./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2678617599 <...> 68) = 112 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./323", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./325/binderfs") = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5060] getdents64(4, [pid 5059] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./325/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 8324] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... close resumed>) = 0 [pid 5060] getdents64(4, [pid 5059] rmdir("./325/file0" [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 8323] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] rmdir("./326/file0" [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] close(3 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./326") = 0 [pid 5060] mkdir("./327", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] rmdir("./325" [pid 5060] ioctl(3, LOOP_CLR_FD) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./326", 0777 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8325 attached [pid 8325] set_robust_list(0x5555567436a0, 24) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8325 [pid 8325] chdir("./327") = 0 [pid 8325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8325] setpgid(0, 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8325] <... setpgid resumed>) = 0 [pid 8325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8325] write(3, "1000", 4) = 4 [pid 8325] close(3) = 0 [pid 8324] <... write resumed>) = 2097152 [pid 8325] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... openat resumed>) = 3 [pid 8325] <... symlink resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8325] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8325] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8325] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8323] <... write resumed>) = 2097152 [pid 8325] <... mprotect resumed>) = 0 [pid 8324] munmap(0x7f5817c00000, 138412032 [pid 8325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8326]}, 88) = 8326 [pid 8325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8325] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8325] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8324] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 8326 attached [pid 5061] <... ioctl resumed>) = 0 [pid 8326] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8326] set_robust_list(0x7f58200ee9a0, 24 [pid 8324] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8323] munmap(0x7f5817c00000, 138412032 [pid 8326] <... set_robust_list resumed>) = 0 [pid 8324] <... openat resumed>) = 4 [pid 8323] <... munmap resumed>) = 0 [pid 8326] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] close(3 [pid 8326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8324] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8327 attached [pid 8326] memfd_create("syzkaller", 0 [pid 8323] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8326] <... memfd_create resumed>) = 3 [pid 8324] <... ioctl resumed>) = 0 [pid 8323] <... openat resumed>) = 4 [pid 8327] set_robust_list(0x5555567436a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8327 [pid 8327] <... set_robust_list resumed>) = 0 [pid 8327] chdir("./323") = 0 [pid 8327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8327] setpgid(0, 0) = 0 [pid 8327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8327] write(3, "1000", 4) = 4 [pid 8327] close(3) = 0 [pid 8323] ioctl(4, LOOP_SET_FD, 3 [pid 8327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8327] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8324] close(3 [pid 8323] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8324] <... close resumed>) = 0 [pid 8324] close(4) = 0 [pid 5059] close(3 [pid 8324] mkdir("./file0", 0777 [pid 8327] <... futex resumed>) = 0 [pid 8326] <... mmap resumed>) = 0x7f5817c00000 [pid 8323] close(3 [pid 5059] <... close resumed>) = 0 [pid 8324] <... mkdir resumed>) = 0 [pid 8327] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8323] <... close resumed>) = 0 [ 295.468606][ T8324] loop3: detected capacity change from 0 to 4096 [ 295.495588][ T8323] loop4: detected capacity change from 0 to 4096 [pid 8327] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8324] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8323] close(4 [pid 8327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8323] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8323] mkdir("./file0", 0777 [pid 8327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8323] <... mkdir resumed>) = 0 [pid 8327] <... mmap resumed>) = 0x7f58200ce000 [pid 8327] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8327] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8323] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8328 ./strace-static-x86_64: Process 8328 attached [pid 8327] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8328] set_robust_list(0x5555567436a0, 24) = 0 [pid 8327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8329]}, 88) = 8329 [pid 8327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8327] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8327] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8329 attached [pid 8329] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8329] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8329] memfd_create("syzkaller", 0 [pid 8328] chdir("./326" [pid 8329] <... memfd_create resumed>) = 3 [pid 8328] <... chdir resumed>) = 0 [pid 8329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8328] setpgid(0, 0) = 0 [pid 8328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8328] write(3, "1000", 4) = 4 [pid 8328] close(3) = 0 [pid 8328] symlink("/dev/binderfs", "./binderfs") = 0 [ 295.532617][ T8324] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 295.541481][ T8323] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8328] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8328] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8326] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8328] <... mmap resumed>) = 0x7f58200ce000 [pid 8328] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8323] <... mount resumed>) = 0 [pid 8328] <... mprotect resumed>) = 0 [pid 8323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8328] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8323] <... openat resumed>) = 3 [pid 8323] chdir("./file0") = 0 [pid 8323] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8328] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8323] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8323] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8330 attached [pid 8328] <... clone3 resumed> => {parent_tid=[8330]}, 88) = 8330 [pid 8324] <... mount resumed>) = 0 [pid 8323] <... futex resumed>) = 1 [pid 8321] <... futex resumed>) = 0 [pid 8330] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8328] rt_sigprocmask(SIG_SETMASK, [], [pid 8324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8323] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8321] exit_group(0 [pid 8330] <... rseq resumed>) = 0 [pid 8328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8324] <... openat resumed>) = 3 [pid 8323] <... futex resumed>) = ? [pid 8321] <... exit_group resumed>) = ? [pid 8330] set_robust_list(0x7f58200ee9a0, 24 [pid 8328] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8324] chdir("./file0" [pid 8323] +++ exited with 0 +++ [pid 8328] <... futex resumed>) = 0 [pid 8324] <... chdir resumed>) = 0 [pid 8330] <... set_robust_list resumed>) = 0 [pid 8328] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8324] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8329] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8324] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8330] rt_sigprocmask(SIG_SETMASK, [], [pid 8324] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8321] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8321, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8324] <... futex resumed>) = 1 [pid 8322] <... futex resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8326] <... write resumed>) = 2097152 [pid 8322] exit_group(0 [pid 8330] memfd_create("syzkaller", 0 [pid 5063] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./321/binderfs") = 0 [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8330] <... memfd_create resumed>) = 3 [pid 8326] munmap(0x7f5817c00000, 138412032 [pid 8322] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./321/file0", [pid 8330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8324] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 8322] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8330] <... mmap resumed>) = 0x7f5817c00000 [pid 8326] <... munmap resumed>) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./321/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 8329] <... write resumed>) = 2097152 [pid 8326] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8322, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8329] munmap(0x7f5817c00000, 138412032 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8326] <... openat resumed>) = 4 [pid 8326] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5063] rmdir("./321") = 0 [pid 5063] mkdir("./322", 0777) = 0 [pid 5062] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8326] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8326] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 8330] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8326] close(4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] newfstatat(3, "", [pid 8326] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8329] <... munmap resumed>) = 0 [pid 8329] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] getdents64(3, [pid 8329] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8329] ioctl(4, LOOP_SET_FD, 3 [pid 8326] mkdir("./file0", 0777 [pid 5062] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8326] <... mkdir resumed>) = 0 [pid 8326] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5062] newfstatat(AT_FDCWD, "./322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./322/binderfs" [pid 8329] <... ioctl resumed>) = 0 [pid 8329] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 8329] <... close resumed>) = 0 [pid 8329] close(4 [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8329] <... close resumed>) = 0 [ 295.722701][ T8326] loop1: detected capacity change from 0 to 4096 [ 295.739844][ T8329] loop2: detected capacity change from 0 to 4096 [ 295.760589][ T8326] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8329] mkdir("./file0", 0777) = 0 [pid 8329] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8330] <... write resumed>) = 2097152 [pid 8330] munmap(0x7f5817c00000, 138412032 [pid 5062] <... umount2 resumed>) = 0 [pid 8330] <... munmap resumed>) = 0 [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... ioctl resumed>) = 0 [pid 8330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./322/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8330] <... openat resumed>) = 4 [ 295.783452][ T8329] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8330] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8326] <... mount resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8326] <... openat resumed>) = 3 [pid 5062] getdents64(4, ./strace-static-x86_64: Process 8331 attached [pid 8326] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8331] set_robust_list(0x5555567436a0, 24 [pid 8326] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8331 [pid 5062] getdents64(4, [pid 8326] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8331] <... set_robust_list resumed>) = 0 [pid 8326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] close(4 [pid 8331] chdir("./322" [pid 8326] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./322/file0" [pid 8326] <... futex resumed>) = 1 [pid 8325] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8331] <... chdir resumed>) = 0 [pid 8326] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8325] exit_group(0 [pid 5062] getdents64(3, [pid 8331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8330] <... ioctl resumed>) = 0 [pid 8326] <... futex resumed>) = ? [pid 8325] <... exit_group resumed>) = ? [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8331] <... prctl resumed>) = 0 [pid 8330] close(3 [pid 5062] close(3 [pid 8331] setpgid(0, 0 [pid 8330] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8331] <... setpgid resumed>) = 0 [pid 8330] close(4 [pid 5062] rmdir("./322" [pid 8331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8330] <... close resumed>) = 0 [pid 8326] +++ exited with 0 +++ [pid 8325] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 8330] mkdir("./file0", 0777 [pid 5062] mkdir("./323", 0777 [pid 8331] <... openat resumed>) = 3 [pid 8330] <... mkdir resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8325, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8331] write(3, "1000", 