0 [pid 4053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4052] <... openat resumed>) = 4 [pid 290] newfstatat(AT_FDCWD, "./739/binderfs", [pid 4053] <... openat resumed>) = 3 [pid 4052] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 68.172481][ T20] tty tty1: SAK: killed process 4046 (syz-executor903): by fd#3 [ 68.172505][ T20] tty tty1: SAK: killed process 4047 (syz-executor903): by fd#3 [ 68.200170][ T42] tty tty1: SAK: killed process 4048 (syz-executor903): by fd#3 [ 68.208370][ T42] tty tty1: SAK: killed process 4048 (syz-executor903): by fd#3 [ 68.208416][ T42] tty tty1: SAK: killed process 4050 (syz-executor903): by fd#3 [pid 4055] set_robust_list(0x5555700d1660, 24 [pid 4054] chdir("./754" [pid 4053] write(3, "1000", 4 [pid 290] unlink("./739/binderfs") = 0 [pid 290] getdents64(3, [pid 4052] <... write resumed>) = ? [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4055] <... set_robust_list resumed>) = 0 [pid 4054] <... chdir resumed>) = 0 [pid 4053] <... write resumed>) = 4 [pid 290] close(3 [pid 4054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... close resumed>) = 0 [pid 4054] <... prctl resumed>) = 0 [pid 290] rmdir("./739" [pid 4054] setpgid(0, 0 [pid 4052] +++ killed by SIGKILL +++ [pid 290] <... rmdir resumed>) = 0 [pid 4055] chdir("./760" [pid 4054] <... setpgid resumed>) = 0 [pid 4053] close(3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4052, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] mkdir("./740", 0777 [pid 4055] <... chdir resumed>) = 0 [pid 4054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4053] <... close resumed>) = 0 executing program [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... mkdir resumed>) = 0 [pid 4053] symlink("/dev/binderfs", "./binderfs" [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4053] <... symlink resumed>) = 0 [pid 4053] write(1, "executing program\n", 18) = 18 [pid 4053] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4054] <... openat resumed>) = 3 [pid 4053] <... openat resumed>) = 3 [pid 4054] write(3, "1000", 4 [pid 4053] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4056 [pid 4053] <... ioctl resumed>) = 0 [pid 4054] <... write resumed>) = 4 [pid 4053] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4054] close(3 [pid 4053] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4053] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4055] <... prctl resumed>) = 0 [pid 4053] <... openat resumed>) = 4 [pid 4054] <... close resumed>) = 0 [pid 4055] setpgid(0, 0 [pid 4053] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4056 attached [pid 4055] <... setpgid resumed>) = 0 [pid 4054] symlink("/dev/binderfs", "./binderfs" [pid 4053] <... write resumed>) = -1 (errno 18446744073709551528) [pid 4056] set_robust_list(0x5555700d1660, 24 [pid 4055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4054] <... symlink resumed>) = 0 [pid 4056] <... set_robust_list resumed>) = 0 [pid 4055] <... openat resumed>) = 3 [pid 4054] write(1, "executing program\n", 18executing program [pid 4056] chdir("./740" [pid 4055] write(3, "1000", 4 [pid 4054] <... write resumed>) = 18 [pid 4056] <... chdir resumed>) = 0 [pid 4055] <... write resumed>) = 4 [pid 4054] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4055] close(3 [pid 4054] <... openat resumed>) = 3 [pid 4056] <... prctl resumed>) = 0 [pid 4055] <... close resumed>) = 0 [pid 4054] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4056] setpgid(0, 0 [pid 4055] symlink("/dev/binderfs", "./binderfs" [pid 4054] <... ioctl resumed>) = 0 [pid 4056] <... setpgid resumed>) = 0 [pid 4055] <... symlink resumed>) = 0 [pid 4054] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program [pid 293] <... restart_syscall resumed>) = 0 [pid 4056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4055] write(1, "executing program\n", 18 [pid 4054] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4056] <... openat resumed>) = 3 [pid 4055] <... write resumed>) = 18 [pid 4054] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4056] write(3, "1000", 4 [pid 4055] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4054] <... openat resumed>) = 4 [pid 293] umount2("./769", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4056] <... write resumed>) = 4 [pid 4055] <... openat resumed>) = 3 [pid 4054] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4054] <... write resumed>) = 8784 [pid 4053] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4053, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>executing program [pid 4056] close(3) = 0 [pid 4056] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4056] write(1, "executing program\n", 18) = 18 [pid 4056] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4056] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4056] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4056] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4056] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4056] exit_group(0) = ? [pid 4055] +++ killed by SIGKILL +++ [pid 293] openat(AT_FDCWD, "./769", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 4056] +++ exited with 0 +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./769/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./769/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./769/binderfs" [pid 289] <... restart_syscall resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] umount2("./732", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... close resumed>) = 0 [pid 289] openat(AT_FDCWD, "./732", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] rmdir("./769" [pid 289] <... openat resumed>) = 3 [pid 293] <... rmdir resumed>) = 0 [pid 289] newfstatat(3, "", [pid 293] mkdir("./770", 0777 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 289] getdents64(3, [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./732/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4057 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./732/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./732/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./732"./strace-static-x86_64: Process 4057 attached [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4055, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4056, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... rmdir resumed>) = 0 [pid 4057] set_robust_list(0x5555700d1660, 24 [pid 4054] +++ killed by SIGKILL +++ [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] mkdir("./733", 0777 [pid 4057] <... set_robust_list resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 4057] chdir("./770" [pid 289] <... mkdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4054, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4057] <... chdir resumed>) = 0 [pid 290] umount2("./740", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] umount2("./754", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 4058 attached [pid 4057] <... prctl resumed>) = 0 [pid 292] umount2("./760", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./740", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4058] set_robust_list(0x5555700d1660, 24 [pid 4057] setpgid(0, 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./754", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4058 [pid 4058] <... set_robust_list resumed>) = 0 [pid 4057] <... setpgid resumed>) = 0 [pid 292] openat(AT_FDCWD, "./760", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 4058] chdir("./733" [pid 4057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4058] <... chdir resumed>) = 0 [pid 4057] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 4057] write(3, "1000", 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./740/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 4057] <... write resumed>) = 4 [pid 292] umount2("./760/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./754/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4057] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4057] <... close resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./760/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./740/binderfs", [pid 4057] symlink("/dev/binderfs", "./binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./754/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4058] <... prctl resumed>) = 0 [pid 4058] setpgid(0, 0 [pid 4057] <... symlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./760/binderfs" [pid 290] unlink("./740/binderfs" [pid 4057] write(1, "executing program\n", 18 [pid 291] unlink("./754/binderfs" [pid 4058] <... setpgid resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 4058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... unlink resumed>) = 0 [pid 4058] <... openat resumed>) = 3 [pid 4057] <... write resumed>) = 18 executing program [pid 292] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 4057] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4058] write(3, "1000", 4) = 4 [pid 4057] <... openat resumed>) = 3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 292] close(3 [pid 4057] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] close(3 [pid 290] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] rmdir("./740" [pid 4057] <... ioctl resumed>) = 0 [pid 292] rmdir("./760" [pid 291] rmdir("./754" [pid 4058] close(3) = 0 [pid 4058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4058] write(1, "executing program\n", 18) = 18 [pid 4058] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... rmdir resumed>) = 0 [pid 4058] <... openat resumed>) = 3 [pid 4058] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] mkdir("./761", 0777 [pid 291] <... rmdir resumed>) = 0 [pid 290] mkdir("./741", 0777 [pid 4058] <... ioctl resumed>) = 0 [pid 4057] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4058] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4058] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4058] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4057] <... ioctl resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [pid 291] mkdir("./755", 0777 [pid 290] <... mkdir resumed>) = 0 [pid 4057] +++ killed by SIGKILL +++ [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4059 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4060 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4061 ./strace-static-x86_64: Process 4060 attached [pid 4060] set_robust_list(0x5555700d1660, 24) = 0 [pid 4060] chdir("./741") = 0 [pid 4060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4060] setpgid(0, 0) = 0 [pid 4060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4060] write(3, "1000", 4) = 4 [ 68.235486][ T20] tty tty1: SAK: killed process 4052 (syz-executor903): by fd#3 [ 68.248322][ T20] tty tty1: SAK: killed process 4053 (syz-executor903): by fd#3 [ 68.257041][ T42] tty tty1: SAK: killed process 4054 (syz-executor903): by fd#3 [ 68.257064][ T42] tty tty1: SAK: killed process 4055 (syz-executor903): by fd#3 [pid 4060] close(3) = 0 [pid 4060] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4060] write(1, "executing program\n", 18executing program ) = 18 [pid 4060] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4060] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4057, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./770", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4058] <... write resumed>) = -1 (errno 18446744073709551450) [pid 4060] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4060] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4060] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4060] exit_group(0) = ? ./strace-static-x86_64: Process 4059 attached [pid 4059] set_robust_list(0x5555700d1660, 24) = 0 [pid 4059] chdir("./761") = 0 [pid 4059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4059] setpgid(0, 0) = 0 [pid 4059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4059] write(3, "1000", 4) = 4 [pid 4059] close(3) = 0 [pid 4059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4059] write(1, "executing program\n", 18executing program ) = 18 [pid 4059] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4059] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4059] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4059] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4059] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4060] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4060, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] openat(AT_FDCWD, "./770", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 4061 attached [pid 4061] set_robust_list(0x5555700d1660, 24 [pid 293] <... openat resumed>) = 3 [pid 4061] <... set_robust_list resumed>) = 0 [pid 293] newfstatat(3, "", [pid 4059] <... write resumed>) = ? [pid 4061] chdir("./755") = 0 [pid 4061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4061] setpgid(0, 0) = 0 [pid 4061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4061] write(3, "1000", 4) = 4 [pid 4061] close(3) = 0 executing program [pid 4061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4061] write(1, "executing program\n", 18) = 18 [pid 4061] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4061] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4061] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4061] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4061] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4061] exit_group(0) = ? [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./741", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4058] +++ killed by SIGKILL +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] openat(AT_FDCWD, "./741", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 290] getdents64(3, [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4058, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./741/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./741/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./741/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./741") = 0 [pid 290] mkdir("./742", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4062 [pid 4059] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4059, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./770/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./770/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./770/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./770") = 0 [pid 293] mkdir("./771", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4063 [pid 289] umount2("./733", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./733", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./733/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./733/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./733/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./733") = 0 [pid 289] mkdir("./734", 0777./strace-static-x86_64: Process 4063 attached ./strace-static-x86_64: Process 4062 attached [pid 4061] +++ exited with 0 +++ [pid 289] <... mkdir resumed>) = 0 [pid 4063] set_robust_list(0x5555700d1660, 24 [pid 4062] set_robust_list(0x5555700d1660, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4061, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4063] <... set_robust_list resumed>) = 0 [pid 4062] <... set_robust_list resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4064 attached [pid 4063] chdir("./771" [pid 4062] chdir("./742" [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4064 [pid 4064] set_robust_list(0x5555700d1660, 24 [pid 4063] <... chdir resumed>) = 0 [pid 4062] <... chdir resumed>) = 0 [pid 4063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4063] <... prctl resumed>) = 0 [pid 4062] <... prctl resumed>) = 0 [pid 4064] <... set_robust_list resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 4064] chdir("./734" [pid 4063] setpgid(0, 0 [pid 4062] setpgid(0, 0 [pid 4063] <... setpgid resumed>) = 0 [pid 4062] <... setpgid resumed>) = 0 [pid 4064] <... chdir resumed>) = 0 [pid 4063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4063] <... openat resumed>) = 3 [pid 292] umount2("./761", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4064] <... prctl resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./755", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4064] setpgid(0, 0 [pid 4063] write(3, "1000", 4 [pid 4062] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./761", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4064] <... setpgid resumed>) = 0 [pid 4063] <... write resumed>) = 4 [pid 4062] write(3, "1000", 4 [pid 292] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./755", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4063] close(3 [pid 4062] <... write resumed>) = 4 [pid 292] newfstatat(3, "", [pid 291] <... openat resumed>) = 3 [pid 4064] <... openat resumed>) = 3 [pid 4063] <... close resumed>) = 0 [pid 4062] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(3, "", [pid 4064] write(3, "1000", 4 [pid 4063] symlink("/dev/binderfs", "./binderfs" [pid 4062] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4064] <... write resumed>) = 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, executing program [pid 4064] close(3 [pid 4063] <... symlink resumed>) = 0 [pid 4062] symlink("/dev/binderfs", "./binderfs" [pid 292] umount2("./761/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4064] <... close resumed>) = 0 [pid 4063] write(1, "executing program\n", 18 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./755/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 4064] symlink("/dev/binderfs", "./binderfs" [pid 4063] <... write resumed>) = 18 [pid 4062] <... symlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./761/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4064] <... symlink resumed>) = 0 [pid 4063] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4062] write(1, "executing program\n", 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./755/binderfs", [pid 4064] write(1, "executing program\n", 18 [pid 4063] <... openat resumed>) = 3 [pid 4062] <... write resumed>) = 18 [pid 292] unlink("./761/binderfs"executing program [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4064] <... write resumed>) = 18 [pid 4063] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4062] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... unlink resumed>) = 0 [pid 291] unlink("./755/binderfs" [pid 4064] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4063] <... ioctl resumed>) = 0 [pid 4062] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 4064] <... openat resumed>) = 3 [pid 4063] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 4064] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4063] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4062] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4064] <... ioctl resumed>) = 0 [pid 4063] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4062] <... ioctl resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] close(3 [pid 4064] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4063] <... openat resumed>) = 4 [pid 4062] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] rmdir("./761"executing program executing program [pid 291] <... close resumed>) = 0 [pid 4064] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4063] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4062] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... rmdir resumed>) = 0 [pid 291] rmdir("./755" [pid 4064] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4063] <... write resumed>) = 8784 [pid 4062] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] mkdir("./762", 0777 [pid 291] <... rmdir resumed>) = 0 [pid 4064] <... openat resumed>) = ? [pid 4062] <... openat resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [pid 291] mkdir("./756", 0777 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4065 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4066 ./strace-static-x86_64: Process 4066 attached [pid 4066] set_robust_list(0x5555700d1660, 24) = 0 [pid 4066] chdir("./756") = 0 [pid 4066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4066] setpgid(0, 0) = 0 [pid 4066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4066] write(3, "1000", 4) = 4 [pid 4066] close(3) = 0 [pid 4066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4066] write(1, "executing program\n", 18) = 18 ./strace-static-x86_64: Process 4065 attached [pid 4066] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4065] set_robust_list(0x5555700d1660, 24 [pid 4066] <... openat resumed>) = 3 [pid 4065] <... set_robust_list resumed>) = 0 [pid 4065] chdir("./762" [pid 4066] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4065] <... chdir resumed>) = 0 [pid 4066] <... ioctl resumed>) = 0 [pid 4065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4065] setpgid(0, 0 [pid 4066] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4065] <... setpgid resumed>) = 0 [pid 4066] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4066] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4065] <... openat resumed>) = 3 [pid 4066] exit_group(0 [pid 4065] write(3, "1000", 4) = 4 [pid 4065] close(3) = 0 [pid 4066] <... exit_group resumed>) = ? [pid 4065] symlink("/dev/binderfs", "./binderfs" [pid 4064] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4064, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4065] <... symlink resumed>) = 0 [pid 4062] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4062, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4065] write(1, "executing program\n", 18) = 18 [pid 4065] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4065] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4065] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4066] +++ exited with 0 +++ [pid 4063] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4063, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4066, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4065] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4065] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4065] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4065] exit_group(0) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./771", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./771", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... restart_syscall resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 289] <... restart_syscall resumed>) = 0 [ 68.280341][ T20] tty tty1: SAK: killed process 4057 (syz-executor903): by fd#3 [ 68.280379][ T20] tty tty1: SAK: killed process 4058 (syz-executor903): by fd#3 [ 68.297808][ T20] tty tty1: SAK: killed process 4059 (syz-executor903): by fd#3 [ 68.306469][ T20] tty tty1: SAK: killed process 4061 (syz-executor903): by fd#3 [ 68.323332][ T20] tty tty1: SAK: killed process 4062 (syz-executor903): by fd#3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./756", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./734", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] openat(AT_FDCWD, "./756", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./771/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./734", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 293] newfstatat(AT_FDCWD, "./771/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] unlink("./771/binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 293] <... unlink resumed>) = 0 [pid 291] umount2("./756/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... restart_syscall resumed>) = 0 [pid 289] umount2("./734/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(AT_FDCWD, "./756/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./734/binderfs", [pid 293] <... close resumed>) = 0 [pid 291] unlink("./756/binderfs" [pid 290] umount2("./742", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] rmdir("./771" [pid 291] <... unlink resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] unlink("./734/binderfs" [pid 293] <... rmdir resumed>) = 0 [pid 291] getdents64(3, [pid 290] openat(AT_FDCWD, "./742", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... unlink resumed>) = 0 [pid 293] mkdir("./772", 0777 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 293] <... mkdir resumed>) = 0 [pid 291] close(3 [pid 290] newfstatat(3, "", [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] close(3 [pid 291] rmdir("./756" [pid 290] getdents64(3, [pid 289] <... close resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4067 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] rmdir("./734" [pid 291] mkdir("./757", 0777 [pid 290] umount2("./742/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 4067 attached [pid 4065] +++ exited with 0 +++ [pid 291] <... mkdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] mkdir("./735", 0777 [pid 4067] set_robust_list(0x5555700d1660, 24 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] newfstatat(AT_FDCWD, "./742/binderfs", [pid 289] <... mkdir resumed>) = 0 [pid 4067] <... set_robust_list resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4065, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4067] chdir("./772" [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4068 [pid 290] unlink("./742/binderfs"./strace-static-x86_64: Process 4068 attached [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4069 [pid 290] <... unlink resumed>) = 0 [pid 4067] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 4069 attached [pid 4067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4067] <... prctl resumed>) = 0 [pid 290] close(3 [pid 4069] set_robust_list(0x5555700d1660, 24 [pid 290] <... close resumed>) = 0 [pid 4067] setpgid(0, 0 [pid 290] rmdir("./742" [pid 4069] <... set_robust_list resumed>) = 0 [pid 4069] chdir("./735") = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4067] <... setpgid resumed>) = 0 [pid 4069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] mkdir("./743", 0777 [pid 4069] <... prctl resumed>) = 0 [pid 4067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4069] setpgid(0, 0) = 0 [pid 4069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... mkdir resumed>) = 0 [pid 4069] <... openat resumed>) = 3 [pid 4067] <... openat resumed>) = 3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4069] write(3, "1000", 4) = 4 [pid 4069] close(3) = 0 [pid 4069] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4069] write(1, "executing program\n", 18) = 18 [pid 4069] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4067] write(3, "1000", 4 [pid 4069] <... openat resumed>) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4070 [pid 4067] <... write resumed>) = 4 [pid 4067] close(3 [pid 4069] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4067] <... close resumed>) = 0 [pid 4069] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4067] symlink("/dev/binderfs", "./binderfs" [pid 4069] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4069] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4069] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4068] set_robust_list(0x5555700d1660, 24 [pid 4067] <... symlink resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 4068] <... set_robust_list resumed>) = 0 [pid 4067] write(1, "executing program\n", 18 [pid 292] umount2("./762", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./762", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 executing program [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4067] <... write resumed>) = 18 [pid 292] umount2("./762/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4067] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] newfstatat(AT_FDCWD, "./762/binderfs", [pid 4067] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./762/binderfs" [pid 4067] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... unlink resumed>) = 0 [pid 4068] chdir("./757" [pid 4067] <... ioctl resumed>) = 0 [pid 292] getdents64(3, [pid 4067] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 4067] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] rmdir("./762"./strace-static-x86_64: Process 4070 attached [pid 4068] <... chdir resumed>) = 0 [pid 4067] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./763", 0777 [pid 4070] set_robust_list(0x5555700d1660, 24 [pid 4068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4067] <... openat resumed>) = 4 [pid 292] <... mkdir resumed>) = 0 [pid 4069] <... write resumed>) = ? [pid 4067] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4067] <... write resumed>) = 8784 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4071 [pid 4067] exit_group(0) = ? ./strace-static-x86_64: Process 4071 attached [pid 4070] <... set_robust_list resumed>) = 0 [pid 4068] <... prctl resumed>) = 0 [pid 4068] setpgid(0, 0) = 0 [pid 4068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4068] write(3, "1000", 4) = 4 [pid 4068] close(3) = 0 [pid 4068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4068] write(1, "executing program\n", 18executing program ) = 18 [pid 4068] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4068] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4068] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4068] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4068] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4068] exit_group(0) = ? [pid 4070] chdir("./743" [pid 4067] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4067, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4070] <... chdir resumed>) = 0 [pid 4070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4070] setpgid(0, 0) = 0 [pid 4070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4070] write(3, "1000", 4) = 4 [pid 4070] close(3) = 0 [pid 4070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4071] set_robust_list(0x5555700d1660, 24) = 0 [pid 4071] chdir("./763" [pid 4070] write(1, "executing program\n", 18executing program ) = 18 [pid 4070] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4071] <... chdir resumed>) = 0 [pid 4071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4070] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4071] <... prctl resumed>) = 0 [pid 4071] setpgid(0, 0) = 0 [pid 4071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4070] <... ioctl resumed>) = 0 [pid 4070] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4070] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4071] <... openat resumed>) = 3 [pid 4070] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4071] write(3, "1000", 4) = 4 [pid 4071] close(3) = 0 [pid 4070] <... write resumed>) = 8784 [pid 4071] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4070] exit_group(0) = ? [pid 4071] write(1, "executing program\n", 18 [pid 4068] +++ exited with 0 +++ [ 68.323359][ T20] tty tty1: SAK: killed process 4063 (syz-executor903): by fd#3 [ 68.323376][ T20] tty tty1: SAK: killed process 4064 (syz-executor903): by fd#3 [ 68.355503][ T375] tty tty1: SAK: killed process 4069 (syz-executor903): by fd#3 [ 68.367448][ T375] tty tty1: SAK: killed process 4067 (syz-executor903): by fd#3 [ 68.367476][ T375] tty tty1: SAK: killed process 4069 (syz-executor903): by fd#3 [pid 4069] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4068, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] umount2("./772", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4069, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4071] <... write resumed>) = 18 [pid 4071] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4071] <... openat resumed>) = 3 [pid 4071] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4071] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4071] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4071] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./735", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./735", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./735/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./735/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./735/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./735") = 0 [pid 289] mkdir("./736", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4072 [pid 4071] <... write resumed>) = 8784 [pid 4071] exit_group(0) = ? executing program [pid 293] openat(AT_FDCWD, "./772", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./772/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./772/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./772/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./772") = 0 [pid 293] mkdir("./773", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4072 attached [pid 4070] +++ exited with 0 +++ [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4073 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4070, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4073 attached [pid 4073] set_robust_list(0x5555700d1660, 24) = 0 [pid 4073] chdir("./773" [pid 4072] set_robust_list(0x5555700d1660, 24 [pid 4073] <... chdir resumed>) = 0 [pid 4071] +++ exited with 0 +++ [pid 4073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4073] setpgid(0, 0) = 0 [pid 4072] <... set_robust_list resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4071, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4072] chdir("./736" [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4073] <... openat resumed>) = 3 [pid 4072] <... chdir resumed>) = 0 [pid 4073] write(3, "1000", 4) = 4 [pid 4073] close(3) = 0 [pid 4073] symlink("/dev/binderfs", "./binderfs" [pid 4072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4073] <... symlink resumed>) = 0 executing program [pid 4073] write(1, "executing program\n", 18) = 18 [pid 4073] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4072] <... prctl resumed>) = 0 [pid 4073] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] umount2("./757", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4072] setpgid(0, 0 [pid 4073] <... ioctl resumed>) = 0 [pid 4073] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4072] <... setpgid resumed>) = 0 [pid 4073] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4073] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 291] openat(AT_FDCWD, "./757", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4073] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... openat resumed>) = 3 [pid 4073] <... write resumed>) = ? [pid 4072] <... openat resumed>) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] newfstatat(3, "", [pid 4073] +++ killed by SIGKILL +++ [pid 4072] write(3, "1000", 4 [pid 290] <... restart_syscall resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4073, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4072] <... write resumed>) = 4 [pid 291] getdents64(3, [pid 290] umount2("./743", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4072] close(3 [pid 292] umount2("./763", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./743", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./773", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 4072] <... close resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./763", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] umount2("./757/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4072] symlink("/dev/binderfs", "./binderfs" [pid 293] openat(AT_FDCWD, "./773", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./743/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./743/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./743/binderfs" [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... unlink resumed>) = 0 [pid 4072] <... symlink resumed>) = 0 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 291] newfstatat(AT_FDCWD, "./757/binderfs", [pid 290] getdents64(3, executing program [pid 4072] write(1, "executing program\n", 18 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4072] <... write resumed>) = 18 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] unlink("./757/binderfs" [pid 290] close(3 [pid 4072] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... close resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] rmdir("./743" [pid 4072] <... openat resumed>) = 3 [pid 293] umount2("./773/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./763/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... unlink resumed>) = 0 [pid 4072] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... rmdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4072] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] getdents64(3, [pid 290] mkdir("./744", 0777 [pid 292] newfstatat(AT_FDCWD, "./763/binderfs", [pid 4072] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] newfstatat(AT_FDCWD, "./773/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 4072] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./763/binderfs" [pid 291] close(3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4072] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] unlink("./773/binderfs" [pid 292] <... unlink resumed>) = 0 [pid 291] <... close resumed>) = 0 ./strace-static-x86_64: Process 4074 attached [pid 4072] <... openat resumed>) = 4 [pid 293] <... unlink resumed>) = 0 [pid 292] getdents64(3, [pid 291] rmdir("./757" [pid 4074] set_robust_list(0x5555700d1660, 24 [pid 4072] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4074 [pid 4074] <... set_robust_list resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 4074] chdir("./744" [pid 4072] <... write resumed>) = 8784 [pid 292] close(3 [pid 4074] <... chdir resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... close resumed>) = 0 [pid 291] mkdir("./758", 0777 [pid 4072] exit_group(0 [pid 293] close(3 [pid 292] rmdir("./763" [pid 4074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4074] setpgid(0, 0) = 0 [pid 4074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... mkdir resumed>) = 0 [pid 4074] <... openat resumed>) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 4072] <... exit_group resumed>) = ? [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] rmdir("./773" [pid 292] mkdir("./764", 0777 [pid 4074] write(3, "1000", 4) = 4 [pid 4074] close(3) = 0 [pid 4074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4074] write(1, "executing program\n", 18) = 18 [pid 4074] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... rmdir resumed>) = 0 [pid 4074] <... openat resumed>) = 3 [pid 4074] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4074] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] mkdir("./774", 0777 [pid 292] <... mkdir resumed>) = 0 [pid 4074] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4074] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4074] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4074] exit_group(0 [pid 293] <... mkdir resumed>) = 0 [pid 4074] <... exit_group resumed>) = ? [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4075 executing program [pid 4072] +++ exited with 0 +++ [pid 4074] +++ exited with 0 +++ [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4077 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4076 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4074, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4072, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4075 attached [pid 4075] set_robust_list(0x5555700d1660, 24) = 0 ./strace-static-x86_64: Process 4077 attached ./strace-static-x86_64: Process 4076 attached [pid 4075] chdir("./758" [pid 289] <... restart_syscall resumed>) = 0 [pid 4077] set_robust_list(0x5555700d1660, 24 [pid 4076] set_robust_list(0x5555700d1660, 24 [pid 4075] <... chdir resumed>) = 0 [pid 289] umount2("./736", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4077] <... set_robust_list resumed>) = 0 [pid 4076] <... set_robust_list resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./736", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4077] chdir("./774" [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4076] chdir("./764" [pid 4075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] umount2("./736/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./736/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./736/binderfs" [pid 4077] <... chdir resumed>) = 0 [pid 4076] <... chdir resumed>) = 0 [pid 4075] <... prctl resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 4077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4075] setpgid(0, 0 [pid 289] rmdir("./736" [pid 4077] <... prctl resumed>) = 0 [pid 4076] <... prctl resumed>) = 0 [pid 4075] <... setpgid resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./737", 0777 [pid 4077] setpgid(0, 0 [pid 4076] setpgid(0, 0 [pid 4075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4078 attached [pid 4077] <... setpgid resumed>) = 0 [pid 4076] <... setpgid resumed>) = 0 [pid 4075] <... openat resumed>) = 3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4078 [pid 4078] set_robust_list(0x5555700d1660, 24) = 0 [pid 4078] chdir("./737" [pid 4076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4078] <... chdir resumed>) = 0 [pid 4077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4078] setpgid(0, 0) = 0 [pid 4078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4077] <... openat resumed>) = 3 [pid 4076] <... openat resumed>) = 3 [pid 4075] write(3, "1000", 4 [pid 4078] <... openat resumed>) = 3 [pid 4077] write(3, "1000", 4 [pid 4076] write(3, "1000", 4 [pid 4075] <... write resumed>) = 4 [pid 290] <... restart_syscall resumed>) = 0 [pid 4078] write(3, "1000", 4) = 4 [pid 4077] <... write resumed>) = 4 [pid 4076] <... write resumed>) = 4 [pid 4075] close(3 [pid 4078] close(3 [pid 290] umount2("./744", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4078] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4078] symlink("/dev/binderfs", "./binderfs" [pid 290] openat(AT_FDCWD, "./744", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4078] <... symlink resumed>) = 0 [pid 4077] close(3 [pid 4076] close(3 [pid 4075] <... close resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 4078] write(1, "executing program\n", 18 executing program [pid 290] newfstatat(3, "", [pid 4078] <... write resumed>) = 18 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4078] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] getdents64(3, [pid 4078] <... openat resumed>) = 3 [pid 4077] <... close resumed>) = 0 [pid 4076] <... close resumed>) = 0 [pid 4075] symlink("/dev/binderfs", "./binderfs" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4078] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] umount2("./744/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4078] <... ioctl resumed>) = 0 [pid 4077] symlink("/dev/binderfs", "./binderfs" [pid 4076] symlink("/dev/binderfs", "./binderfs" [pid 4075] <... symlink resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4078] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] newfstatat(AT_FDCWD, "./744/binderfs", [pid 4078] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4078] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] unlink("./744/binderfs" [pid 4078] <... openat resumed>) = 4 [pid 4077] <... symlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 4078] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4077] write(1, "executing program\n", 18 [pid 4076] <... symlink resumed>) = 0 executing program executing program [pid 4075] write(1, "executing program\n", 18 [pid 290] getdents64(3, [pid 4077] <... write resumed>) = 18 executing program [pid 4076] write(1, "executing program\n", 18 [pid 4075] <... write resumed>) = 18 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4078] <... write resumed>) = ? [pid 4077] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4076] <... write resumed>) = 18 [pid 4075] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] close(3 [pid 4078] +++ killed by SIGKILL +++ [pid 4077] <... openat resumed>) = 3 [pid 4076] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4075] <... openat resumed>) = 3 [pid 4077] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4076] <... openat resumed>) = 3 [pid 4075] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... close resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4078, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4076] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4075] <... ioctl resumed>) = 0 [pid 290] rmdir("./744" [pid 4077] <... ioctl resumed>) = 0 [pid 4077] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4076] <... ioctl resumed>) = 0 [pid 4075] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4077] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4076] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4075] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... rmdir resumed>) = 0 [pid 4077] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4076] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4075] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4077] <... openat resumed>) = 4 [pid 4076] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4075] <... openat resumed>) = 4 [pid 290] mkdir("./745", 0777 [pid 289] umount2("./737", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4077] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4076] <... openat resumed>) = ? [pid 4075] ????( [pid 290] <... mkdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 68.383921][ T375] tty tty1: SAK: killed process 4070 (syz-executor903): by fd#3 [ 68.396186][ T60] tty tty1: SAK: killed process 4073 (syz-executor903): by fd#3 [ 68.425186][ T60] tty tty1: SAK: killed process 4078 (syz-executor903): by fd#3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] openat(AT_FDCWD, "./737", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4079 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./737/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./737/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./737/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./737") = 0 [pid 289] mkdir("./738", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4080 ./strace-static-x86_64: Process 4079 attached [pid 4079] set_robust_list(0x5555700d1660, 24) = 0 [pid 4079] chdir("./745") = 0 [pid 4079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4079] setpgid(0, 0) = 0 [pid 4079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4075] <... ???? resumed>) = ? [pid 4077] <... write resumed>) = ? ./strace-static-x86_64: Process 4080 attached [pid 4080] set_robust_list(0x5555700d1660, 24) = 0 [pid 4080] chdir("./738" [pid 4075] +++ killed by SIGKILL +++ [pid 4080] <... chdir resumed>) = 0 [pid 4079] <... openat resumed>) = 3 [pid 4080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4080] setpgid(0, 0) = 0 [pid 4079] write(3, "1000", 4) = 4 [pid 4080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4079] close(3) = 0 [pid 4079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4080] <... openat resumed>) = 3 [pid 4080] write(3, "1000", 4) = 4 executing program [pid 4080] close(3) = 0 [pid 4079] write(1, "executing program\n", 18) = 18 [pid 4080] symlink("/dev/binderfs", "./binderfs" [pid 4079] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4080] <... symlink resumed>) = 0 executing program [pid 4079] <... openat resumed>) = 3 [pid 4079] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4080] write(1, "executing program\n", 18) = 18 [pid 4079] <... ioctl resumed>) = 0 [pid 4080] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4079] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4080] <... openat resumed>) = 3 [pid 4079] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4079] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4080] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4079] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4080] <... ioctl resumed>) = 0 [pid 4080] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4080] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4079] <... write resumed>) = 8784 [pid 4080] <... openat resumed>) = 4 [pid 4080] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4079] exit_group(0 [pid 4080] <... write resumed>) = 8784 [pid 4079] <... exit_group resumed>) = ? [pid 4077] +++ killed by SIGKILL +++ [pid 4076] +++ killed by SIGKILL +++ [pid 4080] exit_group(0) = ? [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4077, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4076, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4075, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./758", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./758", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./758/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./758/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./758/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./758") = 0 [pid 291] mkdir("./759", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4081 ./strace-static-x86_64: Process 4081 attached [pid 4081] set_robust_list(0x5555700d1660, 24) = 0 [pid 4081] chdir("./759") = 0 [pid 4081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4081] setpgid(0, 0) = 0 [pid 4081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4080] +++ exited with 0 +++ [pid 4079] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4080, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4079, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4081] <... openat resumed>) = 3 [pid 4081] write(3, "1000", 4) = 4 [pid 4081] close(3) = 0 [pid 4081] symlink("/dev/binderfs", "./binderfs" [pid 289] <... restart_syscall resumed>) = 0 [pid 4081] <... symlink resumed>) = 0 [pid 4081] write(1, "executing program\n", 18 executing program [pid 289] umount2("./738", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4081] <... write resumed>) = 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./738", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4081] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 4081] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4081] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] umount2("./738/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4081] <... ioctl resumed>) = 0 [pid 4081] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./738/binderfs", [pid 4081] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4081] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4081] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./774", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./764", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] unlink("./738/binderfs" [pid 293] openat(AT_FDCWD, "./774", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... unlink resumed>) = 0 [pid 4081] <... write resumed>) = ? [pid 293] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./764", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] getdents64(3, [pid 293] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 289] close(3 [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 289] rmdir("./738" [pid 293] umount2("./774/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... rmdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./764/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] mkdir("./739", 0777 [pid 293] newfstatat(AT_FDCWD, "./774/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... mkdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./764/binderfs", [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] unlink("./774/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] unlink("./764/binderfs" [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4082 [pid 293] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 293] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... close resumed>) = 0 [pid 292] close(3 [pid 290] umount2("./745", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] rmdir("./774" [pid 292] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... rmdir resumed>) = 0 [pid 292] rmdir("./764" [pid 290] openat(AT_FDCWD, "./745", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 4082 attached [pid 293] mkdir("./775", 0777 [pid 292] <... rmdir resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 4082] set_robust_list(0x5555700d1660, 24) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 4081] +++ killed by SIGKILL +++ [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] mkdir("./765", 0777 [pid 290] newfstatat(3, "", [pid 4082] chdir("./739" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4081, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4082] <... chdir resumed>) = 0 [pid 4082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4083 [pid 292] <... mkdir resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] getdents64(3, ./strace-static-x86_64: Process 4083 attached [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4082] <... prctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4082] setpgid(0, 0) = 0 [pid 4082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] umount2("./745/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4082] write(3, "1000", 4 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4084 [pid 4082] <... write resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4082] close(3 [pid 4083] set_robust_list(0x5555700d1660, 24 [pid 4082] <... close resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./745/binderfs", [pid 4082] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 4084 attached [pid 4083] <... set_robust_list resumed>) = 0 [pid 4082] <... symlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4084] set_robust_list(0x5555700d1660, 24 [pid 4083] chdir("./775" [pid 4082] write(1, "executing program\n", 18 [pid 290] unlink("./745/binderfs"executing program [pid 4083] <... chdir resumed>) = 0 [pid 4082] <... write resumed>) = 18 [pid 290] <... unlink resumed>) = 0 [pid 4084] <... set_robust_list resumed>) = 0 [pid 4083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] getdents64(3, [pid 4083] <... prctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4083] setpgid(0, 0 [pid 290] close(3 [pid 4083] <... setpgid resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 4084] chdir("./765" [pid 4082] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] rmdir("./745" [pid 4084] <... chdir resumed>) = 0 [pid 4083] <... openat resumed>) = 3 [pid 4082] <... openat resumed>) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 4083] write(3, "1000", 4 [pid 290] mkdir("./746", 0777 [pid 4084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4083] <... write resumed>) = 4 [pid 4082] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... mkdir resumed>) = 0 [pid 4083] close(3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4084] <... prctl resumed>) = 0 [pid 4083] <... close resumed>) = 0 [pid 4082] <... ioctl resumed>) = 0 [pid 4083] symlink("/dev/binderfs", "./binderfs" [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4085 ./strace-static-x86_64: Process 4085 attached [pid 4084] setpgid(0, 0 [pid 4083] <... symlink resumed>) = 0 [pid 4082] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4085] set_robust_list(0x5555700d1660, 24 [pid 4084] <... setpgid resumed>) = 0 [pid 4083] write(1, "executing program\n", 18executing program [pid 4082] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4083] <... write resumed>) = 18 [pid 4083] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4082] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4083] <... openat resumed>) = 3 [pid 4083] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4082] <... openat resumed>) = 4 [pid 4084] <... openat resumed>) = 3 [pid 4083] <... ioctl resumed>) = 0 [ 68.436808][ T375] tty tty1: SAK: killed process 4075 (syz-executor903): by fd#3 [ 68.436840][ T375] tty tty1: SAK: killed process 4076 (syz-executor903): by fd#3 [ 68.436861][ T375] tty tty1: SAK: killed process 4077 (syz-executor903): by fd#3 [ 68.465802][ T375] tty tty1: SAK: killed process 4081 (syz-executor903): by fd#3 executing program [pid 4082] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4083] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4083] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4082] <... write resumed>) = 8784 [pid 4083] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./759", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./759", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./759/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./759/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./759/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./759") = 0 [pid 291] mkdir("./760", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4086 ./strace-static-x86_64: Process 4086 attached [pid 4086] set_robust_list(0x5555700d1660, 24) = 0 [pid 4086] chdir("./760") = 0 [pid 4086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4086] setpgid(0, 0) = 0 [pid 4086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4086] write(3, "1000", 4) = 4 [pid 4086] close(3) = 0 [pid 4086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4086] write(1, "executing program\n", 18) = 18 [pid 4086] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4086] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4086] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4086] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4086] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4086] exit_group(0) = ? [pid 4085] <... set_robust_list resumed>) = 0 [pid 4085] chdir("./746" [pid 4083] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4083, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4084] write(3, "1000", 4) = 4 [pid 4084] close(3 [pid 4086] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4086, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>executing program [pid 4084] <... close resumed>) = 0 [pid 4084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4084] write(1, "executing program\n", 18) = 18 [pid 4084] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4084] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4084] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4084] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4084] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4084] exit_group(0) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 4082] +++ killed by SIGKILL +++ [pid 4085] <... chdir resumed>) = 0 [pid 293] umount2("./775", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./760", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4082, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] openat(AT_FDCWD, "./775", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./760", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./775/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./760/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./775/binderfs", [pid 291] newfstatat(AT_FDCWD, "./760/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./775/binderfs" [pid 291] unlink("./760/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3 [pid 291] close(3 [pid 293] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 293] rmdir("./775" [pid 291] rmdir("./760" [pid 293] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 293] mkdir("./776", 0777 [pid 291] mkdir("./761", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4087 attached [pid 4085] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 4088 attached ) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4087 [pid 4088] set_robust_list(0x5555700d1660, 24 [pid 4087] set_robust_list(0x5555700d1660, 24 [pid 4085] setpgid(0, 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4088 [pid 4088] <... set_robust_list resumed>) = 0 [pid 4087] <... set_robust_list resumed>) = 0 [pid 4085] <... setpgid resumed>) = 0 [pid 