4 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8330] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [ 295.824834][ T8330] loop0: detected capacity change from 0 to 4096 [pid 8331] <... write resumed>) = 4 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8331] close(3 [pid 8329] <... mount resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8331] <... close resumed>) = 0 [pid 8329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8331] symlink("/dev/binderfs", "./binderfs" [pid 5060] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8331] <... symlink resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 8331] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8329] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8331] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8329] chdir("./file0" [pid 5060] getdents64(3, [pid 8331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8329] <... chdir resumed>) = 0 [pid 5060] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8331] <... mmap resumed>) = 0x7f58200ce000 [pid 8329] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8331] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8329] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(AT_FDCWD, "./327/binderfs", [pid 8331] <... mprotect resumed>) = 0 [pid 8329] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8331] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8329] <... futex resumed>) = 1 [pid 8327] <... futex resumed>) = 0 [pid 5060] unlink("./327/binderfs" [pid 8331] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8329] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8327] exit_group(0 [pid 8331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8329] <... futex resumed>) = ? [pid 8327] <... exit_group resumed>) = ? [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8331] <... clone3 resumed> => {parent_tid=[8332]}, 88) = 8332 ./strace-static-x86_64: Process 8332 attached [pid 8329] +++ exited with 0 +++ [pid 8327] +++ exited with 0 +++ [pid 8331] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8327, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./323/binderfs" [pid 8331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8332] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8331] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] <... rseq resumed>) = 0 [pid 8331] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8332] set_robust_list(0x7f58200ee9a0, 24 [pid 8331] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] <... set_robust_list resumed>) = 0 [pid 5061] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] newfstatat(AT_FDCWD, "./323/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 295.882369][ T8330] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] newfstatat(4, "", [pid 8332] memfd_create("syzkaller", 0 [pid 8330] <... mount resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./327/file0", [pid 8330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8332] <... memfd_create resumed>) = 3 [pid 8330] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8330] chdir("./file0" [pid 5060] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] <... mmap resumed>) = 0x7f5817c00000 [pid 8330] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 8330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8330] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 4 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(4, "", [pid 8330] <... futex resumed>) = 1 [pid 8328] <... futex resumed>) = 0 [pid 8330] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8328] exit_group(0 [pid 5060] getdents64(4, [pid 8328] <... exit_group resumed>) = ? [pid 8330] <... futex resumed>) = ? [pid 5061] close(4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8330] +++ exited with 0 +++ [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./323/file0" [pid 5062] <... ioctl resumed>) = 0 [pid 5060] getdents64(4, [pid 8328] +++ exited with 0 +++ [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5060] close(4 [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] rmdir("./327/file0" [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8328, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5061] close(3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 5061] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./327" [pid 5061] rmdir("./323" [pid 5059] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8333 attached [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8333] set_robust_list(0x5555567436a0, 24 [pid 5060] mkdir("./328", 0777 [pid 8333] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8333 [pid 5061] mkdir("./324", 0777 [pid 5059] newfstatat(3, "", [pid 8332] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8333] chdir("./323" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8333] <... chdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./326/binderfs", [pid 8333] <... prctl resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./326/binderfs" [pid 8333] setpgid(0, 0 [pid 5059] <... unlink resumed>) = 0 [pid 8333] <... setpgid resumed>) = 0 [pid 5059] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8333] write(3, "1000", 4 [pid 8332] <... write resumed>) = 2097152 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8333] <... write resumed>) = 4 [pid 8332] munmap(0x7f5817c00000, 138412032) = 0 [pid 5059] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8333] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8333] <... close resumed>) = 0 [pid 8333] symlink("/dev/binderfs", "./binderfs" [pid 5059] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 8333] <... symlink resumed>) = 0 [pid 8332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8333] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8332] <... openat resumed>) = 4 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./326/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 8333] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8332] ioctl(4, LOOP_SET_FD, 3 [pid 5059] rmdir("./326" [pid 8333] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./327", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8333] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] close(3 [pid 5061] close(3 [pid 8333] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8332] <... ioctl resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8332] close(3 [pid 5061] <... close resumed>) = 0 [pid 8332] <... close resumed>) = 0 [pid 8332] close(4 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8332] <... close resumed>) = 0 [pid 8332] mkdir("./file0", 0777) = 0 [pid 8332] mount("/dev/loop4", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8334 attached [pid 8333] <... mprotect resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 296.078478][ T8332] loop4: detected capacity change from 0 to 4096 [pid 8333] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... ioctl resumed>) = 0 [pid 8334] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8335 attached [pid 8333] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8334 [pid 8333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8335 [pid 8335] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8336 attached ) = 0 [pid 8334] <... set_robust_list resumed>) = 0 [pid 8336] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8335] chdir("./328" [pid 8334] chdir("./324" [pid 8333] <... clone3 resumed> => {parent_tid=[8336]}, 88) = 8336 [pid 8336] set_robust_list(0x7f58200ee9a0, 24 [pid 8335] <... chdir resumed>) = 0 [pid 8333] rt_sigprocmask(SIG_SETMASK, [], [pid 8336] <... set_robust_list resumed>) = 0 [pid 8335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8336] rt_sigprocmask(SIG_SETMASK, [], [pid 8335] <... prctl resumed>) = 0 [pid 8334] <... chdir resumed>) = 0 [pid 8336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8335] setpgid(0, 0 [pid 8334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8336] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8335] <... setpgid resumed>) = 0 [pid 8334] <... prctl resumed>) = 0 [pid 8335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8334] setpgid(0, 0 [pid 8335] <... openat resumed>) = 3 [pid 8334] <... setpgid resumed>) = 0 [pid 8334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8335] write(3, "1000", 4 [pid 8334] <... openat resumed>) = 3 [pid 8335] <... write resumed>) = 4 [pid 8334] write(3, "1000", 4 [pid 8333] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8335] close(3 [pid 8334] <... write resumed>) = 4 [pid 8336] <... futex resumed>) = 0 [pid 8335] <... close resumed>) = 0 [pid 8334] close(3 [pid 8333] <... futex resumed>) = 1 [pid 8334] <... close resumed>) = 0 [pid 8335] symlink("/dev/binderfs", "./binderfs" [pid 8334] symlink("/dev/binderfs", "./binderfs" [pid 8336] memfd_create("syzkaller", 0 [pid 8335] <... symlink resumed>) = 0 [pid 8334] <... symlink resumed>) = 0 [pid 8333] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] close(3 [pid 8336] <... memfd_create resumed>) = 3 [pid 8335] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8334] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] <... close resumed>) = 0 [pid 8335] <... futex resumed>) = 0 [pid 8334] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8335] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8334] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8337 attached [pid 8336] <... mmap resumed>) = 0x7f5817c00000 [pid 8335] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8337] set_robust_list(0x5555567436a0, 24 [pid 8335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8337 [pid 8337] <... set_robust_list resumed>) = 0 [pid 8335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8334] <... mmap resumed>) = 0x7f58200ce000 [pid 8337] chdir("./327" [pid 8335] <... mmap resumed>) = 0x7f58200ce000 [pid 8334] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8337] <... chdir resumed>) = 0 [pid 8335] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8334] <... mprotect resumed>) = 0 [pid 8337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8335] <... mprotect resumed>) = 0 [pid 8334] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8337] <... prctl resumed>) = 0 [pid 8335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8334] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8337] setpgid(0, 0 [pid 8334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8338 attached [pid 8337] <... setpgid resumed>) = 0 [pid 8335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8338] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 296.130106][ T8332] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8338] <... rseq resumed>) = 0 [pid 8334] <... clone3 resumed> => {parent_tid=[8338]}, 88) = 8338 [pid 8338] set_robust_list(0x7f58200ee9a0, 24 [pid 8337] <... openat resumed>) = 3 [pid 8334] rt_sigprocmask(SIG_SETMASK, [], [pid 8338] <... set_robust_list resumed>) = 0 [pid 8337] write(3, "1000", 4 [pid 8334] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8339 attached [pid 8338] rt_sigprocmask(SIG_SETMASK, [], [pid 8337] <... write resumed>) = 4 [pid 8335] <... clone3 resumed> => {parent_tid=[8339]}, 88) = 8339 [pid 8334] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8339] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8337] close(3 [pid 8335] rt_sigprocmask(SIG_SETMASK, [], [pid 8334] <... futex resumed>) = 0 [pid 8339] <... rseq resumed>) = 0 [pid 8338] memfd_create("syzkaller", 0 [pid 8337] <... close resumed>) = 0 [pid 8335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8334] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8339] set_robust_list(0x7f58200ee9a0, 24 [pid 8337] symlink("/dev/binderfs", "./binderfs" [pid 8335] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8339] <... set_robust_list resumed>) = 0 [pid 8338] <... memfd_create resumed>) = 3 [pid 8337] <... symlink resumed>) = 0 [pid 8335] <... futex resumed>) = 0 [pid 8339] rt_sigprocmask(SIG_SETMASK, [], [pid 8335] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8337] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8338] <... mmap resumed>) = 0x7f5817c00000 [pid 8337] <... futex resumed>) = 0 [pid 8337] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8339] memfd_create("syzkaller", 0) = 3 [pid 8337] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8339] <... mmap resumed>) = 0x7f5817c00000 [pid 8337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8337] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8340 attached [pid 8340] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8340] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8337] <... clone3 resumed> => {parent_tid=[8340]}, 88) = 8340 [pid 8332] <... mount resumed>) = 0 [pid 8340] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8337] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] <... futex resumed>) = 0 [pid 8337] <... futex resumed>) = 1 [pid 