4088] chdir("./761" [pid 4087] chdir("./776" [pid 4085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4088] <... chdir resumed>) = 0 [pid 4087] <... chdir resumed>) = 0 [pid 4085] <... openat resumed>) = 3 [pid 4088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4085] write(3, "1000", 4 [pid 4088] <... prctl resumed>) = 0 [pid 4087] <... prctl resumed>) = 0 [pid 4085] <... write resumed>) = 4 [pid 4088] setpgid(0, 0 [pid 4087] setpgid(0, 0 [pid 4085] close(3 [pid 4084] +++ exited with 0 +++ [pid 4088] <... setpgid resumed>) = 0 [pid 4087] <... setpgid resumed>) = 0 [pid 4085] <... close resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4084, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4085] symlink("/dev/binderfs", "./binderfs" [pid 289] <... restart_syscall resumed>) = 0 [pid 4087] <... openat resumed>) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 4087] write(3, "1000", 4 [pid 4085] <... symlink resumed>) = 0 executing program [pid 4088] <... openat resumed>) = 3 [pid 4087] <... write resumed>) = 4 [pid 4085] write(1, "executing program\n", 18 [pid 4088] write(3, "1000", 4 [pid 4087] close(3 [pid 4085] <... write resumed>) = 18 [pid 292] umount2("./765", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4088] <... write resumed>) = 4 [pid 4087] <... close resumed>) = 0 [pid 4085] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./739", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4088] close(3 [pid 4087] symlink("/dev/binderfs", "./binderfs" [pid 292] openat(AT_FDCWD, "./765", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4085] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4087] <... symlink resumed>) = 0 [pid 292] newfstatat(3, "", [pid 4085] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4087] write(1, "executing program\n", 18executing program [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] openat(AT_FDCWD, "./739", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4088] <... close resumed>) = 0 [pid 4087] <... write resumed>) = 18 [pid 4085] <... ioctl resumed>) = 0 [pid 292] getdents64(3, [pid 4088] symlink("/dev/binderfs", "./binderfs" [pid 4087] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4085] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... openat resumed>) = 3 [pid 4087] <... openat resumed>) = 3 [pid 4085] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] umount2("./765/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(3, "", [pid 4088] <... symlink resumed>) = 0 [pid 4087] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4085] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4088] write(1, "executing program\n", 18executing program executing program executing program [pid 4087] <... ioctl resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./765/binderfs", [pid 4085] <... openat resumed>) = 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4088] <... write resumed>) = 18 [pid 4087] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4085] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4088] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4087] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] unlink("./765/binderfs" [pid 289] getdents64(3, [pid 4085] <... write resumed>) = 8784 [pid 292] <... unlink resumed>) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4087] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4085] exit_group(0 [pid 292] close(3 [pid 4088] <... openat resumed>) = 3 [pid 4087] <... openat resumed>) = 4 [pid 4085] <... exit_group resumed>) = ? [pid 292] <... close resumed>) = 0 [pid 289] umount2("./739/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] rmdir("./765") = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] mkdir("./766", 0777 [pid 4085] +++ killed by SIGKILL +++ [pid 292] <... mkdir resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./739/binderfs", [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4085, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4089 [pid 290] umount2("./746", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./746", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./746/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./746/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./746/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./746") = 0 [pid 290] mkdir("./747", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4090 ./strace-static-x86_64: Process 4089 attached ./strace-static-x86_64: Process 4090 attached [pid 4089] set_robust_list(0x5555700d1660, 24 [pid 4090] set_robust_list(0x5555700d1660, 24 [pid 4089] <... set_robust_list resumed>) = 0 [pid 4089] chdir("./766" [pid 4090] <... set_robust_list resumed>) = 0 [pid 4090] chdir("./747" [pid 4089] <... chdir resumed>) = 0 [pid 4090] <... chdir resumed>) = 0 [pid 4089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4089] setpgid(0, 0 [pid 4090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4090] setpgid(0, 0 [pid 4089] <... setpgid resumed>) = 0 [pid 4089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4090] <... setpgid resumed>) = 0 [pid 4090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4089] <... openat resumed>) = 3 [pid 4090] <... openat resumed>) = 3 [pid 4089] write(3, "1000", 4 [pid 4090] write(3, "1000", 4 [pid 4089] <... write resumed>) = 4 [pid 4090] <... write resumed>) = 4 [pid 4089] close(3 [pid 4090] close(3 [pid 4089] <... close resumed>) = 0 [pid 4090] <... close resumed>) = 0 [pid 4089] symlink("/dev/binderfs", "./binderfs" [pid 4090] symlink("/dev/binderfs", "./binderfs" [pid 4089] <... symlink resumed>) = 0 [pid 4090] <... symlink resumed>) = 0 [pid 4090] write(1, "executing program\n", 18 [pid 4089] write(1, "executing program\n", 18 [pid 4090] <... write resumed>) = 18 [pid 4089] <... write resumed>) = 18 [pid 4090] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4089] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4090] <... openat resumed>) = 3 [pid 4089] <... openat resumed>) = 3 [pid 4089] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4090] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4089] <... ioctl resumed>) = 0 [pid 4090] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4089] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4090] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4089] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4090] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4089] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4090] <... openat resumed>) = 4 [pid 4089] <... openat resumed>) = 4 [pid 4089] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4090] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4089] <... write resumed>) = 8784 [pid 289] unlink("./739/binderfs" [pid 4090] <... write resumed>) = 8784 [pid 289] <... unlink resumed>) = 0 [pid 4087] +++ killed by SIGKILL +++ [pid 289] getdents64(3, [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4087, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4090] exit_group(0 [pid 289] close(3 [pid 4089] exit_group(0 [pid 289] <... close resumed>) = 0 [pid 4090] <... exit_group resumed>) = ? [pid 289] rmdir("./739" [pid 4088] +++ killed by SIGKILL +++ [pid 289] <... rmdir resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4088, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] mkdir("./740", 0777 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4089] <... exit_group resumed>) = ? [pid 289] <... mkdir resumed>) = 0 [pid 4090] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4090, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4091 ./strace-static-x86_64: Process 4091 attached [pid 4091] set_robust_list(0x5555700d1660, 24) = 0 [pid 4091] chdir("./740") = 0 [pid 4091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./747", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./747", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] umount2("./776", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(3, "", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] openat(AT_FDCWD, "./776", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] getdents64(3, [pid 293] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(3, "", [pid 290] umount2("./747/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(3, [pid 290] newfstatat(AT_FDCWD, "./747/binderfs", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./776/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] unlink("./747/binderfs" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... unlink resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./776/binderfs", [pid 290] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./776/binderfs" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... unlink resumed>) = 0 [pid 290] close(3 [pid 293] getdents64(3, [pid 290] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] rmdir("./747" [pid 293] close(3 [pid 290] <... rmdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./776" [pid 290] mkdir("./748", 0777 [pid 293] <... rmdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 293] mkdir("./777", 0777 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... mkdir resumed>) = 0 [ 68.482075][ T375] tty tty1: SAK: killed process 4082 (syz-executor903): by fd#3 [ 68.482102][ T375] tty tty1: SAK: killed process 4083 (syz-executor903): by fd#3 [ 68.498889][ T375] tty tty1: SAK: killed process 4084 (syz-executor903): by fd#3 [ 68.512414][ T375] tty tty1: SAK: killed process 4085 (syz-executor903): by fd#3 [ 68.512440][ T375] tty tty1: SAK: killed process 4087 (syz-executor903): by fd#3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4092 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4093 [pid 4091] setpgid(0, 0) = 0 [pid 4091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... restart_syscall resumed>) = 0 [pid 4089] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4089, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4092 attached [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] umount2("./761", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4093 attached [pid 4092] set_robust_list(0x5555700d1660, 24 [pid 4093] set_robust_list(0x5555700d1660, 24 [pid 4092] <... set_robust_list resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4091] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./761", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4091] write(3, "1000", 4 [pid 291] <... openat resumed>) = 3 [pid 4091] <... write resumed>) = 4 [pid 291] newfstatat(3, "", [pid 4091] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4091] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 4091] symlink("/dev/binderfs", "./binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4091] <... symlink resumed>) = 0 [pid 291] umount2("./761/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4093] <... set_robust_list resumed>) = 0 [pid 4092] chdir("./748" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4091] write(1, "executing program\n", 18 executing program [pid 291] newfstatat(AT_FDCWD, "./761/binderfs", [pid 4091] <... write resumed>) = 18 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4091] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] unlink("./761/binderfs" [pid 4091] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 4091] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] getdents64(3, [pid 4091] <... ioctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4092] <... chdir resumed>) = 0 [pid 291] close(3 [pid 4091] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... close resumed>) = 0 [pid 4092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] rmdir("./761" [pid 4091] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4091] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4091] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4093] chdir("./777" [pid 4092] <... prctl resumed>) = 0 [pid 4091] <... write resumed>) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./762", 0777 [pid 4093] <... chdir resumed>) = 0 [pid 4092] setpgid(0, 0 [pid 291] <... mkdir resumed>) = 0 [pid 4092] <... setpgid resumed>) = 0 [pid 292] umount2("./766", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./766", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4094 [pid 292] <... openat resumed>) = 3 [pid 4092] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 4093] <... prctl resumed>) = 0 [pid 4092] write(3, "1000", 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./766/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./766/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4093] setpgid(0, 0 [pid 4092] <... write resumed>) = 4 [pid 292] unlink("./766/binderfs" [pid 4093] <... setpgid resumed>) = 0 [pid 4092] close(3 [pid 292] <... unlink resumed>) = 0 [pid 4091] +++ killed by SIGKILL +++ [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 4092] <... close resumed>) = 0 [pid 292] rmdir("./766"./strace-static-x86_64: Process 4094 attached [pid 4093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4092] symlink("/dev/binderfs", "./binderfs" [pid 292] <... rmdir resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4091, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4094] set_robust_list(0x5555700d1660, 24 [pid 4093] <... openat resumed>) = 3 [pid 4092] <... symlink resumed>) = 0 [pid 292] mkdir("./767", 0777 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4094] <... set_robust_list resumed>) = 0 [pid 4093] write(3, "1000", 4executing program [pid 4092] write(1, "executing program\n", 18 [pid 4094] chdir("./762" [pid 4093] <... write resumed>) = 4 [pid 4092] <... write resumed>) = 18 [pid 292] <... mkdir resumed>) = 0 [pid 4094] <... chdir resumed>) = 0 [pid 4093] close(3 [pid 4092] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4093] <... close resumed>) = 0 [pid 4092] <... openat resumed>) = 3 [pid 4094] <... prctl resumed>) = 0 [pid 4093] symlink("/dev/binderfs", "./binderfs" [pid 4092] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4094] setpgid(0, 0 [pid 4093] <... symlink resumed>) = 0 executing program [pid 4092] <... ioctl resumed>) = 0 [pid 4094] <... setpgid resumed>) = 0 [pid 4093] write(1, "executing program\n", 18 [pid 4092] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}./strace-static-x86_64: Process 4095 attached [pid 4094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4093] <... write resumed>) = 18 [pid 4092] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4095 [pid 4095] set_robust_list(0x5555700d1660, 24 [pid 4094] <... openat resumed>) = 3 [pid 4093] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4092] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4094] write(3, "1000", 4 [pid 4093] <... openat resumed>) = 3 [pid 4092] <... openat resumed>) = 4 [pid 4095] <... set_robust_list resumed>) = 0 [pid 4094] <... write resumed>) = 4 [pid 4093] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4092] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4095] chdir("./767" [pid 4094] close(3 [pid 4093] <... ioctl resumed>) = ? [pid 4092] <... write resumed>) = ? [pid 4095] <... chdir resumed>) = 0 [pid 4095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4095] setpgid(0, 0) = 0 [pid 4095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4095] write(3, "1000", 4) = 4 [pid 4095] close(3) = 0 [pid 4095] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4095] write(1, "executing program\n", 18) = 18 [pid 4095] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4095] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4095] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4095] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4095] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4095] exit_group(0) = ? [pid 4095] +++ exited with 0 +++ [pid 4094] <... close resumed>) = 0 [pid 4092] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4095, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... restart_syscall resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> executing program [pid 4094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4094] write(1, "executing program\n", 18 [pid 292] <... restart_syscall resumed>) = 0 [pid 4094] <... write resumed>) = 18 [pid 4094] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 292] umount2("./767", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4094] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4094] <... ioctl resumed>) = 0 [pid 292] openat(AT_FDCWD, "./767", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4094] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... openat resumed>) = 3 [pid 4094] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] newfstatat(3, "", [pid 4094] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4094] <... openat resumed>) = 4 [pid 292] getdents64(3, [pid 4094] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4094] <... write resumed>) = 8784 [pid 292] umount2("./767/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4094] exit_group(0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4094] <... exit_group resumed>) = ? [pid 292] newfstatat(AT_FDCWD, "./767/binderfs", [pid 4094] +++ exited with 0 +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4092, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4093] +++ killed by SIGKILL +++ [pid 292] unlink("./767/binderfs" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4093, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4094, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] <... unlink resumed>) = 0 [pid 291] umount2("./762", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./740", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./748", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] openat(AT_FDCWD, "./762", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] close(3 [pid 291] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./740", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... close resumed>) = 0 [pid 291] newfstatat(3, "", [pid 290] openat(AT_FDCWD, "./748", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] rmdir("./767" [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 292] <... rmdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 291] umount2("./762/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] mkdir("./768", 0777 [pid 291] newfstatat(AT_FDCWD, "./762/binderfs", [pid 290] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] getdents64(3, [pid 291] unlink("./762/binderfs" [pid 292] <... mkdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] close(3 [pid 290] umount2("./748/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./762") = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./740/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4096 [pid 291] mkdir("./763", 0777 [pid 290] newfstatat(AT_FDCWD, "./748/binderfs", [pid 291] <... mkdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./740/binderfs", [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4097 [pid 290] unlink("./748/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 4096 attached [pid 290] <... unlink resumed>) = 0 [pid 289] unlink("./740/binderfs" [pid 290] getdents64(3, [pid 4096] set_robust_list(0x5555700d1660, 24) = 0 [pid 289] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] getdents64(3, [pid 290] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... close resumed>) = 0 [pid 289] close(3 [pid 290] rmdir("./748" [pid 289] <... close resumed>) = 0 [pid 4096] chdir("./768") = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] rmdir("./740" [pid 290] mkdir("./749", 0777 [pid 4096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4096] setpgid(0, 0) = 0 [pid 4096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... rmdir resumed>) = 0 [pid 4096] <... openat resumed>) = 3 [pid 4096] write(3, "1000", 4 [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./741", 0777 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4096] <... write resumed>) = 4 [pid 4096] close(3) = 0 [pid 4096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 289] <... mkdir resumed>) = 0 [pid 4096] write(1, "executing program\n", 18) = 18 [pid 4096] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4098 [pid 4096] <... openat resumed>) = 3 [pid 4096] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4096] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4099 [pid 4096] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4096] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4096] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4099 attached ./strace-static-x86_64: Process 4098 attached ./strace-static-x86_64: Process 4097 attached ) = ? [pid 4099] set_robust_list(0x5555700d1660, 24 [ 68.512477][ T375] tty tty1: SAK: killed process 4088 (syz-executor903): by fd#3 [ 68.542946][ T60] tty tty1: SAK: killed process 4091 (syz-executor903): by fd#3 [ 68.558815][ T60] tty tty1: SAK: killed process 4092 (syz-executor903): by fd#3 [ 68.558846][ T60] tty tty1: SAK: killed process 4093 (syz-executor903): by fd#3 [pid 4097] set_robust_list(0x5555700d1660, 24 [pid 4099] <... set_robust_list resumed>) = 0 [pid 4097] <... set_robust_list resumed>) = 0 [pid 4099] chdir("./741" [pid 4097] chdir("./763" [pid 293] umount2("./777", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4099] <... chdir resumed>) = 0 [pid 4097] <... chdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./777", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4099] <... prctl resumed>) = 0 [pid 4098] set_robust_list(0x5555700d1660, 24 [pid 4097] <... prctl resumed>) = 0 [pid 4096] +++ killed by SIGKILL +++ [pid 4098] <... set_robust_list resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 4098] chdir("./749" [pid 293] newfstatat(3, "", [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4096, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4098] <... chdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./768", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4098] <... prctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] openat(AT_FDCWD, "./768", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] umount2("./777/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4098] setpgid(0, 0 [pid 292] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(3, "", [pid 293] newfstatat(AT_FDCWD, "./777/binderfs", [pid 4099] setpgid(0, 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(3, [pid 4099] <... setpgid resumed>) = 0 [pid 293] unlink("./777/binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4098] <... setpgid resumed>) = 0 [pid 4098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... unlink resumed>) = 0 [pid 292] umount2("./768/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 4099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4098] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] close(3 [pid 292] newfstatat(AT_FDCWD, "./768/binderfs", [pid 293] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] rmdir("./777" [pid 292] unlink("./768/binderfs" [pid 4098] write(3, "1000", 4) = 4 [pid 4098] close(3) = 0 [pid 4098] symlink("/dev/binderfs", "./binderfs" [pid 293] <... rmdir resumed>) = 0 executing program [pid 4099] <... openat resumed>) = 3 [pid 4098] <... symlink resumed>) = 0 [pid 293] mkdir("./778", 0777 [pid 292] <... unlink resumed>) = 0 [pid 4098] write(1, "executing program\n", 18) = 18 [pid 4098] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4099] write(3, "1000", 4 [pid 4098] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... mkdir resumed>) = 0 [pid 292] getdents64(3, [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4099] <... write resumed>) = 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4098] <... ioctl resumed>) = 0 [pid 4098] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4098] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4098] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4100 attached [pid 4099] close(3 [pid 4098] <... write resumed>) = ? [pid 4097] setpgid(0, 0 [pid 292] close(3 [pid 4100] set_robust_list(0x5555700d1660, 24 [pid 4099] <... close resumed>) = 0 [pid 4097] <... setpgid resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4100 [pid 292] <... close resumed>) = 0 [pid 4100] <... set_robust_list resumed>) = 0 [pid 4099] symlink("/dev/binderfs", "./binderfs" [pid 4097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] rmdir("./768" [pid 4100] chdir("./778" [pid 4099] <... symlink resumed>) = 0 [pid 4097] <... openat resumed>) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 4100] <... chdir resumed>) = 0 [pid 4099] write(1, "executing program\n", 18executing program [pid 4097] write(3, "1000", 4 [pid 292] mkdir("./769", 0777 [pid 4100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4099] <... write resumed>) = 18 [pid 4097] <... write resumed>) = 4 [pid 292] <... mkdir resumed>) = 0 [pid 4099] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4097] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4098] +++ killed by SIGKILL +++ [pid 4100] <... prctl resumed>) = 0 [pid 4100] setpgid(0, 0 [pid 4099] <... openat resumed>) = 3 [pid 4100] <... setpgid resumed>) = 0 [pid 4100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4100] write(3, "1000", 4 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4098, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4100] <... write resumed>) = 4 [pid 4099] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4097] <... close resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4101 [pid 290] umount2("./749", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4099] <... ioctl resumed>) = 0 [pid 4097] symlink("/dev/binderfs", "./binderfs" [pid 4099] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4100] close(3) = 0 [pid 4100] symlink("/dev/binderfs", "./binderfs" [pid 4097] <... symlink resumed>) = 0 executing program [pid 290] openat(AT_FDCWD, "./749", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4099] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4097] write(1, "executing program\n", 18 [pid 4099] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... openat resumed>) = 3 [pid 4097] <... write resumed>) = 18 [pid 4100] <... symlink resumed>) = 0 [pid 4099] <... openat resumed>) = 4 [pid 4097] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program executing program [pid 290] newfstatat(3, "", [pid 4099] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4100] write(1, "executing program\n", 18) = 18 [pid 4100] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4097] <... openat resumed>) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4100] <... openat resumed>) = 3 [pid 4100] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4099] <... write resumed>) = 8784 [pid 4100] <... ioctl resumed>) = 0 [pid 4100] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4100] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = ? ./strace-static-x86_64: Process 4101 attached [pid 4101] set_robust_list(0x5555700d1660, 24) = 0 [pid 4101] chdir("./769") = 0 [pid 4101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4101] setpgid(0, 0) = 0 [pid 4101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4101] write(3, "1000", 4) = 4 [pid 4101] close(3) = 0 [pid 4101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4101] write(1, "executing program\n", 18) = 18 [pid 4101] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4101] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4101] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4101] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4101] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4101] exit_group(0) = ? [pid 4097] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4097, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./749/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./749/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./749/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./749") = 0 [pid 290] mkdir("./750", 0777 [pid 4100] +++ killed by SIGKILL +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4100, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4101] +++ exited with 0 +++ [pid 291] umount2("./763", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4102 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./763", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4101, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./778", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./763/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./778", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] umount2("./769", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./763/binderfs", [pid 293] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(3, "", [pid 292] openat(AT_FDCWD, "./769", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] unlink("./763/binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 293] getdents64(3, [pid 292] newfstatat(3, "", [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... close resumed>) = 0 [pid 293] umount2("./778/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 291] rmdir("./763" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... rmdir resumed>) = 0 executing program executing program [pid 293] newfstatat(AT_FDCWD, "./778/binderfs", [pid 292] umount2("./769/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] mkdir("./764", 0777 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4103 ./strace-static-x86_64: Process 4102 attached [pid 4102] set_robust_list(0x5555700d1660, 24) = 0 [pid 4102] chdir("./750") = 0 [pid 4102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4102] setpgid(0, 0) = 0 [pid 4102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4102] write(3, "1000", 4) = 4 [pid 4102] close(3) = 0 [pid 4102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4102] write(1, "executing program\n", 18) = 18 [pid 4102] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4103 attached [pid 4103] set_robust_list(0x5555700d1660, 24) = 0 [pid 4103] chdir("./764") = 0 [pid 4103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4103] setpgid(0, 0) = 0 [pid 4103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4103] write(3, "1000", 4) = 4 [pid 4103] close(3) = 0 [pid 4103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4103] write(1, "executing program\n", 18) = 18 [pid 4103] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] unlink("./778/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./778") = 0 [pid 293] mkdir("./779", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4104 [pid 292] newfstatat(AT_FDCWD, "./769/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./769/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./769") = 0 [pid 292] mkdir("./770", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4104 attached , child_tidptr=0x5555700d1650) = 4105 ./strace-static-x86_64: Process 4105 attached [pid 4105] set_robust_list(0x5555700d1660, 24) = 0 [pid 4105] chdir("./770") = 0 [pid 4105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4105] setpgid(0, 0) = 0 [pid 4105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4105] write(3, "1000", 4) = 4 [pid 4105] close(3) = 0 [pid 4105] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4105] write(1, "executing program\n", 18) = 18 [pid 4105] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 4104] set_robust_list(0x5555700d1660, 24) = 0 [pid 4104] chdir("./779") = 0 [pid 4104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4104] setpgid(0, 0) = 0 [pid 4104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4104] write(3, "1000", 4) = 4 [pid 4104] close(3) = 0 [pid 4104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4104] write(1, "executing program\n", 18) = 18 [pid 4104] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4103] <... openat resumed>) = 230 [pid 4102] <... openat resumed>) = 230 [pid 4099] +++ killed by SIGKILL +++ [pid 4102] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4102, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4099, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./750", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./750", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./750/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 68.583401][ T42] tty tty1: SAK: killed process 4096 (syz-executor903): by fd#3 [ 68.596103][ T42] tty tty1: SAK: killed process 4098 (syz-executor903): by fd#3 [ 68.606988][ T60] tty tty1: SAK: killed process 4097 (syz-executor903): by fd#3 [ 68.607015][ T60] tty tty1: SAK: killed process 4099 (syz-executor903): by fd#3 [ 68.607032][ T60] tty tty1: SAK: killed process 4100 (syz-executor903): by fd#3 [pid 290] newfstatat(AT_FDCWD, "./750/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./750/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./750") = 0 [pid 290] mkdir("./751", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4106 ./strace-static-x86_64: Process 4106 attached [pid 4106] set_robust_list(0x5555700d1660, 24) = 0 [pid 4106] chdir("./751") = 0 [pid 4106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4106] setpgid(0, 0) = 0 [pid 4106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4106] write(3, "1000", 4) = 4 [pid 4106] close(3) = 0 [pid 4106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./741", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./741", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./741/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./741/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./741/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./741") = 0 [pid 289] mkdir("./742", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4107 [pid 4106] write(1, "executing program\n", 18executing program ) = 18 [pid 4106] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4107 attached [pid 4107] set_robust_list(0x5555700d1660, 24) = 0 [pid 4107] chdir("./742") = 0 [pid 4107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4107] setpgid(0, 0) = 0 [pid 4107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4105] <... openat resumed>) = 3 [pid 4104] <... openat resumed>) = 3 [pid 4103] +++ killed by SIGKILL +++ [pid 4105] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4104] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4103, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4105] <... ioctl resumed>) = 0 [pid 4104] <... ioctl resumed>) = 0 [pid 4105] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4104] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4105] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4104] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] umount2("./764", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4107] <... openat resumed>) = 3 [pid 4105] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4104] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4105] <... openat resumed>) = 4 [pid 4104] <... openat resumed>) = 4 [pid 291] openat(AT_FDCWD, "./764", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4105] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4104] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 291] <... openat resumed>) = 3 [pid 4107] write(3, "1000", 4 [pid 4106] <... openat resumed>) = 3 [pid 4104] <... write resumed>) = 8784 [pid 4106] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = ? [pid 4106] +++ killed by SIGKILL +++ [pid 4107] <... write resumed>) = 4 [pid 4107] close(3) = 0 [pid 4107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4107] write(1, "executing program\n", 18) = 18 [pid 4107] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4107] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4107] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4107] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4107] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4107] exit_group(0) = ? [pid 4105] <... write resumed>) = ? [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./764/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./764/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./764/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./764") = 0 [pid 291] mkdir("./765", 0777) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4106, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4108 [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4105] +++ killed by SIGKILL +++ [pid 4104] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4104, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4105, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./751", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./751", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 4108 attached ) = 3 [pid 290] newfstatat(3, "", [pid 4108] set_robust_list(0x5555700d1660, 24 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4108] <... set_robust_list resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./751/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./751/binderfs", [pid 4108] chdir("./765" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./751/binderfs" [pid 4108] <... chdir resumed>) = 0 [pid 4108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 4108] setpgid(0, 0 [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./751" [pid 4108] <... setpgid resumed>) = 0 [pid 4108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./752", 0777 [pid 4108] <... openat resumed>) = 3 [pid 4108] write(3, "1000", 4) = 4 [pid 4108] close(3) = 0 [pid 4108] symlink("/dev/binderfs", "./binderfs" [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 4108] <... symlink resumed>) = 0 [pid 4108] write(1, "executing program\n", 18 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4109 [pid 4108] <... write resumed>) = 18 [pid 4108] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4109 attached [pid 4109] set_robust_list(0x5555700d1660, 24) = 0 [pid 4109] chdir("./752") = 0 [pid 4109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4109] setpgid(0, 0) = 0 [pid 4109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4109] write(3, "1000", 4) = 4 [pid 4109] close(3) = 0 [pid 4109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4109] write(1, "executing program\n", 18executing program ) = 18 [pid 4109] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 293] umount2("./779", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./779", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./779/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./779/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./779/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./779") = 0 [pid 293] mkdir("./780", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4110 [pid 292] umount2("./770", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./770", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./770/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./770/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./770/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./770") = 0 [pid 292] mkdir("./771", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4111 ./strace-static-x86_64: Process 4110 attached [pid 4110] set_robust_list(0x5555700d1660, 24) = 0 [pid 4110] chdir("./780"./strace-static-x86_64: Process 4111 attached [pid 4107] +++ exited with 0 +++ [pid 4111] set_robust_list(0x5555700d1660, 24 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4107, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4108] <... openat resumed>) = 3 [pid 4109] <... openat resumed>) = 3 [pid 4111] <... set_robust_list resumed>) = 0 [pid 4108] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4111] chdir("./771" [pid 4109] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4108] <... ioctl resumed>) = 0 [pid 4111] <... chdir resumed>) = 0 [pid 4108] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4109] <... ioctl resumed>) = 0 [pid 4110] <... chdir resumed>) = 0 [pid 4108] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4108] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4109] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4110] <... prctl resumed>) = 0 [pid 4109] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4108] <... openat resumed>) = 4 [pid 4111] <... prctl resumed>) = 0 [pid 4109] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program [pid 4108] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4110] setpgid(0, 0 [pid 4111] setpgid(0, 0) = 0 [pid 4111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4111] write(3, "1000", 4) = 4 [pid 4111] close(3) = 0 [pid 4111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4111] write(1, "executing program\n", 18) = 18 [pid 4111] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4111] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4111] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [ 68.634872][ T60] tty tty1: SAK: killed process 4102 (syz-executor903): by fd#3 [ 68.634901][ T60] tty tty1: SAK: killed process 4103 (syz-executor903): by fd#3 [ 68.653304][ T42] tty tty1: SAK: killed process 4104 (syz-executor903): by fd#3 [ 68.653334][ T42] tty tty1: SAK: killed process 4105 (syz-executor903): by fd#3 [ 68.653352][ T42] tty tty1: SAK: killed process 4106 (syz-executor903): by fd#3 [pid 4111] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000executing program [pid 4109] <... openat resumed>) = ? [pid 4109] +++ killed by SIGKILL +++ [pid 4110] <... setpgid resumed>) = 0 [pid 4110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4110] write(3, "1000", 4) = 4 [pid 4110] close(3) = 0 [pid 4110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4110] write(1, "executing program\n", 18) = 18 [pid 4110] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4110] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4110] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4110] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4111] <... openat resumed>) = 4 [pid 4108] <... write resumed>) = ? [pid 4111] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4108] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4109, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... restart_syscall resumed>) = 0 [pid 4111] <... write resumed>) = 8784 [pid 4111] exit_group(0) = ? [pid 4110] <... openat resumed>) = 4 [pid 4110] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4110] exit_group(0) = ? [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4108, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./752", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./752", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./752/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./752/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./752/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./752") = 0 [pid 290] mkdir("./753", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4112 [pid 289] umount2("./742", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./742", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./742/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./742/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4111] +++ exited with 0 +++ [pid 289] unlink("./742/binderfs"./strace-static-x86_64: Process 4112 attached [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4111, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... unlink resumed>) = 0 [pid 4112] set_robust_list(0x5555700d1660, 24 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] getdents64(3, [pid 4112] <... set_robust_list resumed>) = 0 [pid 4110] +++ exited with 0 +++ [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4112] chdir("./753") = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4110, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] close(3 [pid 4112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... close resumed>) = 0 [pid 4112] <... prctl resumed>) = 0 [pid 4112] setpgid(0, 0 [pid 289] rmdir("./742" [pid 4112] <... setpgid resumed>) = 0 [pid 4112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 289] <... rmdir resumed>) = 0 [pid 4112] write(3, "1000", 4) = 4 [pid 289] mkdir("./743", 0777 [pid 4112] close(3) = 0 [pid 4112] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 4112] write(1, "executing program\n", 18) = 18 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4112] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4112] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4113 [pid 4112] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4112] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4112] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4113 attached ) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 4113] set_robust_list(0x5555700d1660, 24 [pid 4112] +++ killed by SIGKILL +++ [pid 293] umount2("./780", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./771", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./765", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./780", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./771", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./765", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4112, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 4113] <... set_robust_list resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./780/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./771/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./765/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] newfstatat(AT_FDCWD, "./780/binderfs", [pid 292] newfstatat(AT_FDCWD, "./771/binderfs", [pid 290] umount2("./753", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4113] chdir("./743" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./765/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./780/binderfs" [pid 292] unlink("./771/binderfs" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] openat(AT_FDCWD, "./753", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4113] <... chdir resumed>) = 0 [pid 4113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... unlink resumed>) = 0 [pid 4113] <... prctl resumed>) = 0 [pid 4113] setpgid(0, 0 [pid 292] <... unlink resumed>) = 0 [pid 291] unlink("./765/binderfs" [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 290] <... openat resumed>) = 3 [pid 4113] <... setpgid resumed>) = 0 [pid 4113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] newfstatat(3, "", [pid 4113] <... openat resumed>) = 3 [pid 4113] write(3, "1000", 4) = 4 [pid 292] close(3 [pid 291] getdents64(3, [pid 293] close(3 [pid 292] <... close resumed>) = 0 [pid 4113] close(3 [pid 292] rmdir("./771" [pid 293] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4113] <... close resumed>) = 0 [pid 4113] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 293] rmdir("./780" [pid 292] <... rmdir resumed>) = 0 [pid 291] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4113] write(1, "executing program\n", 18) = 18 [pid 4113] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] <... rmdir resumed>) = 0 [pid 292] mkdir("./772", 0777 [pid 291] <... close resumed>) = 0 [pid 290] getdents64(3, [pid 293] mkdir("./781", 0777 [pid 4113] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4113] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... mkdir resumed>) = 0 [pid 291] rmdir("./765" [pid 4113] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4113] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4113] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 293] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... rmdir resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] mkdir("./766", 0777./strace-static-x86_64: Process 4114 attached [pid 4114] set_robust_list(0x5555700d1660, 24) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4115 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4114 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./753/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4114] chdir("./772") = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4116 [pid 4113] +++ killed by SIGKILL +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./753/binderfs", ./strace-static-x86_64: Process 4116 attached [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4113, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 4115 attached [pid 4116] set_robust_list(0x5555700d1660, 24 [pid 290] unlink("./753/binderfs" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4114] setpgid(0, 0 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 4114] <... setpgid resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] close(3) = 0 [pid 4114] <... openat resumed>) = 3 [pid 4114] write(3, "1000", 4) = 4 [pid 290] rmdir("./753" [pid 4114] close(3) = 0 [pid 4114] symlink("/dev/binderfs", "./binderfs") = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4114] write(1, "executing program\n", 18executing program [pid 290] mkdir("./754", 0777 [pid 4114] <... write resumed>) = 18 [pid 4114] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 4114] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4114] <... ioctl resumed>) = 0 [pid 4114] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4114] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4114] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4117 ./strace-static-x86_64: Process 4117 attached [pid 4116] <... set_robust_list resumed>) = 0 [pid 4115] set_robust_list(0x5555700d1660, 24 [pid 4114] <... write resumed>) = ? [pid 4116] chdir("./766" [pid 4115] <... set_robust_list resumed>) = 0 [pid 4116] <... chdir resumed>) = 0 [pid 4116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4115] chdir("./781" [pid 4116] <... prctl resumed>) = 0 [pid 4115] <... chdir resumed>) = 0 [pid 4116] setpgid(0, 0 [pid 4115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4116] <... setpgid resumed>) = 0 [pid 4115] <... prctl resumed>) = 0 [pid 4117] set_robust_list(0x5555700d1660, 24 [pid 4116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4115] setpgid(0, 0 [pid 4117] <... set_robust_list resumed>) = 0 [pid 4116] <... openat resumed>) = 3 [pid 4115] <... setpgid resumed>) = 0 [pid 4117] chdir("./754" [pid 4116] write(3, "1000", 4 [pid 289] <... restart_syscall resumed>) = 0 [pid 4115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4116] <... write resumed>) = 4 [pid 4116] close(3 [pid 4114] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4114, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] umount2("./743", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4116] <... close resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4116] symlink("/dev/binderfs", "./binderfs" [pid 289] openat(AT_FDCWD, "./743", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4117] <... chdir resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4117] setpgid(0, 0) = 0 [pid 4117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 289] newfstatat(3, "", [pid 4117] write(3, "1000", 4) = 4 [pid 4117] close(3 [pid 4116] <... symlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4116] write(1, "executing program\n", 18executing program [pid 4115] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 4117] <... close resumed>) = 0 [pid 4117] symlink("/dev/binderfs", "./binderfs" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4116] <... write resumed>) = 18 [pid 4115] write(3, "1000", 4 [pid 289] umount2("./743/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4116] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4115] <... write resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4117] <... symlink resumed>) = 0 [pid 4116] <... openat resumed>) = 3 [pid 4115] close(3 [pid 289] newfstatat(AT_FDCWD, "./743/binderfs", [pid 4117] write(1, "executing program\n", 18 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4116] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] unlink("./743/binderfs"executing program [pid 4115] <... close resumed>) = 0 [pid 4117] <... write resumed>) = 18 [pid 4117] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... unlink resumed>) = 0 [pid 4116] <... ioctl resumed>) = 0 [pid 4115] symlink("/dev/binderfs", "./binderfs" [pid 289] getdents64(3, [pid 4117] <... openat resumed>) = 3 [pid 4116] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4115] <... symlink resumed>) = 0 [pid 4116] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] close(3 [pid 4117] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} executing program [pid 4116] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4115] write(1, "executing program\n", 18 [pid 289] <... close resumed>) = 0 [pid 4117] <... ioctl resumed>) = 0 [pid 289] rmdir("./743" [pid 4116] <... openat resumed>) = 4 [pid 4117] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4117] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4116] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4115] <... write resumed>) = 18 [pid 289] <... rmdir resumed>) = 0 [ 68.683341][ T60] tty tty1: SAK: killed process 4108 (syz-executor903): by fd#3 [ 68.683368][ T60] tty tty1: SAK: killed process 4109 (syz-executor903): by fd#3 [ 68.703791][ T60] tty tty1: SAK: killed process 4112 (syz-executor903): by fd#3 [ 68.717370][ T60] tty tty1: SAK: killed process 4113 (syz-executor903): by fd#3 [ 68.730111][ T60] tty tty1: SAK: killed process 4114 (syz-executor903): by fd#3 [pid 289] mkdir("./744", 0777 [pid 4115] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4115] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4115] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4115] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4116] <... write resumed>) = ? [pid 4115] <... openat resumed>) = 4 [pid 4117] <... openat resumed>) = ? [pid 4115] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4117] +++ killed by SIGKILL +++ [pid 4115] <... write resumed>) = 8784 [pid 289] <... mkdir resumed>) = 0 [pid 4115] exit_group(0) = ? [pid 292] umount2("./772", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./772", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./772/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./772/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./772/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./772") = 0 [pid 292] mkdir("./773", 0777 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4115] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4117, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4116] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4115, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4118 ./strace-static-x86_64: Process 4118 attached [pid 4118] set_robust_list(0x5555700d1660, 24) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4116, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./754", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4118] chdir("./744") = 0 [pid 4118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4118] setpgid(0, 0) = 0 [pid 4118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4118] write(3, "1000", 4 [pid 290] openat(AT_FDCWD, "./754", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4119 [pid 4118] <... write resumed>) = 4 [pid 290] <... openat resumed>) = 3 [pid 4118] close(3 [pid 290] newfstatat(3, "", [pid 4118] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4118] symlink("/dev/binderfs", "./binderfs" executing program [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./754/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4118] <... symlink resumed>) = 0 [pid 4118] write(1, "executing program\n", 18) = 18 [pid 4118] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] newfstatat(AT_FDCWD, "./754/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./754/binderfs" [pid 4118] <... openat resumed>) = 3 [pid 4118] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4118] <... ioctl resumed>) = 0 [pid 290] close(3 [pid 4118] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... close resumed>) = 0 [pid 4118] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] rmdir("./754" [pid 4118] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4118] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4119 attached [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./755", 0777 [pid 4119] set_robust_list(0x5555700d1660, 24 [pid 4118] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] umount2("./781", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4120 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./781", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./781/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./781/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./781/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./781") = 0 [pid 293] mkdir("./782", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4121 [pid 4119] <... set_robust_list resumed>) = 0 [pid 4119] chdir("./773") = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./766", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./766", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./766/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./766/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./766/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./766"./strace-static-x86_64: Process 4121 attached ./strace-static-x86_64: Process 4120 attached [pid 4119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./767", 0777 [pid 4121] set_robust_list(0x5555700d1660, 24 [pid 4120] set_robust_list(0x5555700d1660, 24 [pid 4119] <... prctl resumed>) = 0 [pid 4118] +++ killed by SIGKILL +++ [pid 4121] <... set_robust_list resumed>) = 0 [pid 4120] <... set_robust_list resumed>) = 0 [pid 4119] setpgid(0, 0 [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4118, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4120] chdir("./755") = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4122 [pid 4121] chdir("./782" [pid 4119] <... setpgid resumed>) = 0 [pid 4121] <... chdir resumed>) = 0 [pid 4120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4121] <... prctl resumed>) = 0 [pid 4120] <... prctl resumed>) = 0 [pid 4121] setpgid(0, 0 [pid 4120] setpgid(0, 0 [pid 4119] <... openat resumed>) = 3 [pid 4120] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 4122 attached [pid 4122] set_robust_list(0x5555700d1660, 24) = 0 [pid 4122] chdir("./767" [pid 4120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4122] <... chdir resumed>) = 0 [pid 4122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4122] setpgid(0, 0) = 0 [pid 4122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4120] <... openat resumed>) = 3 [pid 4122] <... openat resumed>) = 3 [pid 4122] write(3, "1000", 4) = 4 [pid 4122] close(3) = 0 [pid 4122] symlink("/dev/binderfs", "./binderfs" [pid 4120] write(3, "1000", 4 [pid 4121] <... setpgid resumed>) = 0 [pid 4119] write(3, "1000", 4 [pid 4122] <... symlink resumed>) = 0 executing program [pid 4122] write(1, "executing program\n", 18 [pid 4120] <... write resumed>) = 4 [pid 4122] <... write resumed>) = 18 [pid 4122] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4120] close(3) = 0 [pid 4120] symlink("/dev/binderfs", "./binderfs" [pid 4122] <... openat resumed>) = 3 [pid 4122] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4120] <... symlink resumed>) = 0 [pid 4121] <... openat resumed>) = 3 [pid 4120] write(1, "executing program\n", 18executing program ) = 18 [pid 4121] write(3, "1000", 4 [pid 4120] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4121] <... write resumed>) = 4 [pid 4122] <... ioctl resumed>) = 0 [pid 4122] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4120] <... openat resumed>) = 3 [pid 4121] close(3 [pid 