8332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8337] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8332] <... openat resumed>) = 3 [pid 8332] chdir("./file0") = 0 [pid 8332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8340] memfd_create("syzkaller", 0 [pid 8336] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8332] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8340] <... memfd_create resumed>) = 3 [pid 8332] <... futex resumed>) = 1 [pid 8331] <... futex resumed>) = 0 [pid 8332] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8339] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8338] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8331] exit_group(0 [pid 8340] <... mmap resumed>) = 0x7f5817c00000 [pid 8336] <... write resumed>) = 2097152 [pid 8331] <... exit_group resumed>) = ? [pid 8332] <... futex resumed>) = ? [pid 8336] munmap(0x7f5817c00000, 138412032 [pid 8332] +++ exited with 0 +++ [pid 8331] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8331, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8336] <... munmap resumed>) = 0 [pid 8340] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8338] <... write resumed>) = 2097152 [pid 8336] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8336] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 8339] <... write resumed>) = 2097152 [pid 8338] munmap(0x7f5817c00000, 138412032 [pid 8336] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(3, "", [pid 8339] munmap(0x7f5817c00000, 138412032 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8339] <... munmap resumed>) = 0 [pid 5063] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./322/binderfs" [pid 8336] <... ioctl resumed>) = 0 [pid 8336] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] <... close resumed>) = 0 [pid 8340] <... write resumed>) = 2097152 [pid 8339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8338] <... munmap resumed>) = 0 [pid 8336] close(4 [pid 5063] <... umount2 resumed>) = 0 [pid 8340] munmap(0x7f5817c00000, 138412032 [pid 8338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8336] <... close resumed>) = 0 [pid 8339] <... openat resumed>) = 4 [pid 8338] <... openat resumed>) = 4 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8339] ioctl(4, LOOP_SET_FD, 3 [pid 8338] ioctl(4, LOOP_SET_FD, 3 [pid 8336] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8340] <... munmap resumed>) = 0 [pid 8339] <... ioctl resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./322/file0", [pid 8336] <... mkdir resumed>) = 0 [pid 8338] <... ioctl resumed>) = 0 [pid 8340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8339] close(3 [pid 8336] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8340] <... openat resumed>) = 4 [pid 8339] <... close resumed>) = 0 [pid 8338] close(3 [ 296.332560][ T8336] loop3: detected capacity change from 0 to 4096 [ 296.356094][ T8339] loop1: detected capacity change from 0 to 4096 [ 296.356100][ T8338] loop2: detected capacity change from 0 to 4096 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] ioctl(4, LOOP_SET_FD, 3 [pid 8338] <... close resumed>) = 0 [pid 8339] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8338] close(4) = 0 [pid 8338] mkdir("./file0", 0777) = 0 [pid 8338] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8340] <... ioctl resumed>) = 0 [pid 8339] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8340] close(3 [pid 8339] mkdir("./file0", 0777 [pid 5063] <... openat resumed>) = 4 [pid 8339] <... mkdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 8339] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8340] <... close resumed>) = 0 [pid 8340] close(4 [pid 5063] getdents64(4, [pid 8340] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8340] mkdir("./file0", 0777 [pid 5063] getdents64(4, [pid 8340] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./322/file0") = 0 [pid 5063] getdents64(3, [pid 8340] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./322") = 0 [ 296.388994][ T8336] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 296.391264][ T8340] loop0: detected capacity change from 0 to 4096 [ 296.412755][ T8338] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 296.428784][ T8339] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5063] mkdir("./323", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 8338] <... mount resumed>) = 0 [pid 8336] <... mount resumed>) = 0 [pid 8336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8336] <... openat resumed>) = 3 [pid 8336] chdir("./file0") = 0 [pid 8336] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8336] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8333] <... futex resumed>) = 0 [pid 8338] <... openat resumed>) = 3 [pid 8336] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8333] exit_group(0 [pid 8338] chdir("./file0" [pid 8336] <... futex resumed>) = ? [pid 8333] <... exit_group resumed>) = ? [pid 8338] <... chdir resumed>) = 0 [pid 8338] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8338] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8338] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8334] <... futex resumed>) = 0 [pid 8334] exit_group(0 [pid 8338] <... futex resumed>) = ? [pid 8334] <... exit_group resumed>) = ? [pid 8338] +++ exited with 0 +++ [pid 8336] +++ exited with 0 +++ [pid 8333] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8333, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 296.453075][ T8340] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8339] <... mount resumed>) = 0 [pid 5062] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8340] <... mount resumed>) = 0 [pid 8339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8334] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8339] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8339] chdir("./file0" [pid 5062] getdents64(3, [pid 8340] <... openat resumed>) = 3 [pid 8339] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8340] chdir("./file0" [pid 8339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] <... chdir resumed>) = 0 [pid 8339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8339] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(AT_FDCWD, "./323/binderfs", [pid 8340] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8339] <... futex resumed>) = 1 [pid 8335] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8334, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8339] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8335] exit_group(0 [pid 8340] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8339] <... futex resumed>) = ? [pid 8335] <... exit_group resumed>) = ? [pid 5062] unlink("./323/binderfs" [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8340] <... futex resumed>) = 1 [pid 8339] +++ exited with 0 +++ [pid 8337] <... futex resumed>) = 0 [pid 8335] +++ exited with 0 +++ [pid 5062] <... unlink resumed>) = 0 [pid 8340] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8335, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8337] exit_group(0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 8340] <... futex resumed>) = ? [pid 8337] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = 0 [pid 8340] +++ exited with 0 +++ [pid 5061] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3) = 0 [pid 5060] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8341 attached [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8337] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8341] set_robust_list(0x5555567436a0, 24 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8337, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8341] <... set_robust_list resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8341] chdir("./323" [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8341 [pid 5062] newfstatat(AT_FDCWD, "./323/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", [pid 8341] <... chdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8341] <... prctl resumed>) = 0 [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8341] setpgid(0, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 5059] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8341] <... setpgid resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5060] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] unlink("./324/binderfs" [pid 5062] getdents64(4, [pid 8341] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... unlink resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5059] <... openat resumed>) = 3 [pid 8341] write(3, "1000", 4 [pid 5062] getdents64(4, [pid 5061] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(3, "", [pid 5060] unlink("./328/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8341] <... write resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5059] getdents64(3, [pid 5061] <... umount2 resumed>) = 0 [pid 5060] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8341] close(3 [pid 5062] close(4 [pid 5061] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5059] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8341] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8341] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./323/file0" [pid 5061] newfstatat(AT_FDCWD, "./324/file0", [pid 5059] newfstatat(AT_FDCWD, "./327/binderfs", [pid 8341] <... symlink resumed>) = 0 [pid 5060] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8341] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./327/binderfs" [pid 8341] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./328/file0", [pid 5059] <... unlink resumed>) = 0 [pid 8341] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8341] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] close(3 [pid 5061] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 4 [pid 8341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] rmdir("./323" [pid 5061] newfstatat(4, "", [pid 5060] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = 0 [pid 8341] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] mkdir("./324", 0777 [pid 5061] getdents64(4, [pid 5060] newfstatat(4, "", [pid 5059] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8341] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8341] <... mprotect resumed>) = 0 [pid 5061] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 8341] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./327/file0", [pid 8341] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] close(4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] <... close resumed>) = 0 [pid 5060] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] rmdir("./324/file0" [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8342 attached [pid 8341] <... clone3 resumed> => {parent_tid=[8342]}, 88) = 8342 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] close(4 [pid 8341] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] getdents64(3, [pid 8341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 8342] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8341] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(3 [pid 5060] rmdir("./328/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8342] <... rseq resumed>) = 0 [pid 8341] <... futex resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8342] set_robust_list(0x7f58200ee9a0, 24 [pid 8341] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] rmdir("./324" [pid 5059] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8342] <... set_robust_list resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] <... openat resumed>) = 4 [pid 8342] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... rmdir resumed>) = 0 [pid 8342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] mkdir("./325", 0777 [pid 5059] newfstatat(4, "", [pid 5060] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8342] memfd_create("syzkaller", 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] rmdir("./328" [pid 5059] getdents64(4, [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8342] <... memfd_create resumed>) = 3 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] close(4 [pid 8342] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] mkdir("./329", 0777 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./327/file0" [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] close(3) = 0 [pid 5059] rmdir("./327") = 0 [pid 8342] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] mkdir("./328", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8343 ./strace-static-x86_64: Process 8343 attached [pid 8342] <... write resumed>) = 2097152 [pid 8343] set_robust_list(0x5555567436a0, 24) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8343] chdir("./324" [pid 8342] munmap(0x7f5817c00000, 138412032 [pid 8343] <... chdir resumed>) = 0 [pid 5061] close(3 [pid 8343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8343] setpgid(0, 0) = 0 [pid 8343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... ioctl resumed>) = 0 [pid 8343] <... openat resumed>) = 3 [pid 8343] write(3, "1000", 4 [pid 5061] <... close resumed>) = 