4122] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4120] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4121] <... close resumed>) = 0 [pid 4122] <... openat resumed>) = 4 [pid 4122] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program ) = ? [pid 4121] symlink("/dev/binderfs", "./binderfs" [pid 4120] <... ioctl resumed>) = ? [pid 4119] <... write resumed>) = 4 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./744", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./744", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./744/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./744/binderfs", [pid 4120] +++ killed by SIGKILL +++ [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4120, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] unlink("./744/binderfs" [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./744") = 0 [pid 289] mkdir("./745", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4123 ./strace-static-x86_64: Process 4123 attached [pid 4121] <... symlink resumed>) = 0 [pid 4121] write(1, "executing program\n", 18) = 18 [pid 4121] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4121] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./755", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./755", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./755/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./755/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./755/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./755") = 0 [pid 4121] <... ioctl resumed>) = 0 [pid 290] mkdir("./756", 0777 [pid 4121] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... mkdir resumed>) = 0 [pid 4121] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4121] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4119] close(3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4124 [pid 4121] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4119] <... close resumed>) = 0 [pid 4121] <... write resumed>) = 8784 [pid 4119] symlink("/dev/binderfs", "./binderfs" [pid 4121] exit_group(0 [pid 4119] <... symlink resumed>) = 0 executing program [pid 4121] <... exit_group resumed>) = ? [pid 4119] write(1, "executing program\n", 18) = 18 [pid 4119] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [ 68.742813][ T375] tty tty1: SAK: killed process 4116 (syz-executor903): by fd#3 [ 68.742840][ T375] tty tty1: SAK: killed process 4117 (syz-executor903): by fd#3 [ 68.763133][ T375] tty tty1: SAK: killed process 4118 (syz-executor903): by fd#3 [ 68.776817][ T375] tty tty1: SAK: killed process 4120 (syz-executor903): by fd#3 [ 68.776854][ T375] tty tty1: SAK: killed process 4122 (syz-executor903): by fd#3 executing program ./strace-static-x86_64: Process 4124 attached [pid 4123] set_robust_list(0x5555700d1660, 24 [pid 4121] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4121, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] umount2("./782", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4119] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./782", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4119, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... openat resumed>) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./782/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./782/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./782/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./782") = 0 [pid 293] mkdir("./783", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4125 ./strace-static-x86_64: Process 4125 attached [pid 4125] set_robust_list(0x5555700d1660, 24) = 0 [pid 4125] chdir("./783") = 0 [pid 4125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4125] setpgid(0, 0) = 0 [pid 4125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4125] write(3, "1000", 4) = 4 [pid 4125] close(3) = 0 [pid 4125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4125] write(1, "executing program\n", 18) = 18 [pid 4125] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4125] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4125] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4125] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4125] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4125] exit_group(0) = ? [pid 4124] set_robust_list(0x5555700d1660, 24 [pid 4123] <... set_robust_list resumed>) = 0 [pid 4122] +++ killed by SIGKILL +++ [pid 4124] <... set_robust_list resumed>) = 0 [pid 4123] chdir("./745" [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4122, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4124] chdir("./756" [pid 4123] <... chdir resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4124] <... chdir resumed>) = 0 [pid 4123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4125] +++ exited with 0 +++ [pid 4124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4123] <... prctl resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4125, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4124] <... prctl resumed>) = 0 [pid 4124] setpgid(0, 0) = 0 [pid 4123] setpgid(0, 0 [pid 4124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4123] <... setpgid resumed>) = 0 [pid 4124] <... openat resumed>) = 3 [pid 4123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4124] write(3, "1000", 4) = 4 [pid 4124] close(3) = 0 [pid 4124] symlink("/dev/binderfs", "./binderfs" [pid 4123] <... openat resumed>) = 3 [pid 4124] <... symlink resumed>) = 0 [pid 4123] write(3, "1000", 4 executing program [pid 4124] write(1, "executing program\n", 18) = 18 [pid 4124] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4123] <... write resumed>) = 4 [pid 4124] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4123] close(3 [pid 4124] <... ioctl resumed>) = 0 [pid 4123] <... close resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 4124] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4123] symlink("/dev/binderfs", "./binderfs" [pid 291] umount2("./767", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4123] <... symlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./767", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 4124] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4123] write(1, "executing program\n", 18 [pid 292] umount2("./773", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 4124] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4123] <... write resumed>) = 18 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 4123] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] openat(AT_FDCWD, "./773", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4124] <... openat resumed>) = 4 [pid 4123] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 4124] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4123] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 292] newfstatat(3, "", [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4123] <... ioctl resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./767/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./767/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4124] <... write resumed>) = 8784 [pid 291] unlink("./767/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./767") = 0 [pid 291] mkdir("./768", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4126 ./strace-static-x86_64: Process 4126 attached [pid 4126] set_robust_list(0x5555700d1660, 24) = 0 [pid 4126] chdir("./768") = 0 [pid 4126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4126] setpgid(0, 0) = 0 [pid 4126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4126] write(3, "1000", 4) = 4 [pid 4126] close(3) = 0 [pid 4126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4126] write(1, "executing program\n", 18) = 18 [pid 4126] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4126] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4126] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4126] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4126] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4126] exit_group(0) = ? [pid 4123] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4123, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./773/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./773/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./773/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./773") = 0 [pid 292] mkdir("./774", 0777 [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4127 [pid 4126] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4126, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4127 attached [pid 4127] set_robust_list(0x5555700d1660, 24) = 0 [pid 4127] chdir("./774") = 0 [pid 4127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4127] setpgid(0, 0) = 0 [pid 4127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4127] write(3, "1000", 4) = 4 [pid 4127] close(3 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./768", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./768", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./768/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./768/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./768/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./768") = 0 [pid 291] mkdir("./769", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4128 [pid 4127] <... close resumed>) = 0 [pid 4127] symlink("/dev/binderfs", "./binderfs" [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./745", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./745", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./745/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./745/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./745/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./745") = 0 [pid 289] mkdir("./746", 0777./strace-static-x86_64: Process 4128 attached [pid 293] umount2("./783", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4124] +++ killed by SIGKILL +++ [pid 4128] set_robust_list(0x5555700d1660, 24 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... mkdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "./783", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4128] <... set_robust_list resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4124, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4129 attached [pid 4128] chdir("./769" [pid 293] <... openat resumed>) = 3 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4129 [pid 4128] <... chdir resumed>) = 0 [pid 293] newfstatat(3, "", [pid 4127] <... symlink resumed>) = 0 [pid 4128] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4127] write(1, "executing program\n", 18) = 18 [pid 4127] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4128] <... prctl resumed>) = 0 [pid 293] getdents64(3, [pid 4127] <... openat resumed>) = 3 [pid 4127] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4127] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4127] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4128] setpgid(0, 0 [pid 4127] <... openat resumed>) = 4 [pid 4127] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4128] <... setpgid resumed>) = 0 [pid 4129] set_robust_list(0x5555700d1660, 24 [pid 4128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4127] <... write resumed>) = ? [pid 293] umount2("./783/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... restart_syscall resumed>) = 0 [pid 4128] <... openat resumed>) = 3 [pid 4129] <... set_robust_list resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4128] write(3, "1000", 4 [pid 293] newfstatat(AT_FDCWD, "./783/binderfs", [pid 4128] <... write resumed>) = 4 [pid 290] umount2("./756", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4129] chdir("./746" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4128] close(3 [pid 4129] <... chdir resumed>) = 0 [pid 4129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4129] setpgid(0, 0) = 0 [pid 4129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] unlink("./783/binderfs" [pid 4128] <... close resumed>) = 0 [pid 290] openat(AT_FDCWD, "./756", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4129] <... openat resumed>) = 3 [pid 4129] write(3, "1000", 4 [pid 293] <... unlink resumed>) = 0 [pid 4129] <... write resumed>) = 4 [pid 4128] symlink("/dev/binderfs", "./binderfs" [pid 293] getdents64(3, [pid 290] <... openat resumed>) = 3 [pid 4129] close(3 [pid 290] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4129] <... close resumed>) = 0 [pid 4129] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4128] <... symlink resumed>) = 0 [pid 293] close(3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... close resumed>) = 0 [pid 4129] write(1, "executing program\n", 18 executing program executing program [pid 293] rmdir("./783" [pid 290] getdents64(3, [pid 4128] write(1, "executing program\n", 18 [pid 4129] <... write resumed>) = 18 [pid 4129] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4129] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... rmdir resumed>) = 0 [pid 4129] <... ioctl resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4128] <... write resumed>) = 18 [pid 293] mkdir("./784", 0777 [pid 290] umount2("./756/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4129] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4128] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4129] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4129] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4129] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4128] <... openat resumed>) = 3 [pid 293] <... mkdir resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./756/binderfs", [pid 4129] <... write resumed>) = ? [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4128] +++ killed by SIGKILL +++ [pid 290] unlink("./756/binderfs" [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4130 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [ 68.793087][ T375] tty tty1: SAK: killed process 4119 (syz-executor903): by fd#3 [ 68.806446][ T60] tty tty1: SAK: killed process 4123 (syz-executor903): by fd#3 [ 68.806489][ T60] tty tty1: SAK: killed process 4124 (syz-executor903): by fd#3 [ 68.826990][ T375] tty tty1: SAK: killed process 4127 (syz-executor903): by fd#3 [pid 290] rmdir("./756") = 0 [pid 290] mkdir("./757", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4131 ./strace-static-x86_64: Process 4130 attached ./strace-static-x86_64: Process 4131 attached [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4128, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4127] +++ killed by SIGKILL +++ [pid 4130] set_robust_list(0x5555700d1660, 24) = 0 [pid 4130] chdir("./784") = 0 [pid 4130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4130] setpgid(0, 0) = 0 [pid 4130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4130] write(3, "1000", 4) = 4 [pid 4130] close(3) = 0 [pid 4130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4130] write(1, "executing program\n", 18executing program ) = 18 [pid 4130] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4130] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4130] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4130] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4130] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4127, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] umount2("./769", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4131] set_robust_list(0x5555700d1660, 24 [pid 292] umount2("./774", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4129] +++ killed by SIGKILL +++ [pid 4130] <... write resumed>) = 8784 [pid 4130] exit_group(0) = ? [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./769", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./769/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./769/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./769/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./769") = 0 [pid 291] mkdir("./770", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4132 [pid 4131] <... set_robust_list resumed>) = 0 [pid 4131] chdir("./757") = 0 [pid 4131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4131] setpgid(0, 0) = 0 [pid 4131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4131] write(3, "1000", 4) = 4 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4129, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4132 attached [pid 4131] close(3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4131] <... close resumed>) = 0 [pid 4132] set_robust_list(0x5555700d1660, 24 [pid 4131] symlink("/dev/binderfs", "./binderfs" [pid 4130] +++ exited with 0 +++ [pid 292] openat(AT_FDCWD, "./774", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4132] <... set_robust_list resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 4131] <... symlink resumed>) = 0 [pid 292] newfstatat(3, "", [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4130, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 4132] chdir("./770" [pid 4131] write(1, "executing program\n", 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4132] <... chdir resumed>) = 0 [pid 4131] <... write resumed>) = 18 [pid 292] getdents64(3, [pid 4132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4131] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./774/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./774/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4132] <... prctl resumed>) = 0 [pid 4131] <... openat resumed>) = 3 [pid 293] umount2("./784", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] unlink("./774/binderfs" [pid 4132] setpgid(0, 0 [pid 4131] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... unlink resumed>) = 0 [pid 4132] <... setpgid resumed>) = 0 [pid 4131] <... ioctl resumed>) = 0 [pid 293] openat(AT_FDCWD, "./784", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] getdents64(3, [pid 289] <... restart_syscall resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4131] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] newfstatat(3, "", [pid 292] close(3 [pid 4132] <... openat resumed>) = 3 [pid 4131] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... close resumed>) = 0 [pid 289] umount2("./746", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4132] write(3, "1000", 4 [pid 4131] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] getdents64(3, [pid 292] rmdir("./774" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4132] <... write resumed>) = 4 [pid 4131] <... openat resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... rmdir resumed>) = 0 [pid 4132] close(3 [pid 4131] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./784/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] mkdir("./775", 0777 [pid 289] openat(AT_FDCWD, "./746", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4132] <... close resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4133 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./746/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./746/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./746/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./746") = 0 [pid 289] mkdir("./747", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4134 ./strace-static-x86_64: Process 4133 attached [pid 4133] set_robust_list(0x5555700d1660, 24) = 0 [pid 4133] chdir("./775") = 0 [pid 4133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4133] setpgid(0, 0) = 0 [pid 4133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4133] write(3, "1000", 4) = 4 [pid 4133] close(3) = 0 [pid 4133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4133] write(1, "executing program\n", 18executing program ) = 18 ./strace-static-x86_64: Process 4134 attached [pid 4133] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4132] symlink("/dev/binderfs", "./binderfs" [pid 4131] <... write resumed>) = ? [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4134] set_robust_list(0x5555700d1660, 24 [pid 4133] <... openat resumed>) = 3 [pid 4132] <... symlink resumed>) = 0 executing program [pid 4134] <... set_robust_list resumed>) = 0 [pid 4132] write(1, "executing program\n", 18 [pid 293] newfstatat(AT_FDCWD, "./784/binderfs", [pid 4132] <... write resumed>) = 18 [pid 4131] +++ killed by SIGKILL +++ [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4132] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] unlink("./784/binderfs" [pid 4132] <... openat resumed>) = 3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4131, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... unlink resumed>) = 0 [pid 4133] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4132] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] getdents64(3, [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4134] chdir("./747" [pid 4132] <... ioctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4132] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] close(3 [pid 4132] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4133] <... ioctl resumed>) = 0 [pid 4132] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... close resumed>) = 0 [pid 4133] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4132] <... openat resumed>) = 4 [pid 4134] <... chdir resumed>) = 0 [pid 4133] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4132] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] rmdir("./784" [pid 4134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4132] <... write resumed>) = 8784 [pid 4134] setpgid(0, 0) = 0 [pid 4132] exit_group(0 [pid 293] <... rmdir resumed>) = 0 [pid 4134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4132] <... exit_group resumed>) = ? [pid 293] mkdir("./785", 0777 [pid 4134] <... openat resumed>) = 3 [pid 4134] write(3, "1000", 4) = 4 [pid 4134] close(3) = 0 executing program [pid 4134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4134] write(1, "executing program\n", 18) = 18 [pid 4134] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4134] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4134] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4134] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4134] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4134] exit_group(0) = ? [pid 4133] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4133, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... mkdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4135 [pid 4134] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4134, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./757", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] <... restart_syscall resumed>) = 0 [pid 290] openat(AT_FDCWD, "./757", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", [pid 292] umount2("./775", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 292] openat(AT_FDCWD, "./775", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... openat resumed>) = 3 [pid 290] umount2("./757/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(3, "", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(AT_FDCWD, "./757/binderfs", [pid 292] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] unlink("./757/binderfs" [pid 292] umount2("./775/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 292] newfstatat(AT_FDCWD, "./775/binderfs", [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] close(3 [pid 292] unlink("./775/binderfs" [pid 290] <... close resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 290] rmdir("./757" [pid 292] getdents64(3, [pid 290] <... rmdir resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [ 68.838963][ T375] tty tty1: SAK: killed process 4127 (syz-executor903): by fd#3 [ 68.838989][ T375] tty tty1: SAK: killed process 4128 (syz-executor903): by fd#3 [ 68.839016][ T375] tty tty1: SAK: killed process 4129 (syz-executor903): by fd#3 [ 68.867057][ T60] tty tty1: SAK: killed process 4131 (syz-executor903): by fd#3 [ 68.878982][ T60] tty tty1: SAK: killed process 4132 (syz-executor903): by fd#3 [pid 290] mkdir("./758", 0777 [pid 292] close(3 [pid 290] <... mkdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] umount2("./747", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4136 attached ./strace-static-x86_64: Process 4135 attached [pid 4132] +++ killed by SIGKILL +++ [pid 292] rmdir("./775" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4136] set_robust_list(0x5555700d1660, 24 [pid 4135] set_robust_list(0x5555700d1660, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4132, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4136] <... set_robust_list resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 4135] <... set_robust_list resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4136 [pid 289] openat(AT_FDCWD, "./747", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] mkdir("./776", 0777 [pid 4135] chdir("./785" [pid 289] <... openat resumed>) = 3 [pid 4136] chdir("./758" [pid 4135] <... chdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 289] newfstatat(3, "", [pid 4136] <... chdir resumed>) = 0 [pid 4135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] umount2("./770", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4135] <... prctl resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4136] <... prctl resumed>) = 0 [pid 4135] setpgid(0, 0 [pid 291] openat(AT_FDCWD, "./770", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4136] setpgid(0, 0 [pid 4135] <... setpgid resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 289] getdents64(3, ./strace-static-x86_64: Process 4137 attached [pid 4136] <... setpgid resumed>) = 0 [pid 4135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4137 [pid 291] newfstatat(3, "", [pid 4137] set_robust_list(0x5555700d1660, 24 [pid 4136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4135] <... openat resumed>) = 3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4137] <... set_robust_list resumed>) = 0 [pid 4136] <... openat resumed>) = 3 [pid 4135] write(3, "1000", 4 [pid 291] getdents64(3, [pid 289] umount2("./747/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4136] write(3, "1000", 4 [pid 4135] <... write resumed>) = 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4136] <... write resumed>) = 4 [pid 4135] close(3 [pid 291] umount2("./770/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4136] close(3 [pid 4135] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./747/binderfs", [pid 4136] <... close resumed>) = 0 [pid 4135] symlink("/dev/binderfs", "./binderfs" [pid 291] newfstatat(AT_FDCWD, "./770/binderfs", [pid 4137] chdir("./776" [pid 4136] symlink("/dev/binderfs", "./binderfs" [pid 4135] <... symlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4137] <... chdir resumed>) = 0 [pid 4136] <... symlink resumed>) = 0 [pid 4135] write(1, "executing program\n", 18executing program [pid 291] unlink("./770/binderfs" [pid 289] unlink("./747/binderfs"executing program [pid 4137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4136] write(1, "executing program\n", 18 [pid 4135] <... write resumed>) = 18 [pid 291] <... unlink resumed>) = 0 [pid 4136] <... write resumed>) = 18 [pid 4135] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 4137] <... prctl resumed>) = 0 [pid 4136] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4135] <... openat resumed>) = 3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] getdents64(3, [pid 4137] setpgid(0, 0 [pid 4136] <... openat resumed>) = 3 [pid 4135] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4137] <... setpgid resumed>) = 0 [pid 4136] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4135] <... ioctl resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 4136] <... ioctl resumed>) = 0 [pid 4135] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] rmdir("./770" [pid 289] close(3 [pid 4136] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4135] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4136] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4135] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4136] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4135] <... openat resumed>) = 4 [pid 4136] <... openat resumed>) = 4 [pid 4135] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... rmdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 4137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4135] <... write resumed>) = ? [pid 291] mkdir("./771", 0777 [pid 289] rmdir("./747" [pid 4135] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4135, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./748", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4138 attached [pid 4137] <... openat resumed>) = 3 [pid 293] umount2("./785", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... mkdir resumed>) = 0 [pid 4137] write(3, "1000", 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4138 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4137] <... write resumed>) = 4 [pid 293] openat(AT_FDCWD, "./785", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4137] close(3 [pid 293] <... openat resumed>) = 3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4139 [pid 4137] <... close resumed>) = 0 [pid 293] newfstatat(3, "", [pid 4137] symlink("/dev/binderfs", "./binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4137] <... symlink resumed>) = 0 [pid 293] getdents64(3, executing program [pid 4137] write(1, "executing program\n", 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4137] <... write resumed>) = 18 [pid 293] umount2("./785/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4137] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./785/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./785/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./785") = 0 [pid 293] mkdir("./786", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4140 attached ./strace-static-x86_64: Process 4139 attached [pid 4138] set_robust_list(0x5555700d1660, 24 [pid 4137] <... openat resumed>) = 3 [pid 4136] +++ killed by SIGKILL +++ [pid 4140] set_robust_list(0x5555700d1660, 24 [pid 4139] set_robust_list(0x5555700d1660, 24 [pid 4138] <... set_robust_list resumed>) = 0 [pid 4137] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4140 [pid 4140] <... set_robust_list resumed>) = 0 [pid 4139] <... set_robust_list resumed>) = 0 [pid 4138] chdir("./771" [pid 4137] <... ioctl resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4136, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4140] chdir("./786" [pid 4139] chdir("./748" [pid 4138] <... chdir resumed>) = 0 [pid 4137] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4140] <... chdir resumed>) = 0 [pid 4139] <... chdir resumed>) = 0 [pid 4138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4137] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4138] <... prctl resumed>) = 0 [pid 4137] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4140] <... prctl resumed>) = 0 [pid 4139] <... prctl resumed>) = 0 [pid 4137] <... openat resumed>) = 4 [pid 4139] setpgid(0, 0 [pid 4137] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4140] setpgid(0, 0 [pid 4139] <... setpgid resumed>) = 0 [pid 4138] setpgid(0, 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 4140] <... setpgid resumed>) = 0 [pid 4139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4138] <... setpgid resumed>) = 0 [pid 4140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4139] <... openat resumed>) = 3 [pid 4138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4140] <... openat resumed>) = 3 [pid 4139] write(3, "1000", 4 [pid 4138] <... openat resumed>) = 3 [pid 290] umount2("./758", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4140] write(3, "1000", 4 [pid 4139] <... write resumed>) = 4 [pid 4138] write(3, "1000", 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4140] <... write resumed>) = 4 [pid 4139] close(3 [pid 4138] <... write resumed>) = 4 [pid 290] openat(AT_FDCWD, "./758", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4140] close(3 [pid 4139] <... close resumed>) = 0 [pid 4138] close(3 [pid 290] <... openat resumed>) = 3 [pid 4140] <... close resumed>) = 0 [pid 4139] symlink("/dev/binderfs", "./binderfs" [pid 4138] <... close resumed>) = 0 [pid 290] newfstatat(3, "", [pid 4140] symlink("/dev/binderfs", "./binderfs" [pid 4139] <... symlink resumed>) = 0 executing program [pid 4138] symlink("/dev/binderfs", "./binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4140] <... symlink resumed>) = 0 [pid 4139] write(1, "executing program\n", 18executing program [pid 4138] <... symlink resumed>) = 0 [pid 290] getdents64(3, [pid 4140] write(1, "executing program\n", 18 [pid 4139] <... write resumed>) = 18 executing program [pid 4138] write(1, "executing program\n", 18 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4140] <... write resumed>) = 18 [pid 4139] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4138] <... write resumed>) = 18 [pid 290] umount2("./758/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4140] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4139] <... openat resumed>) = 3 [pid 4138] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4140] <... openat resumed>) = 3 [pid 4139] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4138] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./758/binderfs", [pid 4140] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4139] <... ioctl resumed>) = 0 [pid 4138] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4140] <... ioctl resumed>) = 0 [pid 4139] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4138] <... ioctl resumed>) = 0 [pid 290] unlink("./758/binderfs" [pid 4140] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4139] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4138] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4137] <... write resumed>) = ? [pid 4140] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4139] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4138] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... unlink resumed>) = 0 [pid 4140] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4139] <... openat resumed>) = 4 [pid 4138] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4137] +++ killed by SIGKILL +++ [pid 290] getdents64(3, [pid 4140] <... openat resumed>) = 4 [pid 4139] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4138] <... openat resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4140] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4139] <... write resumed>) = 8784 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4137, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] close(3) = 0 [pid 290] rmdir("./758") = 0 [pid 290] mkdir("./759", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4141 [pid 4140] <... write resumed>) = ? [pid 4139] +++ killed by SIGKILL +++ [pid 4138] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4138, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4139, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4141 attached [pid 4141] set_robust_list(0x5555700d1660, 24) = 0 [pid 4141] chdir("./759" [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./776", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./776", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... restart_syscall resumed>) = 0 [pid 292] <... openat resumed>) = 3 [ 68.879009][ T60] tty tty1: SAK: killed process 4133 (syz-executor903): by fd#3 [ 68.903579][ T20] tty tty1: SAK: killed process 4135 (syz-executor903): by fd#3 [ 68.903605][ T20] tty tty1: SAK: killed process 4136 (syz-executor903): by fd#3 [ 68.923226][ T375] tty tty1: SAK: killed process 4137 (syz-executor903): by fd#3 [ 68.933600][ T20] tty tty1: SAK: killed process 4138 (syz-executor903): by fd#3 [pid 292] newfstatat(3, "", [pid 289] <... restart_syscall resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./771", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] openat(AT_FDCWD, "./771", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] umount2("./748", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./776/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 289] openat(AT_FDCWD, "./748", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(AT_FDCWD, "./776/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 289] newfstatat(3, "", [pid 292] unlink("./776/binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] umount2("./771/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(AT_FDCWD, "./771/binderfs", [pid 289] umount2("./748/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... close resumed>) = 0 [pid 291] unlink("./771/binderfs" [pid 289] newfstatat(AT_FDCWD, "./748/binderfs", [pid 292] rmdir("./776" [pid 291] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] getdents64(3, [pid 289] unlink("./748/binderfs" [pid 292] mkdir("./777", 0777 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... unlink resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] close(3 [pid 289] getdents64(3, [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] rmdir("./771" [pid 289] close(3 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4142 [pid 291] <... rmdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 291] mkdir("./772", 0777 [pid 289] rmdir("./748" [pid 291] <... mkdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] mkdir("./749", 0777 [pid 4141] <... chdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 4141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4143 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4141] <... prctl resumed>) = 0 [pid 4141] setpgid(0, 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4144 [pid 4141] <... setpgid resumed>) = 0 [pid 4141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4141] write(3, "1000", 4) = 4 [pid 4141] close(3) = 0 [pid 4141] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4141] write(1, "executing program\n", 18./strace-static-x86_64: Process 4144 attached ./strace-static-x86_64: Process 4143 attached ./strace-static-x86_64: Process 4142 attached ) = 18 [pid 4140] +++ killed by SIGKILL +++ [pid 4144] set_robust_list(0x5555700d1660, 24 [pid 4143] set_robust_list(0x5555700d1660, 24 [pid 4142] set_robust_list(0x5555700d1660, 24 [pid 4144] <... set_robust_list resumed>) = 0 [pid 4143] <... set_robust_list resumed>) = 0 [pid 4142] <... set_robust_list resumed>) = 0 [pid 4144] chdir("./749" [pid 4143] chdir("./772" [pid 4142] chdir("./777" [pid 4141] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4140, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4144] <... chdir resumed>) = 0 [pid 4143] <... chdir resumed>) = 0 [pid 4142] <... chdir resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4144] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4141] <... openat resumed>) = 3 [pid 4144] <... prctl resumed>) = 0 [pid 4143] <... prctl resumed>) = 0 [pid 4142] <... prctl resumed>) = 0 [pid 4144] setpgid(0, 0 [pid 4143] setpgid(0, 0 [pid 4142] setpgid(0, 0 [pid 4141] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4144] <... setpgid resumed>) = 0 [pid 4143] <... setpgid resumed>) = 0 [pid 4142] <... setpgid resumed>) = 0 [pid 4144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4141] <... ioctl resumed>) = 0 [pid 4144] <... openat resumed>) = 3 [pid 4143] <... openat resumed>) = 3 [pid 4142] <... openat resumed>) = 3 [pid 4144] write(3, "1000", 4 [pid 4143] write(3, "1000", 4 [pid 4142] write(3, "1000", 4 [pid 4141] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4143] <... write resumed>) = 4 [pid 4142] <... write resumed>) = 4 [pid 4143] close(3 [pid 4142] close(3 [pid 4143] <... close resumed>) = 0 [pid 4142] <... close resumed>) = 0 [pid 4143] symlink("/dev/binderfs", "./binderfs" [pid 4142] symlink("/dev/binderfs", "./binderfs" [pid 4144] <... write resumed>) = 4 [pid 4143] <... symlink resumed>) = 0 [pid 4142] <... symlink resumed>) = 0 executing program [pid 4141] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4144] close(3 [pid 4143] write(1, "executing program\n", 18 executing program [pid 4142] write(1, "executing program\n", 18 [pid 4141] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4144] <... close resumed>) = 0 [pid 4143] <... write resumed>) = 18 [pid 4142] <... write resumed>) = 18 [pid 4144] symlink("/dev/binderfs", "./binderfs" [pid 4143] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4142] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4141] <... openat resumed>) = 4 [pid 4144] <... symlink resumed>) = 0 [pid 4143] <... openat resumed>) = 3 [pid 4142] <... openat resumed>) = 3 [pid 4141] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4144] write(1, "executing program\n", 18 [pid 4143] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4142] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4143] <... ioctl resumed>) = 0 [pid 4142] <... ioctl resumed>) = 0 [pid 4143] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4142] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4143] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4142] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4142] +++ killed by SIGKILL +++ [pid 4143] +++ killed by SIGKILL +++ [pid 4141] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 executing program [pid 4144] <... write resumed>) = 18 [pid 4144] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4142, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4144] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4143, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4144] <... ioctl resumed>) = 0 [pid 4144] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4144] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4141] +++ killed by SIGKILL +++ [pid 4144] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4144] exit_group(0) = ? [pid 293] umount2("./786", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./786", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./786/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./786/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./786/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./786") = 0 [pid 293] mkdir("./787", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4145 [pid 292] umount2("./777", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./777", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", ./strace-static-x86_64: Process 4145 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./777/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./777/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./777/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./777") = 0 [pid 292] mkdir("./778", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4146 [pid 4145] set_robust_list(0x5555700d1660, 24) = 0 [pid 4145] chdir("./787") = 0 [pid 4145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4145] setpgid(0, 0) = 0 [pid 4145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4145] write(3, "1000", 4) = 4 [pid 4145] close(3) = 0 [pid 4145] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4145] write(1, "executing program\n", 18) = 18 [pid 4145] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] umount2("./772", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./772", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4141, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- ./strace-static-x86_64: Process 4146 attached [pid 4145] <... openat resumed>) = 3 [pid 4144] +++ exited with 0 +++ [pid 291] umount2("./772/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4146] set_robust_list(0x5555700d1660, 24 [pid 4145] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] umount2("./759", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4146] <... set_robust_list resumed>) = 0 [pid 4145] <... ioctl resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4145] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4144, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] newfstatat(AT_FDCWD, "./772/binderfs", [pid 4145] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] openat(AT_FDCWD, "./759", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4146] chdir("./778" [pid 4145] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4146] <... chdir resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 4146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4145] <... openat resumed>) = 4 [pid 291] unlink("./772/binderfs" [pid 290] newfstatat(3, "", [pid 4146] <... prctl resumed>) = 0 [pid 4145] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4145] <... write resumed>) = 8784 [pid 4146] setpgid(0, 0) = 0 [pid 4146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4146] write(3, "1000", 4) = 4 [pid 4146] close(3) = 0 [pid 4146] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4146] write(1, "executing program\n", 18) = 18 [pid 4146] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4146] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4146] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4146] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4146] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4146] exit_group(0) = ? [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [ 68.933627][ T20] tty tty1: SAK: killed process 4139 (syz-executor903): by fd#3 [ 68.933645][ T20] tty tty1: SAK: killed process 4140 (syz-executor903): by fd#3 [ 68.963529][ T375] tty tty1: SAK: killed process 4141 (syz-executor903): by fd#3 [ 68.963557][ T375] tty tty1: SAK: killed process 4142 (syz-executor903): by fd#3 [ 68.963575][ T375] tty tty1: SAK: killed process 4143 (syz-executor903): by fd#3 [pid 291] close(3) = 0 [pid 291] rmdir("./772") = 0 [pid 291] mkdir("./773", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4147 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./759/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./759/binderfs", [pid 4146] +++ exited with 0 +++ [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4146, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] unlink("./759/binderfs" [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./759") = 0 [pid 290] mkdir("./760", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4148 ./strace-static-x86_64: Process 4147 attached [pid 4147] set_robust_list(0x5555700d1660, 24) = 0 [pid 4147] chdir("./773") = 0 [pid 4147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4147] setpgid(0, 0) = 0 [pid 4147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4147] write(3, "1000", 4) = 4 [pid 4147] close(3 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./778", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./778", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./778/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./778/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./778/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 292] rmdir("./778"./strace-static-x86_64: Process 4148 attached [pid 4145] +++ killed by SIGKILL +++ [pid 292] <... rmdir resumed>) = 0 [pid 4148] set_robust_list(0x5555700d1660, 24 [pid 292] mkdir("./779", 0777 [pid 4148] <... set_robust_list resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4145, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4147] <... close resumed>) = 0 [pid 4147] symlink("/dev/binderfs", "./binderfs" [pid 4148] chdir("./760" [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... mkdir resumed>) = 0 [pid 289] umount2("./749", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4148] <... chdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4148] <... prctl resumed>) = 0 [pid 4147] <... symlink resumed>) = 0 [pid 289] openat(AT_FDCWD, "./749", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4148] setpgid(0, 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4149 [pid 4148] <... setpgid resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] newfstatat(3, "", [pid 4147] write(1, "executing program\n", 18 executing program [pid 4148] <... openat resumed>) = 3 [pid 4147] <... write resumed>) = 18 [pid 4148] write(3, "1000", 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4148] <... write resumed>) = 4 [pid 4147] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4148] close(3 [pid 289] getdents64(3, [pid 4148] <... close resumed>) = 0 [pid 4148] symlink("/dev/binderfs", "./binderfs" [pid 4147] <... openat resumed>) = 3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 executing program [pid 4147] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4148] <... symlink resumed>) = 0 [pid 289] umount2("./749/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4148] write(1, "executing program\n", 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4148] <... write resumed>) = 18 [pid 289] newfstatat(AT_FDCWD, "./749/binderfs", [pid 4148] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4147] <... ioctl resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4148] <... openat resumed>) = 3 [pid 289] unlink("./749/binderfs" [pid 4147] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4148] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... unlink resumed>) = 0 [pid 4148] <... ioctl resumed>) = 0 [pid 289] getdents64(3, [pid 4148] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4148] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4147] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] close(3 [pid 4148] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... close resumed>) = 0 [pid 4148] <... openat resumed>) = 4 [pid 4147] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] rmdir("./749" [pid 4148] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4147] <... openat resumed>) = 4 [pid 4147] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4149 attached [pid 4148] <... write resumed>) = ? [pid 4147] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 4149] set_robust_list(0x5555700d1660, 24 [pid 4148] +++ killed by SIGKILL +++ [pid 289] mkdir("./750", 0777 [pid 4149] <... set_robust_list resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 4149] chdir("./779" [pid 293] umount2("./787", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4149] <... chdir resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "./787", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4150 [pid 4149] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 4149] setpgid(0, 0 [pid 293] newfstatat(3, "", [pid 4149] <... setpgid resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, [pid 4149] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4149] write(3, "1000", 4 [pid 293] umount2("./787/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4149] <... write resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4149] close(3 [pid 293] newfstatat(AT_FDCWD, "./787/binderfs", [pid 4149] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 4149] symlink("/dev/binderfs", "./binderfs" [pid 293] unlink("./787/binderfs" [pid 4149] <... symlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 4149] write(1, "executing program\n", 18 [pid 293] getdents64(3, [pid 4149] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4149] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] close(3 [pid 4149] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 4149] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] rmdir("./787"./strace-static-x86_64: Process 4150 attached [pid 4149] <... ioctl resumed>) = 0 [pid 4147] +++ killed by SIGKILL +++ [pid 293] <... rmdir resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4148, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4150] set_robust_list(0x5555700d1660, 24 [pid 4149] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] mkdir("./788", 0777 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4147, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4150] <... set_robust_list resumed>) = 0 [pid 4150] chdir("./750" [pid 290] umount2("./760", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4150] <... chdir resumed>) = 0 [pid 4149] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... mkdir resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4149] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] openat(AT_FDCWD, "./760", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4150] <... prctl resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 4150] setpgid(0, 0 [pid 290] newfstatat(3, "", [pid 4150] <... setpgid resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4149] <... openat resumed>) = 4 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4151 [pid 290] getdents64(3, ./strace-static-x86_64: Process 4151 attached [pid 4150] <... openat resumed>) = 3 [pid 4149] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4150] write(3, "1000", 4 [pid 290] umount2("./760/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4150] <... write resumed>) = 4 [pid 4149] <... write resumed>) = 8784 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4150] close(3 [pid 290] newfstatat(AT_FDCWD, "./760/binderfs", [pid 4150] <... close resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4150] symlink("/dev/binderfs", "./binderfs" [pid 290] unlink("./760/binderfs" [pid 4150] <... symlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 4150] write(1, "executing program\n", 18 [pid 290] getdents64(3, [pid 4150] <... write resumed>) = 18 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4150] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] close(3 [pid 4150] <... openat resumed>) = 3 [pid 290] <... close resumed>) = 0 [pid 4150] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] rmdir("./760" [pid 4150] <... ioctl resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4150] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] mkdir("./761", 0777 [pid 4150] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... mkdir resumed>) = 0 [pid 4150] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4150] <... openat resumed>) = 4 [pid 4150] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4152 [pid 4150] <... write resumed>) = 8784 [pid 4150] exit_group(0) = ? ./strace-static-x86_64: Process 4152 attached [pid 4152] set_robust_list(0x5555700d1660, 24) = 0 [pid 4152] chdir("./761") = 0 [pid 4152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4152] setpgid(0, 0) = 0 [pid 4152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4152] write(3, "1000", 4) = 4 [pid 4152] close(3) = 0 [pid 4152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4152] write(1, "executing program\n", 18) = 18 [pid 4152] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4152] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4152] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4152] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4152] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4152] exit_group(0) = ? executing program executing program [pid 4151] set_robust_list(0x5555700d1660, 24) = 0 [pid 4150] +++ exited with 0 +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 4151] chdir("./788") = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4150, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4152] +++ exited with 0 +++ [pid 291] umount2("./773", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4152, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4151] setpgid(0, 0) = 0 [pid 4151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4151] write(3, "1000", 4) = 4 [pid 4151] close(3) = 0 [pid 4151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4151] write(1, "executing program\n", 18executing program ) = 18 [ 68.989754][ T42] tty tty1: SAK: killed process 4145 (syz-executor903): by fd#3 [ 68.997742][ T42] tty tty1: SAK: killed process 4145 (syz-executor903): by fd#3 [ 69.011105][ T20] tty tty1: SAK: killed process 4147 (syz-executor903): by fd#3 [ 69.011133][ T20] tty tty1: SAK: killed process 4148 (syz-executor903): by fd#3 [ 69.029938][ T42] tty tty1: SAK: killed process 4149 (syz-executor903): by fd#3 [pid 4151] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./761", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./761", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./761/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./761/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./761/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./761") = 0 [pid 290] mkdir("./762", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4153 [pid 4151] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4151] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./750", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4149] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 4153 attached [pid 291] openat(AT_FDCWD, "./773", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4153] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4149, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4153] <... set_robust_list resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./750", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4151] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4153] chdir("./762" [pid 291] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 4153] <... chdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] newfstatat(3, "", [pid 4153] <... prctl resumed>) = 0 [pid 291] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4153] setpgid(0, 0 [pid 4151] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4153] <... setpgid resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 4151] <... openat resumed>) = 4 [pid 4151] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] umount2("./773/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4151] <... write resumed>) = ? [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./750/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4153] <... openat resumed>) = 3 [pid 291] newfstatat(AT_FDCWD, "./773/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4153] write(3, "1000", 4 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./750/binderfs", [pid 4153] <... write resumed>) = 4 [pid 291] unlink("./773/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4153] close(3 [pid 291] <... unlink resumed>) = 0 [pid 289] unlink("./750/binderfs" [pid 4153] <... close resumed>) = 0 [pid 292] umount2("./779", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 4153] symlink("/dev/binderfs", "./binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] getdents64(3, [pid 4153] <... symlink resumed>) = 0 [pid 292] openat(AT_FDCWD, "./779", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 4151] +++ killed by SIGKILL +++ [pid 4153] write(1, "executing program\n", 18 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4151, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... openat resumed>) = 3 [pid 291] <... close resumed>) = 0 [pid 289] close(3 [pid 4153] <... write resumed>) = 18 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] newfstatat(3, "", [pid 291] rmdir("./773" [pid 289] <... close resumed>) = 0 [pid 4153] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 291] <... rmdir resumed>) = 0 [pid 289] rmdir("./750" [pid 4153] <... openat resumed>) = 3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] mkdir("./774", 0777 [pid 4153] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./788", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./779/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... rmdir resumed>) = 0 [pid 4153] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... mkdir resumed>) = 0 [pid 289] mkdir("./751", 0777 [pid 4153] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] openat(AT_FDCWD, "./788", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(AT_FDCWD, "./779/binderfs", [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4153] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 