0 [pid 8343] <... write resumed>) = 4 [pid 8343] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8343] <... close resumed>) = 0 [pid 8343] symlink("/dev/binderfs", "./binderfs" [pid 8342] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 8344 attached [pid 8343] <... symlink resumed>) = 0 [pid 8343] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] close(3) = 0 [pid 8343] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8344] set_robust_list(0x5555567436a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8344 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8344] <... set_robust_list resumed>) = 0 [pid 8343] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8344] chdir("./325" [pid 8343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8342] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 8345 attached [pid 8344] <... chdir resumed>) = 0 [pid 8343] <... mmap resumed>) = 0x7f58200ce000 [pid 8342] <... openat resumed>) = 4 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8345 [pid 8344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8343] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8342] ioctl(4, LOOP_SET_FD, 3 [pid 8345] set_robust_list(0x5555567436a0, 24 [pid 8344] <... prctl resumed>) = 0 [pid 8343] <... mprotect resumed>) = 0 [pid 8345] <... set_robust_list resumed>) = 0 [pid 8344] setpgid(0, 0) = 0 [pid 8343] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8345] chdir("./329" [pid 5059] <... ioctl resumed>) = 0 [pid 8345] <... chdir resumed>) = 0 [pid 8344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8343] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] close(3 [pid 8345] <... prctl resumed>) = 0 [pid 8345] setpgid(0, 0) = 0 [pid 5059] <... close resumed>) = 0 [pid 8345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8343] <... clone3 resumed> => {parent_tid=[8346]}, 88) = 8346 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8345] <... openat resumed>) = 3 [pid 8344] <... openat resumed>) = 3 [pid 8343] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8346 attached NULL, 8) = 0 [pid 8346] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8345] write(3, "1000", 4 [pid 8343] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] write(3, "1000", 4 [pid 8346] <... rseq resumed>) = 0 [pid 8345] <... write resumed>) = 4 [pid 8344] <... write resumed>) = 4 [pid 8343] <... futex resumed>) = 0 [pid 8346] set_robust_list(0x7f58200ee9a0, 24 [pid 8345] close(3 [pid 8344] close(3 [pid 8343] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8347 attached [pid 8346] <... set_robust_list resumed>) = 0 [pid 8342] <... ioctl resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8347 [pid 8347] set_robust_list(0x5555567436a0, 24 [pid 8346] rt_sigprocmask(SIG_SETMASK, [], [pid 8347] <... set_robust_list resumed>) = 0 [pid 8346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8342] close(3 [pid 8347] chdir("./328" [pid 8346] memfd_create("syzkaller", 0 [pid 8345] <... close resumed>) = 0 [pid 8344] <... close resumed>) = 0 [pid 8342] <... close resumed>) = 0 [pid 8347] <... chdir resumed>) = 0 [pid 8345] symlink("/dev/binderfs", "./binderfs" [pid 8344] symlink("/dev/binderfs", "./binderfs" [pid 8347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8346] <... memfd_create resumed>) = 3 [pid 8345] <... symlink resumed>) = 0 [pid 8344] <... symlink resumed>) = 0 [pid 8342] close(4 [pid 8347] <... prctl resumed>) = 0 [pid 8346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8345] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8342] <... close resumed>) = 0 [pid 8347] setpgid(0, 0 [pid 8346] <... mmap resumed>) = 0x7f5817c00000 [pid 8344] <... futex resumed>) = 0 [pid 8342] mkdir("./file0", 0777 [pid 8347] <... setpgid resumed>) = 0 [pid 8345] <... futex resumed>) = 0 [pid 8344] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8342] <... mkdir resumed>) = 0 [pid 8347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8345] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8344] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8345] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8347] <... openat resumed>) = 3 [pid 8344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8345] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8347] write(3, "1000", 4 [pid 8345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8344] <... mmap resumed>) = 0x7f58200ce000 [pid 8347] <... write resumed>) = 4 [pid 8345] <... mmap resumed>) = 0x7f58200ce000 [pid 8344] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8342] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8347] close(3 [pid 8345] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8344] <... mprotect resumed>) = 0 [ 296.763862][ T8342] loop4: detected capacity change from 0 to 4096 [pid 8345] <... mprotect resumed>) = 0 [pid 8347] <... close resumed>) = 0 [pid 8347] symlink("/dev/binderfs", "./binderfs" [pid 8345] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8344] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8347] <... symlink resumed>) = 0 [pid 8345] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8344] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8347] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8347] <... futex resumed>) = 0 [pid 8347] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8344] <... clone3 resumed> => {parent_tid=[8349]}, 88) = 8349 ./strace-static-x86_64: Process 8348 attached [pid 8347] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8345] <... clone3 resumed> => {parent_tid=[8348]}, 88) = 8348 [pid 8344] rt_sigprocmask(SIG_SETMASK, [], [pid 8348] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8345] rt_sigprocmask(SIG_SETMASK, [], [pid 8344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8348] <... rseq resumed>) = 0 [pid 8347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8344] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8349 attached [pid 8348] set_robust_list(0x7f58200ee9a0, 24 [pid 8347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8345] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8344] <... futex resumed>) = 0 [pid 8349] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8348] <... set_robust_list resumed>) = 0 [pid 8347] <... mmap resumed>) = 0x7f58200ce000 [pid 8345] <... futex resumed>) = 0 [pid 8344] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8349] <... rseq resumed>) = 0 [pid 8348] rt_sigprocmask(SIG_SETMASK, [], [pid 8347] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8345] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8349] set_robust_list(0x7f58200ee9a0, 24 [pid 8348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8347] <... mprotect resumed>) = 0 [pid 8349] <... set_robust_list resumed>) = 0 [pid 8349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8349] memfd_create("syzkaller", 0 [pid 8347] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8348] memfd_create("syzkaller", 0) = 3 [pid 8347] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 ./strace-static-x86_64: Process 8350 attached [pid 8349] <... memfd_create resumed>) = 3 [pid 8350] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8347] <... clone3 resumed> => {parent_tid=[8350]}, 88) = 8350 [pid 8347] rt_sigprocmask(SIG_SETMASK, [], [pid 8350] <... rseq resumed>) = 0 [pid 8349] <... mmap resumed>) = 0x7f5817c00000 [pid 8350] set_robust_list(0x7f58200ee9a0, 24 [pid 8347] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 296.819769][ T8342] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8350] <... set_robust_list resumed>) = 0 [pid 8347] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8347] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8346] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8350] memfd_create("syzkaller", 0 [pid 8348] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8350] <... memfd_create resumed>) = 3 [pid 8350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8349] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8348] <... write resumed>) = 2097152 [pid 8342] <... mount resumed>) = 0 [pid 8348] munmap(0x7f5817c00000, 138412032 [pid 8342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8342] chdir("./file0") = 0 [pid 8342] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8349] <... write resumed>) = 2097152 [pid 8349] munmap(0x7f5817c00000, 138412032 [pid 8342] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8341] <... futex resumed>) = 0 [pid 8342] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8341] exit_group(0 [pid 8348] <... munmap resumed>) = 0 [pid 8349] <... munmap resumed>) = 0 [pid 8348] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8342] <... futex resumed>) = ? [pid 8341] <... exit_group resumed>) = ? [pid 8349] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8346] <... write resumed>) = 2097152 [pid 8342] +++ exited with 0 +++ [pid 8349] <... openat resumed>) = 4 [pid 8348] <... openat resumed>) = 4 [pid 8346] munmap(0x7f5817c00000, 138412032 [pid 8349] ioctl(4, LOOP_SET_FD, 3 [pid 8348] ioctl(4, LOOP_SET_FD, 3 [pid 8350] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8341] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8341, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8348] <... ioctl resumed>) = 0 [pid 8346] <... munmap resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./323/binderfs", [pid 8349] <... ioctl resumed>) = 0 [pid 8349] close(3 [pid 8348] close(3 [pid 8346] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8349] <... close resumed>) = 0 [pid 8348] <... close resumed>) = 0 [pid 8346] <... openat resumed>) = 4 [pid 5063] unlink("./323/binderfs" [pid 8349] close(4 [pid 8348] close(4 [pid 8346] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8348] <... close resumed>) = 0 [pid 8349] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8349] mkdir("./file0", 0777 [pid 8348] mkdir("./file0", 0777 [pid 8346] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./323/file0", [pid 8349] <... mkdir resumed>) = 0 [pid 8348] <... mkdir resumed>) = 0 [pid 8346] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8349] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8348] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8346] <... close resumed>) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8346] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 296.990026][ T8349] loop2: detected capacity change from 0 to 4096 [ 296.997278][ T8348] loop1: detected capacity change from 0 to 4096 [ 297.017140][ T8346] loop3: detected capacity change from 0 to 4096 [pid 5063] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8350] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 8346] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./323/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8346] mkdir("./file0", 0777 [pid 5063] rmdir("./323" [pid 8350] munmap(0x7f5817c00000, 138412032 [pid 8346] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8346] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] mkdir("./324", 0777 [pid 8350] <... munmap resumed>) = 0 [pid 8350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 8350] <... openat resumed>) = 4 [pid 8350] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8350] <... ioctl resumed>) = 0 [pid 8350] close(3) = 0 [pid 8350] close(4) = 0 [pid 8350] mkdir("./file0", 0777 [pid 8348] <... mount resumed>) = 0 [pid 8348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8350] <... mkdir resumed>) = 0 [pid 8348] <... openat resumed>) = 3 [pid 8350] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8348] chdir("./file0") = 0 [ 297.042100][ T8348] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 297.051289][ T8349] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 297.064875][ T8346] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 297.083806][ T8350] loop0: detected capacity change from 0 to 4096 [pid 8348] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8348] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8349] <... mount resumed>) = 0 [pid 8349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8349] chdir("./file0" [pid 8348] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8345] <... futex resumed>) = 0 [pid 8345] exit_group(0 [pid 8348] <... futex resumed>) = ? [pid 8345] <... exit_group resumed>) = ? [pid 8348] +++ exited with 0 +++ [pid 8349] <... chdir resumed>) = 0 [pid 8349] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8349] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8344] <... futex resumed>) = 0 [pid 8349] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8344] exit_group(0 [pid 8349] <... futex resumed>) = ? [pid 8344] <... exit_group resumed>) = ? [pid 8349] +++ exited with 0 +++ [pid 8345] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8345, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5060] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./329/binderfs" [pid 8344] +++ exited with 0 +++ [pid 5060] <... unlink resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8344, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8346] <... mount resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [ 297.118449][ T8350] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8346] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./325/binderfs", [pid 8346] chdir("./file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8346] <... chdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./329/file0", [pid 8346] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] unlink("./325/binderfs" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8346] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... unlink resumed>) = 0 [pid 5060] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 8346] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(4, "", [pid 8346] <... futex resumed>) = 1 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8346] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] getdents64(4, [pid 8343] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8343] exit_group(0 [pid 5060] getdents64(4, [pid 8346] <... futex resumed>) = ? [pid 8343] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8346] +++ exited with 0 +++ [pid 5060] close(4) = 0 [pid 5061] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./329/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./325/file0", [pid 8343] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8343, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] getdents64(3, [pid 5061] newfstatat(4, "", [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(3 [pid 5061] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] rmdir("./329") = 0 [pid 5062] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] mkdir("./330", 0777 [pid 5062] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] close(4 [pid 5060] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5063] close(3 [pid 5062] newfstatat(3, "", [pid 5061] rmdir("./325/file0" [pid 8350] <... mount resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] getdents64(3, [pid 8350] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(3, [pid 5060] <... openat resumed>) = 3 [pid 8350] chdir("./file0" [pid 5062] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8351 attached [pid 8350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5061] close(3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8351] set_robust_list(0x5555567436a0, 24 [pid 8350] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8351] <... set_robust_list resumed>) = 0 [pid 8350] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8351 [pid 5062] unlink("./324/binderfs" [pid 5061] rmdir("./325" [pid 5060] close(3 [pid 8351] chdir("./324" [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8351] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] mkdir("./326", 0777./strace-static-x86_64: Process 8352 attached [pid 8352] set_robust_list(0x5555567436a0, 24 [pid 8351] <... prctl resumed>) = 0 [pid 8352] <... set_robust_list resumed>) = 0 [pid 8351] setpgid(0, 0) = 0 [pid 8350] <... futex resumed>) = 1 [pid 5061] <... mkdir resumed>) = 0 [pid 8351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8352] chdir("./330" [pid 8351] <... openat resumed>) = 3 [pid 8350] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8352 [pid 8352] <... chdir resumed>) = 0 [pid 8351] write(3, "1000", 4 [pid 8347] <... futex resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./324/file0", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8351] <... write resumed>) = 4 [pid 8347] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8352] <... prctl resumed>) = 0 [pid 8351] close(3 [pid 8352] setpgid(0, 0 [pid 8351] <... close resumed>) = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8352] <... setpgid resumed>) = 0 [pid 8351] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8351] <... symlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8350] <... futex resumed>) = ? [pid 8347] <... exit_group resumed>) = ? [pid 8352] <... openat resumed>) = 3 [pid 8350] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 8352] write(3, "1000", 4 [pid 8351] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8352] <... write resumed>) = 4 [pid 8351] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 8352] close(3 [pid 8351] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8347] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8352] <... close resumed>) = 0 [pid 8351] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8352] symlink("/dev/binderfs", "./binderfs" [pid 8351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] getdents64(4, [pid 8352] <... symlink resumed>) = 0 [pid 8351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8347, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8351] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8352] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8351] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8352] <... futex resumed>) = 0 [pid 8351] <... mprotect resumed>) = 0 [pid 5062] rmdir("./324/file0" [pid 5059] <... openat resumed>) = 3 [pid 8352] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... rmdir resumed>) = 0 [pid 8352] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8351] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] newfstatat(3, "", [pid 8352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8351] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] getdents64(3, [pid 5059] getdents64(3, [pid 8352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8352] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] close(3) = 0 [pid 5059] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8352] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8351] <... clone3 resumed> => {parent_tid=[8353]}, 88) = 8353 [pid 5062] rmdir("./324" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8353 attached [pid 8352] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8351] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./328/binderfs", [pid 8353] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8353] <... rseq resumed>) = 0 [pid 8352] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8351] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8353] set_robust_list(0x7f58200ee9a0, 24 [pid 8352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8351] <... futex resumed>) = 0 [pid 5062] mkdir("./325", 0777 [pid 5059] unlink("./328/binderfs"./strace-static-x86_64: Process 8354 attached [pid 8353] <... set_robust_list resumed>) = 0 [pid 8351] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... mkdir resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 8354] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8353] rt_sigprocmask(SIG_SETMASK, [], [pid 8352] <... clone3 resumed> => {parent_tid=[8354]}, 88) = 8354 [pid 8354] <... rseq resumed>) = 0 [pid 8353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8352] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8354] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8354] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8352] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8354] <... futex resumed>) = 0 [pid 8352] <... futex resumed>) = 1 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = 0 [pid 8354] memfd_create("syzkaller", 0 [pid 8353] memfd_create("syzkaller", 0 [pid 8352] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5059] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8353] <... memfd_create resumed>) = 3 [pid 5059] newfstatat(AT_FDCWD, "./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8354] <... memfd_create resumed>) = 3 [pid 8353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8353] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] newfstatat(4, "", [pid 8354] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8355 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./328/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8355 attached [pid 5059] close(3 [pid 8355] set_robust_list(0x5555567436a0, 24 [pid 5059] <... close resumed>) = 0 [pid 8355] <... set_robust_list resumed>) = 0 [pid 5059] rmdir("./328" [pid 8355] chdir("./325" [pid 5059] <... rmdir resumed>) = 0 [pid 8355] <... chdir resumed>) = 0 [pid 5059] mkdir("./329", 0777 [pid 8355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 8355] <... prctl resumed>) = 0 [pid 8355] setpgid(0, 0) = 0 [pid 8355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8355] write(3, "1000", 4 [pid 5059] <... openat resumed>) = 3 [pid 8355] <... write resumed>) = 4 [pid 8353] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8355] close(3) = 0 [pid 8355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8355] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8354] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8355] <... futex resumed>) = 0 [pid 5061] close(3 [pid 8355] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 8355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8355] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8356]}, 88) = 8356 [pid 8355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8355] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8356 attached ./strace-static-x86_64: Process 8357 attached [pid 8355] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8357] set_robust_list(0x5555567436a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8357 [pid 8356] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8357] <... set_robust_list resumed>) = 0 [pid 8356] set_robust_list(0x7f58200ee9a0, 24 [pid 8357] chdir("./326") = 0 [pid 8356] <... set_robust_list resumed>) = 0 [pid 8357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8356] memfd_create("syzkaller", 0) = 3 [pid 8357] <... prctl resumed>) = 0 [pid 8357] setpgid(0, 0) = 0 [pid 8356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8356] <... mmap resumed>) = 0x7f5817c00000 [pid 8357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8353] <... write resumed>) = 2097152 [pid 5059] close(3 [pid 8357] write(3, "1000", 4) = 4 [pid 5059] <... close resumed>) = 0 [pid 8357] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8357] <... close resumed>) = 0 [pid 8357] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 8358 attached [pid 8354] <... write resumed>) = 2097152 [pid 8353] munmap(0x7f5817c00000, 138412032 [pid 8358] set_robust_list(0x5555567436a0, 24 [pid 8357] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8353] <... munmap resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8358 [pid 8358] <... set_robust_list resumed>) = 0 [pid 8358] chdir("./329") = 0 [pid 8357] <... futex resumed>) = 0 [pid 8358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8357] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8358] <... prctl resumed>) = 0 [pid 8357] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8354] munmap(0x7f5817c00000, 138412032 [pid 8358] setpgid(0, 0 [pid 8357] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8358] <... setpgid resumed>) = 0 [pid 8357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8358] <... openat resumed>) = 3 [pid 8357] <... mmap resumed>) = 0x7f58200ce000 [pid 8358] write(3, "1000", 4 [pid 8357] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8354] <... munmap resumed>) = 0 [pid 8358] <... write resumed>) = 4 [pid 8358] close(3 [pid 8357] <... mprotect resumed>) = 0 [pid 8358] <... close resumed>) = 0 [pid 8353] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8358] symlink("/dev/binderfs", "./binderfs" [pid 8357] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8353] <... openat resumed>) = 4 [pid 8358] <... symlink resumed>) = 0 [pid 8357] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8359]}, 88) = 8359 [pid 8354] <... openat resumed>) = 4 [pid 8357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8357] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8357] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8354] ioctl(4, LOOP_SET_FD, 3 [pid 8353] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8359 attached [pid 8358] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8359] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8358] <... futex resumed>) = 0 [pid 8359] <... rseq resumed>) = 0 [pid 8358] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8359] set_robust_list(0x7f58200ee9a0, 24 [pid 8358] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8359] <... set_robust_list resumed>) = 0 [pid 8358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8354] <... ioctl resumed>) = 0 [pid 8359] rt_sigprocmask(SIG_SETMASK, [], [pid 8358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8354] close(3) = 0 [pid 8358] <... mmap resumed>) = 0x7f58200ce000 [pid 8356] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8354] close(4 [pid 8353] <... ioctl resumed>) = 0 [pid 8359] memfd_create("syzkaller", 0 [pid 8358] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8354] <... close resumed>) = 0 [pid 8359] <... memfd_create resumed>) = 3 [pid 8358] <... mprotect resumed>) = 0 [pid 8354] mkdir("./file0", 0777 [pid 8353] close(3 [pid 8359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 297.510708][ T8354] loop1: detected capacity change from 0 to 4096 [ 297.520429][ T8353] loop4: detected capacity change from 0 to 4096 [pid 8358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8359] <... mmap resumed>) = 0x7f5817c00000 [pid 8358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8354] <... mkdir resumed>) = 0 [pid 8353] <... close resumed>) = 0 [pid 8354] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8353] close(4 [pid 8358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8353] <... close resumed>) = 0 [pid 8353] mkdir("./file0", 0777 [pid 8358] <... clone3 resumed> => {parent_tid=[8360]}, 88) = 8360 [pid 8358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8358] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8358] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8360 attached [pid 8360] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8360] set_robust_list(0x7f58200ee9a0, 24 [pid 8353] <... mkdir resumed>) = 0 [pid 8360] <... set_robust_list resumed>) = 0 [pid 8360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8360] memfd_create("syzkaller", 0 [pid 8353] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8360] <... memfd_create resumed>) = 3 [pid 8360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8356] <... write resumed>) = 2097152 [pid 8356] munmap(0x7f5817c00000, 138412032) = 0 [pid 8359] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8356] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 297.557819][ T8354] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 297.582520][ T8353] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8356] ioctl(4, LOOP_SET_FD, 3 [pid 8360] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8354] <... mount resumed>) = 0 [pid 8356] <... ioctl resumed>) = 0 [pid 8354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8356] close(3) = 0 [pid 8356] close(4) = 0 [pid 8354] <... openat resumed>) = 3 [pid 8356] mkdir("./file0", 0777 [pid 8354] chdir("./file0" [pid 8356] <... mkdir resumed>) = 0 [pid 8354] <... chdir resumed>) = 0 [ 297.634704][ T8356] loop3: detected capacity change from 0 to 4096 [pid 8356] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8353] <... mount resumed>) = 0 [pid 8354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8354] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8353] <... openat resumed>) = 3 [pid 8354] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8353] chdir("./file0") = 0 [pid 8352] <... futex resumed>) = 0 [pid 8352] exit_group(0 [pid 8353] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8354] <... futex resumed>) = ? [pid 8353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8352] <... exit_group resumed>) = ? [pid 8354] +++ exited with 0 +++ [pid 8353] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8352] +++ exited with 0 +++ [pid 8353] <... futex resumed>) = 1 [pid 8351] <... futex resumed>) = 0 [pid 8353] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8352, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8351] exit_group(0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8353] <... futex resumed>) = ? [pid 8351] <... exit_group resumed>) = ? [pid 8353] +++ exited with 0 +++ [pid 8351] +++ exited with 0 +++ [pid 5060] <... restart_syscall resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8351, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5060] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8359] <... write resumed>) = 2097152 [pid 5063] unlink("./324/binderfs" [pid 5060] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [ 297.682375][ T8356] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5060] newfstatat(3, "", [pid 8360] <... write resumed>) = 2097152 [pid 8359] munmap(0x7f5817c00000, 138412032 [pid 8356] <... mount resumed>) = 0 [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8360] munmap(0x7f5817c00000, 138412032 [pid 8359] <... munmap resumed>) = 0 [pid 8356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = 0 [pid 5060] getdents64(3, [pid 8359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8356] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8356] chdir("./file0" [pid 5063] newfstatat(AT_FDCWD, "./324/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8356] <... chdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./330/binderfs", [pid 8359] <... openat resumed>) = 4 [pid 8356] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8359] ioctl(4, LOOP_SET_FD, 3 [pid 8356] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8356] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] unlink("./330/binderfs" [pid 8356] <... futex resumed>) = 1 [pid 8355] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... unlink resumed>) = 0 [pid 8356] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8360] <... munmap resumed>) = 0 [pid 8359] <... ioctl resumed>) = 0 [pid 8355] exit_group(0 [pid 5063] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = 0 [pid 8359] close(3 [pid 8356] <... futex resumed>) = ? [pid 8355] <... exit_group resumed>) = ? [pid 5063] newfstatat(4, "", [pid 8360] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8359] <... close resumed>) = 0 [pid 8356] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8360] <... openat resumed>) = 4 [pid 8359] close(4 [pid 5063] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8355] +++ exited with 0 +++ [pid 8360] ioctl(4, LOOP_SET_FD, 3 [pid 5060] newfstatat(AT_FDCWD, "./330/file0", [pid 8359] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8355, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8359] mkdir("./file0", 0777 [pid 5063] getdents64(4, [pid 5062] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8359] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(4 [pid 5062] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5063] rmdir("./324/file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./325/binderfs", [pid 5063] rmdir("./324" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8359] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] unlink("./325/binderfs" [pid 8360] <... ioctl resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8360] close(3 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8360] <... close resumed>) = 0 [pid 5063] mkdir("./325", 0777 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./325/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8360] close(4 [pid 5062] close(4) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] rmdir("./325/file0" [pid 8360] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8360] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8360] <... mkdir resumed>) = 0 [ 297.757048][ T8359] loop2: detected capacity change from 0 to 4096 [ 297.776830][ T8360] loop0: detected capacity change from 0 to 4096 [ 297.796889][ T8359] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5063] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 8360] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./330/file0") = 0 [pid 5062] rmdir("./325" [pid 5060] getdents64(3, [pid 8359] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8359] chdir("./file0") = 0 [pid 5060] close(3 [pid 8359] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8359] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 8359] <... futex resumed>) = 1 [pid 8357] <... futex resumed>) = 0 [pid 8359] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8357] exit_group(0 [pid 5060] rmdir("./330" [pid 8359] <... futex resumed>) = ? [pid 8357] <... exit_group resumed>) = ? [pid 5060] <... rmdir resumed>) = 0 [pid 8359] +++ exited with 0 +++ [pid 8357] +++ exited with 0 +++ [pid 5062] mkdir("./326", 0777 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8357, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] <... mkdir resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] mkdir("./331", 0777 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... mkdir resumed>) = 0 [pid 5061] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] getdents64(3, [pid 5060] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./326/binderfs") = 0 [ 297.818458][ T8360] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8360] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8360] chdir("./file0" [pid 5061] newfstatat(AT_FDCWD, "./326/file0", [pid 8360] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8360] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8360] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8360] <... futex resumed>) = 1 [pid 5061] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8360] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8358] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8358] exit_group(0 [pid 5062] <... ioctl resumed>) = 0 [pid 8358] <... exit_group resumed>) = ? [pid 8360] <... futex resumed>) = ? [pid 5061] newfstatat(4, "", [pid 8360] +++ exited with 0 +++ [pid 8358] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8358, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] getdents64(4, [pid 5059] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5062] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 5059] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5061] rmdir("./326/file0" [pid 5059] newfstatat(3, "", [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5059] getdents64(3, [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] close(3 [pid 5059] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./326" [pid 5059] newfstatat(AT_FDCWD, "./329/binderfs", [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] mkdir("./327", 0777 [pid 5059] unlink("./329/binderfs" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8361 [pid 5059] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8361 attached ) = 0 ./strace-static-x86_64: Process 8362 attached [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 8361] set_robust_list(0x5555567436a0, 24 [pid 5061] <... openat resumed>) = 3 [pid 8362] set_robust_list(0x5555567436a0, 24 [pid 8361] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8362 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8362] <... set_robust_list resumed>) = 0 [pid 8361] chdir("./325" [pid 8362] chdir("./326" [pid 8361] <... chdir resumed>) = 0 [pid 8362] <... chdir resumed>) = 0 [pid 8361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] <... prctl resumed>) = 0 [pid 5060] close(3 [pid 8361] setpgid(0, 0) = 0 [pid 8362] setpgid(0, 0 [pid 8361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8362] <... setpgid resumed>) = 0 [pid 8362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8361] <... openat resumed>) = 3 [pid 8361] write(3, "1000", 4) = 4 [pid 8361] close(3) = 0 [pid 8361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8361] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(AT_FDCWD, "./329/file0", [pid 8361] <... futex resumed>) = 0 [pid 8361] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8361] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8362] <... openat resumed>) = 3 [pid 5059] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8362] write(3, "1000", 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8362] <... write resumed>) = 4 [pid 5059] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8362] close(3 [pid 8361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8362] <... close resumed>) = 0 [pid 8361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8361] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8361] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 8363 attached [pid 8362] symlink("/dev/binderfs", "./binderfs" [pid 8361] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] newfstatat(4, "", [pid 8363] set_robust_list(0x5555567436a0, 24 [pid 8361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8363 ./strace-static-x86_64: Process 8364 attached [pid 8363] <... set_robust_list resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8364] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8363] chdir("./331" [pid 8361] <... clone3 resumed> => {parent_tid=[8364]}, 88) = 8364 [pid 5059] getdents64(4, [pid 8364] <... rseq resumed>) = 0 [pid 8363] <... chdir resumed>) = 0 [pid 8361] rt_sigprocmask(SIG_SETMASK, [], [pid 8364] set_robust_list(0x7f58200ee9a0, 24 [pid 8363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8362] <... symlink resumed>) = 0 [pid 8361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8364] <... set_robust_list resumed>) = 0 [pid 8363] <... prctl resumed>) = 0 [pid 8361] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8364] rt_sigprocmask(SIG_SETMASK, [], [pid 8363] setpgid(0, 0 [pid 8361] <... futex resumed>) = 0 [pid 8364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8363] <... setpgid resumed>) = 0 [pid 8361] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8364] memfd_create("syzkaller", 0 [pid 8363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] getdents64(4, [pid 