4153] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] newfstatat(3, "", [pid 292] unlink("./779/binderfs" [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4154 attached ./strace-static-x86_64: Process 4155 attached [pid 4153] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... unlink resumed>) = 0 [pid 4154] set_robust_list(0x5555700d1660, 24 [pid 4153] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4154 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4155 [pid 4154] <... set_robust_list resumed>) = 0 [pid 4154] chdir("./774" [pid 4153] <... write resumed>) = 8784 [pid 4154] <... chdir resumed>) = 0 [pid 4154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4154] setpgid(0, 0) = 0 [pid 4154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4154] write(3, "1000", 4) = 4 [pid 4154] close(3) = 0 [pid 4154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4154] write(1, "executing program\n", 18) = 18 [pid 4154] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4154] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4154] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4154] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4154] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4154] exit_group(0) = ? [pid 4155] set_robust_list(0x5555700d1660, 24) = 0 [pid 4155] chdir("./751") = 0 [pid 4155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4155] setpgid(0, 0) = 0 [pid 4155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4155] write(3, "1000", 4) = 4 [pid 4155] close(3) = 0 [pid 4155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4155] write(1, "executing program\n", 18) = 18 [pid 4155] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4155] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4155] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4155] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4155] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4155] exit_group(0) = ? executing program executing program [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./788/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./788/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4154] +++ exited with 0 +++ [pid 293] unlink("./788/binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... unlink resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4154, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] getdents64(3, [pid 292] close(3 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 293] rmdir("./788") = 0 [pid 293] mkdir("./789", 0777 [pid 291] umount2("./774", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... mkdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] openat(AT_FDCWD, "./774", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4156 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./774/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./774/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./774/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./774" [pid 4155] +++ exited with 0 +++ [pid 292] <... close resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 292] rmdir("./779" [pid 291] mkdir("./775", 0777./strace-static-x86_64: Process 4156 attached [pid 4153] +++ killed by SIGKILL +++ [pid 292] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4155, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4156] set_robust_list(0x5555700d1660, 24 [pid 292] mkdir("./780", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4156] <... set_robust_list resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 4156] chdir("./789" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4157 attached [pid 4156] <... chdir resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4153, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4158 attached [pid 4156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4157 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... restart_syscall resumed>) = 0 [pid 4158] set_robust_list(0x5555700d1660, 24 [pid 4156] <... prctl resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4158 [pid 290] <... restart_syscall resumed>) = 0 [pid 4158] <... set_robust_list resumed>) = 0 [pid 4156] setpgid(0, 0 [pid 4158] chdir("./780" [pid 4156] <... setpgid resumed>) = 0 [pid 289] umount2("./751", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4158] <... chdir resumed>) = 0 [pid 4156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4157] set_robust_list(0x5555700d1660, 24 [pid 4156] <... openat resumed>) = 3 [pid 290] umount2("./762", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] openat(AT_FDCWD, "./751", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4158] <... prctl resumed>) = 0 [pid 4156] write(3, "1000", 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... openat resumed>) = 3 [pid 4158] setpgid(0, 0 [pid 4156] <... write resumed>) = 4 [pid 290] openat(AT_FDCWD, "./762", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(3, "", [pid 4158] <... setpgid resumed>) = 0 [pid 4156] close(3 [pid 290] <... openat resumed>) = 3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4157] <... set_robust_list resumed>) = 0 [pid 4156] <... close resumed>) = 0 [pid 290] newfstatat(3, "", [pid 289] getdents64(3, [pid 4158] <... openat resumed>) = 3 [pid 4156] symlink("/dev/binderfs", "./binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4158] write(3, "1000", 4 [pid 4157] chdir("./775" [pid 4156] <... symlink resumed>) = 0 [pid 290] getdents64(3, executing program [pid 289] umount2("./751/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4158] <... write resumed>) = 4 [pid 4156] write(1, "executing program\n", 18 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4158] close(3 [pid 4156] <... write resumed>) = 18 [pid 290] umount2("./762/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./751/binderfs", [pid 4158] <... close resumed>) = 0 [pid 4156] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4158] symlink("/dev/binderfs", "./binderfs" [pid 4156] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./762/binderfs", [pid 289] unlink("./751/binderfs" [pid 4158] <... symlink resumed>) = 0 [pid 4157] <... chdir resumed>) = 0 [pid 4156] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 4158] write(1, "executing program\n", 18 [pid 4156] <... ioctl resumed>) = 0 [pid 290] unlink("./762/binderfs" [pid 289] <... unlink resumed>) = 0 [pid 4156] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4158] <... write resumed>) = 18 [pid 4157] setpgid(0, 0 [pid 4156] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... unlink resumed>) = 0 [pid 289] getdents64(3, [pid 4158] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4157] <... setpgid resumed>) = 0 executing program executing program [pid 4156] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] getdents64(3, [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4156] <... openat resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 4157] <... openat resumed>) = 3 [pid 4156] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] close(3 [pid 289] <... close resumed>) = 0 [pid 4157] write(3, "1000", 4) = 4 [pid 4157] close(3) = 0 [pid 4157] symlink("/dev/binderfs", "./binderfs" [pid 4156] <... write resumed>) = 8784 [pid 4157] <... symlink resumed>) = 0 [pid 4157] write(1, "executing program\n", 18) = 18 [pid 4157] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4157] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4157] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4157] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4157] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 290] <... close resumed>) = 0 [pid 289] rmdir("./751" [pid 4157] exit_group(0 [pid 290] rmdir("./762" [pid 289] <... rmdir resumed>) = 0 [pid 4157] <... exit_group resumed>) = ? [pid 290] <... rmdir resumed>) = 0 [pid 289] mkdir("./752", 0777 [pid 290] mkdir("./763", 0777 [pid 289] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4159 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4160 ./strace-static-x86_64: Process 4159 attached [pid 4159] set_robust_list(0x5555700d1660, 24) = 0 [pid 4159] chdir("./752") = 0 [pid 4159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4159] setpgid(0, 0) = 0 [pid 4159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4159] write(3, "1000", 4) = 4 [pid 4159] close(3) = 0 [pid 4159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4159] write(1, "executing program\n", 18) = 18 [pid 4159] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4159] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4159] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4159] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4159] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4157] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4157, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4159] exit_group(0) = ? [pid 4156] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4156, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4158] <... openat resumed>) = 3 [pid 4159] +++ exited with 0 +++ [pid 4158] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4159, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4160 attached [pid 4160] set_robust_list(0x5555700d1660, 24 [pid 293] <... restart_syscall resumed>) = 0 [pid 4158] <... ioctl resumed>) = 0 [pid 293] umount2("./789", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./789", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./789/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./789/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 69.038256][ T42] tty tty1: SAK: killed process 4149 (syz-executor903): by fd#3 [ 69.048615][ T20] tty tty1: SAK: killed process 4151 (syz-executor903): by fd#3 [ 69.061476][ T42] tty tty1: SAK: killed process 4153 (syz-executor903): by fd#3 [ 69.069811][ T42] tty tty1: SAK: killed process 4153 (syz-executor903): by fd#3 [ 69.086771][ T42] tty tty1: SAK: killed process 4156 (syz-executor903): by fd#3 [pid 293] unlink("./789/binderfs"executing program ) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./789") = 0 [pid 293] mkdir("./790", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4161 [pid 4160] <... set_robust_list resumed>) = 0 [pid 4160] chdir("./763") = 0 [pid 4160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4160] setpgid(0, 0) = 0 [pid 4160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4160] write(3, "1000", 4) = 4 [pid 4160] close(3) = 0 [pid 4160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4160] write(1, "executing program\n", 18) = 18 [pid 4160] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4161 attached [pid 4161] set_robust_list(0x5555700d1660, 24 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 291] umount2("./775", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./752", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./775", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./752", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, [pid 289] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./775/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./752/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./775/binderfs", [pid 289] newfstatat(AT_FDCWD, "./752/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./775/binderfs" [pid 289] unlink("./752/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 289] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 289] close(3 [pid 291] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 291] rmdir("./775" [pid 289] rmdir("./752" [pid 291] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 291] mkdir("./776", 0777 [pid 289] mkdir("./753", 0777 [pid 4158] +++ killed by SIGKILL +++ [pid 4161] <... set_robust_list resumed>) = 0 [pid 4160] <... openat resumed>) = 3 [pid 289] <... mkdir resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4158, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./780", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./780", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./780/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./780/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4162 [pid 292] unlink("./780/binderfs" [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4163 [pid 292] <... unlink resumed>) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./780"./strace-static-x86_64: Process 4163 attached ./strace-static-x86_64: Process 4162 attached ) = 0 [pid 292] mkdir("./781", 0777 [pid 4163] set_robust_list(0x5555700d1660, 24 [pid 4162] set_robust_list(0x5555700d1660, 24 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4163] <... set_robust_list resumed>) = 0 [pid 4162] <... set_robust_list resumed>) = 0 [pid 4161] chdir("./790" [pid 4160] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4164 ./strace-static-x86_64: Process 4164 attached [pid 4164] set_robust_list(0x5555700d1660, 24) = 0 [pid 4163] chdir("./776" [pid 4162] chdir("./753") = 0 [pid 4162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4162] setpgid(0, 0) = 0 [pid 4162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4163] <... chdir resumed>) = 0 [pid 4162] <... openat resumed>) = 3 [pid 4160] <... ioctl resumed>) = 0 [pid 4161] <... chdir resumed>) = 0 [pid 4162] write(3, "1000", 4) = 4 [pid 4162] close(3) = 0 [pid 4162] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4162] write(1, "executing program\n", 18) = 18 [pid 4162] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4162] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4162] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4162] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4162] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4162] exit_group(0 [pid 4160] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4162] <... exit_group resumed>) = ? [pid 4164] chdir("./781" [pid 4163] <... prctl resumed>) = 0 [pid 4161] <... prctl resumed>) = 0 [pid 4160] <... ioctl resumed>) = 0 [pid 4163] setpgid(0, 0 [pid 4162] +++ exited with 0 +++ [pid 4161] setpgid(0, 0 [pid 4163] <... setpgid resumed>) = 0 [pid 4161] <... setpgid resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4162, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4163] <... openat resumed>) = 3 [pid 4161] <... openat resumed>) = 3 [pid 4163] write(3, "1000", 4 [pid 4161] write(3, "1000", 4 [pid 4164] <... chdir resumed>) = 0 [pid 4163] <... write resumed>) = 4 [pid 4161] <... write resumed>) = 4 [pid 289] <... restart_syscall resumed>) = 0 [pid 4164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4163] close(3 [pid 4161] close(3 [pid 4164] <... prctl resumed>) = 0 [pid 4163] <... close resumed>) = 0 [pid 4161] <... close resumed>) = 0 [pid 4164] setpgid(0, 0 [pid 4163] symlink("/dev/binderfs", "./binderfs" [pid 4161] symlink("/dev/binderfs", "./binderfs" [pid 289] umount2("./753", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4164] <... setpgid resumed>) = 0 [pid 4163] <... symlink resumed>) = 0 executing program executing program [pid 4161] <... symlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4163] write(1, "executing program\n", 18 [pid 4161] write(1, "executing program\n", 18 [pid 4160] +++ killed by SIGKILL +++ [pid 289] openat(AT_FDCWD, "./753", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4163] <... write resumed>) = 18 [pid 4161] <... write resumed>) = 18 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4160, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4163] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... openat resumed>) = 3 [pid 4161] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4163] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 4161] <... openat resumed>) = 3 [pid 4164] <... openat resumed>) = 3 [pid 4163] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4161] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4163] <... ioctl resumed>) = 0 [pid 4161] <... ioctl resumed>) = 0 [pid 4163] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program [pid 289] getdents64(3, [pid 4163] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4161] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4164] write(3, "1000", 4 [pid 4163] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4161] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4163] <... openat resumed>) = 4 [pid 4161] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] umount2("./753/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4163] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4161] <... openat resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4164] <... write resumed>) = 4 [pid 4164] close(3) = 0 [pid 4164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4164] write(1, "executing program\n", 18) = 18 [pid 4164] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4164] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4164] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4164] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4163] <... write resumed>) = ? [pid 4164] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4164] exit_group(0) = ? [pid 289] newfstatat(AT_FDCWD, "./753/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./753/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./753") = 0 [pid 289] mkdir("./754", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4165 ./strace-static-x86_64: Process 4165 attached [pid 4165] set_robust_list(0x5555700d1660, 24) = 0 [pid 4165] chdir("./754") = 0 [pid 4165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4163] +++ killed by SIGKILL +++ [pid 4165] setpgid(0, 0 [pid 4161] +++ killed by SIGKILL +++ [pid 290] <... restart_syscall resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4163, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4161, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4165] <... setpgid resumed>) = 0 [pid 4165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4165] write(3, "1000", 4) = 4 [pid 4165] close(3) = 0 [pid 4165] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4165] write(1, "executing program\n", 18) = 18 [pid 4165] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] umount2("./776", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./776", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./776/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./776/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./776/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./776") = 0 [pid 291] mkdir("./777", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4166 [pid 293] umount2("./790", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./790", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./790/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./790/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./790/binderfs"./strace-static-x86_64: Process 4166 attached [pid 4164] +++ exited with 0 +++ [pid 293] <... unlink resumed>) = 0 [pid 290] umount2("./763", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4166] set_robust_list(0x5555700d1660, 24 [pid 4165] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4164, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4166] <... set_robust_list resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] openat(AT_FDCWD, "./763", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4166] chdir("./777" [pid 4165] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] close(3 [pid 290] <... openat resumed>) = 3 [pid 4166] <... chdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 4165] <... ioctl resumed>) = 0 [pid 290] newfstatat(3, "", [pid 4166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] rmdir("./790" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4166] <... prctl resumed>) = 0 [pid 4165] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] getdents64(3, [pid 4166] setpgid(0, 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4165] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4166] <... setpgid resumed>) = 0 [pid 293] mkdir("./791", 0777 [pid 290] umount2("./763/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4165] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4166] <... openat resumed>) = 3 [pid 293] <... mkdir resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./763/binderfs", [ 69.096553][ T42] tty tty1: SAK: killed process 4158 (syz-executor903): by fd#3 [ 69.112764][ T42] tty tty1: SAK: killed process 4160 (syz-executor903): by fd#3 [ 69.122882][ T20] tty tty1: SAK: killed process 4161 (syz-executor903): by fd#3 [ 69.122910][ T20] tty tty1: SAK: killed process 4163 (syz-executor903): by fd#3 [pid 4166] write(3, "1000", 4 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program executing program [pid 292] umount2("./781", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4166] <... write resumed>) = 4 [pid 4165] <... openat resumed>) = 4 [pid 290] unlink("./763/binderfs" [pid 4166] close(3 [pid 290] <... unlink resumed>) = 0 [pid 4166] <... close resumed>) = 0 [pid 4165] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 4166] symlink("/dev/binderfs", "./binderfs" [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4167 [pid 292] openat(AT_FDCWD, "./781", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4166] <... symlink resumed>) = 0 [pid 290] close(3 [pid 4166] write(1, "executing program\n", 18 [pid 290] <... close resumed>) = 0 [pid 4166] <... write resumed>) = 18 [pid 290] rmdir("./763" [pid 4166] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... rmdir resumed>) = 0 [pid 4166] <... openat resumed>) = 3 [pid 290] mkdir("./764", 0777 [pid 4166] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... mkdir resumed>) = 0 [pid 4166] <... ioctl resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4166] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4168 [pid 4166] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 4167 attached [pid 4167] set_robust_list(0x5555700d1660, 24) = 0 [pid 4167] chdir("./791") = 0 [pid 4167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4167] setpgid(0, 0) = 0 [pid 4167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4167] write(3, "1000", 4) = 4 [pid 4167] close(3) = 0 [pid 4167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4167] write(1, "executing program\n", 18) = 18 [pid 4167] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4167] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./781/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./781/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./781/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./781") = 0 [pid 292] mkdir("./782", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4169 [pid 4167] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4167] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 4169 attached [pid 4169] set_robust_list(0x5555700d1660, 24) = 0 [pid 4169] chdir("./782") = 0 [pid 4169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4169] setpgid(0, 0 [pid 4166] <... openat resumed>) = 4 [pid 4165] <... write resumed>) = ? [pid 4166] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4167] <... openat resumed>) = 4 [pid 4166] <... write resumed>) = 8784 [pid 4167] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4166] exit_group(0 [pid 4167] <... write resumed>) = 8784 [pid 4166] <... exit_group resumed>) = ? executing program executing program [pid 4165] +++ killed by SIGKILL +++ [pid 4169] <... setpgid resumed>) = 0 [pid 4169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4169] write(3, "1000", 4) = 4 [pid 4169] close(3) = 0 [pid 4169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4169] write(1, "executing program\n", 18) = 18 [pid 4169] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4169] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4169] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4169] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4169] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4169] exit_group(0) = ? ./strace-static-x86_64: Process 4168 attached [pid 4168] set_robust_list(0x5555700d1660, 24) = 0 [pid 4168] chdir("./764") = 0 [pid 4168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4168] setpgid(0, 0) = 0 [pid 4168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4168] write(3, "1000", 4) = 4 [pid 4168] close(3) = 0 [pid 4168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4168] write(1, "executing program\n", 18) = 18 [pid 4168] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4168] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4168] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4168] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4168] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4168] exit_group(0) = ? [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4165, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4166] +++ exited with 0 +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./754", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./754", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./754/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./754/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./754/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./754") = 0 [pid 289] mkdir("./755", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4170 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4166, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./777", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./777", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./777/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./777/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./777/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./777") = 0 [pid 291] mkdir("./778", 0777) = 0 ./strace-static-x86_64: Process 4170 attached [pid 4169] +++ exited with 0 +++ [pid 4167] +++ killed by SIGKILL +++ [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4170] set_robust_list(0x5555700d1660, 24 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4167, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4169, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4171 attached [pid 4170] <... set_robust_list resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4171 [pid 4170] chdir("./755" [pid 4171] set_robust_list(0x5555700d1660, 24 [pid 4170] <... chdir resumed>) = 0 [pid 293] umount2("./791", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4170] <... prctl resumed>) = 0 [pid 293] openat(AT_FDCWD, "./791", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4170] setpgid(0, 0 [pid 293] <... openat resumed>) = 3 [pid 4170] <... setpgid resumed>) = 0 [pid 293] newfstatat(3, "", [pid 4168] +++ exited with 0 +++ [pid 4170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4168, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4170] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 292] <... restart_syscall resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4170] write(3, "1000", 4 [pid 4171] <... set_robust_list resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4170] <... write resumed>) = 4 [pid 293] umount2("./791/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4171] chdir("./778" [pid 4170] close(3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./782", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4170] <... close resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./791/binderfs", [pid 4170] symlink("/dev/binderfs", "./binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4171] <... chdir resumed>) = 0 [pid 4171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4170] <... symlink resumed>) = 0 [pid 292] openat(AT_FDCWD, "./782", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 4170] write(1, "executing program\n", 18 [pid 293] unlink("./791/binderfs" [pid 4170] <... write resumed>) = 18 [pid 292] <... openat resumed>) = 3 [pid 4171] setpgid(0, 0) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] newfstatat(3, "", [pid 4170] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4170] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 4171] <... openat resumed>) = 3 [pid 4170] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4170] <... ioctl resumed>) = 0 [pid 293] close(3 [pid 292] umount2("./782/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4170] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... close resumed>) = 0 [pid 4170] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4170] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] rmdir("./791" [pid 292] newfstatat(AT_FDCWD, "./782/binderfs", [pid 4170] <... openat resumed>) = 4 [pid 4171] write(3, "1000", 4) = 4 [pid 4171] close(3) = 0 [pid 4171] symlink("/dev/binderfs", "./binderfs" [pid 293] <... rmdir resumed>) = 0 [pid 4171] <... symlink resumed>) = 0 [pid 4170] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program executing program [pid 293] mkdir("./792", 0777 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4171] write(1, "executing program\n", 18 [pid 4170] <... write resumed>) = 8784 [pid 292] unlink("./782/binderfs" [pid 4171] <... write resumed>) = 18 [pid 4171] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4171] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... mkdir resumed>) = 0 [pid 4171] <... ioctl resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4171] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4170] exit_group(0 [pid 292] getdents64(3, [pid 4171] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4171] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4171] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4171] <... write resumed>) = ? [pid 4170] +++ killed by SIGKILL +++ [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4172 [pid 292] close(3 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4170, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4172 attached [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./764", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./764", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./764/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./764/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./764/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./764") = 0 [pid 290] mkdir("./765", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4173 [pid 4172] set_robust_list(0x5555700d1660, 24) = 0 [pid 4172] chdir("./792") = 0 [pid 4172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4172] setpgid(0, 0) = 0 [pid 4172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4172] write(3, "1000", 4) = 4 [pid 4172] close(3) = 0 [pid 4172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4172] write(1, "executing program\n", 18) = 18 [pid 4172] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... close resumed>) = 0 [pid 292] rmdir("./782") = 0 [pid 292] mkdir("./783", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4174 ./strace-static-x86_64: Process 4173 attached [pid 4173] set_robust_list(0x5555700d1660, 24) = 0 [pid 4173] chdir("./765") = 0 [pid 4173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4173] setpgid(0, 0) = 0 [pid 4173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4173] write(3, "1000", 4) = 4 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./755", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./755", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./755/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./755/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./755/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./755") = 0 [pid 289] mkdir("./756", 0777 [pid 4173] close(3 [pid 289] <... mkdir resumed>) = 0 [pid 4173] <... close resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4173] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4175 [pid 4173] write(1, "executing program\n", 18) = 18 [pid 4173] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4174 attached [pid 4174] set_robust_list(0x5555700d1660, 24) = 0 [pid 4174] chdir("./783") = 0 [pid 4174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4174] setpgid(0, 0./strace-static-x86_64: Process 4175 attached ) = 0 [pid 4173] <... openat resumed>) = 3 [pid 4172] <... openat resumed>) = 3 [pid 4171] +++ killed by SIGKILL +++ [pid 4175] set_robust_list(0x5555700d1660, 24) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4171, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4173] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4175] chdir("./756" [pid 4174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4173] <... ioctl resumed>) = 0 [pid 4172] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4175] <... chdir resumed>) = 0 [pid 4174] <... openat resumed>) = 3 [pid 4173] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4172] <... ioctl resumed>) = 0 [pid 4175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4174] write(3, "1000", 4 [pid 4172] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4175] <... prctl resumed>) = 0 [pid 4174] <... write resumed>) = 4 [pid 4173] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4172] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4175] setpgid(0, 0 [pid 4174] close(3 [pid 4172] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4175] <... setpgid resumed>) = 0 [pid 4174] <... close resumed>) = 0 [pid 4173] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4172] <... openat resumed>) = 4 [pid 4174] symlink("/dev/binderfs", "./binderfs" [ 69.143761][ T42] tty tty1: SAK: killed process 4165 (syz-executor903): by fd#3 [ 69.153619][ T42] tty tty1: SAK: killed process 4166 (syz-executor903): by fd#3 [ 69.153645][ T42] tty tty1: SAK: killed process 4167 (syz-executor903): by fd#3 [ 69.175476][ T42] tty tty1: SAK: killed process 4170 (syz-executor903): by fd#3 [ 69.175507][ T42] tty tty1: SAK: killed process 4171 (syz-executor903): by fd#3 [pid 4172] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4173] <... openat resumed>) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 4175] <... openat resumed>) = 3 [pid 4175] write(3, "1000", 4) = 4 [pid 291] umount2("./778", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4175] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4175] <... close resumed>) = 0 [pid 4173] +++ killed by SIGKILL +++ [pid 4172] <... write resumed>) = ? [pid 291] openat(AT_FDCWD, "./778", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4175] symlink("/dev/binderfs", "./binderfs" [pid 4174] <... symlink resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4173, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4175] <... symlink resumed>) = 0 executing program [pid 4174] write(1, "executing program\n", 18 [pid 291] newfstatat(3, "", [pid 4175] write(1, "executing program\n", 18 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4175] <... write resumed>) = 18 [pid 291] getdents64(3, [pid 4175] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4175] <... openat resumed>) = 3 [pid 291] umount2("./778/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4175] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4175] <... ioctl resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./778/binderfs", [pid 4175] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4175] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] unlink("./778/binderfs" [pid 4175] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... unlink resumed>) = 0 [pid 4175] <... openat resumed>) = 4 [pid 291] getdents64(3, [pid 4175] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4175] <... write resumed>) = 8784 [pid 291] close(3 [pid 4175] exit_group(0 [pid 291] <... close resumed>) = 0 [pid 4175] <... exit_group resumed>) = ? [pid 291] rmdir("./778") = 0 [pid 291] mkdir("./779", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4176 ./strace-static-x86_64: Process 4176 attached [pid 4176] set_robust_list(0x5555700d1660, 24) = 0 [pid 4176] chdir("./779") = 0 [pid 4176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 4172] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4172, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4176] setpgid(0, 0 [pid 4175] +++ exited with 0 +++ [pid 4174] <... write resumed>) = 18 [pid 290] umount2("./765", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4174] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4175, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4176] <... setpgid resumed>) = 0 [pid 4174] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./765", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4174] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... openat resumed>) = 3 [pid 4174] <... ioctl resumed>) = 0 [pid 290] newfstatat(3, "", [pid 4174] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4174] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] getdents64(3, [pid 4176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4174] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4174] <... openat resumed>) = 4 executing program executing program [pid 4176] <... openat resumed>) = 3 [pid 4174] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] umount2("./765/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4176] write(3, "1000", 4) = 4 [pid 4176] close(3) = 0 [pid 4174] <... write resumed>) = 8784 [pid 4176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4176] write(1, "executing program\n", 18) = 18 [pid 4176] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./792", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./792", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./792/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./792/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./792/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./792") = 0 [pid 293] mkdir("./793", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4177 [pid 4176] <... openat resumed>) = 3 [pid 4176] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4176] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4176] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4176] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4176] exit_group(0) = ? ./strace-static-x86_64: Process 4177 attached [pid 4177] set_robust_list(0x5555700d1660, 24) = 0 [pid 4177] chdir("./793") = 0 [pid 4177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4177] setpgid(0, 0) = 0 [pid 4177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4177] write(3, "1000", 4) = 4 [pid 4177] close(3) = 0 [pid 4177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4177] write(1, "executing program\n", 18) = 18 [pid 4177] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4177] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4177] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4177] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4177] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4176] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4176, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... restart_syscall resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4177] exit_group(0) = ? [pid 290] newfstatat(AT_FDCWD, "./765/binderfs", [pid 4174] +++ killed by SIGKILL +++ [pid 289] umount2("./756", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4174, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] unlink("./765/binderfs" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... unlink resumed>) = 0 [pid 289] openat(AT_FDCWD, "./756", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... openat resumed>) = 3 [pid 290] close(3 [pid 289] newfstatat(3, "", [pid 290] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] rmdir("./765" [pid 289] getdents64(3, [pid 4177] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4177, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... rmdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] mkdir("./766", 0777 [pid 289] umount2("./756/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./756/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./756/binderfs") = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] getdents64(3, [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./756") = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4178 [pid 289] mkdir("./757", 0777./strace-static-x86_64: Process 4178 attached ) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4178] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 4179 attached [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4179 [pid 4179] set_robust_list(0x5555700d1660, 24 [pid 4178] <... set_robust_list resumed>) = 0 [pid 4179] <... set_robust_list resumed>) = 0 [pid 4179] chdir("./757") = 0 [pid 4179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4179] setpgid(0, 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./793", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./793", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./793/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./793/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./793/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./793" [pid 4178] chdir("./766" [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./794", 0777 [pid 4179] <... setpgid resumed>) = 0 [pid 4178] <... chdir resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 4179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4179] <... openat resumed>) = 3 [pid 4178] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 4180 attached [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4180 [pid 4178] setpgid(0, 0 [pid 4179] write(3, "1000", 4 [pid 4178] <... setpgid resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 4179] <... write resumed>) = 4 [pid 4179] close(3) = 0 [pid 4179] symlink("/dev/binderfs", "./binderfs" [pid 4178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] umount2("./779", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 4179] <... symlink resumed>) = 0 [pid 4178] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4179] write(1, "executing program\n", 18 [pid 291] openat(AT_FDCWD, "./779", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4178] write(3, "1000", 4 [pid 4179] <... write resumed>) = 18 [pid 291] <... openat resumed>) = 3 [pid 4178] <... write resumed>) = 4 [pid 291] newfstatat(3, "", [pid 4179] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4178] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4179] <... openat resumed>) = 3 [pid 4178] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 4180] set_robust_list(0x5555700d1660, 24 [pid 4178] symlink("/dev/binderfs", "./binderfs" [pid 4179] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4179] <... ioctl resumed>) = 0 [pid 4178] <... symlink resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] umount2("./779/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4179] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}executing program ) = -1 EBADF (Bad file descriptor) [pid 4178] write(1, "executing program\n", 18 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4180] <... set_robust_list resumed>) = 0 [pid 4179] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4178] <... write resumed>) = 18 [pid 292] umount2("./783", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./779/binderfs", [pid 4179] <... openat resumed>) = 4 [pid 4178] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4179] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4178] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./783", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4180] chdir("./794" [pid 292] <... openat resumed>) = 3 [pid 291] unlink("./779/binderfs" [pid 4180] <... chdir resumed>) = 0 [pid 4178] +++ killed by SIGKILL +++ [pid 291] <... unlink resumed>) = 0 [pid 4180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] getdents64(3, [pid 4180] <... prctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4180] setpgid(0, 0 [pid 291] close(3 [pid 4180] <... setpgid resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 4180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] rmdir("./779" [pid 4180] <... openat resumed>) = 3 [pid 291] <... rmdir resumed>) = 0 [pid 4180] write(3, "1000", 4 [pid 291] mkdir("./780", 0777 [pid 4180] <... write resumed>) = 4 [pid 291] <... mkdir resumed>) = 0 [pid 4180] close(3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4180] <... close resumed>) = 0 [pid 4180] symlink("/dev/binderfs", "./binderfs" [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4181 [pid 4180] <... symlink resumed>) = 0 executing program [pid 4180] write(1, "executing program\n", 18) = 18 [pid 4180] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4180] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4180] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4180] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] newfstatat(3, "", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4178, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4179] <... write resumed>) = ? [pid 4180] <... openat resumed>) = 4 [pid 4180] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4180] exit_group(0) = ? ./strace-static-x86_64: Process 4181 attached [pid 4181] set_robust_list(0x5555700d1660, 24) = 0 [pid 4181] chdir("./780") = 0 [pid 4181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4181] setpgid(0, 0) = 0 [pid 4181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4181] write(3, "1000", 4) = 4 [pid 4181] close(3) = 0 executing program [pid 4181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4181] write(1, "executing program\n", 18) = 18 [pid 4181] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [ 69.194455][ T60] tty tty1: SAK: killed process 4172 (syz-executor903): by fd#3 [ 69.194482][ T60] tty tty1: SAK: killed process 4173 (syz-executor903): by fd#3 [ 69.214522][ T20] tty tty1: SAK: killed process 4174 (syz-executor903): by fd#3 [ 69.234163][ T60] tty tty1: SAK: killed process 4178 (syz-executor903): by fd#3 [pid 4181] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4181] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4181] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4181] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4181] exit_group(0) = ? [pid 4180] +++ exited with 0 +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4180, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] getdents64(3, [pid 290] umount2("./766", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4181] +++ exited with 0 +++ [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4181, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4179] +++ killed by SIGKILL +++ [pid 292] umount2("./783/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] openat(AT_FDCWD, "./766", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4179, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] newfstatat(AT_FDCWD, "./783/binderfs", [pid 290] <... openat resumed>) = 3 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(3, "", [pid 292] unlink("./783/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./794", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./794", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", [pid 292] <... unlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 292] getdents64(3, [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./794/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] close(3 [pid 293] newfstatat(AT_FDCWD, "./794/binderfs", [pid 290] umount2("./766/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... close resumed>) = 0 [pid 293] unlink("./794/binderfs" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] rmdir("./783" [pid 293] <... unlink resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./766/binderfs", [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./794") = 0 [pid 292] <... rmdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] mkdir("./795", 0777 [pid 292] mkdir("./784", 0777 [pid 290] unlink("./766/binderfs" [pid 293] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] getdents64(3, [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4182 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 4182 attached [pid 4182] set_robust_list(0x5555700d1660, 24) = 0 [pid 290] close(3 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4183 [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./766" [pid 4182] chdir("./795") = 0 [pid 4182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4182] setpgid(0, 0 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./767", 0777 [pid 4182] <... setpgid resumed>) = 0 [pid 4182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 4182] write(3, "1000", 4 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4182] <... write resumed>) = 4 [pid 4182] close(3) = 0 [pid 4182] symlink("/dev/binderfs", "./binderfs" [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4184 [pid 4182] <... symlink resumed>) = 0 [pid 4182] write(1, "executing program\n", 18executing program ) = 18 [pid 4182] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4182] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4182] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4182] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4182] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4184 attached ./strace-static-x86_64: Process 4183 attached ) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 4184] set_robust_list(0x5555700d1660, 24) = 0 [pid 4184] chdir("./767") = 0 [pid 4184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] umount2("./780", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4184] <... prctl resumed>) = 0 [pid 4184] setpgid(0, 0 [pid 4183] set_robust_list(0x5555700d1660, 24 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./757", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4184] <... setpgid resumed>) = 0 [pid 4184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4183] <... set_robust_list resumed>) = 0 [pid 291] openat(AT_FDCWD, "./780", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4184] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./757", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4184] write(3, "1000", 4) = 4 [pid 4184] close(3) = 0 [pid 291] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(3, "", [pid 291] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4184] symlink("/dev/binderfs", "./binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 291] umount2("./780/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4184] <... symlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] newfstatat(AT_FDCWD, "./780/binderfs", [pid 289] umount2("./757/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] unlink("./780/binderfs"executing program [pid 289] newfstatat(AT_FDCWD, "./757/binderfs", [pid 4184] write(1, "executing program\n", 18) = 18 [pid 4184] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... unlink resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 289] unlink("./757/binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4184] <... openat resumed>) = 3 [pid 291] close(3 [pid 289] <... unlink resumed>) = 0 [pid 4184] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... close resumed>) = 0 [pid 289] getdents64(3, [pid 4184] <... ioctl resumed>) = 0 [pid 291] rmdir("./780" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4184] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4184] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 291] <... rmdir resumed>) = 0 [pid 289] close(3 [pid 291] mkdir("./781", 0777 [pid 289] <... close resumed>) = 0 [pid 4184] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 4183] chdir("./784" [pid 291] <... mkdir resumed>) = 0 [pid 289] rmdir("./757" [pid 4183] <... chdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... rmdir resumed>) = 0 [pid 4183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] mkdir("./758", 0777 [pid 4183] <... prctl resumed>) = 0 [pid 4182] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4185 [pid 289] <... mkdir resumed>) = 0 [pid 4183] setpgid(0, 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4182, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4183] <... setpgid resumed>) = 0 [pid 4183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4186 [pid 4183] <... openat resumed>) = 3 [pid 4183] write(3, "1000", 4) = 4 [pid 4183] close(3) = 0 [pid 4183] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4183] write(1, "executing program\n", 18) = 18 [pid 4183] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4183] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4183] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 4186 attached ./strace-static-x86_64: Process 4185 attached [pid 4183] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4186] set_robust_list(0x5555700d1660, 24 [pid 4185] set_robust_list(0x5555700d1660, 24 [pid 4186] <... set_robust_list resumed>) = 0 [pid 4185] <... set_robust_list resumed>) = 0 [pid 4186] chdir("./758" [pid 4185] chdir("./781" [pid 4183] <... openat resumed>) = 4 [pid 4186] <... chdir resumed>) = 0 [pid 4185] <... chdir resumed>) = 0 [pid 4184] +++ killed by SIGKILL +++ [pid 4186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4186] <... prctl resumed>) = 0 [pid 4185] <... prctl resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4184, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4186] setpgid(0, 0 [pid 4185] setpgid(0, 0 [pid 4186] <... setpgid resumed>) = 0 [pid 4185] <... setpgid resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4183] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4183] <... write resumed>) = -1 (errno 18446744073709551359) [pid 4186] <... openat resumed>) = 3 [pid 4185] <... openat resumed>) = 3 [pid 4186] write(3, "1000", 4 [pid 4185] write(3, "1000", 4 [pid 4186] <... write resumed>) = 4 [pid 4185] <... write resumed>) = 4 [pid 4186] close(3 [pid 4185] close(3 [pid 4186] <... close resumed>) = 0 [pid 4185] <... close resumed>) = 0 [pid 4186] symlink("/dev/binderfs", "./binderfs" [pid 4185] symlink("/dev/binderfs", "./binderfs" [pid 4186] <... symlink resumed>) = 0 [pid 4185] <... symlink resumed>) = 0 executing program [pid 4186] write(1, "executing program\n", 18executing program [pid 4185] write(1, "executing program\n", 18 [pid 4186] <... write resumed>) = 18 [pid 4185] <... write resumed>) = 18 [pid 4186] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4185] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4186] <... openat resumed>) = 3 [pid 4185] <... openat resumed>) = 3 [pid 4186] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4185] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4186] <... ioctl resumed>) = 0 [pid 4185] <... ioctl resumed>) = 0 [pid 4186] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4185] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4186] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4185] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4186] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4185] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4186] <... openat resumed>) = 4 [pid 4185] <... openat resumed>) = 4 [pid 4186] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [ 69.234198][ T60] tty tty1: SAK: killed process 4179 (syz-executor903): by fd#3 [ 69.258885][ T375] tty tty1: SAK: killed process 4182 (syz-executor903): by fd#3 [ 69.272056][ T60] tty tty1: SAK: killed process 4182 (syz-executor903): by fd#3 [ 69.272085][ T60] tty tty1: SAK: killed process 4184 (syz-executor903): by fd#3 [ 69.290158][ T375] tty tty1: SAK: killed process 4183 (syz-executor903): by fd#3 [pid 4185] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4186] <... write resumed>) = ? [pid 4185] <... write resumed>) = ? [pid 4183] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4183, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... restart_syscall resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./767", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] umount2("./784", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./767", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./784", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 290] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 290] umount2("./767/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./784/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./767/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./784/binderfs", [pid 290] unlink("./767/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... unlink resumed>) = 0 [pid 292] unlink("./784/binderfs" [pid 290] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 290] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... close resumed>) = 0 [pid 292] close(3 [pid 290] rmdir("./767" [pid 292] <... close resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4186] +++ killed by SIGKILL +++ [pid 292] rmdir("./784" [pid 290] mkdir("./768", 0777 [pid 292] <... rmdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 292] mkdir("./785", 0777 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4187 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4188 [pid 293] umount2("./795", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./795", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./795/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./795/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./795/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./795") = 0 [pid 293] mkdir("./796", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4189 attached ./strace-static-x86_64: Process 4188 attached ./strace-static-x86_64: Process 4187 attached [pid 4185] +++ killed by SIGKILL +++ [pid 4188] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4189 [pid 4188] <... set_robust_list resumed>) = 0 [pid 4187] set_robust_list(0x5555700d1660, 24 [pid 4189] set_robust_list(0x5555700d1660, 24 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4185, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4186, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4188] chdir("./785" [pid 4187] <... set_robust_list resumed>) = 0 [pid 289] umount2("./758", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4189] <... set_robust_list resumed>) = 0 [pid 4188] <... chdir resumed>) = 0 [pid 4189] chdir("./796" [pid 4188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4187] chdir("./768" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4189] <... chdir resumed>) = 0 [pid 4188] <... prctl resumed>) = 0 [pid 4187] <... chdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "./758", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4188] setpgid(0, 0 [pid 4187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... openat resumed>) = 3 [pid 4189] <... prctl resumed>) = 0 [pid 4188] <... setpgid resumed>) = 0 [pid 4187] <... prctl resumed>) = 0 [pid 289] newfstatat(3, "", [pid 4189] setpgid(0, 0 [pid 4188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4187] setpgid(0, 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4189] <... setpgid resumed>) = 0 [pid 4188] <... openat resumed>) = 3 [pid 4187] <... setpgid resumed>) = 0 [pid 289] getdents64(3, [pid 4189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4188] write(3, "1000", 4 [pid 4187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4189] <... openat resumed>) = 3 [pid 4188] <... write resumed>) = 4 [pid 4187] <... openat resumed>) = 3 [pid 289] umount2("./758/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4189] write(3, "1000", 4 [pid 4188] close(3 [pid 4187] write(3, "1000", 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4189] <... write resumed>) = 4 [pid 4188] <... close resumed>) = 0 [pid 4187] <... write resumed>) = 4 [pid 