8362] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8362] <... futex resumed>) = 0 [pid 5059] close(4 [pid 8362] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5059] <... close resumed>) = 0 [pid 8362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] rmdir("./329/file0" [pid 8362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8364] <... memfd_create resumed>) = 3 [pid 8363] <... openat resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 8364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8363] write(3, "1000", 4 [pid 8362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8364] <... mmap resumed>) = 0x7f5817c00000 [pid 8363] <... write resumed>) = 4 [pid 8363] close(3) = 0 [pid 8363] symlink("/dev/binderfs", "./binderfs" [pid 8362] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] getdents64(3, [pid 8362] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8363] <... symlink resumed>) = 0 [pid 8362] <... mprotect resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 8363] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8363] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8362] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... close resumed>) = 0 [pid 8363] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5059] rmdir("./329" [pid 8363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8363] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8363] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... rmdir resumed>) = 0 [pid 8362] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8363] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8365 attached [pid 5059] mkdir("./330", 0777 [pid 8365] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8363] <... clone3 resumed> => {parent_tid=[8365]}, 88) = 8365 [pid 8362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8365] <... rseq resumed>) = 0 [pid 8363] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... mkdir resumed>) = 0 [pid 8363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8363] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 3 [pid 8363] <... futex resumed>) = 0 [pid 8363] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8365] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8365] memfd_create("syzkaller", 0 [pid 8362] <... clone3 resumed> => {parent_tid=[8366]}, 88) = 8366 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8362] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8366 attached [pid 8365] <... memfd_create resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8366] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8366] <... rseq resumed>) = 0 [pid 8365] <... mmap resumed>) = 0x7f5817c00000 [pid 8366] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 5061] close(3 [pid 8366] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... close resumed>) = 0 [pid 8366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8366] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8364] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8367 ./strace-static-x86_64: Process 8367 attached [pid 8362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8367] set_robust_list(0x5555567436a0, 24) = 0 [pid 8367] chdir("./327") = 0 [pid 8367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8362] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8367] setpgid(0, 0) = 0 [pid 8366] <... futex resumed>) = 0 [pid 8362] <... futex resumed>) = 1 [pid 8367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8366] memfd_create("syzkaller", 0 [pid 8362] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8367] <... openat resumed>) = 3 [pid 8366] <... memfd_create resumed>) = 3 [pid 8367] write(3, "1000", 4 [pid 8366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8367] <... write resumed>) = 4 [pid 8366] <... mmap resumed>) = 0x7f5817c00000 [pid 8367] close(3) = 0 [pid 8367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8367] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8367] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8367] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8368]}, 88) = 8368 [pid 8367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8367] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8367] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8368 attached [pid 8368] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8368] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8368] memfd_create("syzkaller", 0 [pid 8365] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8364] <... write resumed>) = 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 8368] <... memfd_create resumed>) = 3 [pid 8368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8369 attached [pid 8364] munmap(0x7f5817c00000, 138412032 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8369 [pid 8369] set_robust_list(0x5555567436a0, 24) = 0 [pid 8369] chdir("./330") = 0 [pid 8366] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8369] setpgid(0, 0) = 0 [pid 8364] <... munmap resumed>) = 0 [pid 8369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8365] <... write resumed>) = 2097152 [pid 8364] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8365] munmap(0x7f5817c00000, 138412032 [pid 8364] <... openat resumed>) = 4 [pid 8364] ioctl(4, LOOP_SET_FD, 3 [pid 8369] <... openat resumed>) = 3 [pid 8365] <... munmap resumed>) = 0 [pid 8369] write(3, "1000", 4 [pid 8368] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8369] <... write resumed>) = 4 [pid 8369] close(3) = 0 [pid 8369] symlink("/dev/binderfs", "./binderfs" [pid 8365] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8364] <... ioctl resumed>) = 0 [pid 8365] <... openat resumed>) = 4 [pid 8364] close(3 [pid 8369] <... symlink resumed>) = 0 [pid 8364] <... close resumed>) = 0 [pid 8364] close(4) = 0 [pid 8364] mkdir("./file0", 0777 [pid 8365] ioctl(4, LOOP_SET_FD, 3 [pid 8364] <... mkdir resumed>) = 0 [pid 8369] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8369] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8364] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8366] <... write resumed>) = 2097152 [pid 8365] <... ioctl resumed>) = 0 [pid 8369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8366] munmap(0x7f5817c00000, 138412032 [pid 8365] close(3 [pid 8369] <... mmap resumed>) = 0x7f58200ce000 [pid 8369] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8366] <... munmap resumed>) = 0 [pid 8365] <... close resumed>) = 0 [pid 8369] <... mprotect resumed>) = 0 [pid 8365] close(4 [pid 8369] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8365] <... close resumed>) = 0 [pid 8365] mkdir("./file0", 0777 [pid 8369] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8366] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8366] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8370 attached [pid 8369] <... clone3 resumed> => {parent_tid=[8370]}, 88) = 8370 [pid 8366] ioctl(4, LOOP_SET_FD, 3 [pid 8365] <... mkdir resumed>) = 0 [ 298.204111][ T8364] loop4: detected capacity change from 0 to 4096 [ 298.226954][ T8365] loop1: detected capacity change from 0 to 4096 [ 298.242003][ T8364] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8370] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8369] rt_sigprocmask(SIG_SETMASK, [], [pid 8370] <... rseq resumed>) = 0 [pid 8370] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8366] <... ioctl resumed>) = 0 [pid 8365] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8370] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8369] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8368] <... write resumed>) = 2097152 [pid 8370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8366] close(3 [pid 8370] memfd_create("syzkaller", 0 [pid 8369] <... futex resumed>) = 0 [pid 8368] munmap(0x7f5817c00000, 138412032) = 0 [pid 8370] <... memfd_create resumed>) = 3 [pid 8370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8369] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8370] <... mmap resumed>) = 0x7f5817c00000 [pid 8366] <... close resumed>) = 0 [pid 8366] close(4) = 0 [pid 8366] mkdir("./file0", 0777 [pid 8368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8366] <... mkdir resumed>) = 0 [ 298.274449][ T8366] loop3: detected capacity change from 0 to 4096 [ 298.289196][ T8365] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8368] <... openat resumed>) = 4 [pid 8364] <... mount resumed>) = 0 [pid 8368] ioctl(4, LOOP_SET_FD, 3 [pid 8366] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8364] chdir("./file0") = 0 [pid 8364] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8364] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8364] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8361] <... futex resumed>) = 0 [pid 8361] exit_group(0 [pid 8364] <... futex resumed>) = ? [pid 8361] <... exit_group resumed>) = ? [pid 8364] +++ exited with 0 +++ [pid 8368] <... ioctl resumed>) = 0 [pid 8361] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8361, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8368] close(3 [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8368] <... close resumed>) = 0 [pid 8368] close(4) = 0 [pid 8368] mkdir("./file0", 0777) = 0 [pid 5063] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 298.318822][ T8368] loop2: detected capacity change from 0 to 4096 [ 298.329628][ T8366] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8368] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8370] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8365] <... mount resumed>) = 0 [pid 5063] unlink("./325/binderfs" [pid 8365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... unlink resumed>) = 0 [pid 8366] <... mount resumed>) = 0 [pid 8365] <... openat resumed>) = 3 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8365] chdir("./file0") = 0 [pid 8366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8365] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8366] <... openat resumed>) = 3 [pid 8365] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 298.382508][ T8368] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8365] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8366] chdir("./file0" [pid 5063] <... umount2 resumed>) = 0 [pid 8366] <... chdir resumed>) = 0 [pid 8366] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8365] <... futex resumed>) = 1 [pid 8363] <... futex resumed>) = 0 [pid 8366] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8363] exit_group(0 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8366] <... futex resumed>) = 1 [pid 8363] <... exit_group resumed>) = ? [pid 8362] <... futex resumed>) = 0 [pid 8370] <... write resumed>) = 2097152 [pid 8366] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8362] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8370] munmap(0x7f5817c00000, 138412032 [pid 8365] +++ exited with 0 +++ [pid 8363] +++ exited with 0 +++ [pid 8362] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./325/file0", [pid 8366] <... futex resumed>) = ? [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8363, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5060] newfstatat(3, "", [pid 5063] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 8370] <... munmap resumed>) = 0 [pid 5063] getdents64(4, [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./331/binderfs", [pid 8366] +++ exited with 0 +++ [pid 8362] +++ exited with 0 +++ [pid 5063] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8370] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5060] unlink("./331/binderfs" [pid 8370] <... openat resumed>) = 4 [pid 8368] <... mount resumed>) = 0 [pid 5063] rmdir("./325/file0" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8362, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5060] <... unlink resumed>) = 0 [pid 8370] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = 0 [pid 8370] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8368] <... openat resumed>) = 3 [pid 5060] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8370] close(3 [pid 8368] chdir("./file0" [pid 5063] close(3 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8370] <... close resumed>) = 0 [pid 8368] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5060] newfstatat(AT_FDCWD, "./331/file0", [pid 8370] close(4 [pid 8368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] rmdir("./325" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8370] <... close resumed>) = 0 [pid 8368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... rmdir resumed>) = 0 [pid 8370] mkdir("./file0", 0777 [pid 8368] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] mkdir("./326", 0777 [pid 8370] <... mkdir resumed>) = 0 [pid 8368] <... futex resumed>) = 1 [pid 8367] <... futex resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8370] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8368] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8367] exit_group(0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8368] <... futex