289] newfstatat(AT_FDCWD, "./758/binderfs", [pid 4189] close(3 [pid 4188] symlink("/dev/binderfs", "./binderfs" [pid 4187] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4189] <... close resumed>) = 0 [pid 4188] <... symlink resumed>) = 0 [pid 4187] <... close resumed>) = 0 [pid 289] unlink("./758/binderfs"executing program [pid 4189] symlink("/dev/binderfs", "./binderfs" [pid 4188] write(1, "executing program\n", 18 [pid 4187] symlink("/dev/binderfs", "./binderfs" [pid 4189] <... symlink resumed>) = 0 [pid 4188] <... write resumed>) = 18 [pid 289] <... unlink resumed>) = 0 executing program [pid 4189] write(1, "executing program\n", 18 [pid 4188] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4187] <... symlink resumed>) = 0 [pid 289] getdents64(3, [pid 4189] <... write resumed>) = 18 [pid 4188] <... openat resumed>) = 3 [pid 4187] write(1, "executing program\n", 18 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 4189] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4188] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4187] <... write resumed>) = 18 [pid 289] close(3 [pid 4188] <... ioctl resumed>) = 0 [pid 4187] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... close resumed>) = 0 [pid 4188] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4187] <... openat resumed>) = 3 [pid 4189] <... openat resumed>) = 3 [pid 4188] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] rmdir("./758" [pid 4188] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4187] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 4188] <... openat resumed>) = 4 [pid 4187] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4188] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] mkdir("./759", 0777 [pid 4187] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4189] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4188] <... write resumed>) = 8784 [pid 4187] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4189] <... ioctl resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 4189] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4187] <... openat resumed>) = 4 [pid 4188] exit_group(0 [pid 4187] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4189] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4189] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = ? [pid 4189] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4189, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4188] <... exit_group resumed>) = ? [pid 4187] <... write resumed>) = ? [pid 4188] +++ killed by SIGKILL +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4188, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] umount2("./796", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... restart_syscall resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./796", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] umount2("./785", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] newfstatat(3, "", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] openat(AT_FDCWD, "./785", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] getdents64(3, [pid 292] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(3, "", [pid 293] umount2("./796/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(3, [pid 293] newfstatat(AT_FDCWD, "./796/binderfs", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./785/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] unlink("./796/binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... unlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./785/binderfs", [pid 293] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] unlink("./785/binderfs" [pid 293] close(3 [pid 292] <... unlink resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 293] rmdir("./796" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] close(3 [pid 293] mkdir("./797", 0777 [pid 292] <... close resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] rmdir("./785" [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... rmdir resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4190 [pid 292] mkdir("./786", 0777 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4191 [pid 292] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4192 ./strace-static-x86_64: Process 4192 attached [pid 4192] set_robust_list(0x5555700d1660, 24) = 0 [pid 4192] chdir("./786") = 0 [pid 4192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4192] setpgid(0, 0) = 0 [pid 4192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4192] write(3, "1000", 4) = 4 [pid 4192] close(3) = 0 [pid 4192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4192] write(1, "executing program\n", 18executing program ./strace-static-x86_64: Process 4190 attached [pid 291] umount2("./781", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4191 attached [pid 4190] set_robust_list(0x5555700d1660, 24 [pid 4187] +++ killed by SIGKILL +++ [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4191] set_robust_list(0x5555700d1660, 24 [pid 4190] <... set_robust_list resumed>) = 0 [pid 291] openat(AT_FDCWD, "./781", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4187, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4191] <... set_robust_list resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4190] chdir("./759" [pid 291] <... openat resumed>) = 3 [pid 4191] chdir("./797" [pid 4190] <... chdir resumed>) = 0 [pid 291] newfstatat(3, "", [pid 4191] <... chdir resumed>) = 0 [pid 4190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4192] <... write resumed>) = 18 [pid 4191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4190] <... prctl resumed>) = 0 [pid 4191] <... prctl resumed>) = 0 [pid 291] getdents64(3, [pid 4190] setpgid(0, 0 [pid 4191] setpgid(0, 0 [pid 4192] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4190] <... setpgid resumed>) = 0 [pid 4191] <... setpgid resumed>) = 0 [pid 291] umount2("./781/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4192] <... openat resumed>) = 3 [pid 4191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4192] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4191] <... openat resumed>) = 3 [pid 291] newfstatat(AT_FDCWD, "./781/binderfs", [pid 4191] write(3, "1000", 4 [pid 4190] <... openat resumed>) = 3 [pid 4192] <... ioctl resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4191] <... write resumed>) = 4 [pid 4190] write(3, "1000", 4 [pid 291] unlink("./781/binderfs" [pid 4191] close(3 [pid 4190] <... write resumed>) = 4 [pid 4192] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4190] close(3 [pid 291] <... unlink resumed>) = 0 [pid 4191] <... close resumed>) = 0 [pid 4190] <... close resumed>) = 0 [pid 291] getdents64(3, [pid 4191] symlink("/dev/binderfs", "./binderfs" [pid 4190] symlink("/dev/binderfs", "./binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4192] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4191] <... symlink resumed>) = 0 [pid 4192] <... openat resumed>) = 4 [pid 4192] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 4191] write(1, "executing program\n", 18 [pid 4190] <... symlink resumed>) = 0 [ 69.298236][ T375] tty tty1: SAK: killed process 4185 (syz-executor903): by fd#3 [ 69.298265][ T375] tty tty1: SAK: killed process 4186 (syz-executor903): by fd#3 [ 69.321100][ T375] tty tty1: SAK: killed process 4187 (syz-executor903): by fd#3 [ 69.321129][ T375] tty tty1: SAK: killed process 4188 (syz-executor903): by fd#3 [ 69.321147][ T375] tty tty1: SAK: killed process 4189 (syz-executor903): by fd#3 [pid 291] close(3 [pid 4192] <... write resumed>) = ? [pid 4191] <... write resumed>) = 18 executing program [pid 4190] write(1, "executing program\n", 18 [pid 291] <... close resumed>) = 0 [pid 4191] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4190] <... write resumed>) = 18 [pid 291] rmdir("./781" [pid 4191] <... openat resumed>) = 3 [pid 4190] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] <... rmdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 4191] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4190] <... openat resumed>) = 3 [pid 291] mkdir("./782", 0777 [pid 4191] <... ioctl resumed>) = 0 [pid 4190] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... mkdir resumed>) = 0 [pid 4191] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4190] <... ioctl resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4191] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4190] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4191] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4190] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4193 [pid 290] umount2("./768", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4193 attached [pid 4191] <... openat resumed>) = 4 [pid 4190] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4191] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4193] set_robust_list(0x5555700d1660, 24 [pid 4191] <... write resumed>) = ? [pid 4190] <... openat resumed>) = ? [pid 4193] <... set_robust_list resumed>) = 0 [pid 4192] +++ killed by SIGKILL +++ [pid 4191] +++ killed by SIGKILL +++ [pid 290] openat(AT_FDCWD, "./768", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4193] chdir("./782" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4191, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4192, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... openat resumed>) = 3 [pid 4193] <... chdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 4193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4193] <... prctl resumed>) = 0 [pid 293] umount2("./797", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./786", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 4193] setpgid(0, 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4193] <... setpgid resumed>) = 0 [pid 293] openat(AT_FDCWD, "./797", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./786", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./768/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4193] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 290] newfstatat(AT_FDCWD, "./768/binderfs", [pid 4193] write(3, "1000", 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4193] <... write resumed>) = 4 [pid 4190] +++ killed by SIGKILL +++ [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4193] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] unlink("./768/binderfs" [pid 293] umount2("./797/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./786/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4193] <... close resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4190, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] newfstatat(AT_FDCWD, "./797/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./786/binderfs", [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] unlink("./797/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] close(3 [pid 4193] symlink("/dev/binderfs", "./binderfs" [pid 293] <... unlink resumed>) = 0 [pid 292] unlink("./786/binderfs" [pid 290] <... close resumed>) = 0 [pid 293] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 290] rmdir("./768" [pid 4193] <... symlink resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, executing program [pid 4193] write(1, "executing program\n", 18 [pid 293] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4193] <... write resumed>) = 18 [pid 293] <... close resumed>) = 0 [pid 292] close(3 [pid 290] mkdir("./769", 0777 [pid 4193] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] rmdir("./797" [pid 292] <... close resumed>) = 0 [pid 4193] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 4193] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... rmdir resumed>) = 0 [pid 292] rmdir("./786" [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4193] <... ioctl resumed>) = 0 [pid 293] mkdir("./798", 0777 [pid 4193] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... rmdir resumed>) = 0 [pid 4193] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4193] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... mkdir resumed>) = 0 [pid 292] mkdir("./787", 0777 [pid 4193] <... openat resumed>) = 4 [pid 4193] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4194 attached ) = ? [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... mkdir resumed>) = 0 [pid 4194] set_robust_list(0x5555700d1660, 24 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4194 [pid 289] <... restart_syscall resumed>) = 0 [pid 4194] <... set_robust_list resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4195 [pid 4194] chdir("./769" [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4196 [pid 4194] <... chdir resumed>) = 0 [pid 289] umount2("./759", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4194] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4194] <... prctl resumed>) = 0 [pid 289] openat(AT_FDCWD, "./759", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4194] setpgid(0, 0 [pid 289] <... openat resumed>) = 3 [pid 4194] <... setpgid resumed>) = 0 [pid 289] newfstatat(3, "", [pid 4194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4194] <... openat resumed>) = 3 [pid 289] getdents64(3, [pid 4194] write(3, "1000", 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4194] <... write resumed>) = 4 [pid 289] umount2("./759/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4194] close(3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4194] <... close resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./759/binderfs", [pid 4194] symlink("/dev/binderfs", "./binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4194] <... symlink resumed>) = 0 [pid 289] unlink("./759/binderfs"executing program [pid 4194] write(1, "executing program\n", 18 [pid 289] <... unlink resumed>) = 0 [pid 4194] <... write resumed>) = 18 [pid 289] getdents64(3, [pid 4194] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 4196 attached ./strace-static-x86_64: Process 4195 attached [pid 4194] <... openat resumed>) = 3 [pid 4193] +++ killed by SIGKILL +++ [pid 289] close(3 [pid 4196] set_robust_list(0x5555700d1660, 24 [pid 4195] set_robust_list(0x5555700d1660, 24 [pid 4194] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4193, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4196] <... set_robust_list resumed>) = 0 [pid 4195] <... set_robust_list resumed>) = 0 [pid 4194] <... ioctl resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 4196] chdir("./787" [pid 4195] chdir("./798" [pid 4194] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] rmdir("./759" [pid 4196] <... chdir resumed>) = 0 [pid 4195] <... chdir resumed>) = 0 [pid 4194] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] umount2("./782", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4194] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... rmdir resumed>) = 0 [pid 4196] <... prctl resumed>) = 0 [pid 4195] <... prctl resumed>) = 0 [pid 4194] <... openat resumed>) = 4 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] mkdir("./760", 0777 [pid 4196] setpgid(0, 0 [pid 4195] setpgid(0, 0 [pid 4194] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] openat(AT_FDCWD, "./782", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4196] <... setpgid resumed>) = 0 [pid 4195] <... setpgid resumed>) = 0 [pid 4194] <... write resumed>) = 8784 [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... openat resumed>) = 3 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4197 ./strace-static-x86_64: Process 4197 attached [pid 4197] set_robust_list(0x5555700d1660, 24) = 0 [pid 4197] chdir("./760") = 0 [pid 4197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4197] setpgid(0, 0) = 0 [pid 4197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4197] write(3, "1000", 4) = 4 [pid 4197] close(3) = 0 [pid 4197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4197] write(1, "executing program\n", 18executing program ) = 18 [pid 4197] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [ 69.348497][ T60] tty tty1: SAK: killed process 4192 (syz-executor903): by fd#3 [ 69.360123][ T375] tty tty1: SAK: killed process 4190 (syz-executor903): by fd#3 [ 69.360155][ T375] tty tty1: SAK: killed process 4191 (syz-executor903): by fd#3 [ 69.381550][ T375] tty tty1: SAK: killed process 4193 (syz-executor903): by fd#3 [pid 4197] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4197] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] newfstatat(3, "", [pid 4197] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4197] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4195] <... openat resumed>) = 3 [pid 4194] +++ killed by SIGKILL +++ [pid 291] getdents64(3, [pid 4195] write(3, "1000", 4 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4194, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4196] <... openat resumed>) = 3 [pid 4195] <... write resumed>) = 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4196] write(3, "1000", 4 [pid 4195] close(3 [pid 4197] <... openat resumed>) = 4 [pid 291] umount2("./782/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4196] <... write resumed>) = 4 [pid 4195] <... close resumed>) = 0 [pid 4196] close(3 [pid 4195] symlink("/dev/binderfs", "./binderfs" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4197] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4196] <... close resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./782/binderfs", executing program executing program [pid 4197] <... write resumed>) = ? [pid 4196] symlink("/dev/binderfs", "./binderfs" [pid 4195] <... symlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4196] <... symlink resumed>) = 0 [pid 4195] write(1, "executing program\n", 18 [pid 291] unlink("./782/binderfs" [pid 4196] write(1, "executing program\n", 18 [pid 4195] <... write resumed>) = 18 [pid 291] <... unlink resumed>) = 0 [pid 4196] <... write resumed>) = 18 [pid 4195] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] getdents64(3, [pid 4196] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4195] <... openat resumed>) = 3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4196] <... openat resumed>) = 3 [pid 4195] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] close(3 [pid 4196] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4195] <... ioctl resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 4196] <... ioctl resumed>) = 0 [pid 4195] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] rmdir("./782" [pid 4196] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4195] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... rmdir resumed>) = 0 [pid 4196] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4195] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] mkdir("./783", 0777 [pid 4196] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4195] <... openat resumed>) = 4 [pid 291] <... mkdir resumed>) = 0 [pid 4196] <... openat resumed>) = 4 [pid 4195] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4196] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4195] <... write resumed>) = 8784 [pid 4196] <... write resumed>) = 8784 [pid 4195] exit_group(0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4198 [pid 4196] exit_group(0 [pid 4195] <... exit_group resumed>) = ? [pid 4196] <... exit_group resumed>) = ? [pid 4195] +++ exited with 0 +++ [pid 290] <... restart_syscall resumed>) = 0 [pid 4196] +++ exited with 0 +++ ./strace-static-x86_64: Process 4198 attached [pid 4197] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4195, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4196, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4198] set_robust_list(0x5555700d1660, 24) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4197, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] umount2("./787", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] umount2("./798", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./769", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./760", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./798", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./787", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./769", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./760", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 293] getdents64(3, [pid 289] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] newfstatat(3, "", [pid 293] umount2("./798/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] newfstatat(AT_FDCWD, "./798/binderfs", [pid 292] umount2("./787/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 290] umount2("./769/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./798/binderfs" [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(AT_FDCWD, "./787/binderfs", [pid 4198] chdir("./783" [pid 293] <... unlink resumed>) = 0 [pid 289] umount2("./760/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./769/binderfs", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(3, [pid 292] unlink("./787/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4198] <... chdir resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./760/binderfs", [pid 290] unlink("./769/binderfs" [pid 293] close(3 [pid 292] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] unlink("./760/binderfs" [pid 293] <... close resumed>) = 0 [pid 292] close(3 [pid 290] getdents64(3, [pid 4198] <... prctl resumed>) = 0 [pid 4198] setpgid(0, 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] rmdir("./798" [pid 292] <... close resumed>) = 0 [pid 290] close(3 [pid 289] getdents64(3, [pid 4198] <... setpgid resumed>) = 0 [pid 4198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... rmdir resumed>) = 0 [pid 4198] <... openat resumed>) = 3 executing program [pid 293] mkdir("./799", 0777 [pid 292] rmdir("./787" [pid 290] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4198] write(3, "1000", 4) = 4 [pid 4198] close(3) = 0 [pid 4198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 293] <... mkdir resumed>) = 0 [pid 290] rmdir("./769" [pid 289] close(3 [pid 4198] write(1, "executing program\n", 18) = 18 [pid 4198] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... rmdir resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 4198] <... openat resumed>) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] mkdir("./788", 0777 [pid 290] mkdir("./770", 0777 [pid 289] rmdir("./760" [pid 4198] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4198] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4198] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4198] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 4199 attached [pid 4198] <... write resumed>) = ? [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4199 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./761", 0777 [pid 4199] set_robust_list(0x5555700d1660, 24 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 [pid 4198] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4198, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4200 attached [pid 4199] <... set_robust_list resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4200 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4201 attached [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4201 [pid 4200] set_robust_list(0x5555700d1660, 24) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4202 [pid 4199] chdir("./799" [pid 4201] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 4202 attached ) = 0 [pid 4199] <... chdir resumed>) = 0 [pid 4201] chdir("./788" [pid 4199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4202] set_robust_list(0x5555700d1660, 24 [pid 4200] chdir("./770" [pid 4201] <... chdir resumed>) = 0 [pid 4201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4201] setpgid(0, 0) = 0 [pid 4201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4199] <... prctl resumed>) = 0 [pid 4202] <... set_robust_list resumed>) = 0 [pid 4200] <... chdir resumed>) = 0 [pid 4201] <... openat resumed>) = 3 [pid 4201] write(3, "1000", 4) = 4 [pid 4201] close(3) = 0 [pid 4201] symlink("/dev/binderfs", "./binderfs" [pid 4199] setpgid(0, 0executing program [pid 4201] <... symlink resumed>) = 0 [pid 4201] write(1, "executing program\n", 18) = 18 [pid 4201] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4199] <... setpgid resumed>) = 0 [pid 4201] <... openat resumed>) = 3 [pid 4199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4199] write(3, "1000", 4 [pid 4200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4202] chdir("./761" [pid 4201] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4201] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4201] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4201] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4199] <... write resumed>) = 4 [pid 4200] <... prctl resumed>) = 0 executing program [pid 4202] <... chdir resumed>) = 0 [pid 4201] <... write resumed>) = ? [pid 4200] setpgid(0, 0 [pid 4199] close(3) = 0 [pid 4199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4199] write(1, "executing program\n", 18) = 18 [pid 4199] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4199] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4199] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4199] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4199] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4199] exit_group(0) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 4199] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4199, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4200] <... setpgid resumed>) = 0 [pid 4200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4202] setpgid(0, 0) = 0 [pid 4202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4200] <... openat resumed>) = 3 [pid 4202] <... openat resumed>) = 3 [pid 4200] write(3, "1000", 4) = 4 [pid 4200] close(3) = 0 [pid 4202] write(3, "1000", 4) = 4 [pid 4200] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4202] close(3) = 0 [pid 4202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4202] write(1, "executing program\n", 18 [pid 4200] write(1, "executing program\n", 18executing program [pid 4202] <... write resumed>) = 18 executing program [pid 4200] <... write resumed>) = 18 [pid 4202] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4200] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4202] <... openat resumed>) = 3 [pid 4202] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4200] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] umount2("./783", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4201] +++ killed by SIGKILL +++ [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4202] <... ioctl resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4201, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4200] <... ioctl resumed>) = 0 [pid 4200] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4200] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 291] openat(AT_FDCWD, "./783", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4202] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [ 69.392398][ T375] tty tty1: SAK: killed process 4194 (syz-executor903): by fd#3 [ 69.402382][ T60] tty tty1: SAK: killed process 4197 (syz-executor903): by fd#3 [ 69.416818][ T375] tty tty1: SAK: killed process 4198 (syz-executor903): by fd#3 [ 69.430644][ T375] tty tty1: SAK: killed process 4201 (syz-executor903): by fd#3 [ 69.438680][ T375] tty tty1: SAK: killed process 4201 (syz-executor903): by fd#3 [pid 4200] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... openat resumed>) = 3 [pid 4202] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./783/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./783/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./783/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./783") = 0 [pid 291] mkdir("./784", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4202] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4203 [pid 4200] <... write resumed>) = ? [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4202, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4203 attached [pid 4203] set_robust_list(0x5555700d1660, 24) = 0 [pid 4203] chdir("./784") = 0 [pid 4203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4203] setpgid(0, 0) = 0 [pid 4203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4203] write(3, "1000", 4) = 4 [pid 4203] close(3) = 0 executing program [pid 4203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4203] write(1, "executing program\n", 18) = 18 [pid 4203] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4203] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4203] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4203] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4203] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4203] exit_group(0) = ? [pid 293] umount2("./799", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./799", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./799/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./799/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./799/binderfs") = 0 [pid 292] umount2("./788", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./761", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./788", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4200] +++ killed by SIGKILL +++ [pid 289] openat(AT_FDCWD, "./761", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4200, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./799" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] newfstatat(3, "", [pid 4203] +++ exited with 0 +++ [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] mkdir("./800", 0777 [pid 292] getdents64(3, [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4203, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./761/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./761/binderfs", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./761/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] umount2("./788/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] close(3) = 0 [pid 289] rmdir("./761" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./762", 0777 [pid 292] newfstatat(AT_FDCWD, "./788/binderfs", [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4204 attached ./strace-static-x86_64: Process 4205 attached [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4204 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4205 [pid 292] unlink("./788/binderfs" [pid 4205] set_robust_list(0x5555700d1660, 24) = 0 [pid 4205] chdir("./762") = 0 [pid 292] <... unlink resumed>) = 0 [pid 4205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4205] setpgid(0, 0) = 0 [pid 292] getdents64(3, [pid 4205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4205] write(3, "1000", 4) = 4 [pid 4205] close(3) = 0 [pid 4205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 4205] write(1, "executing program\n", 18) = 18 [pid 4205] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] close(3 [pid 4204] set_robust_list(0x5555700d1660, 24 [pid 291] <... restart_syscall resumed>) = 0 [pid 4205] <... openat resumed>) = 3 [pid 4205] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4205] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4205] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4205] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 4204] <... set_robust_list resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 292] rmdir("./788") = 0 [pid 291] umount2("./784", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] mkdir("./789", 0777 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./770", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... mkdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "./784", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./770", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 ./strace-static-x86_64: Process 4206 attached [pid 4205] +++ killed by SIGKILL +++ [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4206 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(3, "", [pid 4206] set_robust_list(0x5555700d1660, 24 [pid 4204] chdir("./800" [pid 291] getdents64(3, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4205, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] getdents64(3, [pid 289] umount2("./762", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./784/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./762", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(3, "", [pid 290] umount2("./770/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./784/binderfs", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] getdents64(3, [pid 291] unlink("./784/binderfs" [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] newfstatat(AT_FDCWD, "./770/binderfs", [pid 289] umount2("./762/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./762/binderfs", [pid 291] getdents64(3, [pid 290] unlink("./770/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] unlink("./762/binderfs" [pid 291] close(3 [pid 290] <... unlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 291] rmdir("./784" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./762" [pid 291] <... rmdir resumed>) = 0 [pid 290] close(3 [pid 289] <... rmdir resumed>) = 0 [pid 291] mkdir("./785", 0777 [pid 290] <... close resumed>) = 0 [pid 289] mkdir("./763", 0777 [pid 291] <... mkdir resumed>) = 0 [pid 290] rmdir("./770" [pid 289] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4206] <... set_robust_list resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4206] chdir("./789" [pid 4204] <... chdir resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4207 [pid 4206] <... chdir resumed>) = 0 [pid 4204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] mkdir("./771", 0777 [pid 4206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4204] <... prctl resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4208 [pid 4206] <... prctl resumed>) = 0 [pid 4204] setpgid(0, 0 [pid 4206] setpgid(0, 0 [pid 4204] <... setpgid resumed>) = 0 [pid 4206] <... setpgid resumed>) = 0 [pid 4204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4207 attached [pid 4206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4204] <... openat resumed>) = 3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4206] <... openat resumed>) = 3 [pid 4204] write(3, "1000", 4 [pid 4206] write(3, "1000", 4 [pid 4204] <... write resumed>) = 4 [pid 4206] <... write resumed>) = 4 [pid 4204] close(3 [pid 4206] close(3 [pid 4204] <... close resumed>) = 0 [pid 4206] <... close resumed>) = 0 [pid 4204] symlink("/dev/binderfs", "./binderfs" [pid 4206] symlink("/dev/binderfs", "./binderfs" [pid 4204] <... symlink resumed>) = 0 executing program executing program [pid 4206] <... symlink resumed>) = 0 [pid 4204] write(1, "executing program\n", 18 [pid 4206] write(1, "executing program\n", 18 [pid 4204] <... write resumed>) = 18 [pid 4206] <... write resumed>) = 18 [pid 4204] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4206] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4204] <... openat resumed>) = 3 [pid 4206] <... openat resumed>) = 3 [pid 4204] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4206] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4204] <... ioctl resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4209 [pid 4206] <... ioctl resumed>) = 0 [pid 4204] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4206] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4204] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4206] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4204] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4206] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4204] <... openat resumed>) = 4 [pid 4206] <... openat resumed>) = 4 [pid 4204] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4209 attached ./strace-static-x86_64: Process 4208 attached [pid 4207] set_robust_list(0x5555700d1660, 24 [pid 4209] set_robust_list(0x5555700d1660, 24 [pid 4208] set_robust_list(0x5555700d1660, 24 [pid 4207] <... set_robust_list resumed>) = 0 [pid 4209] <... set_robust_list resumed>) = 0 [pid 4208] <... set_robust_list resumed>) = 0 [pid 4207] chdir("./763" [pid 4209] chdir("./771" [pid 4208] chdir("./785" [pid 4207] <... chdir resumed>) = 0 [pid 4209] <... chdir resumed>) = 0 [pid 4208] <... chdir resumed>) = 0 [pid 4207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4207] <... prctl resumed>) = 0 [pid 4209] <... prctl resumed>) = 0 [pid 4208] <... prctl resumed>) = 0 [pid 4207] setpgid(0, 0 [pid 4209] setpgid(0, 0 [pid 4208] setpgid(0, 0 [pid 4207] <... setpgid resumed>) = 0 [pid 4209] <... setpgid resumed>) = 0 [pid 4208] <... setpgid resumed>) = 0 [pid 4207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4207] <... openat resumed>) = 3 [pid 4204] <... write resumed>) = ? [pid 4209] <... openat resumed>) = 3 [pid 4208] <... openat resumed>) = 3 [pid 4207] write(3, "1000", 4 [ 69.448743][ T60] tty tty1: SAK: killed process 4200 (syz-executor903): by fd#3 [ 69.448769][ T60] tty tty1: SAK: killed process 4202 (syz-executor903): by fd#3 [ 69.472445][ T375] tty tty1: SAK: killed process 4205 (syz-executor903): by fd#3 [ 69.488972][ T375] tty tty1: SAK: killed process 4204 (syz-executor903): by fd#3 [pid 4209] write(3, "1000", 4 [pid 4208] write(3, "1000", 4 [pid 4207] <... write resumed>) = 4 [pid 4209] <... write resumed>) = 4 [pid 4208] <... write resumed>) = 4 [pid 4207] close(3 [pid 4209] close(3 [pid 4208] close(3 [pid 4207] <... close resumed>) = 0 [pid 4209] <... close resumed>) = 0 [pid 4208] <... close resumed>) = 0 [pid 4207] symlink("/dev/binderfs", "./binderfs" [pid 4209] symlink("/dev/binderfs", "./binderfs" [pid 4208] symlink("/dev/binderfs", "./binderfs" [pid 4207] <... symlink resumed>) = 0 [pid 4209] <... symlink resumed>) = 0 [pid 4208] <... symlink resumed>) = 0 executing program [pid 4207] write(1, "executing program\n", 18executing program [pid 4209] write(1, "executing program\n", 18executing program [pid 4208] write(1, "executing program\n", 18 [pid 4207] <... write resumed>) = 18 [pid 4209] <... write resumed>) = 18 [pid 4208] <... write resumed>) = 18 [pid 4207] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4209] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4208] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4207] <... openat resumed>) = 3 [pid 4209] <... openat resumed>) = 3 [pid 4208] <... openat resumed>) = 3 [pid 4207] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4206] +++ killed by SIGKILL +++ [pid 4204] +++ killed by SIGKILL +++ [pid 4209] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4208] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4207] <... ioctl resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4204, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4206, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4209] <... ioctl resumed>) = 0 [pid 4208] <... ioctl resumed>) = 0 [pid 4207] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4209] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4208] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4207] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4209] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4208] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4207] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] umount2("./800", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4209] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4208] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4207] <... openat resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./789", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4209] <... openat resumed>) = 4 [pid 4208] <... openat resumed>) = 4 [pid 4207] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] openat(AT_FDCWD, "./800", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4207] <... write resumed>) = ? [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4208] +++ killed by SIGKILL +++ [pid 4207] +++ killed by SIGKILL +++ [pid 293] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./789", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4207, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] newfstatat(3, "", [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4208, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./785", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./763", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] openat(AT_FDCWD, "./785", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./789/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 289] openat(AT_FDCWD, "./763", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 289] <... openat resumed>) = 3 [pid 292] newfstatat(AT_FDCWD, "./789/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] unlink("./789/binderfs" [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 291] umount2("./785/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./763/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(AT_FDCWD, "./785/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./763/binderfs", [pid 292] <... close resumed>) = 0 [pid 291] unlink("./785/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] rmdir("./789" [pid 291] <... unlink resumed>) = 0 [pid 289] unlink("./763/binderfs" [pid 292] <... rmdir resumed>) = 0 [pid 291] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 292] mkdir("./790", 0777 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] getdents64(3, [pid 292] <... mkdir resumed>) = 0 [pid 291] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] newfstatat(3, "", [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... close resumed>) = 0 [pid 289] close(3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] rmdir("./785" [pid 289] <... close resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4210 [pid 291] <... rmdir resumed>) = 0 [pid 289] rmdir("./763" [pid 291] mkdir("./786", 0777 [pid 289] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] mkdir("./764", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4211 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4212 ./strace-static-x86_64: Process 4210 attached [pid 4210] set_robust_list(0x5555700d1660, 24./strace-static-x86_64: Process 4212 attached ) = 0 [pid 4210] chdir("./790" [pid 4212] set_robust_list(0x5555700d1660, 24) = 0 [pid 4212] chdir("./764" [pid 4210] <... chdir resumed>) = 0 [pid 4210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4212] <... chdir resumed>) = 0 [pid 4210] setpgid(0, 0 [pid 4212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4210] <... setpgid resumed>) = 0 [pid 4212] setpgid(0, 0 [pid 4210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4212] <... setpgid resumed>) = 0 [pid 4212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] getdents64(3, ./strace-static-x86_64: Process 4211 attached [pid 4209] +++ killed by SIGKILL +++ [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4211] set_robust_list(0x5555700d1660, 24) = 0 [pid 293] umount2("./800/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4209, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4211] chdir("./786" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4211] <... chdir resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./800/binderfs", [pid 4211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4210] <... openat resumed>) = 3 [pid 4211] <... prctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4211] setpgid(0, 0 [pid 4210] write(3, "1000", 4 [pid 293] unlink("./800/binderfs" [pid 4212] <... openat resumed>) = 3 [pid 4211] <... setpgid resumed>) = 0 [pid 4211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... unlink resumed>) = 0 [pid 4212] write(3, "1000", 4 [pid 4210] <... write resumed>) = 4 [pid 4211] <... openat resumed>) = 3 [pid 4210] close(3 [pid 4212] <... write resumed>) = 4 [pid 293] getdents64(3, [pid 4211] write(3, "1000", 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4211] <... write resumed>) = 4 [pid 293] close(3 [pid 4211] close(3 [pid 293] <... close resumed>) = 0 [pid 4211] <... close resumed>) = 0 [pid 293] rmdir("./800" [pid 4212] close(3 [pid 4211] symlink("/dev/binderfs", "./binderfs" [pid 4210] <... close resumed>) = 0 [pid 4212] <... close resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./801", 0777 [pid 4212] symlink("/dev/binderfs", "./binderfs" [pid 4211] <... symlink resumed>) = 0 [pid 4210] symlink("/dev/binderfs", "./binderfs" [pid 4211] write(1, "executing program\n", 18executing program ) = 18 [pid 4210] <... symlink resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 4211] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4212] <... symlink resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 4212] write(1, "executing program\n", 18 [pid 4211] <... openat resumed>) = 3 [pid 4210] write(1, "executing program\n", 18./strace-static-x86_64: Process 4213 attached [pid 4212] <... write resumed>) = 18 executing program [pid 4211] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4213] set_robust_list(0x5555700d1660, 24 [pid 4212] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4211] <... ioctl resumed>) = 0 [pid 4210] <... write resumed>) = 18 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4213 [pid 4213] <... set_robust_list resumed>) = 0 [pid 4212] <... openat resumed>) = 3 [pid 4211] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4213] chdir("./801" [pid 4212] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4211] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4210] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4212] <... ioctl resumed>) = 0 [pid 4211] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4213] <... chdir resumed>) = 0 [pid 4212] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4211] <... openat resumed>) = 4 [pid 4210] <... openat resumed>) = 3 [pid 4212] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4211] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4210] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4211] <... write resumed>) = 8784 [pid 4213] <... prctl resumed>) = 0 [pid 4210] <... ioctl resumed>) = 0 [pid 4213] setpgid(0, 0 [pid 4211] exit_group(0 [pid 4210] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4213] <... setpgid resumed>) = 0 [pid 4211] <... exit_group resumed>) = ? [pid 4210] <... ioctl resumed>) = ? [pid 4213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4210] +++ killed by SIGKILL +++ [pid 4213] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4210, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4213] write(3, "1000", 4 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4213] <... write resumed>) = 4 [pid 4213] close(3executing program ) = 0 [pid 4213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4213] write(1, "executing program\n", 18) = 18 [pid 4213] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4213] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4213] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4213] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4213] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4213] exit_group(0) = ? [pid 4212] +++ killed by SIGKILL +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4212, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... restart_syscall resumed>) = 0 [pid 4211] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4211, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./771", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... restart_syscall resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./771", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] umount2("./790", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(3, "", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 69.488997][ T375] tty tty1: SAK: killed process 4206 (syz-executor903): by fd#3 [ 69.508706][ T60] tty tty1: SAK: killed process 4207 (syz-executor903): by fd#3 [ 69.508733][ T60] tty tty1: SAK: killed process 4208 (syz-executor903): by fd#3 [ 69.508756][ T60] tty tty1: SAK: killed process 4209 (syz-executor903): by fd#3 [ 69.539914][ T60] tty tty1: SAK: killed process 4210 (syz-executor903): by fd#3 [pid 292] openat(AT_FDCWD, "./790", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] getdents64(3, [pid 292] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(3, "", [pid 290] umount2("./771/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(3, [pid 290] newfstatat(AT_FDCWD, "./771/binderfs", [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./790/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] unlink("./771/binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./790/binderfs", [pid 290] getdents64(3, [pid 289] <... restart_syscall resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] unlink("./790/binderfs" [pid 291] umount2("./786", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] close(3 [pid 292] <... unlink resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... close resumed>) = 0 [pid 289] umount2("./764", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 291] openat(AT_FDCWD, "./786", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] rmdir("./771" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "./764", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] close(3 [pid 291] newfstatat(3, "", [pid 290] mkdir("./772", 0777 [pid 289] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] newfstatat(3, "", [pid 292] rmdir("./790" [pid 291] getdents64(3, [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 292] mkdir("./791", 0777 [pid 291] umount2("./786/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4214 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] umount2("./764/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] newfstatat(AT_FDCWD, "./786/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./764/binderfs", [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4215 [pid 291] unlink("./786/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] unlink("./764/binderfs" [pid 291] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] getdents64(3, [pid 291] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... close resumed>) = 0 [pid 289] close(3 [pid 291] rmdir("./786" [pid 289] <... close resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 289] rmdir("./764" [pid 291] mkdir("./787", 0777 [pid 289] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] mkdir("./765", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4216 attached ./strace-static-x86_64: Process 4215 attached ./strace-static-x86_64: Process 4214 attached [pid 4213] +++ exited with 0 +++ [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4216] set_robust_list(0x5555700d1660, 24 [pid 4215] set_robust_list(0x5555700d1660, 24 [pid 4214] set_robust_list(0x5555700d1660, 24 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4213, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4216 [pid 4215] <... set_robust_list resumed>) = 0 [pid 4214] <... set_robust_list resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4217 [pid 4214] chdir("./772" [pid 4215] chdir("./791" [pid 4214] <... chdir resumed>) = 0 [pid 4215] <... chdir resumed>) = 0 [pid 4214] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 4217 attached [pid 4215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4214] <... prctl resumed>) = 0 [pid 4215] <... prctl resumed>) = 0 [pid 4214] setpgid(0, 0 [pid 4217] set_robust_list(0x5555700d1660, 24 [pid 4214] <... setpgid resumed>) = 0 [pid 4215] setpgid(0, 0 [pid 4217] <... set_robust_list resumed>) = 0 [pid 4214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4215] <... setpgid resumed>) = 0 [pid 4217] chdir("./765" [pid 4214] <... openat resumed>) = 3 [pid 4217] <... chdir resumed>) = 0 [pid 4217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4214] write(3, "1000", 4 [pid 4217] <... prctl resumed>) = 0 [pid 4214] <... write resumed>) = 4 [pid 4217] setpgid(0, 0 [pid 4215] <... openat resumed>) = 3 [pid 4217] <... setpgid resumed>) = 0 [pid 4214] close(3 [pid 4215] write(3, "1000", 4 [pid 4214] <... close resumed>) = 0 [pid 4214] symlink("/dev/binderfs", "./binderfs" [pid 4215] <... write resumed>) = 4 [pid 4217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4214] <... symlink resumed>) = 0 [pid 4215] close(3 [pid 4214] write(1, "executing program\n", 18executing program executing program ) = 18 [pid 4215] <... close resumed>) = 0 [pid 4214] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4215] symlink("/dev/binderfs", "./binderfs" [pid 4217] <... openat resumed>) = 3 [pid 4214] <... openat resumed>) = 3 [pid 4217] write(3, "1000", 4 [pid 4216] <... set_robust_list resumed>) = 0 [pid 4215] <... symlink resumed>) = 0 [pid 4214] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4217] <... write resumed>) = 4 [pid 4215] write(1, "executing program\n", 18 [pid 4217] close(3 [pid 4214] <... ioctl resumed>) = 0 [pid 4215] <... write resumed>) = 18 [pid 4214] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4215] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4214] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4217] <... close resumed>) = 0 [pid 4216] chdir("./787" [pid 4215] <... openat resumed>) = 3 [pid 4214] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4217] symlink("/dev/binderfs", "./binderfs" [pid 4216] <... chdir resumed>) = 0 [pid 4215] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4214] <... openat resumed>) = 4 [pid 4215] <... ioctl resumed>) = 0 [pid 4214] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4215] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4214] <... write resumed>) = 8784 [pid 4216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4216] setpgid(0, 0) = 0 [pid 4216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4216] write(3, "1000", 4) = 4 [pid 4216] close(3) = 0 [pid 4216] symlink("/dev/binderfs", "./binderfs" [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./801", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./801", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./801/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./801/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./801/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./801") = 0 [pid 293] mkdir("./802", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4218 [pid 4216] <... symlink resumed>) = 0 [pid 4216] write(1, "executing program\n", 18executing program ) = 18 [pid 4216] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4216] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4216] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4216] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4216] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4216] exit_group(0) = ? ./strace-static-x86_64: Process 4218 attached [pid 4218] set_robust_list(0x5555700d1660, 24) = 0 [pid 4218] chdir("./802") = 0 [pid 4218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4218] setpgid(0, 0) = 0 [pid 4218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4218] write(3, "1000", 4) = 4 [pid 4218] close(3) = 0 executing program [pid 4218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4218] write(1, "executing program\n", 18) = 18 [pid 4218] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4218] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4218] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4216] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4216, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4218] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4218] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4215] <... ioctl resumed>) = -1 (errno 18446744073709551359) [pid 4218] <... openat resumed>) = 4 [pid 4218] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./787", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./787", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", [pid 4215] +++ killed by SIGKILL +++ [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4217] <... symlink resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4215, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] getdents64(3, [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./787/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4217] write(1, "executing program\n", 18 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./787/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./787/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./787") = 0 [pid 291] mkdir("./788", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4219 [pid 4218] <... write resumed>) = ? ./strace-static-x86_64: Process 4219 attached [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./791", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./791", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./791/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./791/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./791/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./791") = 0 [pid 292] mkdir("./792", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4220 [pid 4219] set_robust_list(0x5555700d1660, 24executing program [pid 4217] <... write resumed>) = 18 [pid 4218] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4218, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4217] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4219] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 4220 attached [pid 293] <... restart_syscall resumed>) = 0 [pid 4214] +++ killed by SIGKILL +++ [pid 4220] set_robust_list(0x5555700d1660, 24 [pid 4217] <... openat resumed>) = 3 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4214, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4220] <... set_robust_list resumed>) = 0 [pid 4217] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./802", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4220] chdir("./792" [pid 4217] <... ioctl resumed>) = ? [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./802", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./802/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./802/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./802/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./802") = 0 [ 69.539937][ T60] tty tty1: SAK: killed process 4211 (syz-executor903): by fd#3 [ 69.539951][ T60] tty tty1: SAK: killed process 4212 (syz-executor903): by fd#3 [ 69.569279][ T20] tty tty1: SAK: killed process 4214 (syz-executor903): by fd#3 [ 69.569306][ T20] tty tty1: SAK: killed process 4215 (syz-executor903): by fd#3 [ 69.587030][ T20] tty tty1: SAK: killed process 4218 (syz-executor903): by fd#3 [pid 293] mkdir("./803", 0777) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4221 [pid 290] umount2("./772", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4219] chdir("./788" [pid 290] openat(AT_FDCWD, "./772", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4219] <... chdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 4219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4219] <... prctl resumed>) = 0 [pid 290] getdents64(3, [pid 4219] setpgid(0, 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4219] <... setpgid resumed>) = 0 [pid 290] umount2("./772/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4219] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./772/binderfs", [pid 4219] write(3, "1000", 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4219] <... write resumed>) = 4 [pid 290] unlink("./772/binderfs" [pid 4219] close(3 [pid 290] <... unlink resumed>) = 0 [pid 4220] <... chdir resumed>) = 0 [pid 4219] <... close resumed>) = 0 [pid 290] getdents64(3, [pid 4219] symlink("/dev/binderfs", "./binderfs" [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4219] <... symlink resumed>) = 0 [pid 4217] +++ killed by SIGKILL +++ [pid 290] close(3 [pid 4220] <... prctl resumed>) = 0 [pid 4219] write(1, "executing program\n", 18executing program [pid 290] <... close resumed>) = 0 [pid 4220] setpgid(0, 0 [pid 4219] <... write resumed>) = 18 [pid 290] rmdir("./772" [pid 4220] <... setpgid resumed>) = 0 [pid 4219] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... rmdir resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4217, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4219] <... openat resumed>) = 3 [pid 290] mkdir("./773", 0777 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4220] <... openat resumed>) = 3 [pid 4219] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... mkdir resumed>) = 0 [pid 4220] write(3, "1000", 4 [pid 4219] <... ioctl resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4222 attached [pid 4220] <... write resumed>) = 4 [pid 4219] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... restart_syscall resumed>) = 0 [pid 4220] close(3 [pid 4219] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4222 [pid 4220] <... close resumed>) = 0 [pid 4219] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4220] symlink("/dev/binderfs", "./binderfs" [pid 4219] <... openat resumed>) = 4 [pid 4219] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4221 attached [pid 4222] set_robust_list(0x5555700d1660, 24 [pid 4220] <... symlink resumed>) = 0 [pid 289] umount2("./765", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 4220] write(1, "executing program\n", 18) = 18 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4220] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4219] <... write resumed>) = ? [pid 289] openat(AT_FDCWD, "./765", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4222] <... set_robust_list resumed>) = 0 [pid 4221] set_robust_list(0x5555700d1660, 24 [pid 4220] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 4220] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4219] +++ killed by SIGKILL +++ [pid 289] newfstatat(3, "", [pid 4220] <... ioctl resumed>) = 0 [pid 4221] <... set_robust_list resumed>) = 0 [pid 4221] chdir("./803" [pid 4220] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4219, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4220] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4220] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] getdents64(3, [pid 4220] <... openat resumed>) = 4 [pid 4221] <... chdir resumed>) = 0 executing program executing program [pid 4220] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4221] setpgid(0, 0) = 0 [pid 4220] <... write resumed>) = 8784 [pid 289] umount2("./765/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4221] write(3, "1000", 4) = 4 [pid 4221] close(3) = 0 [pid 4221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4221] write(1, "executing program\n", 18) = 18 [pid 4221] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4221] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4221] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4221] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4221] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4221] exit_group(0) = ? [pid 4222] chdir("./773") = 0 [pid 4222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4222] setpgid(0, 0) = 0 [pid 4222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4222] write(3, "1000", 4) = 4 [pid 4222] close(3) = 0 [pid 4222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4222] write(1, "executing program\n", 18) = 18 [pid 4222] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4222] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4222] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4222] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4222] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4222] exit_group(0) = ? [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./765/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./765/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./765") = 0 [pid 289] mkdir("./766", 0777 [pid 4221] +++ exited with 0 +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4221, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4220] +++ killed by SIGKILL +++ [pid 291] umount2("./788", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4223 attached [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4220, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4223] set_robust_list(0x5555700d1660, 24 [pid 4222] +++ exited with 0 +++ [pid 293] umount2("./803", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] openat(AT_FDCWD, "./788", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4223 [pid 4223] <... set_robust_list resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./803", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] newfstatat(3, "", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4222, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] <... openat resumed>) = 3 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] newfstatat(3, "", [pid 291] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... restart_syscall resumed>) = 0 [pid 4223] chdir("./766" [pid 293] getdents64(3, [pid 291] umount2("./788/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./803/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./788/binderfs", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(AT_FDCWD, "./803/binderfs", [pid 291] unlink("./788/binderfs" [pid 290] umount2("./773", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4223] <... chdir resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./803/binderfs" [pid 291] <... unlink resumed>) = 0 [pid 290] openat(AT_FDCWD, "./773", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 290] <... openat resumed>) = 3 [pid 4223] <... prctl resumed>) = 0 [pid 293] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4223] setpgid(0, 0 [pid 293] close(3 [pid 291] close(3 [pid 290] getdents64(3, [pid 4223] <... setpgid resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] rmdir("./803" [pid 290] umount2("./773/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... rmdir resumed>) = 0 [pid 291] rmdir("./788" [pid 293] mkdir("./804", 0777 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4223] <... openat resumed>) = 3 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./773/binderfs", [pid 4223] write(3, "1000", 4 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] mkdir("./789", 0777 [pid 4223] <... write resumed>) = 4 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4223] close(3 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4224 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] unlink("./773/binderfs"./strace-static-x86_64: Process 4225 attached ./strace-static-x86_64: Process 4224 attached [pid 4223] <... close resumed>) = 0 [pid 4225] set_robust_list(0x5555700d1660, 24 [pid 4224] set_robust_list(0x5555700d1660, 24 [pid 4223] symlink("/dev/binderfs", "./binderfs" [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4225 [pid 290] <... unlink resumed>) = 0 [pid 4225] <... set_robust_list resumed>) = 0 [pid 4224] <... set_robust_list resumed>) = 0 [pid 4223] <... symlink resumed>) = 0 executing program [pid 4225] chdir("./789" [pid 4223] write(1, "executing program\n", 18 [pid 290] getdents64(3, [pid 4225] <... chdir resumed>) = 0 [pid 4223] <... write resumed>) = 18 [pid 4225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4223] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4225] <... prctl resumed>) = 0 [pid 4224] chdir("./804" [pid 4223] <... openat resumed>) = 3 [pid 4225] setpgid(0, 0 [pid 4223] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] close(3 [pid 4225] <... setpgid resumed>) = 0 [pid 4223] <... ioctl resumed>) = 0 [pid 4225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4224] <... chdir resumed>) = 0 [pid 4223] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] <... close resumed>) = 0 [pid 4225] <... openat resumed>) = 3 [pid 4224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4223] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] rmdir("./773" [pid 4225] write(3, "1000", 4 [pid 4223] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4225] <... write resumed>) = 4 [pid 4223] <... openat resumed>) = 4 [pid 4225] close(3 [pid 4223] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... rmdir resumed>) = 0 [pid 4224] <... prctl resumed>) = 0 [pid 4223] <... write resumed>) = 8784 [pid 290] mkdir("./774", 0777 [pid 4224] setpgid(0, 0 [pid 290] <... mkdir resumed>) = 0 [pid 4224] <... setpgid resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4226 [pid 4224] write(3, "1000", 4) = 4 [pid 292] umount2("./792", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4224] close(3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] <... close resumed>) = 0 [pid 292] openat(AT_FDCWD, "./792", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4224] symlink("/dev/binderfs", "./binderfs" [pid 292] <... openat resumed>) = 3 [pid 4224] <... symlink resumed>) = 0 [pid 292] newfstatat(3, "", [pid 4224] write(1, "executing program\n", 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 4224] <... write resumed>) = 18 [pid 292] getdents64(3, [pid 4224] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4224] <... openat resumed>) = 3 [pid 292] umount2("./792/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4224] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] <... ioctl resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./792/binderfs", [pid 4224] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4224] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] unlink("./792/binderfs" [pid 4224] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] <... unlink resumed>) = 0 [pid 4224] <... openat resumed>) = 4 [pid 292] getdents64(3, [pid 4224] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4224] <... write resumed>) = 8784 [pid 292] close(3 [pid 4224] exit_group(0 [pid 292] <... close resumed>) = 0 [pid 4224] <... exit_group resumed>) = ? [pid 292] rmdir("./792"./strace-static-x86_64: Process 4226 attached [pid 4225] <... close resumed>) = 0 [pid 4224] +++ exited with 0 +++ [pid 292] <... rmdir resumed>) = 0 [pid 292] mkdir("./793", 0777 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4224, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] <... mkdir resumed>) = 0 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4227 ./strace-static-x86_64: Process 4227 attached [pid 4227] set_robust_list(0x5555700d1660, 24) = 0 [pid 4227] chdir("./793") = 0 [pid 4227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4227] setpgid(0, 0) = 0 [pid 4227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 69.596201][ T20] tty tty1: SAK: killed process 4217 (syz-executor903): by fd#3 [ 69.608288][ T375] tty tty1: SAK: killed process 4219 (syz-executor903): by fd#3 [ 69.618959][ T20] tty tty1: SAK: killed process 4220 (syz-executor903): by fd#3 [ 69.637179][ T20] tty tty1: SAK: killed process 4223 (syz-executor903): by fd#3 [pid 4227] write(3, "1000", 4) = 4 [pid 4227] close(3) = 0 executing program [pid 4227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4227] write(1, "executing program\n", 18) = 18 [pid 4227] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4227] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4227] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4227] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4227] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4227] exit_group(0) = ? [pid 4223] +++ killed by SIGKILL +++ [pid 4225] symlink("/dev/binderfs", "./binderfs" [pid 4226] set_robust_list(0x5555700d1660, 24 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4223, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4225] <... symlink resumed>) = 0 [pid 4226] <... set_robust_list resumed>) = 0 executing program [pid 4225] write(1, "executing program\n", 18) = 18 [pid 4225] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 293] <... restart_syscall resumed>) = 0 [pid 4225] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4225] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] umount2("./804", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4225] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4225] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] openat(AT_FDCWD, "./804", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4225] <... openat resumed>) = 4 [pid 293] <... openat resumed>) = 3 [pid 4225] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] newfstatat(3, "", [pid 4225] <... write resumed>) = 8784 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4225] exit_group(0 [pid 293] getdents64(3, [pid 4225] <... exit_group resumed>) = ? [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./804/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] <... restart_syscall resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./804/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./804/binderfs" [pid 289] umount2("./766", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... unlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(3, [pid 289] openat(AT_FDCWD, "./766", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] <... openat resumed>) = 3 [pid 293] close(3 [pid 289] newfstatat(3, "", [pid 293] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] rmdir("./804" [pid 289] getdents64(3, [pid 4226] chdir("./774" [pid 293] <... rmdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4227] +++ killed by SIGKILL +++ [pid 4226] <... chdir resumed>) = 0 [pid 293] mkdir("./805", 0777 [pid 289] umount2("./766/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4226] setpgid(0, 0) = 0 [pid 4226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4225] +++ exited with 0 +++ [pid 293] <... mkdir resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4227, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4226] <... openat resumed>) = 3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4225, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] newfstatat(AT_FDCWD, "./766/binderfs", [pid 4226] write(3, "1000", 4 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4226] <... write resumed>) = 4 [pid 4226] close(3) = 0 [pid 4226] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4228 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4226] write(1, "executing program\n", 18 [pid 289] unlink("./766/binderfs" [pid 4226] <... write resumed>) = 18 [pid 4226] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 289] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 4228 attached [pid 4226] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 4226] <... ioctl resumed>) = 0 [pid 4226] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4226] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4226] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] close(3 [pid 4228] set_robust_list(0x5555700d1660, 24 [pid 4226] <... openat resumed>) = 4 [pid 4226] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... close resumed>) = 0 [pid 4228] <... set_robust_list resumed>) = 0 [pid 4226] <... write resumed>) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 289] rmdir("./766" [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./789", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./789", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... rmdir resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 289] mkdir("./767", 0777 [pid 292] umount2("./793", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./789/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... mkdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] openat(AT_FDCWD, "./793", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] newfstatat(AT_FDCWD, "./789/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./789/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 292] <... openat resumed>) = 3 [pid 291] <... close resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4229 [pid 292] newfstatat(3, "", [pid 291] rmdir("./789"./strace-static-x86_64: Process 4229 attached [pid 4228] chdir("./805" [pid 4226] +++ killed by SIGKILL +++ [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./790", 0777 [pid 4229] set_robust_list(0x5555700d1660, 24 [pid 4228] <... chdir resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4229] <... set_robust_list resumed>) = 0 [pid 4228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4226, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4229] chdir("./767" [pid 4228] <... prctl resumed>) = 0 [pid 292] umount2("./793/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4230 attached [pid 4228] setpgid(0, 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4230 [pid 4230] set_robust_list(0x5555700d1660, 24 [pid 4228] <... setpgid resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./793/binderfs", [pid 4230] <... set_robust_list resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4230] chdir("./790" [pid 4228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] unlink("./793/binderfs" [pid 4230] <... chdir resumed>) = 0 [pid 4230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4230] setpgid(0, 0 [pid 292] <... unlink resumed>) = 0 [pid 4228] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 4230] <... setpgid resumed>) = 0 [pid 4228] write(3, "1000", 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4228] <... write resumed>) = 4 [pid 292] close(3 [pid 4229] <... chdir resumed>) = 0 [pid 4230] <... openat resumed>) = 3 [pid 4228] close(3 [pid 292] <... close resumed>) = 0 [pid 4229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] rmdir("./793" [pid 4228] <... close resumed>) = 0 [pid 4230] write(3, "1000", 4) = 4 [pid 4230] close(3) = 0 [pid 4230] symlink("/dev/binderfs", "./binderfs" [pid 4228] symlink("/dev/binderfs", "./binderfs"executing program [pid 292] <... rmdir resumed>) = 0 [pid 4230] <... symlink resumed>) = 0 [pid 292] mkdir("./794", 0777 [pid 4228] <... symlink resumed>) = 0 [pid 4230] write(1, "executing program\n", 18) = 18 [pid 4230] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 executing program [pid 4228] write(1, "executing program\n", 18 [pid 292] <... mkdir resumed>) = 0 [pid 4230] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4228] <... write resumed>) = 18 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4230] <... ioctl resumed>) = 0 [pid 4230] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4230] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4228] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4231 [pid 4230] <... openat resumed>) = 4 [pid 4228] <... openat resumed>) = 3 [pid 4230] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4231 attached ) = ? [pid 4229] <... prctl resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 4231] set_robust_list(0x5555700d1660, 24 [pid 4229] setpgid(0, 0 [pid 4228] +++ killed by SIGKILL +++ [pid 4231] <... set_robust_list resumed>) = 0 [pid 4229] <... setpgid resumed>) = 0 [pid 4231] chdir("./794" [pid 4229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4228, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] umount2("./774", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4231] <... chdir resumed>) = 0 [pid 4229] <... openat resumed>) = 3 [pid 293] umount2("./805", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4229] write(3, "1000", 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./774", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4231] <... prctl resumed>) = 0 [pid 4229] <... write resumed>) = 4 [pid 293] openat(AT_FDCWD, "./805", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 4231] setpgid(0, 0 [pid 4229] close(3 [pid 293] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 4231] <... setpgid resumed>) = 0 [pid 4229] <... close resumed>) = 0 [pid 293] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4229] symlink("/dev/binderfs", "./binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 290] getdents64(3, [pid 4231] <... openat resumed>) = 3 [pid 4229] <... symlink resumed>) = 0 [pid 293] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4231] write(3, "1000", 4 [pid 4229] write(1, "executing program\n", 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./774/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4231] <... write resumed>) = 4 [pid 4229] <... write resumed>) = 18 [pid 293] umount2("./805/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4231] close(3 [pid 4230] +++ killed by SIGKILL +++ [pid 4229] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4231] <... close resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./805/binderfs", [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4230, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] newfstatat(AT_FDCWD, "./774/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4231] symlink("/dev/binderfs", "./binderfs" [pid 4229] <... openat resumed>) = 3 [pid 293] unlink("./805/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4229] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... unlink resumed>) = 0 [pid 290] unlink("./774/binderfs" [pid 4231] <... symlink resumed>) = 0 [pid 4229] <... ioctl resumed>) = 0 [pid 293] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 4229] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 4229] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4229] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] <... close resumed>) = 0 [pid 290] close(3executing program [pid 4229] <... openat resumed>) = 4 [pid 293] rmdir("./805" [pid 290] <... close resumed>) = 0 [pid 4231] write(1, "executing program\n", 18 [pid 4229] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... rmdir resumed>) = 0 [pid 290] rmdir("./774" [pid 4231] <... write resumed>) = 18 [pid 4231] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] mkdir("./806", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 4231] <... openat resumed>) = ? [ 69.645831][ T20] tty tty1: SAK: killed process 4223 (syz-executor903): by fd#3 [ 69.654987][ T20] tty tty1: SAK: killed process 4227 (syz-executor903): by fd#3 [ 69.667643][ T20] tty tty1: SAK: killed process 4226 (syz-executor903): by fd#3 [ 69.684238][ T20] tty tty1: SAK: killed process 4228 (syz-executor903): by fd#3 [ 69.684266][ T20] tty tty1: SAK: killed process 4230 (syz-executor903): by fd#3 [pid 4231] +++ killed by SIGKILL +++ [pid 4229] <... write resumed>) = ? [pid 293] <... mkdir resumed>) = 0 [pid 290] mkdir("./775", 0777 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4231, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] <... mkdir resumed>) = 0 [pid 291] umount2("./790", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./790", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./790/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./790/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./790/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./790") = 0 [pid 291] mkdir("./791", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4233 ./strace-static-x86_64: Process 4232 attached [pid 4232] set_robust_list(0x5555700d1660, 24) = 0 [pid 4232] chdir("./806") = 0 [pid 4232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4232] setpgid(0, 0) = 0 [pid 4232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4232] write(3, "1000", 4) = 4 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4232 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4232] close(3) = 0 [pid 4232] symlink("/dev/binderfs", "./binderfs" [pid 292] umount2("./794", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4233 attached [pid 4229] +++ killed by SIGKILL +++ [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4234 [pid 4233] set_robust_list(0x5555700d1660, 24 [pid 292] openat(AT_FDCWD, "./794", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4229, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4233] <... set_robust_list resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4233] chdir("./791" [pid 292] newfstatat(3, "", [pid 4233] <... chdir resumed>) = 0 [pid 4232] <... symlink resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] getdents64(3, [pid 4233] <... prctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4233] setpgid(0, 0 [pid 292] umount2("./794/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4233] <... setpgid resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program ./strace-static-x86_64: Process 4234 attached [pid 4233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4232] write(1, "executing program\n", 18 [pid 292] newfstatat(AT_FDCWD, "./794/binderfs", [pid 4232] <... write resumed>) = 18 [pid 4233] <... openat resumed>) = 3 [pid 4233] write(3, "1000", 4 [pid 4232] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4233] <... write resumed>) = 4 [pid 292] unlink("./794/binderfs" [pid 4233] close(3) = 0 [pid 4232] <... openat resumed>) = 3 [pid 292] <... unlink resumed>) = 0 [pid 4233] symlink("/dev/binderfs", "./binderfs" [pid 292] getdents64(3, [pid 4232] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4233] <... symlink resumed>) = 0 [pid 4232] <... ioctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4233] write(1, "executing program\n", 18executing program [pid 292] close(3 [pid 4233] <... write resumed>) = 18 [pid 4234] set_robust_list(0x5555700d1660, 24 [pid 4233] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4232] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] <... close resumed>) = 0 [pid 4233] <... openat resumed>) = 3 [pid 292] rmdir("./794" [pid 4234] <... set_robust_list resumed>) = 0 [pid 4232] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4233] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4234] chdir("./775" [pid 4232] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4234] <... chdir resumed>) = 0 [pid 4233] <... ioctl resumed>) = 0 [pid 4232] <... openat resumed>) = 4 [pid 292] <... rmdir resumed>) = 0 [pid 4233] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] mkdir("./795", 0777 [pid 4233] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4232] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4234] <... prctl resumed>) = 0 [pid 4232] <... write resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [pid 4234] setpgid(0, 0 [pid 4233] +++ killed by SIGKILL +++ [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... restart_syscall resumed>) = 0 [pid 4234] <... setpgid resumed>) = 0 [pid 4234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4235 [pid 4234] <... openat resumed>) = 3 [pid 289] umount2("./767", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4234] write(3, "1000", 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4234] <... write resumed>) = 4 [pid 289] openat(AT_FDCWD, "./767", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4234] close(3 [pid 289] <... openat resumed>) = 3 [pid 4234] <... close resumed>) = 0 [pid 289] newfstatat(3, "", [pid 4234] symlink("/dev/binderfs", "./binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 4234] <... symlink resumed>) = 0 [pid 289] getdents64(3, [pid 4234] write(1, "executing program\n", 18 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4234] <... write resumed>) = 18 [pid 289] umount2("./767/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4234] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4234] <... openat resumed>) = 3 [pid 289] newfstatat(AT_FDCWD, "./767/binderfs", [pid 4234] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4234] <... ioctl resumed>) = 0 [pid 289] unlink("./767/binderfs" [pid 4234] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... unlink resumed>) = 0 [pid 4234] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] getdents64(3, [pid 4234] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4234] <... openat resumed>) = 4 [pid 289] close(3 [pid 4234] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... close resumed>) = 0 [pid 4234] <... write resumed>) = 8784 [pid 289] rmdir("./767" [pid 4234] exit_group(0 [pid 289] <... rmdir resumed>) = 0 [pid 4234] <... exit_group resumed>) = ? [pid 289] mkdir("./768", 0777./strace-static-x86_64: Process 4235 attached [pid 4232] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4233, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... mkdir resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4232, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4236 [pid 4235] set_robust_list(0x5555700d1660, 24) = 0 [pid 4235] chdir("./795") = 0 [pid 4235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4235] setpgid(0, 0) = 0 [pid 4235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4235] write(3, "1000", 4) = 4 [pid 293] <... restart_syscall resumed>) = 0 [pid 4235] close(3) = 0 [pid 4235] symlink("/dev/binderfs", "./binderfs" [pid 293] umount2("./806", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4235] <... symlink resumed>) = 0 executing program [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4235] write(1, "executing program\n", 18 [pid 293] openat(AT_FDCWD, "./806", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4235] <... write resumed>) = 18 [pid 293] <... openat resumed>) = 3 [pid 4235] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] newfstatat(3, "", [pid 4235] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4235] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] getdents64(3, [pid 4235] <... ioctl resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4235] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] umount2("./806/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4235] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4235] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] newfstatat(AT_FDCWD, "./806/binderfs", [pid 4235] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4235] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] unlink("./806/binderfs"./strace-static-x86_64: Process 4236 attached [pid 4235] <... write resumed>) = 8784 [pid 4234] +++ exited with 0 +++ [pid 293] <... unlink resumed>) = 0 [pid 4235] exit_group(0 [pid 293] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4234, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4236] set_robust_list(0x5555700d1660, 24 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 293] close(3) = 0 [pid 293] rmdir("./806") = 0 [pid 293] mkdir("./807", 0777) = 0 [ 69.703213][ T375] tty tty1: SAK: killed process 4229 (syz-executor903): by fd#3 [ 69.703240][ T375] tty tty1: SAK: killed process 4231 (syz-executor903): by fd#3 [ 69.725650][ T20] tty tty1: SAK: killed process 4232 (syz-executor903): by fd#3 [ 69.725679][ T20] tty tty1: SAK: killed process 4233 (syz-executor903): by fd#3 [ 69.742470][ T20] tty tty1: SAK: killed process 4234 (syz-executor903): by fd#3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4237 [pid 4236] <... set_robust_list resumed>) = 0 [pid 4236] chdir("./768") = 0 [pid 4236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4236] setpgid(0, 0) = 0 [pid 4236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 4236] write(3, "1000", 4) = 4 [pid 4236] close(3) = 0 [pid 4236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4236] write(1, "executing program\n", 18) = 18 [pid 4236] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4236] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4236] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 290] <... restart_syscall resumed>) = 0 [pid 4236] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4236] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] umount2("./775", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4236] <... write resumed>) = 8784 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4236] exit_group(0 [pid 4235] +++ killed by SIGKILL +++ [pid 291] umount2("./791", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] openat(AT_FDCWD, "./775", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 4237 attached [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4235, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... openat resumed>) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./775/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./775/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./775/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./775") = 0 [pid 290] mkdir("./776", 0777 [pid 4237] set_robust_list(0x5555700d1660, 24 [pid 4236] +++ killed by SIGKILL +++ [pid 291] openat(AT_FDCWD, "./791", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4237] <... set_robust_list resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 4237] chdir("./807" [pid 291] newfstatat(3, "", [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4237] <... chdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4236, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] getdents64(3, [pid 4237] <... prctl resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4237] setpgid(0, 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] umount2("./791/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4238 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4237] <... setpgid resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 4238 attached [pid 4237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] newfstatat(AT_FDCWD, "./791/binderfs", [pid 4238] set_robust_list(0x5555700d1660, 24 [pid 4237] <... openat resumed>) = 3 [pid 292] umount2("./795", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4237] write(3, "1000", 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] unlink("./791/binderfs" [pid 4238] <... set_robust_list resumed>) = 0 [pid 4237] <... write resumed>) = 4 [pid 292] openat(AT_FDCWD, "./795", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4237] close(3 [pid 292] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 4237] <... close resumed>) = 0 [pid 292] newfstatat(3, "", [pid 291] getdents64(3, [pid 4238] chdir("./776" [pid 4237] symlink("/dev/binderfs", "./binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4238] <... chdir resumed>) = 0 [pid 4237] <... symlink resumed>) = 0 [pid 292] getdents64(3, [pid 291] close(3 executing program [pid 4237] write(1, "executing program\n", 18 [pid 291] <... close resumed>) = 0 [pid 4237] <... write resumed>) = 18 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] rmdir("./791" [pid 4238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4237] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] umount2("./795/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... rmdir resumed>) = 0 [pid 4238] <... prctl resumed>) = 0 [pid 4237] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] mkdir("./792", 0777 [pid 4238] setpgid(0, 0 [pid 4237] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] newfstatat(AT_FDCWD, "./795/binderfs", [pid 291] <... mkdir resumed>) = 0 [pid 4237] <... ioctl resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4238] <... setpgid resumed>) = 0 [pid 4237] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] unlink("./795/binderfs"./strace-static-x86_64: Process 4239 attached [pid 4237] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4239 [pid 4237] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4237] <... openat resumed>) = 4 [pid 292] <... unlink resumed>) = 0 [pid 4237] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4239] set_robust_list(0x5555700d1660, 24 [pid 4238] <... openat resumed>) = 3 [pid 4237] <... write resumed>) = ? [pid 292] getdents64(3, [pid 289] <... restart_syscall resumed>) = 0 [pid 4239] <... set_robust_list resumed>) = 0 [pid 4238] write(3, "1000", 4 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4238] <... write resumed>) = 4 [pid 4238] close(3 [pid 4237] +++ killed by SIGKILL +++ [pid 292] close(3 [pid 4238] <... close resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4237, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... close resumed>) = 0 [pid 4239] chdir("./792" [pid 4238] symlink("/dev/binderfs", "./binderfs" [pid 292] rmdir("./795" [pid 289] umount2("./768", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4239] <... chdir resumed>) = 0 [pid 4239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4238] <... symlink resumed>) = 0 [pid 4239] <... prctl resumed>) = 0 [pid 4239] setpgid(0, 0) = 0 executing program [pid 4239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4238] write(1, "executing program\n", 18 [pid 292] <... rmdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4239] <... openat resumed>) = 3 [pid 4238] <... write resumed>) = 18 [pid 292] mkdir("./796", 0777 [pid 289] openat(AT_FDCWD, "./768", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4238] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4239] write(3, "1000", 4) = 4 [pid 4239] close(3) = 0 [pid 4239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] <... mkdir resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4239] write(1, "executing program\n", 18 [pid 4238] <... openat resumed>) = 3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 289] newfstatat(3, "", [pid 4239] <... write resumed>) = 18 [pid 4239] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4239] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4240 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4238] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 4239] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4238] <... ioctl resumed>) = 0 [pid 289] umount2("./768/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4239] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4238] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] newfstatat(AT_FDCWD, "./768/binderfs", [pid 4239] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 4240 attached [pid 4239] <... openat resumed>) = 4 [pid 4238] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] unlink("./768/binderfs" [pid 4240] set_robust_list(0x5555700d1660, 24) = 0 [pid 4240] chdir("./796" [pid 4238] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... unlink resumed>) = 0 [pid 4240] <... chdir resumed>) = 0 [pid 289] getdents64(3, [pid 4238] <... openat resumed>) = 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4240] setpgid(0, 0 [pid 4239] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4238] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] close(3 [pid 4240] <... setpgid resumed>) = 0 executing program [pid 4240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... close resumed>) = 0 [pid 4240] <... openat resumed>) = 3 [pid 4238] <... write resumed>) = 8784 [pid 4240] write(3, "1000", 4) = 4 [pid 4240] close(3) = 0 [pid 4240] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4240] write(1, "executing program\n", 18) = 18 [pid 4240] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4240] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4240] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4240] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4240] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4240] exit_group(0) = ? [pid 4239] <... write resumed>) = ? [pid 289] rmdir("./768") = 0 [pid 289] mkdir("./769", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4241 [pid 4240] +++ exited with 0 +++ ./strace-static-x86_64: Process 4241 attached [pid 4241] set_robust_list(0x5555700d1660, 24) = 0 [pid 4241] chdir("./769") = 0 [pid 4241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4241] setpgid(0, 0) = 0 [pid 4241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4241] write(3, "1000", 4) = 4 [pid 4241] close(3) = 0 [pid 4241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4241] write(1, "executing program\n", 18executing program ) = 18 [pid 4241] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4241] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4241] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4241] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [ 69.750985][ T20] tty tty1: SAK: killed process 4235 (syz-executor903): by fd#3 [ 69.759793][ T20] tty tty1: SAK: killed process 4236 (syz-executor903): by fd#3 [ 69.775130][ T20] tty tty1: SAK: killed process 4237 (syz-executor903): by fd#3 [ 69.789029][ T375] tty tty1: SAK: killed process 4238 (syz-executor903): by fd#3 [pid 4239] +++ killed by SIGKILL +++ [pid 4238] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4240, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4239, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./807", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./807", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./807/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./792", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./807/binderfs", [pid 291] openat(AT_FDCWD, "./792", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... openat resumed>) = 3 [pid 293] unlink("./807/binderfs" [pid 291] newfstatat(3, "", [pid 293] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 291] getdents64(3, [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] close(3 [pid 291] umount2("./792/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] rmdir("./807" [pid 291] newfstatat(AT_FDCWD, "./792/binderfs", [pid 293] <... rmdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] mkdir("./808", 0777 [pid 291] unlink("./792/binderfs" [pid 293] <... mkdir resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 4241] +++ killed by SIGKILL +++ [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./796", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4238, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./776", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./796", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "./776", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(3, "", [pid 290] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(3, "", [pid 292] getdents64(3, [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4241, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4242 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] close(3 [pid 290] getdents64(3, [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 292] umount2("./796/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... close resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] rmdir("./792" [pid 290] umount2("./776/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./796/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./776/binderfs", [pid 292] unlink("./796/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] unlink("./776/binderfs" [pid 292] getdents64(3, [pid 291] mkdir("./793", 0777 [pid 290] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 292] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... close resumed>) = 0 [pid 290] close(3 [pid 292] rmdir("./796" [pid 290] <... close resumed>) = 0 ./strace-static-x86_64: Process 4242 attached [pid 292] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] rmdir("./776" [pid 289] <... restart_syscall resumed>) = 0 [pid 4242] set_robust_list(0x5555700d1660, 24 [pid 292] mkdir("./797", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4242] <... set_robust_list resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 4243 attached [pid 4242] chdir("./808" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4243 [pid 290] mkdir("./777", 0777 [pid 289] umount2("./769", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4242] <... chdir resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] openat(AT_FDCWD, "./769", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4242] <... prctl resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4242] setpgid(0, 0 [pid 289] newfstatat(3, "", [pid 4242] <... setpgid resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4244 [pid 290] <... mkdir resumed>) = 0 [pid 289] getdents64(3, ./strace-static-x86_64: Process 4244 attached [pid 4243] set_robust_list(0x5555700d1660, 24 [pid 4242] <... openat resumed>) = 3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4242] write(3, "1000", 4 [pid 289] umount2("./769/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4242] <... write resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4242] close(3 [pid 289] newfstatat(AT_FDCWD, "./769/binderfs", [pid 4242] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4242] symlink("/dev/binderfs", "./binderfs" [pid 289] unlink("./769/binderfs" [pid 4242] <... symlink resumed>) = 0 [pid 289] <... unlink resumed>) = 0 executing program [pid 4242] write(1, "executing program\n", 18 [pid 289] getdents64(3, [pid 4242] <... write resumed>) = 18 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4242] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] close(3 [pid 4244] set_robust_list(0x5555700d1660, 24 [pid 4243] <... set_robust_list resumed>) = 0 [pid 4242] <... openat resumed>) = 3 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4245 [pid 289] <... close resumed>) = 0 [pid 4242] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] rmdir("./769" [pid 4244] <... set_robust_list resumed>) = 0 [pid 4243] chdir("./793" [pid 4242] <... ioctl resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 4242] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] mkdir("./770", 0777 [pid 4244] chdir("./797" [pid 4243] <... chdir resumed>) = 0 [pid 4242] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... mkdir resumed>) = 0 [pid 4242] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4246 attached [pid 4244] <... chdir resumed>) = 0 [pid 4243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4242] <... openat resumed>) = 4 [pid 4242] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4246 ./strace-static-x86_64: Process 4245 attached [pid 4246] set_robust_list(0x5555700d1660, 24 [pid 4244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4243] <... prctl resumed>) = 0 [pid 4246] <... set_robust_list resumed>) = 0 [pid 4245] set_robust_list(0x5555700d1660, 24 [pid 4244] <... prctl resumed>) = 0 [pid 4243] setpgid(0, 0 [pid 4242] <... write resumed>) = ? [pid 4243] <... setpgid resumed>) = 0 [pid 4244] setpgid(0, 0 [pid 4243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4246] chdir("./770" [pid 4243] <... openat resumed>) = 3 [pid 4246] <... chdir resumed>) = 0 [pid 4246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4246] setpgid(0, 0) = 0 [pid 4246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4246] write(3, "1000", 4) = 4 [pid 4246] close(3) = 0 [pid 4246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4244] <... setpgid resumed>) = 0 [pid 4243] write(3, "1000", 4executing program [pid 4246] write(1, "executing program\n", 18) = 18 [pid 4246] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4243] <... write resumed>) = 4 [pid 4246] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4243] close(3 [pid 4246] <... ioctl resumed>) = 0 [pid 4244] <... openat resumed>) = 3 [pid 4243] <... close resumed>) = 0 [pid 4246] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4244] write(3, "1000", 4 [pid 4243] symlink("/dev/binderfs", "./binderfs" [pid 4246] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4246] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4244] <... write resumed>) = 4 [pid 4243] <... symlink resumed>) = 0 [pid 4246] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784executing program [pid 4243] write(1, "executing program\n", 18 [pid 4244] close(3 [pid 4243] <... write resumed>) = 18 [pid 4246] <... write resumed>) = 8784 [pid 4244] <... close resumed>) = 0 [pid 4243] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4244] symlink("/dev/binderfs", "./binderfs" [pid 4243] <... openat resumed>) = 3 [pid 4246] exit_group(0 [pid 4244] <... symlink resumed>) = 0 [pid 4243] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4245] <... set_robust_list resumed>) = 0 [pid 4244] write(1, "executing program\n", 18executing program [pid 4243] <... ioctl resumed>) = ? [pid 4245] chdir("./777" [pid 4244] <... write resumed>) = 18 [pid 4243] +++ killed by SIGKILL +++ [pid 4245] <... chdir resumed>) = 0 [pid 4244] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4244] <... openat resumed>) = 3 [pid 4245] <... prctl resumed>) = 0 [pid 4244] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4245] setpgid(0, 0 [pid 4244] <... ioctl resumed>) = 0 [pid 4245] <... setpgid resumed>) = 0 [pid 4244] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4244] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4245] <... openat resumed>) = 3 [pid 4244] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4245] write(3, "1000", 4 [pid 4244] <... openat resumed>) = 4 [pid 4245] <... write resumed>) = 4 [pid 4244] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4245] close(3 [pid 4244] <... write resumed>) = 8784 [pid 4245] <... close resumed>) = 0 [pid 4244] exit_group(0 [pid 4245] symlink("/dev/binderfs", "./binderfs" [pid 4244] <... exit_group resumed>) = ? [pid 4245] <... symlink resumed>) = 0 executing program [pid 4245] write(1, "executing program\n", 18) = 18 [pid 4245] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4245] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4242] +++ killed by SIGKILL +++ [pid 4245] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4244] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4242, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4243, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4245] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4244, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4245] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4245] <... openat resumed>) = 4 [pid 293] umount2("./808", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4245] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./793", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4245] <... write resumed>) = 8784 [pid 4245] exit_group(0) = ? [pid 4246] +++ killed by SIGKILL +++ [pid 293] openat(AT_FDCWD, "./808", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./808/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./808/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./808/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./808") = 0 [pid 293] mkdir("./809", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4247 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./793", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 291] newfstatat(3, "", ./strace-static-x86_64: Process 4247 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 69.789056][ T375] tty tty1: SAK: killed process 4239 (syz-executor903): by fd#3 [ 69.805149][ T375] tty tty1: SAK: killed process 4241 (syz-executor903): by fd#3 [ 69.823799][ T20] tty tty1: SAK: killed process 4242 (syz-executor903): by fd#3 [ 69.836707][ T20] tty tty1: SAK: killed process 4242 (syz-executor903): by fd#3 [ 69.836732][ T20] tty tty1: SAK: killed process 4243 (syz-executor903): by fd#3 [pid 291] getdents64(3, [pid 292] umount2("./797", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./793/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./797", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... openat resumed>) = 3 [pid 291] newfstatat(AT_FDCWD, "./793/binderfs", [pid 292] newfstatat(3, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] unlink("./793/binderfs" [pid 292] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 292] umount2("./797/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] close(3 [pid 292] newfstatat(AT_FDCWD, "./797/binderfs", [pid 291] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] rmdir("./793" [pid 292] unlink("./797/binderfs" [pid 291] <... rmdir resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] mkdir("./794", 0777 [pid 292] getdents64(3, [pid 291] <... mkdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] close(3) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4248 [pid 292] rmdir("./797") = 0 [pid 292] mkdir("./798", 0777./strace-static-x86_64: Process 4248 attached [pid 4247] set_robust_list(0x5555700d1660, 24 [pid 4245] +++ exited with 0 +++ [pid 292] <... mkdir resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4246, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4248] set_robust_list(0x5555700d1660, 24 [pid 4247] <... set_robust_list resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4245, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4248] <... set_robust_list resumed>) = 0 [pid 4247] chdir("./809" [pid 289] <... restart_syscall resumed>) = 0 [pid 4248] chdir("./794" [pid 4247] <... chdir resumed>) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4249 attached [pid 4248] <... chdir resumed>) = 0 [pid 4247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4249 [pid 4248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4247] <... prctl resumed>) = 0 [pid 289] umount2("./770", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4248] <... prctl resumed>) = 0 [pid 4247] setpgid(0, 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4248] setpgid(0, 0 [pid 4247] <... setpgid resumed>) = 0 [pid 289] openat(AT_FDCWD, "./770", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4249] set_robust_list(0x5555700d1660, 24 [pid 4248] <... setpgid resumed>) = 0 [pid 4247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4249] <... set_robust_list resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4249] chdir("./798" [pid 4247] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 4248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4247] write(3, "1000", 4 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4249] <... chdir resumed>) = 0 [pid 4248] <... openat resumed>) = 3 [pid 4247] <... write resumed>) = 4 [pid 4248] write(3, "1000", 4 [pid 289] getdents64(3, [pid 4248] <... write resumed>) = 4 [pid 4247] close(3 [pid 4249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4247] <... close resumed>) = 0 [pid 4248] close(3 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4248] <... close resumed>) = 0 [pid 4247] symlink("/dev/binderfs", "./binderfs"executing program [pid 4248] symlink("/dev/binderfs", "./binderfs" [pid 289] umount2("./770/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4249] <... prctl resumed>) = 0 [pid 4249] setpgid(0, 0) = 0 [pid 4249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4247] <... symlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4249] <... openat resumed>) = 3 [pid 4248] <... symlink resumed>) = 0 [pid 4247] write(1, "executing program\n", 18 [pid 289] newfstatat(AT_FDCWD, "./770/binderfs", [pid 4248] write(1, "executing program\n", 18 [pid 4247] <... write resumed>) = 18 executing program [pid 4248] <... write resumed>) = 18 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4247] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4248] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] unlink("./770/binderfs" [pid 4249] write(3, "1000", 4) = 4 [pid 4247] <... openat resumed>) = 3 [pid 4249] close(3) = 0 [pid 289] <... unlink resumed>) = 0 [pid 4249] symlink("/dev/binderfs", "./binderfs" [pid 4247] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] getdents64(3, [pid 4248] <... openat resumed>) = 3 [pid 4247] <... ioctl resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4249] <... symlink resumed>) = 0 [pid 4248] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4247] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} executing program [pid 289] close(3 [pid 4248] <... ioctl resumed>) = 0 [pid 4247] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... close resumed>) = 0 [pid 4249] write(1, "executing program\n", 18 [pid 4248] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4247] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4248] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] rmdir("./770" [pid 4247] <... openat resumed>) = 4 [pid 4249] <... write resumed>) = 18 [pid 4249] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4249] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 4249] <... ioctl resumed>) = 0 executing program [pid 4248] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4247] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] mkdir("./771", 0777 [pid 4249] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4248] <... openat resumed>) = 4 [pid 4249] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 290] umount2("./777", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4249] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4249] <... openat resumed>) = 4 [pid 290] openat(AT_FDCWD, "./777", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... mkdir resumed>) = 0 [pid 4249] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... openat resumed>) = 3 [pid 4249] <... write resumed>) = ? [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./777/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./777/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./777/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./777") = 0 [pid 290] mkdir("./778", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4250 ./strace-static-x86_64: Process 4250 attached [pid 4250] set_robust_list(0x5555700d1660, 24) = 0 [pid 4250] chdir("./778") = 0 [pid 4250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4250] setpgid(0, 0) = 0 [pid 4250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4250] write(3, "1000", 4) = 4 [pid 4250] close(3) = 0 [pid 4250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4250] write(1, "executing program\n", 18) = 18 [pid 4250] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4250] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4250] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4250] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4250] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4250] exit_group(0) = ? [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4249] +++ killed by SIGKILL +++ [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4251 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4249, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4247] <... write resumed>) = ? ./strace-static-x86_64: Process 4251 attached [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./798", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4248] +++ killed by SIGKILL +++ [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./798", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4248, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... openat resumed>) = 3 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./798/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./798/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./798/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./798") = 0 [pid 292] mkdir("./799", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4252 [pid 4250] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4250, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>executing program [pid 4251] set_robust_list(0x5555700d1660, 24) = 0 [pid 4251] chdir("./771") = 0 [pid 4251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4251] setpgid(0, 0) = 0 [pid 4251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4251] write(3, "1000", 4) = 4 [pid 4251] close(3) = 0 [pid 4251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4251] write(1, "executing program\n", 18) = 18 [pid 4251] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4251] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4251] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4251] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4251] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4251] exit_group(0) = ? ./strace-static-x86_64: Process 4252 attached [pid 4247] +++ killed by SIGKILL +++ [pid 4252] set_robust_list(0x5555700d1660, 24 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4247, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4252] <... set_robust_list resumed>) = 0 [pid 4251] +++ exited with 0 +++ [pid 4252] chdir("./799") = 0 [pid 4252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4252] setpgid(0, 0) = 0 [pid 4252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4252] write(3, "1000", 4 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4251, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4252] <... write resumed>) = 4 [pid 4252] close(3) = 0 [pid 4252] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4252] write(1, "executing program\n", 18) = 18 [pid 4252] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4252] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4252] <... ioctl resumed>) = 0 [pid 4252] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4252] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 293] <... restart_syscall resumed>) = 0 [pid 4252] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 290] umount2("./778", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./771", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./778", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./771", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 289] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./778/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./771/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./809", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./778/binderfs", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4252] +++ killed by SIGKILL +++ [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./794", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./771/binderfs", [pid 293] openat(AT_FDCWD, "./809", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4252, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] openat(AT_FDCWD, "./794", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] unlink("./778/binderfs" [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(3, "", [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(3, "", [pid 293] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] unlink("./771/binderfs" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 293] umount2("./809/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./794/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 290] close(3 [pid 293] newfstatat(AT_FDCWD, "./809/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./794/binderfs", [pid 293] unlink("./809/binderfs" [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... close resumed>) = 0 [pid 289] close(3 [pid 293] <... unlink resumed>) = 0 [pid 291] unlink("./794/binderfs" [pid 290] rmdir("./778" [pid 289] <... close resumed>) = 0 [pid 293] getdents64(3, [pid 291] <... unlink resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] rmdir("./771" [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, [pid 290] mkdir("./779", 0777 [pid 293] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... close resumed>) = 0 [pid 291] close(3 [pid 293] rmdir("./809" [pid 291] <... close resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 291] rmdir("./794" [pid 293] mkdir("./810", 0777 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./772", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 291] mkdir("./795", 0777 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4255 attached ./strace-static-x86_64: Process 4253 attached ./strace-static-x86_64: Process 4254 attached [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4253 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4254 [pid 4255] set_robust_list(0x5555700d1660, 24 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4255 [pid 4255] <... set_robust_list resumed>) = 0 [pid 4255] chdir("./795") = 0 [pid 4255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4255] setpgid(0, 0) = 0 [pid 4255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4255] write(3, "1000", 4) = 4 [pid 4255] close(3) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4256 [pid 4255] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4254] set_robust_list(0x5555700d1660, 24 [pid 4255] write(1, "executing program\n", 18) = 18 [pid 4255] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4253] set_robust_list(0x5555700d1660, 24 [pid 4254] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 4256 attached [pid 4255] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4255] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4255] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [ 69.836762][ T20] tty tty1: SAK: killed process 4246 (syz-executor903): by fd#3 [ 69.869192][ T60] tty tty1: SAK: killed process 4247 (syz-executor903): by fd#3 [ 69.869222][ T60] tty tty1: SAK: killed process 4248 (syz-executor903): by fd#3 [ 69.869239][ T60] tty tty1: SAK: killed process 4249 (syz-executor903): by fd#3 [ 69.896280][ T375] tty tty1: SAK: killed process 4252 (syz-executor903): by fd#3 [pid 4255] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4256] set_robust_list(0x5555700d1660, 24 [pid 4255] <... write resumed>) = ? [pid 4253] <... set_robust_list resumed>) = 0 [pid 4254] chdir("./779" [pid 292] <... restart_syscall resumed>) = 0 [pid 4256] <... set_robust_list resumed>) = 0 [pid 4253] chdir("./810" [pid 4254] <... chdir resumed>) = 0 [pid 4256] chdir("./772" [pid 4255] +++ killed by SIGKILL +++ [pid 4253] <... chdir resumed>) = 0 [pid 4254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4256] <... chdir resumed>) = 0 [pid 4253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4254] <... prctl resumed>) = 0 [pid 292] umount2("./799", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4253] <... prctl resumed>) = 0 [pid 4254] setpgid(0, 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4256] <... prctl resumed>) = 0 [pid 4253] setpgid(0, 0 [pid 4254] <... setpgid resumed>) = 0 [pid 292] openat(AT_FDCWD, "./799", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4256] setpgid(0, 0 [pid 4253] <... setpgid resumed>) = 0 [pid 4254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... openat resumed>) = 3 [pid 4256] <... setpgid resumed>) = 0 [pid 4253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4254] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4255, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4253] <... openat resumed>) = 3 [pid 4254] write(3, "1000", 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4256] <... openat resumed>) = 3 [pid 4253] write(3, "1000", 4 [pid 4254] <... write resumed>) = 4 [pid 292] getdents64(3, [pid 291] umount2("./795", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4256] write(3, "1000", 4 [pid 4253] <... write resumed>) = 4 [pid 4254] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4256] <... write resumed>) = 4 [pid 4253] close(3 [pid 4254] <... close resumed>) = 0 [pid 292] umount2("./799/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4256] close(3 [pid 4253] <... close resumed>) = 0 [pid 4254] symlink("/dev/binderfs", "./binderfs" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./795", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4256] <... close resumed>) = 0 [pid 4253] symlink("/dev/binderfs", "./binderfs" [pid 4254] <... symlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./799/binderfs", [pid 4256] symlink("/dev/binderfs", "./binderfs"executing program [pid 4253] <... symlink resumed>) = 0 [pid 4254] write(1, "executing program\n", 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... openat resumed>) = 3 executing program executing program [pid 4256] <... symlink resumed>) = 0 [pid 4253] write(1, "executing program\n", 18 [pid 4254] <... write resumed>) = 18 [pid 292] unlink("./799/binderfs" [pid 291] newfstatat(3, "", [pid 4256] write(1, "executing program\n", 18 [pid 4253] <... write resumed>) = 18 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4254] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4254] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 291] umount2("./795/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4256] <... write resumed>) = 18 [pid 4253] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4254] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4256] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4254] <... ioctl resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] newfstatat(AT_FDCWD, "./795/binderfs", [pid 4256] <... openat resumed>) = 3 [pid 4253] <... openat resumed>) = 3 [pid 4254] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] close(3 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4253] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4254] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... close resumed>) = 0 [pid 291] unlink("./795/binderfs" [pid 4256] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4253] <... ioctl resumed>) = 0 [pid 4254] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] rmdir("./799" [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 4254] <... openat resumed>) = 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./795" [pid 4256] <... ioctl resumed>) = 0 executing program [pid 4253] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4254] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 4253] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] mkdir("./796", 0777 [pid 4254] <... write resumed>) = 8784 [pid 291] <... mkdir resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4257 ./strace-static-x86_64: Process 4257 attached [pid 4257] set_robust_list(0x5555700d1660, 24) = 0 [pid 4257] chdir("./796") = 0 [pid 4257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4257] setpgid(0, 0) = 0 [pid 4257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4257] write(3, "1000", 4) = 4 [pid 4257] close(3) = 0 [pid 4257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4257] write(1, "executing program\n", 18) = 18 [pid 4257] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4257] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4257] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4257] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4257] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4257] exit_group(0) = ? [pid 4256] +++ killed by SIGKILL +++ [pid 292] mkdir("./800", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4258 [pid 4253] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4253, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4256, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4257] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4257, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./810", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./810", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./810/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./810/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./810/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./810") = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./796", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./796", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./796/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./796/binderfs", [pid 293] mkdir("./811", 0777 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 291] unlink("./796/binderfs") = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./796" [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./797", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4260 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4259 ./strace-static-x86_64: Process 4258 attached [pid 4258] set_robust_list(0x5555700d1660, 24) = 0 [pid 4258] chdir("./800") = 0 [pid 4258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... restart_syscall resumed>) = 0 [pid 4258] <... prctl resumed>) = 0 [pid 4258] setpgid(0, 0) = 0 [pid 4258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4258] write(3, "1000", 4) = 4 [pid 4258] close(3) = 0 [pid 4258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4258] write(1, "executing program\n", 18executing program ) = 18 [pid 4258] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4259 attached [pid 4259] set_robust_list(0x5555700d1660, 24) = 0 [pid 4259] chdir("./811") = 0 [pid 4259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4259] setpgid(0, 0) = 0 [pid 4259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4259] write(3, "1000", 4) = 4 [ 69.913368][ T375] tty tty1: SAK: killed process 4255 (syz-executor903): by fd#3 [ 69.941531][ T60] tty tty1: SAK: killed process 4254 (syz-executor903): by fd#3 [ 69.941560][ T60] tty tty1: SAK: killed process 4253 (syz-executor903): by fd#3 [pid 4259] close(3executing program ) = 0 [pid 4259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4259] write(1, "executing program\n", 18) = 18 [pid 4259] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4260 attached [pid 4260] set_robust_list(0x5555700d1660, 24) = 0 [pid 4260] chdir("./797" [pid 289] umount2("./772", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4254] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4254, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] openat(AT_FDCWD, "./772", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4258] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4259] <... openat resumed>) = 3 [pid 4259] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4259] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4259] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4259] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4259] exit_group(0) = ? [pid 4260] <... chdir resumed>) = 0 [pid 4260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4260] setpgid(0, 0) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./779", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./779", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./779/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./779/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./779/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./779") = 0 [pid 290] mkdir("./780", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4261 [pid 4260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] getdents64(3, [pid 4259] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4259, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] umount2("./772/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4260] <... openat resumed>) = 3 [pid 289] newfstatat(AT_FDCWD, "./772/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 4261 attached [pid 4260] write(3, "1000", 4 [pid 289] unlink("./772/binderfs" [pid 4258] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4258, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 4260] <... write resumed>) = 4 [pid 4260] close(3) = 0 [pid 4260] symlink("/dev/binderfs", "./binderfs" [pid 289] <... unlink resumed>) = 0 [pid 4261] set_robust_list(0x5555700d1660, 24 [pid 289] getdents64(3, [pid 4261] <... set_robust_list resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4261] chdir("./780" [pid 4260] <... symlink resumed>) = 0 [pid 289] close(3 [pid 4261] <... chdir resumed>) = 0 [pid 4261] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 4260] write(1, "executing program\n", 18 [pid 289] <... close resumed>) = 0 [pid 4261] <... prctl resumed>) = 0 [pid 289] rmdir("./772" [pid 4261] setpgid(0, 0 [pid 4260] <... write resumed>) = 18 [pid 4260] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] <... restart_syscall resumed>) = 0 [pid 4261] <... setpgid resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 4261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] mkdir("./773", 0777 [pid 293] umount2("./811", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4261] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./811", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", [pid 4261] write(3, "1000", 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 4261] <... write resumed>) = 4 [pid 293] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4261] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./811/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./811/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./811/binderfs" [pid 4261] <... close resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 4261] symlink("/dev/binderfs", "./binderfs" [pid 293] getdents64(3, [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4262 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4261] <... symlink resumed>) = 0 [pid 293] close(3 [pid 292] umount2("./800", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4261] write(1, "executing program\n", 18 [pid 4260] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 executing program [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4261] <... write resumed>) = 18 [pid 293] rmdir("./811" [pid 292] openat(AT_FDCWD, "./800", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 4262 attached [pid 4261] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4260] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... rmdir resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 4261] <... openat resumed>) = 3 [pid 4260] <... ioctl resumed>) = 0 [pid 293] mkdir("./812", 0777 [pid 292] newfstatat(3, "", [pid 4262] set_robust_list(0x5555700d1660, 24 [pid 4261] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4260] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... mkdir resumed>) = 0 [pid 4262] <... set_robust_list resumed>) = 0 [pid 4261] <... ioctl resumed>) = 0 [pid 4260] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4262] chdir("./773" [pid 4261] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4260] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4262] <... chdir resumed>) = 0 [pid 4261] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4260] <... openat resumed>) = 4 [pid 4262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4261] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4260] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] getdents64(3, ./strace-static-x86_64: Process 4263 attached [pid 4262] <... prctl resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4263 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4263] set_robust_list(0x5555700d1660, 24 [pid 292] umount2("./800/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4263] <... set_robust_list resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4263] chdir("./812" [pid 292] newfstatat(AT_FDCWD, "./800/binderfs", [pid 4263] <... chdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] unlink("./800/binderfs" [pid 4263] <... prctl resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 4263] setpgid(0, 0 [pid 292] getdents64(3, [pid 4263] <... setpgid resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] close(3 [pid 4263] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 4263] write(3, "1000", 4 [pid 292] rmdir("./800" [pid 4263] <... write resumed>) = 4 [pid 292] <... rmdir resumed>) = 0 [pid 4263] close(3 [pid 292] mkdir("./801", 0777 [pid 4263] <... close resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 4263] symlink("/dev/binderfs", "./binderfs" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4263] <... symlink resumed>) = 0 [pid 4262] setpgid(0, 0 [pid 4261] <... openat resumed>) = ? [pid 4260] <... write resumed>) = ? executing program [pid 4263] write(1, "executing program\n", 18 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4264 [pid 4263] <... write resumed>) = 18 [pid 4263] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4263] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4263] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4263] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4263] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4263] exit_group(0) = ? ./strace-static-x86_64: Process 4264 attached [pid 4264] set_robust_list(0x5555700d1660, 24) = 0 [pid 4264] chdir("./801") = 0 [pid 4264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4264] setpgid(0, 0) = 0 [pid 4264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4264] write(3, "1000", 4 [pid 4263] +++ exited with 0 +++ [pid 4262] <... setpgid resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4263, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4264] <... write resumed>) = 4 [pid 4264] close(3) = 0 [pid 4260] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4260, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4262] <... openat resumed>) = 3 [pid 4261] +++ killed by SIGKILL +++ [pid 4262] write(3, "1000", 4) = 4 [pid 4264] symlink("/dev/binderfs", "./binderfs" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4261, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4262] close(3 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4262] <... close resumed>) = 0 [pid 4262] symlink("/dev/binderfs", "./binderfs" [pid 4264] <... symlink resumed>) = 0 [pid 4262] <... symlink resumed>) = 0 [pid 4264] write(1, "executing program\n", 18executing program executing program [pid 4262] write(1, "executing program\n", 18 [pid 4264] <... write resumed>) = 18 [pid 4262] <... write resumed>) = 18 [pid 291] <... restart_syscall resumed>) = 0 [pid 4262] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] umount2("./797", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4262] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./797", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4262] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 4262] <... ioctl resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4262] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] getdents64(3, [pid 4262] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4262] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] umount2("./797/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4262] <... openat resumed>) = 4 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4262] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] newfstatat(AT_FDCWD, "./797/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./797/binderfs" [pid 4262] <... write resumed>) = 8784 [pid 291] <... unlink resumed>) = 0 [pid 291] getdents64(3, [pid 4262] exit_group(0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4262] <... exit_group resumed>) = ? [pid 291] close(3) = 0 [pid 291] rmdir("./797") = 0 [pid 291] mkdir("./798", 0777 [pid 4262] +++ exited with 0 +++ [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 4264] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4264] <... openat resumed>) = 3 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4262, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] umount2("./812", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4265 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./812", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4264] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./812/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./812/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./812/binderfs") = 0 ./strace-static-x86_64: Process 4265 attached [pid 4264] <... ioctl resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./812" [pid 4265] set_robust_list(0x5555700d1660, 24 [pid 4264] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./813", 0777 [pid 4265] <... set_robust_list resumed>) = 0 [pid 4264] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... mkdir resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4265] chdir("./798" [pid 4264] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 4266 attached [pid 4266] set_robust_list(0x5555700d1660, 24 [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4266 [pid 290] umount2("./780", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4266] <... set_robust_list resumed>) = 0 [pid 4264] <... openat resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4266] chdir("./813" [pid 290] openat(AT_FDCWD, "./780", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4266] <... chdir resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 4266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] newfstatat(3, "", [pid 4266] <... prctl resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 69.941576][ T60] tty tty1: SAK: killed process 4256 (syz-executor903): by fd#3 [ 69.967027][ T60] tty tty1: SAK: killed process 4258 (syz-executor903): by fd#3 [ 69.982181][ T60] tty tty1: SAK: killed process 4260 (syz-executor903): by fd#3 [ 69.982209][ T60] tty tty1: SAK: killed process 4261 (syz-executor903): by fd#3 executing program executing program [pid 4266] setpgid(0, 0 [pid 290] getdents64(3, [pid 4266] <... setpgid resumed>) = 0 [pid 4264] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4265] <... chdir resumed>) = 0 [pid 290] umount2("./780/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4266] <... openat resumed>) = 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4266] write(3, "1000", 4 [pid 290] newfstatat(AT_FDCWD, "./780/binderfs", [pid 4266] <... write resumed>) = 4 [pid 4264] <... write resumed>) = 8784 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4266] close(3 [pid 290] unlink("./780/binderfs" [pid 4266] <... close resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 4266] symlink("/dev/binderfs", "./binderfs" [pid 290] getdents64(3, [pid 4266] <... symlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4266] write(1, "executing program\n", 18 [pid 290] close(3 [pid 4266] <... write resumed>) = 18 [pid 290] <... close resumed>) = 0 [pid 4266] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 290] rmdir("./780" [pid 4266] <... openat resumed>) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 4266] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 290] mkdir("./781", 0777 [pid 4266] <... ioctl resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 4266] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4266] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4266] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4267 [pid 4266] <... openat resumed>) = 4 [pid 4266] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4266] exit_group(0) = ? ./strace-static-x86_64: Process 4267 attached [pid 4267] set_robust_list(0x5555700d1660, 24) = 0 [pid 4267] chdir("./781") = 0 [pid 4267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4267] setpgid(0, 0) = 0 [pid 4267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4267] write(3, "1000", 4) = 4 [pid 4267] close(3) = 0 [pid 4267] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4267] write(1, "executing program\n", 18) = 18 [pid 4267] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4267] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4267] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4267] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4267] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4267] exit_group(0) = ? [pid 4266] +++ exited with 0 +++ [pid 4265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4266, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 4265] <... prctl resumed>) = 0 [pid 289] umount2("./773", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... restart_syscall resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./813", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] openat(AT_FDCWD, "./773", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./813", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 289] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./813/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./813/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./813/binderfs") = 0 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./813" [pid 4264] +++ killed by SIGKILL +++ [pid 293] <... rmdir resumed>) = 0 [pid 289] umount2("./773/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] mkdir("./814", 0777 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4264, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4267] +++ exited with 0 +++ [pid 4265] setpgid(0, 0 [pid 293] <... mkdir resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4267, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4265] <... setpgid resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./773/binderfs", ./strace-static-x86_64: Process 4268 attached [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4268 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4268] set_robust_list(0x5555700d1660, 24 [pid 289] unlink("./773/binderfs" [pid 4268] <... set_robust_list resumed>) = 0 [pid 4268] chdir("./814") = 0 [pid 4268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... unlink resumed>) = 0 [pid 4268] <... prctl resumed>) = 0 [pid 4268] setpgid(0, 0 [pid 289] getdents64(3, [pid 4268] <... setpgid resumed>) = 0 [pid 4268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4268] <... openat resumed>) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] close(3) = 0 [pid 292] umount2("./801", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./781", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] rmdir("./773" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./801", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./781", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] mkdir("./774", 0777 [pid 292] umount2("./801/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./781/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4268] write(3, "1000", 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4268] <... write resumed>) = 4 [pid 292] newfstatat(AT_FDCWD, "./801/binderfs", [pid 290] newfstatat(AT_FDCWD, "./781/binderfs", [pid 4268] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4268] <... close resumed>) = 0 [pid 292] unlink("./801/binderfs" [pid 290] unlink("./781/binderfs" [pid 289] <... mkdir resumed>) = 0 [pid 4268] symlink("/dev/binderfs", "./binderfs" [pid 292] <... unlink resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 4268] <... symlink resumed>) = 0 [pid 4265] <... openat resumed>) = 3 [pid 292] getdents64(3, [pid 290] getdents64(3, [pid 4268] write(1, "executing program\n", 18 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4268] <... write resumed>) = 18 [pid 292] close(3 [pid 290] close(3 [pid 4268] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 4268] <... openat resumed>) = 3 [pid 292] rmdir("./801" [pid 290] rmdir("./781"./strace-static-x86_64: Process 4269 attached [pid 4268] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4265] write(3, "1000", 4 [pid 292] <... rmdir resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4269 [pid 4268] <... ioctl resumed>) = 0 [pid 292] mkdir("./802", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 4269] set_robust_list(0x5555700d1660, 24 [pid 4268] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4265] <... write resumed>) = 4 [pid 292] <... mkdir resumed>) = 0 [pid 290] mkdir("./782", 0777 [pid 4269] <... set_robust_list resumed>) = 0 [pid 4268] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4265] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4269] chdir("./774" [pid 4265] <... close resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4270 attached [pid 4268] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4270] set_robust_list(0x5555700d1660, 24 [pid 4269] <... chdir resumed>) = 0 [pid 4268] <... openat resumed>) = 4 [pid 4265] symlink("/dev/binderfs", "./binderfs" [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4270 ./strace-static-x86_64: Process 4271 attached [pid 4270] <... set_robust_list resumed>) = 0 [pid 4268] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4271] set_robust_list(0x5555700d1660, 24 [ 70.009793][ T60] tty tty1: SAK: killed process 4264 (syz-executor903): by fd#3 [pid 4270] chdir("./802" [pid 4269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4268] <... write resumed>) = ? [pid 4265] <... symlink resumed>) = 0 [pid 4269] <... prctl resumed>) = 0 [pid 4265] write(1, "executing program\n", 18executing program [pid 4269] setpgid(0, 0 [pid 4265] <... write resumed>) = 18 [pid 4269] <... setpgid resumed>) = 0 [pid 4265] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4265] <... openat resumed>) = 3 [pid 4269] <... openat resumed>) = 3 [pid 4265] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4269] write(3, "1000", 4 [pid 4265] <... ioctl resumed>) = 0 [pid 4269] <... write resumed>) = 4 [pid 4265] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4269] close(3 [pid 4265] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4269] <... close resumed>) = 0 [pid 4265] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4269] symlink("/dev/binderfs", "./binderfs" [pid 4265] <... openat resumed>) = 4 [pid 4271] <... set_robust_list resumed>) = 0 executing program executing program [pid 4270] <... chdir resumed>) = 0 [pid 4265] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4271 [pid 4269] <... symlink resumed>) = 0 [pid 4271] chdir("./782" [pid 4270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4271] <... chdir resumed>) = 0 [pid 4270] <... prctl resumed>) = 0 [pid 4271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4270] setpgid(0, 0 [pid 4271] <... prctl resumed>) = 0 [pid 4270] <... setpgid resumed>) = 0 [pid 4271] setpgid(0, 0 [pid 4270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4271] <... setpgid resumed>) = 0 [pid 4270] <... openat resumed>) = 3 [pid 4271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4270] write(3, "1000", 4 [pid 4271] <... openat resumed>) = 3 [pid 4270] <... write resumed>) = 4 [pid 4271] write(3, "1000", 4 [pid 4270] close(3 [pid 4271] <... write resumed>) = 4 [pid 4270] <... close resumed>) = 0 [pid 4271] close(3 [pid 4270] symlink("/dev/binderfs", "./binderfs" [pid 4271] <... close resumed>) = 0 [pid 4270] <... symlink resumed>) = 0 [pid 4271] symlink("/dev/binderfs", "./binderfs" [pid 4270] write(1, "executing program\n", 18 [pid 4271] <... symlink resumed>) = 0 [pid 4270] <... write resumed>) = 18 [pid 4271] write(1, "executing program\n", 18 [pid 4270] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4271] <... write resumed>) = 18 [pid 4270] <... openat resumed>) = 3 [pid 4271] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4270] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4271] <... openat resumed>) = 3 [pid 4270] <... ioctl resumed>) = 0 [pid 4271] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4270] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4271] <... ioctl resumed>) = 0 [pid 4270] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4271] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4270] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4271] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4271] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4270] <... openat resumed>) = 4 [pid 4265] <... write resumed>) = ? [pid 4271] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4270] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4269] write(1, "executing program\n", 18 [pid 4268] +++ killed by SIGKILL +++ [pid 4269] <... write resumed>) = 18 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4268, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4269] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4270] <... write resumed>) = 8784 [pid 4269] <... openat resumed>) = 3 [pid 4271] <... write resumed>) = 8784 [pid 4270] exit_group(0 [pid 4269] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] umount2("./814", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 4271] exit_group(0 [pid 4270] <... exit_group resumed>) = ? [pid 4269] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4271] <... exit_group resumed>) = ? [pid 4269] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] openat(AT_FDCWD, "./814", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4269] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... openat resumed>) = 3 [pid 4269] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] newfstatat(3, "", [pid 4269] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4270] +++ exited with 0 +++ [pid 4269] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] getdents64(3, [pid 4269] <... write resumed>) = 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4269] exit_group(0 [pid 4271] +++ exited with 0 +++ [pid 293] umount2("./814/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4270, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4269] <... exit_group resumed>) = ? [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4265] +++ killed by SIGKILL +++ [pid 293] newfstatat(AT_FDCWD, "./814/binderfs", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4271, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4269] +++ exited with 0 +++ [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4265, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] unlink("./814/binderfs" [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4269, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] <... unlink resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 293] getdents64(3, [pid 290] umount2("./782", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] umount2("./798", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] close(3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] rmdir("./814" [pid 290] openat(AT_FDCWD, "./782", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... rmdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "./798", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... openat resumed>) = 3 [pid 293] mkdir("./815", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4272 [pid 291] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 4272 attached [pid 4272] set_robust_list(0x5555700d1660, 24 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./782/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./798/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./782/binderfs", [pid 291] newfstatat(AT_FDCWD, "./798/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./782/binderfs" [pid 291] unlink("./798/binderfs" [pid 4272] <... set_robust_list resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 4272] chdir("./815" [pid 291] <... unlink resumed>) = 0 [pid 290] getdents64(3, [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 291] close(3 [pid 290] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] rmdir("./782" [pid 291] rmdir("./798" [pid 4272] <... chdir resumed>) = 0 [pid 4272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4272] setpgid(0, 0) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 4272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... rmdir resumed>) = 0 [pid 290] mkdir("./783", 0777 [pid 291] mkdir("./799", 0777 [pid 4272] <... openat resumed>) = 3 [pid 4272] write(3, "1000", 4) = 4 [pid 4272] close(3) = 0 [pid 4272] symlink("/dev/binderfs", "./binderfs" [pid 290] <... mkdir resumed>) = 0 [pid 4272] <... symlink resumed>) = 0 [pid 4272] write(1, "executing program\n", 18 executing program [pid 291] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4272] <... write resumed>) = 18 [pid 4272] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4272] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4272] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4272] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4273 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4274 [pid 4272] <... openat resumed>) = 4 [pid 4272] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4274 attached ./strace-static-x86_64: Process 4273 attached [pid 4274] set_robust_list(0x5555700d1660, 24) = 0 [pid 4274] chdir("./799") = 0 [pid 4274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4274] setpgid(0, 0) = 0 [pid 4274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4274] write(3, "1000", 4) = 4 [pid 4274] close(3) = 0 [pid 4274] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4274] write(1, "executing program\n", 18 [pid 292] umount2("./802", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4274] <... write resumed>) = 18 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4274] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 292] openat(AT_FDCWD, "./802", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4274] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 4274] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] newfstatat(3, "", [pid 4274] <... ioctl resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4274] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] getdents64(3, [pid 4274] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4274] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 292] umount2("./802/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./802/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./802/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./802") = 0 [pid 292] mkdir("./803", 0777 [pid 4274] <... openat resumed>) = 4 [pid 4272] <... write resumed>) = ? [pid 292] <... mkdir resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 4274] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4272] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4272, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4275 [pid 289] umount2("./774", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program executing program executing program ) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./774", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./774/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./774/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./774/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./774") = 0 [pid 289] mkdir("./775", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4276 ./strace-static-x86_64: Process 4275 attached [pid 4275] set_robust_list(0x5555700d1660, 24) = 0 [pid 4275] chdir("./803") = 0 [pid 4275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4275] setpgid(0, 0) = 0 [pid 4275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4275] write(3, "1000", 4) = 4 [pid 4275] close(3) = 0 [pid 4275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4275] write(1, "executing program\n", 18) = 18 [pid 4275] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4275] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4275] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4275] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000./strace-static-x86_64: Process 4276 attached [pid 4276] set_robust_list(0x5555700d1660, 24) = 0 [pid 4276] chdir("./775") = 0 [pid 4276] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4276] setpgid(0, 0) = 0 [pid 4276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4276] write(3, "1000", 4) = 4 [pid 4276] close(3) = 0 [pid 4276] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4276] write(1, "executing program\n", 18) = 18 [pid 4276] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4276] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4276] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4276] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4273] set_robust_list(0x5555700d1660, 24) = 0 [pid 4273] chdir("./783") = 0 [pid 4273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4273] setpgid(0, 0) = 0 [pid 4273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4273] write(3, "1000", 4) = 4 [pid 4273] close(3) = 0 [pid 4273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4273] write(1, "executing program\n", 18) = 18 [pid 4273] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4273] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4275] <... openat resumed>) = 4 [pid 4274] <... write resumed>) = ? [pid 4276] <... openat resumed>) = 4 [pid 4273] <... ioctl resumed>) = 0 [ 70.040255][ T375] tty tty1: SAK: killed process 4268 (syz-executor903): by fd#3 [ 70.049647][ T60] tty tty1: SAK: killed process 4265 (syz-executor903): by fd#3 [ 70.068539][ T60] tty tty1: SAK: killed process 4272 (syz-executor903): by fd#3 [ 70.078579][ T375] tty tty1: SAK: killed process 4274 (syz-executor903): by fd#3 [pid 4275] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4276] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 4273] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4273, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4275] <... write resumed>) = ? [pid 4274] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4274, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] umount2("./815", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./815", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4276] +++ killed by SIGKILL +++ [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4276, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./815/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./799", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./783", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./815/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] openat(AT_FDCWD, "./799", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./783", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] unlink("./815/binderfs" [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 291] newfstatat(3, "", [pid 290] newfstatat(3, "", [pid 293] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] getdents64(3, executing program [pid 290] getdents64(3, [pid 293] close(3 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] umount2("./799/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./783/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./799/binderfs", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./783/binderfs", [pid 291] unlink("./799/binderfs" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] unlink("./783/binderfs" [pid 291] getdents64(3, [pid 290] <... unlink resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] getdents64(3, [pid 291] close(3 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... close resumed>) = 0 [pid 290] close(3 [pid 291] rmdir("./799" [pid 290] <... close resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] rmdir("./783" [pid 291] mkdir("./800", 0777 [pid 290] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] mkdir("./784", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4277 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4278 ./strace-static-x86_64: Process 4278 attached [pid 4278] set_robust_list(0x5555700d1660, 24) = 0 [pid 4278] chdir("./784") = 0 [pid 4278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4278] setpgid(0, 0) = 0 [pid 4278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4278] write(3, "1000", 4) = 4 [pid 4278] close(3) = 0 [pid 4278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4278] write(1, "executing program\n", 18) = 18 [pid 4278] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4278] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4278] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4278] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4278] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4278] exit_group(0) = ? [pid 4275] +++ killed by SIGKILL +++ [pid 293] <... close resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 293] rmdir("./815" [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4275, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./816", 0777 [pid 289] umount2("./775", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 4277 attached [pid 4277] set_robust_list(0x5555700d1660, 24) = 0 [pid 4277] chdir("./800" [pid 293] <... mkdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "./775", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... openat resumed>) = 3 [pid 4277] <... chdir resumed>) = 0 [pid 4277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4277] setpgid(0, 0) = 0 [pid 289] newfstatat(3, "", [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4279 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 4277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./775/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./775/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./775/binderfs" [pid 4277] <... openat resumed>) = 3 [pid 4277] write(3, "1000", 4) = 4 [pid 4277] close(3) = 0 [pid 4277] symlink("/dev/binderfs", "./binderfs" [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./775" [pid 4277] <... symlink resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./776", 0777 [pid 292] umount2("./803", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./803", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 292] getdents64(3, [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./803/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./803/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./803/binderfs" [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4280 [pid 292] <... unlink resumed>) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./803"executing program executing program ./strace-static-x86_64: Process 4280 attached ) = 0 [pid 292] mkdir("./804", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4281 [pid 4277] write(1, "executing program\n", 18) = 18 [pid 4277] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4279 attached [pid 4279] set_robust_list(0x5555700d1660, 24) = 0 [pid 4279] chdir("./816") = 0 [pid 4279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4279] setpgid(0, 0) = 0 [pid 4279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4279] write(3, "1000", 4) = 4 [pid 4279] close(3) = 0 [pid 4279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4279] write(1, "executing program\n", 18) = 18 [pid 4279] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4280] set_robust_list(0x5555700d1660, 24) = 0 [pid 4280] chdir("./776") = 0 [pid 4280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4280] setpgid(0, 0) = 0 [pid 4280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4280] write(3, "1000", 4) = 4 [pid 4280] close(3) = 0 [pid 4280] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4280] write(1, "executing program\n", 18) = 18 [pid 4280] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4281 attached [pid 4281] set_robust_list(0x5555700d1660, 24) = 0 [pid 4278] +++ exited with 0 +++ [pid 4281] chdir("./804" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4278, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4281] <... chdir resumed>) = 0 [pid 4277] <... openat resumed>) = 3 [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4277] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4280] <... openat resumed>) = 3 [pid 4279] <... openat resumed>) = 3 [pid 4277] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4280] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4277] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4277] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4277] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4280] <... ioctl resumed>) = 0 [pid 4279] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4277] <... write resumed>) = 8784 [pid 4279] <... ioctl resumed>) = 230 [pid 290] <... restart_syscall resumed>) = 0 [pid 4281] <... prctl resumed>) = 0 [pid 290] umount2("./784", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./784", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4280] +++ killed by SIGKILL +++ [pid 290] umount2("./784/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./784/binderfs", [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4280, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4281] setpgid(0, 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./784/binderfs" [pid 4281] <... setpgid resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... unlink resumed>) = 0 [pid 4281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 289] <... restart_syscall resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./784" [pid 289] umount2("./776", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./776", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... rmdir resumed>) = 0 [pid 4281] <... openat resumed>) = 3 [pid 290] mkdir("./785", 0777 [pid 289] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] <... mkdir resumed>) = 0 [pid 4281] write(3, "1000", 4 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] umount2("./776/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./776/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./776/binderfs" [pid 4281] <... write resumed>) = 4 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4282 [pid 4279] +++ killed by SIGKILL +++ [pid 4281] close(3 [pid 289] <... unlink resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4279, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./776") = 0 [pid 289] mkdir("./777", 0777) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4283 ./strace-static-x86_64: Process 4282 attached [pid 4282] set_robust_list(0x5555700d1660, 24) = 0 [pid 4282] chdir("./785") = 0 [pid 4282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4282] setpgid(0, 0) = 0 [pid 4282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4282] write(3, "1000", 4) = 4 [pid 4282] close(3) = 0 [pid 4282] symlink("/dev/binderfs", "./binderfs") = 0 [ 70.087680][ T60] tty tty1: SAK: killed process 4273 (syz-executor903): by fd#3 [ 70.087708][ T60] tty tty1: SAK: killed process 4275 (syz-executor903): by fd#3 [ 70.087726][ T60] tty tty1: SAK: killed process 4276 (syz-executor903): by fd#3 [ 70.121528][ T375] tty tty1: SAK: killed process 4277 (syz-executor903): by fd#3 [ 70.121562][ T375] tty tty1: SAK: killed process 4279 (syz-executor903): by fd#3 [pid 4282] write(1, "executing program\n", 18 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] umount2("./816", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./816", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4281] <... close resumed>) = 0 ./strace-static-x86_64: Process 4283 attached [pid 4281] symlink("/dev/binderfs", "./binderfs" [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./816/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./816/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./816/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./816") = 0 [pid 293] mkdir("./817", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4284 executing program [pid 4282] <... write resumed>) = 18 [pid 4282] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 4283] set_robust_list(0x5555700d1660, 24) = 0 [pid 4283] chdir("./777") = 0 [pid 4283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4283] setpgid(0, 0) = 0 [pid 4283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4283] write(3, "1000", 4) = 4 [pid 4283] close(3) = 0 [pid 4283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4283] write(1, "executing program\n", 18) = 18 [pid 4283] openat(AT_FDCWD, "/dev/char/4:1", O_RDWRexecuting program [pid 4281] <... symlink resumed>) = 0 [pid 4281] write(1, "executing program\n", 18) = 18 [pid 4281] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR./strace-static-x86_64: Process 4284 attached [pid 4284] set_robust_list(0x5555700d1660, 24) = 0 [pid 4284] chdir("./817" [pid 4277] +++ killed by SIGKILL +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4277, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4283] <... openat resumed>) = 3 [pid 4281] <... openat resumed>) = 3 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4283] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4281] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4283] <... ioctl resumed>) = 0 [pid 4281] <... ioctl resumed>) = 0 [pid 4283] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4281] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4283] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4281] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4283] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4281] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4283] <... openat resumed>) = 4 [pid 4281] <... openat resumed>) = 4 [pid 4283] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4281] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4284] <... chdir resumed>) = 0 [pid 4283] <... write resumed>) = 8784 [pid 4282] <... openat resumed>) = 3 [pid 4281] <... write resumed>) = 8784 [pid 4283] exit_group(0 [pid 4281] exit_group(0 [pid 4283] <... exit_group resumed>) = ? [pid 4282] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4281] <... exit_group resumed>) = ? [pid 4284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4283] +++ exited with 0 +++ [pid 4282] <... ioctl resumed>) = 0 [pid 4281] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4283, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4281, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4282] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4284] <... prctl resumed>) = 0 [pid 4282] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4284] setpgid(0, 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./777", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./777", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4284] <... setpgid resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 4284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] newfstatat(3, "", [pid 4284] <... openat resumed>) = 3 [pid 292] <... restart_syscall resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4284] write(3, "1000", 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] getdents64(3, [pid 4284] <... write resumed>) = 4 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4284] close(3 [pid 292] umount2("./804", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./777/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4284] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./800", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4284] symlink("/dev/binderfs", "./binderfs" [pid 292] openat(AT_FDCWD, "./804", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./777/binderfs", [pid 4284] <... symlink resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] openat(AT_FDCWD, "./800", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4284] write(1, "executing program\n", 18 [pid 4282] +++ killed by SIGKILL +++ [pid 292] newfstatat(3, "", [pid 291] <... openat resumed>) = 3 [pid 289] unlink("./777/binderfs" [pid 4284] <... write resumed>) = 18 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4282, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] getdents64(3, [pid 289] <... unlink resumed>) = 0 [pid 4284] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] getdents64(3, [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] getdents64(3, [pid 292] umount2("./804/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./800/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4284] <... openat resumed>) = 3 [pid 292] newfstatat(AT_FDCWD, "./804/binderfs", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(AT_FDCWD, "./800/binderfs", [pid 292] unlink("./804/binderfs" [pid 289] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4284] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... unlink resumed>) = 0 [pid 291] unlink("./800/binderfs" [pid 290] <... restart_syscall resumed>) = 0 [pid 289] rmdir("./777" [pid 292] getdents64(3, [pid 4284] <... ioctl resumed>) = 0 [pid 4284] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... unlink resumed>) = 0 [pid 4284] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] <... rmdir resumed>) = 0 [pid 291] getdents64(3, [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] mkdir("./778", 0777 [pid 292] close(3 [pid 291] close(3 [pid 290] umount2("./785", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4284] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4284] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = ? [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... mkdir resumed>) = 0 [pid 292] rmdir("./804" [pid 291] rmdir("./800" [pid 290] openat(AT_FDCWD, "./785", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4284] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4284, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 291] mkdir("./801", 0777./strace-static-x86_64: Process 4285 attached [pid 292] mkdir("./805", 0777 [pid 291] <... mkdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 293] umount2("./817", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4286 attached [pid 4285] set_robust_list(0x5555700d1660, 24 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... mkdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4285 [pid 4286] set_robust_list(0x5555700d1660, 24 [pid 4285] <... set_robust_list resumed>) = 0 [pid 293] openat(AT_FDCWD, "./817", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4286 [pid 290] getdents64(3, [pid 293] <... openat resumed>) = 3 [pid 4286] <... set_robust_list resumed>) = 0 [pid 4286] chdir("./801" [pid 293] newfstatat(3, "", [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4287 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] umount2("./785/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4285] chdir("./778" [pid 293] getdents64(3, [pid 4285] <... chdir resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4286] <... chdir resumed>) = 0 [pid 4285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] newfstatat(AT_FDCWD, "./785/binderfs", [pid 4285] <... prctl resumed>) = 0 [pid 293] umount2("./817/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4285] setpgid(0, 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] unlink("./785/binderfs" [pid 4285] <... setpgid resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./817/binderfs", [pid 4286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4286] setpgid(0, 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... unlink resumed>) = 0 [pid 293] unlink("./817/binderfs" [pid 290] getdents64(3, [pid 4286] <... setpgid resumed>) = 0 [pid 4286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... unlink resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] getdents64(3, [pid 290] close(3 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] <... close resumed>) = 0 [pid 293] close(3 [pid 290] rmdir("./785" [pid 4286] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 4286] write(3, "1000", 4) = 4 [pid 4286] close(3) = 0 [pid 4285] <... openat resumed>) = 3 executing program [pid 293] rmdir("./817" [pid 290] <... rmdir resumed>) = 0 [pid 4285] write(3, "1000", 4 [pid 4286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4286] write(1, "executing program\n", 18 [pid 293] <... rmdir resumed>) = 0 [pid 290] mkdir("./786", 0777 [pid 4285] <... write resumed>) = 4 [pid 293] mkdir("./818", 0777 [pid 4286] <... write resumed>) = 18 [pid 4286] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 4286] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] <... mkdir resumed>) = 0 [pid 4285] close(3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4285] <... close resumed>) = 0 ./strace-static-x86_64: Process 4287 attached [pid 4286] <... ioctl resumed>) = 0 [pid 4287] set_robust_list(0x5555700d1660, 24 [pid 4286] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4287] <... set_robust_list resumed>) = 0 [pid 4286] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4287] chdir("./805" [pid 4286] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4287] <... chdir resumed>) = 0 [pid 4286] <... openat resumed>) = 4 [pid 4287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4286] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4285] symlink("/dev/binderfs", "./binderfs" [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4288 ./strace-static-x86_64: Process 4289 attached ./strace-static-x86_64: Process 4288 attached [pid 4287] <... prctl resumed>) = 0 [pid 4286] <... write resumed>) = ? [pid 4285] <... symlink resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4289 [pid 4289] set_robust_list(0x5555700d1660, 24 [pid 4288] set_robust_list(0x5555700d1660, 24 [pid 4287] setpgid(0, 0 [pid 4285] write(1, "executing program\n", 18executing program ) = 18 [pid 4289] <... set_robust_list resumed>) = 0 [pid 4288] <... set_robust_list resumed>) = 0 [pid 4287] <... setpgid resumed>) = 0 [pid 4286] +++ killed by SIGKILL +++ [pid 4285] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4286, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4285] <... openat resumed>) = 3 [pid 4288] chdir("./818" [pid 4287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4289] chdir("./786" [pid 4288] <... chdir resumed>) = 0 [pid 4285] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4289] <... chdir resumed>) = 0 [pid 4288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4287] <... openat resumed>) = 3 [pid 4285] <... ioctl resumed>) = 0 [pid 4289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4288] <... prctl resumed>) = 0 [pid 4287] write(3, "1000", 4 [pid 4285] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4289] <... prctl resumed>) = 0 [pid 4288] setpgid(0, 0 [pid 4287] <... write resumed>) = 4 [pid 4285] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4289] setpgid(0, 0 [pid 4288] <... setpgid resumed>) = 0 [pid 4287] close(3 [pid 4285] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4289] <... setpgid resumed>) = 0 [pid 4288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4287] <... close resumed>) = 0 [pid 4285] <... openat resumed>) = 4 [pid 4289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4288] <... openat resumed>) = 3 [pid 4287] symlink("/dev/binderfs", "./binderfs" [pid 4285] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4289] <... openat resumed>) = 3 [pid 4288] write(3, "1000", 4 [pid 4289] write(3, "1000", 4 [pid 4288] <... write resumed>) = 4 [pid 4289] <... write resumed>) = 4 [pid 4288] close(3 [pid 4285] <... write resumed>) = 8784 [pid 4289] close(3 [pid 4288] <... close resumed>) = 0 [pid 4289] <... close resumed>) = 0 [pid 4288] symlink("/dev/binderfs", "./binderfs" [pid 4285] exit_group(0 [pid 4289] symlink("/dev/binderfs", "./binderfs" [pid 4288] <... symlink resumed>) = 0 executing program executing program [pid 4287] <... symlink resumed>) = 0 [pid 4285] <... exit_group resumed>) = ? [pid 4289] <... symlink resumed>) = 0 [pid 4288] write(1, "executing program\n", 18 [pid 4289] write(1, "executing program\n", 18 [pid 4288] <... write resumed>) = 18 [pid 4289] <... write resumed>) = 18 [pid 4288] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4289] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4288] <... openat resumed>) = 3 [pid 4289] <... openat resumed>) = 3 [pid 4288] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4289] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4288] <... ioctl resumed>) = 0 [pid 4285] +++ killed by SIGKILL +++ [pid 4289] <... ioctl resumed>) = 0 [pid 4288] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4287] write(1, "executing program\n", 18 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4285, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4289] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} executing program [pid 4288] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4289] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4288] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4287] <... write resumed>) = 18 [pid 4289] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4288] <... openat resumed>) = 4 [pid 4289] <... openat resumed>) = 4 [ 70.121578][ T375] tty tty1: SAK: killed process 4280 (syz-executor903): by fd#3 [ 70.152471][ T375] tty tty1: SAK: killed process 4282 (syz-executor903): by fd#3 [ 70.163795][ T375] tty tty1: SAK: killed process 4284 (syz-executor903): by fd#3 [ 70.179419][ T375] tty tty1: SAK: killed process 4286 (syz-executor903): by fd#3 [pid 4288] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4287] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4289] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4288] <... write resumed>) = 8784 [pid 4289] <... write resumed>) = 8784 [pid 4288] exit_group(0 [pid 4289] exit_group(0 [pid 4288] <... exit_group resumed>) = ? [pid 4289] <... exit_group resumed>) = ? [pid 4287] <... openat resumed>) = 3 [pid 4287] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4287] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4287] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4287] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4287] exit_group(0) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./778", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./778", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./778/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./778/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./778/binderfs" [pid 4288] +++ exited with 0 +++ [pid 4289] +++ exited with 0 +++ [pid 4287] +++ exited with 0 +++ [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4288, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4289, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] getdents64(3, [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4287, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] close(3 [pid 291] umount2("./801", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./778" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... rmdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "./801", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] mkdir("./779", 0777 [pid 291] <... openat resumed>) = 3 [pid 289] <... mkdir resumed>) = 0 [pid 291] newfstatat(3, "", [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4290 ./strace-static-x86_64: Process 4290 attached [pid 291] getdents64(3, [pid 4290] set_robust_list(0x5555700d1660, 24 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4290] <... set_robust_list resumed>) = 0 [pid 291] umount2("./801/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4290] chdir("./779" [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4290] <... chdir resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./801/binderfs", [pid 4290] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4290] <... prctl resumed>) = 0 [pid 291] unlink("./801/binderfs" [pid 4290] setpgid(0, 0) = 0 [pid 4290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... unlink resumed>) = 0 [pid 4290] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 4290] write(3, "1000", 4 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4290] <... write resumed>) = 4 [pid 291] close(3 [pid 4290] close(3 [pid 291] <... close resumed>) = 0 [pid 4290] <... close resumed>) = 0 [pid 291] rmdir("./801" [pid 4290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 291] <... rmdir resumed>) = 0 [pid 4290] write(1, "executing program\n", 18 [pid 291] mkdir("./802", 0777executing program [pid 4290] <... write resumed>) = 18 [pid 4290] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4290] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... mkdir resumed>) = 0 [pid 4290] <... ioctl resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4290] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4290] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4290] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4291 ./strace-static-x86_64: Process 4291 attached [pid 293] <... restart_syscall resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./786", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4291] set_robust_list(0x5555700d1660, 24 [pid 4290] <... write resumed>) = ? [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./786", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] umount2("./818", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] umount2("./805", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./786/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./786/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] openat(AT_FDCWD, "./818", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./805", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] unlink("./786/binderfs" [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 290] <... unlink resumed>) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./786" [pid 4291] <... set_robust_list resumed>) = 0 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./787", 0777 [pid 4291] chdir("./802" [pid 4290] +++ killed by SIGKILL +++ [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 290] <... mkdir resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] getdents64(3, [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4290, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 4292 attached [pid 4291] <... chdir resumed>) = 0 [pid 293] umount2("./818/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 4291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./805/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4292 [pid 4291] <... prctl resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./818/binderfs", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4291] setpgid(0, 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./805/binderfs", [pid 4291] <... setpgid resumed>) = 0 [pid 293] unlink("./818/binderfs" [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4292] set_robust_list(0x5555700d1660, 24 [pid 4291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... unlink resumed>) = 0 [pid 292] unlink("./805/binderfs" [pid 4291] <... openat resumed>) = 3 [pid 293] getdents64(3, [pid 292] <... unlink resumed>) = 0 [pid 4291] write(3, "1000", 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 4291] <... write resumed>) = 4 [pid 293] close(3 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4291] close(3 [pid 293] <... close resumed>) = 0 [pid 292] close(3 [pid 4291] <... close resumed>) = 0 [pid 293] rmdir("./818" [pid 292] <... close resumed>) = 0 [pid 4292] <... set_robust_list resumed>) = 0 [pid 4291] symlink("/dev/binderfs", "./binderfs" [pid 293] <... rmdir resumed>) = 0 [pid 292] rmdir("./805" [pid 4292] chdir("./787" [pid 4291] <... symlink resumed>) = 0 executing program [pid 293] mkdir("./819", 0777 [pid 292] <... rmdir resumed>) = 0 [pid 4292] <... chdir resumed>) = 0 [pid 4292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4292] setpgid(0, 0) = 0 [pid 4292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... mkdir resumed>) = 0 [pid 292] mkdir("./806", 0777 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4292] <... openat resumed>) = 3 [pid 4292] write(3, "1000", 4) = 4 [pid 4292] close(3 [pid 292] <... mkdir resumed>) = 0 [pid 4292] <... close resumed>) = 0 [pid 4292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4293 [pid 4292] write(1, "executing program\n", 18) = 18 [pid 4292] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4292] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4294 [pid 4292] <... ioctl resumed>) = 0 [pid 4292] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4292] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4292] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784./strace-static-x86_64: Process 4294 attached ./strace-static-x86_64: Process 4293 attached [pid 4291] write(1, "executing program\n", 18executing program [pid 4294] set_robust_list(0x5555700d1660, 24 [pid 4293] set_robust_list(0x5555700d1660, 24 [pid 4291] <... write resumed>) = 18 [pid 4294] <... set_robust_list resumed>) = 0 [pid 4293] <... set_robust_list resumed>) = 0 [pid 4291] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4294] chdir("./806" [pid 4293] chdir("./819" [pid 4291] <... openat resumed>) = 3 [pid 4294] <... chdir resumed>) = 0 [pid 4293] <... chdir resumed>) = 0 [pid 4291] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4291] <... ioctl resumed>) = 0 [pid 4294] <... prctl resumed>) = 0 [pid 4293] <... prctl resumed>) = 0 [pid 4291] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4294] setpgid(0, 0 [pid 4293] setpgid(0, 0 [pid 4291] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4294] <... setpgid resumed>) = 0 [pid 4293] <... setpgid resumed>) = 0 [pid 4291] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4294] <... openat resumed>) = 3 [pid 4294] write(3, "1000", 4 [pid 4293] <... openat resumed>) = 3 [pid 4294] <... write resumed>) = 4 [pid 4294] close(3 [pid 4293] write(3, "1000", 4 [pid 4294] <... close resumed>) = 0 [pid 4294] symlink("/dev/binderfs", "./binderfs" [pid 4293] <... write resumed>) = 4 [pid 4294] <... symlink resumed>) = 0 [pid 4292] <... write resumed>) = ? [pid 4291] <... openat resumed>) = 4 executing program [pid 289] <... restart_syscall resumed>) = 0 [pid 4294] write(1, "executing program\n", 18 [pid 4293] close(3 [pid 4291] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4294] <... write resumed>) = 18 [pid 4294] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4294] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4291] <... write resumed>) = 8784 [pid 4294] <... ioctl resumed>) = 0 [pid 4294] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4291] exit_group(0 [pid 289] umount2("./779", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4294] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4291] <... exit_group resumed>) = ? [pid 4294] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4294] <... openat resumed>) = 4 [pid 4294] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4294] exit_group(0 [pid 4291] +++ exited with 0 +++ [pid 289] openat(AT_FDCWD, "./779", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4294] <... exit_group resumed>) = ? [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4291, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4294] +++ exited with 0 +++ [pid 4293] <... close resumed>) = 0 [pid 4292] +++ killed by SIGKILL +++ [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... openat resumed>) = 3 [pid 4293] symlink("/dev/binderfs", "./binderfs" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4292, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] newfstatat(3, "", [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4294, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 4293] <... symlink resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 4293] write(1, "executing program\n", 18 [pid 289] getdents64(3, [pid 4293] <... write resumed>) = 18 [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4293] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] umount2("./779/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... restart_syscall resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4293] <... openat resumed>) = 3 [pid 289] newfstatat(AT_FDCWD, "./779/binderfs", [pid 291] umount2("./802", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4293] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] openat(AT_FDCWD, "./802", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] unlink("./779/binderfs" [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... unlink resumed>) = 0 [pid 4293] <... ioctl resumed>) = 0 [pid 291] umount2("./802/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4293] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] newfstatat(AT_FDCWD, "./802/binderfs", [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./802/binderfs" [pid 4293] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] <... unlink resumed>) = 0 [pid 289] close(3 [pid 291] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4293] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 289] <... close resumed>) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./802" [pid 4293] <... openat resumed>) = 4 [pid 289] rmdir("./779" [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./803", 0777 [pid 4293] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... rmdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] mkdir("./780", 0777 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... mkdir resumed>) = 0 [pid 4293] <... write resumed>) = 8784 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4295 ./strace-static-x86_64: Process 4295 attached [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4295] set_robust_list(0x5555700d1660, 24) = 0 [pid 4295] chdir("./803") = 0 [pid 4295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 70.192451][ T375] tty tty1: SAK: killed process 4285 (syz-executor903): by fd#3 [ 70.208663][ T20] tty tty1: SAK: killed process 4290 (syz-executor903): by fd#3 [ 70.227078][ T20] tty tty1: SAK: killed process 4292 (syz-executor903): by fd#3 [pid 4295] setpgid(0, 0) = 0 [pid 4295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4295] write(3, "1000", 4) = 4 [pid 4295] close(3) = 0 [pid 4295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4295] write(1, "executing program\n", 18executing program ) = 18 [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./806", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./806", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./806/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./806/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./806/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./806") = 0 [pid 292] mkdir("./807", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4296 [pid 4295] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4295] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4297 [pid 290] umount2("./787", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./787", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4293] +++ killed by SIGKILL +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4293, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 290] umount2("./787/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4296 attached ./strace-static-x86_64: Process 4297 attached [pid 4296] set_robust_list(0x5555700d1660, 24 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4296] <... set_robust_list resumed>) = 0 [pid 4295] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 290] newfstatat(AT_FDCWD, "./787/binderfs", [pid 4297] set_robust_list(0x5555700d1660, 24 [pid 4296] chdir("./807" [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4296] <... chdir resumed>) = 0 [pid 290] unlink("./787/binderfs" [pid 4296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4297] <... set_robust_list resumed>) = 0 [pid 4297] chdir("./780" [pid 290] <... unlink resumed>) = 0 [pid 4296] <... prctl resumed>) = 0 [pid 290] getdents64(3, [pid 4297] <... chdir resumed>) = 0 [pid 4296] setpgid(0, 0 [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4296] <... setpgid resumed>) = 0 [pid 290] close(3 [pid 4297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... close resumed>) = 0 [pid 4297] setpgid(0, 0) = 0 [pid 4296] <... openat resumed>) = 3 [pid 290] rmdir("./787" [pid 4296] write(3, "1000", 4 [pid 4297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] <... rmdir resumed>) = 0 [pid 4296] <... write resumed>) = 4 [pid 290] mkdir("./788", 0777 [pid 4296] close(3 [pid 4297] write(3, "1000", 4) = 4 [pid 4297] close(3) = 0 [pid 4297] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4296] <... close resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 executing program executing program [pid 4296] symlink("/dev/binderfs", "./binderfs" [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4297] write(1, "executing program\n", 18) = 18 [pid 4297] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4296] <... symlink resumed>) = 0 [pid 4297] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4297] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4296] write(1, "executing program\n", 18 [pid 4297] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4296] <... write resumed>) = 18 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4298 [pid 4297] <... openat resumed>) = 4 [pid 4296] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4295] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 4298 attached [pid 4297] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4296] <... openat resumed>) = 3 [pid 4296] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 4296] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4296] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4296] +++ killed by SIGKILL +++ [pid 4295] +++ killed by SIGKILL +++ [pid 4298] set_robust_list(0x5555700d1660, 24) = 0 [pid 4298] chdir("./788") = 0 [pid 4298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4298] setpgid(0, 0) = 0 [pid 4298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4298] write(3, "1000", 4) = 4 [pid 4298] close(3) = 0 [pid 4298] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4298] write(1, "executing program\n", 18) = 18 [pid 4298] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4298] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4298] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4298] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4297] <... write resumed>) = ? [pid 4298] <... openat resumed>) = 4 [pid 293] umount2("./819", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4296, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4295, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4298] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] openat(AT_FDCWD, "./819", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 292] umount2("./807", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./803", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4298] <... write resumed>) = 8784 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./819/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4298] exit_group(0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./807", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./803", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(AT_FDCWD, "./819/binderfs", [pid 292] <... openat resumed>) = 3 executing program [pid 4298] <... exit_group resumed>) = ? [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(3, "", [pid 291] <... openat resumed>) = 3 [pid 293] unlink("./819/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./819") = 0 [pid 293] mkdir("./820", 0777) = 0 [pid 4297] +++ killed by SIGKILL +++ [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4297, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4299 [pid 289] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4299 attached [pid 4299] set_robust_list(0x5555700d1660, 24) = 0 [pid 4299] chdir("./820") = 0 [pid 4299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4299] setpgid(0, 0) = 0 [pid 4299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4299] write(3, "1000", 4) = 4 [pid 4299] close(3) = 0 [pid 4299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4299] write(1, "executing program\n", 18) = 18 [pid 4299] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4299] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4299] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4299] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4299] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4299] exit_group(0) = ? [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./780", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./780", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./780/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./780/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./780/binderfs") = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./780") = 0 [pid 289] mkdir("./781", 0777 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(3, "", [pid 289] <... mkdir resumed>) = 0 [pid 292] getdents64(3, [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./807/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] newfstatat(AT_FDCWD, "./807/binderfs", [pid 291] umount2("./803/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4300 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4298] +++ exited with 0 +++ [pid 292] unlink("./807/binderfs" [pid 291] newfstatat(AT_FDCWD, "./803/binderfs", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4298, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... unlink resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(3, [pid 291] unlink("./803/binderfs" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... unlink resumed>) = 0 [pid 292] close(3 [pid 291] getdents64(3, [pid 292] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] rmdir("./807" [pid 291] close(3) = 0 ./strace-static-x86_64: Process 4300 attached [pid 292] <... rmdir resumed>) = 0 [pid 291] rmdir("./803" [pid 4299] +++ exited with 0 +++ [pid 290] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4299, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 292] mkdir("./808", 0777 [pid 290] umount2("./788", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... rmdir resumed>) = 0 [pid 293] umount2("./820", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./788", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./820", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... mkdir resumed>) = 0 [pid 291] mkdir("./804", 0777 [pid 290] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 290] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, [pid 293] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 290] umount2("./788/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] umount2("./820/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./788/binderfs", [pid 293] newfstatat(AT_FDCWD, "./820/binderfs", [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./788/binderfs" [pid 293] unlink("./820/binderfs" [pid 290] <... unlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] getdents64(3, [pid 293] getdents64(3, [pid 290] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3 [pid 293] close(3 [pid 290] <... close resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 290] rmdir("./788" [pid 293] rmdir("./820" [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4301 [pid 290] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 4302 attached ./strace-static-x86_64: Process 4301 attached [pid 4300] set_robust_list(0x5555700d1660, 24 [pid 293] <... rmdir resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4302 [pid 290] mkdir("./789", 0777 [pid 293] mkdir("./821", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 4302] set_robust_list(0x5555700d1660, 24 [pid 4301] set_robust_list(0x5555700d1660, 24 [pid 4300] <... set_robust_list resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4303 attached [pid 293] <... clone resumed>, child_tidptr=0x5555700d1650) = 4303 [pid 4300] chdir("./781" [pid 4303] set_robust_list(0x5555700d1660, 24) = 0 [pid 4303] chdir("./821") = 0 [pid 4303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4303] setpgid(0, 0) = 0 [pid 4303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4302] <... set_robust_list resumed>) = 0 [pid 4301] <... set_robust_list resumed>) = 0 [pid 4300] <... chdir resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555700d1650) = 4304 [pid 4300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4303] <... openat resumed>) = 3 [pid 4300] <... prctl resumed>) = 0 [pid 4302] chdir("./804" [pid 4303] write(3, "1000", 4) = 4 [pid 4303] close(3) = 0 [pid 4302] <... chdir resumed>) = 0 [pid 4300] setpgid(0, 0 [pid 4303] symlink("/dev/binderfs", "./binderfs" [pid 4300] <... setpgid resumed>) = 0 [pid 4302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4303] <... symlink resumed>) = 0 [pid 4303] write(1, "executing program\n", 18 [pid 4302] <... prctl resumed>) = 0 [pid 4301] chdir("./808" [pid 4300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ./strace-static-x86_64: Process 4304 attached [pid 4303] <... write resumed>) = 18 [pid 4300] <... openat resumed>) = 3 [pid 4303] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4300] write(3, "1000", 4 [pid 4304] set_robust_list(0x5555700d1660, 24 [pid 4302] setpgid(0, 0 [pid 4301] <... chdir resumed>) = 0 [pid 4300] <... write resumed>) = 4 [pid 4303] <... openat resumed>) = 3 [pid 4303] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4302] <... setpgid resumed>) = 0 [pid 4301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4300] close(3 [pid 4304] <... set_robust_list resumed>) = 0 [pid 4302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4300] <... close resumed>) = 0 [pid 4303] <... ioctl resumed>) = 0 [pid 4303] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4300] symlink("/dev/binderfs", "./binderfs" [pid 4303] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4302] <... openat resumed>) = 3 [pid 4303] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000) = 4 [pid 4303] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4302] write(3, "1000", 4 [pid 4300] <... symlink resumed>) = 0 executing program [pid 4304] chdir("./789" [pid 4302] <... write resumed>) = 4 [pid 4301] <... prctl resumed>) = 0 [pid 4300] write(1, "executing program\n", 18 [pid 4302] close(3 [pid 4300] <... write resumed>) = 18 [ 70.243645][ T20] tty tty1: SAK: killed process 4293 (syz-executor903): by fd#3 [ 70.257508][ T375] tty tty1: SAK: killed process 4295 (syz-executor903): by fd#3 [ 70.257536][ T375] tty tty1: SAK: killed process 4296 (syz-executor903): by fd#3 [ 70.257558][ T375] tty tty1: SAK: killed process 4297 (syz-executor903): by fd#3 [pid 4302] <... close resumed>) = 0 [pid 4300] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4302] symlink("/dev/binderfs", "./binderfs" [pid 4300] <... openat resumed>) = 3 [pid 4302] <... symlink resumed>) = 0 [pid 4300] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}executing program [pid 4302] write(1, "executing program\n", 18 [pid 4301] setpgid(0, 0 [pid 4300] <... ioctl resumed>) = 0 [pid 4302] <... write resumed>) = 18 [pid 4301] <... setpgid resumed>) = 0 [pid 4300] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4302] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4300] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4302] <... openat resumed>) = 3 [pid 4301] <... openat resumed>) = 3 [pid 4300] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4302] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4301] write(3, "1000", 4 [pid 4300] <... openat resumed>) = 4 [pid 4302] <... ioctl resumed>) = 0 [pid 4301] <... write resumed>) = 4 [pid 4300] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4302] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4301] close(3 [pid 4300] <... write resumed>) = 8784 [pid 4302] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4301] <... close resumed>) = 0 [pid 4300] exit_group(0 [pid 4302] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4301] symlink("/dev/binderfs", "./binderfs" [pid 4300] <... exit_group resumed>) = ? [pid 4302] <... openat resumed>) = 4 [pid 4301] <... symlink resumed>) = 0 [pid 4302] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784) = 8784 [pid 4301] write(1, "executing program\n", 18executing program [pid 4303] <... write resumed>) = ? [pid 4302] write(1, "executing program\n", 18 [pid 4301] <... write resumed>) = 18 [pid 4300] +++ exited with 0 +++ [pid 4302] <... write resumed>) = ? [pid 4301] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4304] <... chdir resumed>) = 0 [pid 4301] <... openat resumed>) = 3 [pid 4304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4301] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4304] <... prctl resumed>) = 0 [pid 4301] <... ioctl resumed>) = 0 [pid 4304] setpgid(0, 0 [pid 4301] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4304] <... setpgid resumed>) = 0 [pid 4301] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4301] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4304] <... openat resumed>) = 3 [pid 4301] <... openat resumed>) = 4 [pid 4304] write(3, "1000", 4 [pid 4301] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4304] <... write resumed>) = 4 [pid 4301] <... write resumed>) = 8784 [pid 4304] close(3 [pid 4301] exit_group(0 [pid 4304] <... close resumed>) = 0 [pid 4301] <... exit_group resumed>) = ? [pid 4304] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4304] write(1, "executing program\n", 18) = 18 [pid 4304] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4304] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4304] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4304] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4302] +++ killed by SIGKILL +++ [pid 4301] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 4304] <... openat resumed>) = 4 [pid 4303] +++ killed by SIGKILL +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4301, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4302, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 4304] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 4304] <... write resumed>) = 8784 [pid 4304] exit_group(0) = ? [pid 289] umount2("./781", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./781", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] umount2("./781/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./781/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./781/binderfs" [pid 292] umount2("./808", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./804", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] getdents64(3, [pid 292] openat(AT_FDCWD, "./808", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./804", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 289] close(3 [pid 292] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 289] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] rmdir("./781" [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 289] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] mkdir("./782", 0777 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4303, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] umount2("./808/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./804/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4304] +++ exited with 0 +++ [pid 289] <... mkdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./808/binderfs", [pid 291] newfstatat(AT_FDCWD, "./804/binderfs", [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 4305 attached [pid 292] unlink("./808/binderfs" [pid 291] unlink("./804/binderfs" [pid 4305] set_robust_list(0x5555700d1660, 24 [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4305 [pid 4305] <... set_robust_list resumed>) = 0 [pid 292] getdents64(3, [pid 291] getdents64(3, [pid 4305] chdir("./782" [pid 292] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 4305] <... chdir resumed>) = 0 [pid 292] close(3 [pid 291] close(3 [pid 4305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 4305] <... prctl resumed>) = 0 [pid 292] rmdir("./808" [pid 291] rmdir("./804" [pid 4305] setpgid(0, 0 [pid 291] <... rmdir resumed>) = 0 [pid 4305] <... setpgid resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 291] mkdir("./805", 0777 [pid 292] mkdir("./809", 0777 [pid 4305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... mkdir resumed>) = 0 [pid 4305] <... openat resumed>) = 3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4306 attached [pid 4305] write(3, "1000", 4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4306] set_robust_list(0x5555700d1660, 24 [pid 4305] <... write resumed>) = 4 [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4306 [pid 4306] <... set_robust_list resumed>) = 0 [pid 4305] close(3 [pid 4306] chdir("./805" [pid 4305] <... close resumed>) = 0 [pid 4306] <... chdir resumed>) = 0 [pid 4305] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 4307 attached [pid 4306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4305] <... symlink resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555700d1650) = 4307 [pid 4306] <... prctl resumed>) = 0 executing program [pid 4305] write(1, "executing program\n", 18 [pid 4306] setpgid(0, 0 [pid 4305] <... write resumed>) = 18 [pid 4306] <... setpgid resumed>) = 0 [pid 4305] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4307] set_robust_list(0x5555700d1660, 24 [pid 4305] <... openat resumed>) = 3 [pid 4306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4305] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4307] <... set_robust_list resumed>) = 0 [pid 4306] <... openat resumed>) = 3 [pid 4305] <... ioctl resumed>) = 0 [pid 4306] write(3, "1000", 4 [pid 4305] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4306] <... write resumed>) = 4 [pid 4305] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4306] close(3 [pid 4305] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4306] <... close resumed>) = 0 [pid 4305] <... openat resumed>) = 4 [pid 4306] symlink("/dev/binderfs", "./binderfs" [pid 4305] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 4307] chdir("./809") = 0 [pid 4307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4307] setpgid(0, 0) = 0 [pid 4307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4307] write(3, "1000", 4) = 4 [pid 4307] close(3) = 0 [pid 4307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4307] write(1, "executing program\n", 18executing program ) = 18 [pid 4307] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./821", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4307] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4307] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 293] openat(AT_FDCWD, "./821", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4307] <... ioctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 4307] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 293] newfstatat(3, "", [pid 4307] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4307] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 293] getdents64(3, [pid 4307] <... openat resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4307] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./821/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4307] <... write resumed>) = 8784 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... restart_syscall resumed>) = 0 [pid 4307] exit_group(0 [pid 4306] <... symlink resumed>) = 0 [pid 4305] <... write resumed>) = ? [pid 293] newfstatat(AT_FDCWD, "./821/binderfs", [pid 4307] <... exit_group resumed>) = ? [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4306] write(1, "executing program\n", 18 [pid 4305] +++ killed by SIGKILL +++ [pid 293] unlink("./821/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./821") = 0 [pid 293] mkdir("./822", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4308 [pid 290] umount2("./789", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./789", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./789/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./789/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./789/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 executing program [pid 290] close(3./strace-static-x86_64: Process 4308 attached [pid 4306] <... write resumed>) = 18 [pid 290] <... close resumed>) = 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4305, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [ 70.309071][ T20] tty tty1: SAK: killed process 4303 (syz-executor903): by fd#3 [ 70.317436][ T20] tty tty1: SAK: killed process 4302 (syz-executor903): by fd#3 [ 70.317469][ T20] tty tty1: SAK: killed process 4303 (syz-executor903): by fd#3 [ 70.341525][ T42] tty tty1: SAK: killed process 4305 (syz-executor903): by fd#3 [ 70.350092][ T42] tty tty1: SAK: killed process 4305 (syz-executor903): by fd#3 [pid 290] rmdir("./789") = 0 [pid 290] mkdir("./790", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4309 [pid 4308] set_robust_list(0x5555700d1660, 24) = 0 [pid 4308] chdir("./822") = 0 [pid 4308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4308] setpgid(0, 0) = 0 [pid 4308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4308] write(3, "1000", 4) = 4 [pid 4308] close(3) = 0 [pid 4308] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 4308] write(1, "executing program\n", 18) = 18 [pid 4308] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4306] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 289] umount2("./782", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 4309 attached [pid 4307] +++ killed by SIGKILL +++ [pid 289] openat(AT_FDCWD, "./782", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4309] set_robust_list(0x5555700d1660, 24) = 0 [pid 4308] <... openat resumed>) = 3 [pid 4309] chdir("./790" [pid 4306] <... openat resumed>) = 3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4307, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] <... openat resumed>) = 3 [pid 4309] <... chdir resumed>) = 0 [pid 4308] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 4309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4309] setpgid(0, 0) = 0 [pid 4309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 289] newfstatat(3, "", [pid 4309] write(3, "1000", 4 [pid 4308] <... ioctl resumed>) = 0 [pid 4306] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4309] <... write resumed>) = 4 [pid 4308] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 4306] <... ioctl resumed>) = 0 [pid 289] getdents64(3, [pid 4309] close(3 [pid 4308] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4306] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 4309] <... close resumed>) = 0 [pid 4308] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4306] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 4309] symlink("/dev/binderfs", "./binderfs" [pid 289] umount2("./782/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 4309] <... symlink resumed>) = 0 [pid 4308] <... openat resumed>) = 4 [pid 4306] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4309] write(1, "executing program\n", 18executing program [pid 4308] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4309] <... write resumed>) = 18 [pid 4306] <... openat resumed>) = 4 [pid 4309] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4308] <... write resumed>) = 8784 [pid 4306] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 289] newfstatat(AT_FDCWD, "./782/binderfs", [pid 4309] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4309] +++ killed by SIGKILL +++ [pid 4306] <... write resumed>) = ? [pid 292] <... restart_syscall resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4308] +++ killed by SIGKILL +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4309, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 289] unlink("./782/binderfs") = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4308, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 292] umount2("./809", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 293] umount2("./822", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./790", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./809", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 292] umount2("./809/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./809/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./809/binderfs") = 0 [pid 292] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./809") = 0 [pid 292] mkdir("./810", 0777) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4310 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./790", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 290] umount2("./790/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./790/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./790/binderfs") = 0 [pid 290] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./790") = 0 [pid 290] mkdir("./791", 0777) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4311 [pid 293] openat(AT_FDCWD, "./822", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", ./strace-static-x86_64: Process 4310 attached ./strace-static-x86_64: Process 4311 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] close(3 [pid 293] getdents64(3, 0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 293] umount2("./822/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./822/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./822/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./822") = 0 [pid 293] mkdir("./823", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4312 ./strace-static-x86_64: Process 4312 attached [pid 4312] set_robust_list(0x5555700d1660, 24) = 0 [pid 4312] chdir("./823") = 0 [pid 4312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4312] setpgid(0, 0) = 0 [pid 4312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4312] write(3, "1000", 4) = 4 [pid 4312] close(3) = 0 [pid 4312] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4312] write(1, "executing program\n", 18) = 18 [pid 4312] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4310] set_robust_list(0x5555700d1660, 24) = 0 [pid 4310] chdir("./810") = 0 [pid 4310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4310] setpgid(0, 0) = 0 [pid 4310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] <... close resumed>) = 0 [pid 4311] set_robust_list(0x5555700d1660, 24 [pid 4306] +++ killed by SIGKILL +++ [pid 4310] <... openat resumed>) = 3 [pid 289] rmdir("./782" [pid 4312] <... openat resumed>) = 3 [pid 4311] <... set_robust_list resumed>) = 0 [pid 4310] write(3, "1000", 4 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4306, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 4310] <... write resumed>) = 4 [pid 4310] close(3 [pid 289] <... rmdir resumed>) = 0 [pid 4310] <... close resumed>) = 0 [pid 4310] symlink("/dev/binderfs", "./binderfs"executing program [pid 4311] chdir("./791" [pid 4310] <... symlink resumed>) = 0 [pid 289] mkdir("./783", 0777 [pid 4311] <... chdir resumed>) = 0 [pid 4310] write(1, "executing program\n", 18 [pid 4311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4310] <... write resumed>) = 18 [pid 4310] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 4311] <... prctl resumed>) = 0 [pid 4310] <... openat resumed>) = 3 [pid 291] umount2("./805", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... mkdir resumed>) = 0 [pid 4311] setpgid(0, 0 [pid 4310] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4311] <... setpgid resumed>) = 0 [pid 4310] <... ioctl resumed>) = 0 [pid 291] openat(AT_FDCWD, "./805", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4310] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...} [pid 291] <... openat resumed>) = 3 [pid 4310] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 291] newfstatat(3, "", [pid 4310] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 4310] <... openat resumed>) = 4 [pid 4311] <... openat resumed>) = 3 [pid 291] getdents64(3, [pid 4311] write(3, "1000", 4 [pid 4310] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 289] <... clone resumed>, child_tidptr=0x5555700d1650) = 4313 ./strace-static-x86_64: Process 4313 attached [pid 4311] <... write resumed>) = 4 [pid 4312] +++ killed by SIGKILL +++ [pid 4311] close(3) = 0 [pid 4311] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 4311] write(1, "executing program\n", 18) = 18 [pid 4311] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 [pid 4311] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=127, kb_value=0x20f /* K_SAK */}) = 0 [pid 4311] ioctl(-1, EVIOCSFF, {type=0 /* FF_??? */, id=0, direction=0, ...}) = -1 EBADF (Bad file descriptor) [pid 4311] openat(AT_FDCWD, "/dev/input/event2", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|O_NOATIME|FASYNC|0x800000 [pid 4313] set_robust_list(0x5555700d1660, 24) = 0 [pid 4313] chdir("./783") = 0 [pid 4313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4313] setpgid(0, 0) = 0 [pid 4313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 291] umount2("./805/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4312, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4313] write(3, "1000", 4 [pid 4311] <... openat resumed>) = 4 [pid 4310] <... write resumed>) = 4 [pid 291] newfstatat(AT_FDCWD, "./805/binderfs", [pid 4313] <... write resumed>) = 4 [pid 4313] close(3 [pid 4311] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8784 [pid 293] umount2("./823", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 4313] <... close resumed>) = 0 [pid 4311] <... write resumed>) = 8784 [pid 4313] symlink("/dev/binderfs", "./binderfs" [pid 4311] exit_group(0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] unlink("./805/binderfs" [pid 4311] <... exit_group resumed>) = ? [pid 293] openat(AT_FDCWD, "./823", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4313] <... symlink resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 291] <... unlink resumed>) = 0 [pid 4313] write(1, "executing program\n", 18 [pid 4311] +++ exited with 0 +++ [pid 293] newfstatat(3, "", [pid 291] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... getdents64 resumed>0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4311, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] getdents64(3, [pid 291] close(3 [pid 290] restart_syscall(<... resuming interrupted clone ...>executing program [pid 4313] <... write resumed>) = 18 [pid 293] <... getdents64 resumed>0x5555700d26f0 /* 3 entries */, 32768) = 80 [pid 291] <... close resumed>) = 0 [ 70.350120][ T42] tty tty1: SAK: killed process 4307 (syz-executor903): by fd#3 [ 70.370162][ T20] tty tty1: SAK: killed process 4306 (syz-executor903): by fd#3 [ 70.370192][ T20] tty tty1: SAK: killed process 4308 (syz-executor903): by fd#3 [ 70.370210][ T20] tty tty1: SAK: killed process 4309 (syz-executor903): by fd#3 [ 70.399624][ T42] tty tty1: SAK: killed process 4310 (syz-executor903): by fd#3 [pid 4313] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR [pid 293] umount2("./823/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./823/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./823/binderfs") = 0 [pid 293] getdents64(3, 0x5555700d26f0 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./823") = 0 [pid 293] mkdir("./824", 0777) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555700d1650) = 4314 [pid 291] rmdir("./805") = 0 [pid 291] mkdir("./806", 0777) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4315 attached ./strace-static-x86_64: Process 4314 attached [pid 4310] +++ killed by SIGKILL +++ [pid 291] <... clone resumed>, child_tidptr=0x5555700d1650) = 4315 [pid 4315] set_robust_list(0x5555700d1660, 24) = 0 [pid 4315] chdir("./806" [pid 4314] set_robust_list(0x5555700d1660, 24 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4310, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 4315] <... chdir resumed>) = 0 [ 70.399654][ T42] tty tty1: SAK: killed process 4312 (syz-executor903): by fd#3 [ 70.418539][ T42] ================================================================== [ 70.418556][ T42] BUG: KASAN: null-ptr-deref in n_tty_flush_buffer+0x6c/0x1f0 [ 70.418607][ T42] Write of size 24 at addr 0000000000000000 by task kworker/1:1/42 [ 70.418626][ T42] [ 70.418644][ T42] CPU: 1 PID: 42 Comm: kworker/1:1 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 70.418668][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.418681][ T42] Workqueue: events vc_SAK [ 70.418720][ T42] Call Trace: [ 70.418726][ T42] [ 70.418733][ T42] __dump_stack+0x21/0x30 [ 70.418754][ T42] dump_stack_lvl+0xee/0x150 [ 70.418772][ T42] ? show_regs_print_info+0x20/0x20 [ 70.418792][ T42] ? n_tty_flush_buffer+0x6c/0x1f0 [ 70.418811][ T42] kasan_report+0xe7/0x140 [ 70.418832][ T42] ? n_tty_flush_buffer+0x6c/0x1f0 [ 70.418852][ T42] kasan_check_range+0x280/0x290 [ 70.418871][ T42] memset+0x23/0x40 [ 70.418892][ T42] n_tty_flush_buffer+0x6c/0x1f0 [ 70.418912][ T42] ? __kasan_check_write+0x14/0x20 [ 70.418933][ T42] ? n_tty_close+0x1d0/0x1d0 [ 70.418951][ T42] tty_buffer_flush+0x2d5/0x360 [ 70.418972][ T42] ? _raw_spin_lock+0xe0/0xe0 [ 70.418998][ T42] tty_ldisc_flush+0x6c/0xc0 [ 70.419019][ T42] __do_SAK+0x141/0x630 [ 70.419038][ T42] vc_SAK+0x78/0x220 [ 70.419061][ T42] process_one_work+0x6be/0xba0 [ 70.419086][ T42] worker_thread+0xa59/0x1200 [ 70.419113][ T42] kthread+0x411/0x500 [ 70.419133][ T42] ? worker_clr_flags+0x190/0x190 [ 70.419155][ T42] ? kthread_blkcg+0xd0/0xd0 [ 70.419176][ T42] ret_from_fork+0x1f/0x30 [ 70.419200][ T42] [ 70.419207][ T42] ================================================================== [ 70.419215][ T42] Disabling lock debugging due to kernel taint [ 70.419291][ T42] BUG: unable to handle page fault for address: 0000000000002260 [ 70.419304][ T42] #PF: supervisor write access in kernel mode [ 70.419315][ T42] #PF: error_code(0x0002) - not-present page [ 70.419331][ T42] PGD 0 P4D 0 [ 70.419347][ T42] Oops: 0002 [#1] PREEMPT SMP KASAN [ 70.419363][ T42] CPU: 1 PID: 42 Comm: kworker/1:1 Tainted: G B 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 70.419384][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.419396][ T42] Workqueue: events vc_SAK [ 70.419422][ T42] RIP: 0010:memset_erms+0x9/0x10 [ 70.419447][ T42] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 70.419465][ T42] RSP: 0018:ffffc900002bfb50 EFLAGS: 00010202 [ 70.419480][ T42] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 70.419494][ T42] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 70.419507][ T42] RBP: ffffc900002bfb70 R08: 0000000000000000 R09: 0000000000002260 [ 70.419521][ T42] R10: fffffbfff0e17a4c R11: 1ffffffff0e17a4c R12: 000000000000005d [ 70.419536][ T42] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 70.419549][ T42] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 70.419568][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.419583][ T42] CR2: 0000000000002260 CR3: 0000000120e2a000 CR4: 00000000003506a0 [ 70.419609][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.419623][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.419637][ T42] Call Trace: [ 70.419642][ T42] [ 70.419649][ T42] ? memset+0x35/0x40 [ 70.419670][ T42] n_tty_flush_buffer+0x7b/0x1f0 [ 70.419689][ T42] ? __kasan_check_write+0x14/0x20 [ 70.419708][ T42] ? n_tty_close+0x1d0/0x1d0 [ 70.419727][ T42] tty_buffer_flush+0x2d5/0x360 [ 70.419746][ T42] ? _raw_spin_lock+0xe0/0xe0 [ 70.419770][ T42] tty_ldisc_flush+0x6c/0xc0 [ 70.419788][ T42] __do_SAK+0x141/0x630 [ 70.419807][ T42] vc_SAK+0x78/0x220 [ 70.419828][ T42] process_one_work+0x6be/0xba0 [ 70.419858][ T42] worker_thread+0xa59/0x1200 [ 70.419887][ T42] kthread+0x411/0x500 [ 70.419906][ T42] ? worker_clr_flags+0x190/0x190 [ 70.419930][ T42] ? kthread_blkcg+0xd0/0xd0 [ 70.419951][ T42] ret_from_fork+0x1f/0x30 [ 70.419973][ T42] [ 70.419987][ T42] Modules linked in: [ 70.420007][ T42] CR2: 0000000000002260 [ 70.420024][ T42] ---[ end trace 5af36a89cebaf646 ]--- [ 70.420033][ T42] RIP: 0010:memset_erms+0x9/0x10 [ 70.420056][ T42] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 70.420074][ T42] RSP: 0018:ffffc900002bfb50 EFLAGS: 00010202 [ 70.420091][ T42] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 70.420103][ T42] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 70.420116][ T42] RBP: ffffc900002bfb70 R08: 0000000000000000 R09: 0000000000002260 [ 70.420129][ T42] R10: fffffbfff0e17a4c R11: 1ffffffff0e17a4c R12: 000000000000005d [ 70.420143][ T42] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 70.420157][ T42] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 70.420173][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.420187][ T42] CR2: 0000000000002260 CR3: 0000000120e2a000 CR4: 00000000003506a0 [ 70.420204][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.420215][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.420230][ T42] Kernel panic - not syncing: Fatal exception [ 70.420498][ T42] Kernel Offset: disabled [ 70.970446][ T42] Rebooting in 86400 seconds..