resumed>) = ? [pid 8367] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8368] +++ exited with 0 +++ [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./326/binderfs") = 0 [pid 8367] +++ exited with 0 +++ [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8367, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5060] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5061] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 5062] newfstatat(AT_FDCWD, "./326/file0", [pid 5061] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(3, "", [pid 5060] rmdir("./331/file0" [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5061] getdents64(3, [pid 5062] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 5062] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./327/binderfs", [pid 5060] rmdir("./331" [pid 5062] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] unlink("./327/binderfs" [pid 5060] mkdir("./332", 0777 [pid 5062] getdents64(4, [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./326/file0") = 0 [pid 5062] getdents64(3, [pid 5060] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] rmdir("./326" [pid 5060] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./327", 0777 [ 298.483982][ T8370] loop0: detected capacity change from 0 to 4096 [ 298.513982][ T8370] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8370] <... mount resumed>) = 0 [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8370] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./327/file0", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8370] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8370] <... chdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8370] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] newfstatat(4, "", [pid 8370] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8370] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(4, [pid 8370] <... futex resumed>) = 1 [pid 8369] <... futex resumed>) = 0 [pid 8370] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8369] exit_group(0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8370] <... futex resumed>) = ? [pid 8369] <... exit_group resumed>) = ? [pid 8370] +++ exited with 0 +++ [pid 8369] +++ exited with 0 +++ [pid 5061] getdents64(4, [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8369, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5061] close(4 [pid 5059] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./327/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./330/binderfs" [pid 5063] close(3 [pid 5059] <... unlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./330/file0", [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8371 [pid 5061] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8371 attached [pid 5061] close(3 [pid 8371] set_robust_list(0x5555567436a0, 24 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./327" [pid 5059] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./330/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./330") = 0 [pid 5059] mkdir("./331", 0777 [pid 8371] <... set_robust_list resumed>) = 0 [pid 5061] mkdir("./328", 0777 [pid 5060] <... ioctl resumed>) = 0 [pid 8371] chdir("./326" [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 8371] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8371] setpgid(0, 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8371] <... setpgid resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... openat resumed>) = 3 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8371] <... openat resumed>) = 3 [pid 8371] write(3, "1000", 4) = 4 [pid 8371] close(3) = 0 [pid 8371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8371] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8371] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8372 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8372 [pid 8371] <... mmap resumed>) = 0x7f58200ce000 [pid 8371] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8372] set_robust_list(0x5555567436a0, 24 [pid 8371] <... mprotect resumed>) = 0 [pid 8372] <... set_robust_list resumed>) = 0 [pid 8371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8372] chdir("./332" [pid 8371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8372] <... chdir resumed>) = 0 [pid 8371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8372] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 8373 attached ) = 0 [pid 8373] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8372] setpgid(0, 0 [pid 8371] <... clone3 resumed> => {parent_tid=[8373]}, 88) = 8373 [pid 8373] <... rseq resumed>) = 0 [pid 8372] <... setpgid resumed>) = 0 [pid 8371] rt_sigprocmask(SIG_SETMASK, [], [pid 8373] set_robust_list(0x7f58200ee9a0, 24 [pid 8372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8372] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 8372] write(3, "1000", 4) = 4 [pid 8372] close(3) = 0 [pid 8372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8372] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8372] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8372] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8372] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8373] <... set_robust_list resumed>) = 0 [pid 8371] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8372] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8371] <... futex resumed>) = 0 [pid 5062] close(3 [pid 8373] rt_sigprocmask(SIG_SETMASK, [], [pid 8371] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 8372] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8374 attached [pid 8372] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8374] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8374 [pid 8374] <... set_robust_list resumed>) = 0 [pid 8372] <... clone3 resumed> => {parent_tid=[8375]}, 88) = 8375 [pid 8372] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8375 attached [pid 8374] chdir("./327" [pid 8372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8375] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8374] <... chdir resumed>) = 0 [pid 8372] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8375] <... rseq resumed>) = 0 [pid 8374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8372] <... futex resumed>) = 0 [pid 8375] set_robust_list(0x7f58200ee9a0, 24 [pid 8374] <... prctl resumed>) = 0 [pid 8372] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8375] <... set_robust_list resumed>) = 0 [pid 8375] rt_sigprocmask(SIG_SETMASK, [], [pid 8374] setpgid(0, 0 [pid 8375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8374] <... setpgid resumed>) = 0 [pid 8375] memfd_create("syzkaller", 0 [pid 8374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8375] <... memfd_create resumed>) = 3 [pid 8373] memfd_create("syzkaller", 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8374] write(3, "1000", 4 [pid 8373] <... memfd_create resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8375] <... mmap resumed>) = 0x7f5817c00000 [pid 8374] <... write resumed>) = 4 [pid 5059] close(3 [pid 8374] close(3 [pid 5059] <... close resumed>) = 0 [pid 8373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] close(3 [pid 8373] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... close resumed>) = 0 [pid 8374] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8374] symlink("/dev/binderfs", "./binderfs" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8374] <... symlink resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8376 ./strace-static-x86_64: Process 8376 attached [pid 8374] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8377 [pid 8374] <... futex resumed>) = 0 [pid 8376] set_robust_list(0x5555567436a0, 24 [pid 8374] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8376] <... set_robust_list resumed>) = 0 [pid 8376] chdir("./328" [pid 8374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 ./strace-static-x86_64: Process 8377 attached [pid 8374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8377] set_robust_list(0x5555567436a0, 24 [pid 8374] <... mmap resumed>) = 0x7f58200ce000 [pid 8377] <... set_robust_list resumed>) = 0 [pid 8377] chdir("./331" [pid 8376] <... chdir resumed>) = 0 [pid 8374] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8374] <... mprotect resumed>) = 0 [pid 8376] <... prctl resumed>) = 0 [pid 8374] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8377] <... chdir resumed>) = 0 [pid 8376] setpgid(0, 0) = 0 [pid 8377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8377] <... prctl resumed>) = 0 [pid 8376] <... openat resumed>) = 3 [pid 8374] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8376] write(3, "1000", 4 [pid 8374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8376] <... write resumed>) = 4 [pid 8376] close(3) = 0 [pid 8374] <... clone3 resumed> => {parent_tid=[8378]}, 88) = 8378 ./strace-static-x86_64: Process 8378 attached [pid 8377] setpgid(0, 0 [pid 8376] symlink("/dev/binderfs", "./binderfs" [pid 8374] rt_sigprocmask(SIG_SETMASK, [], [pid 8378] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8377] <... setpgid resumed>) = 0 [pid 8376] <... symlink resumed>) = 0 [pid 8378] <... rseq resumed>) = 0 [pid 8378] set_robust_list(0x7f58200ee9a0, 24 [pid 8377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8378] <... set_robust_list resumed>) = 0 [pid 8378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8377] <... openat resumed>) = 3 [pid 8378] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8377] write(3, "1000", 4 [pid 8376] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8374] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8378] <... futex resumed>) = 0 [pid 8376] <... futex resumed>) = 0 [pid 8374] <... futex resumed>) = 1 [pid 8378] memfd_create("syzkaller", 0 [pid 8374] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8377] <... write resumed>) = 4 [pid 8377] close(3 [pid 8376] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8378] <... memfd_create resumed>) = 3 [pid 8376] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8377] <... close resumed>) = 0 [pid 8376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8377] symlink("/dev/binderfs", "./binderfs" [pid 8376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8377] <... symlink resumed>) = 0 [pid 8376] <... mmap resumed>) = 0x7f58200ce000 [pid 8378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8377] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8376] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8378] <... mmap resumed>) = 0x7f5817c00000 [pid 8377] <... futex resumed>) = 0 [pid 8376] <... mprotect resumed>) = 0 [pid 8377] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8377] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8376] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8375] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8377] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8376] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8377] <... mprotect resumed>) = 0 [pid 8376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8376] <... clone3 resumed> => {parent_tid=[8379]}, 88) = 8379 [pid 8377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8376] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8380 attached ./strace-static-x86_64: Process 8379 attached NULL, 8) = 0 [pid 8373] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8380] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8377] <... clone3 resumed> => {parent_tid=[8380]}, 88) = 8380 [pid 8379] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8376] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8379] <... rseq resumed>) = 0 [pid 8380] <... rseq resumed>) = 0 [pid 8377] rt_sigprocmask(SIG_SETMASK, [], [pid 8376] <... futex resumed>) = 0 [pid 8380] set_robust_list(0x7f58200ee9a0, 24 [pid 8377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8380] <... set_robust_list resumed>) = 0 [pid 8377] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8380] rt_sigprocmask(SIG_SETMASK, [], [pid 8377] <... futex resumed>) = 0 [pid 8380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8377] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8379] set_robust_list(0x7f58200ee9a0, 24 [pid 8376] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8379] <... set_robust_list resumed>) = 0 [pid 8379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8380] memfd_create("syzkaller", 0 [pid 8379] memfd_create("syzkaller", 0) = 3 [pid 8379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8380] <... memfd_create resumed>) = 3 [pid 8380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8378] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8375] <... write resumed>) = 2097152 [pid 8373] <... write resumed>) = 2097152 [pid 8375] munmap(0x7f5817c00000, 138412032 [pid 8379] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8380] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8375] <... munmap resumed>) = 0 [pid 8373] munmap(0x7f5817c00000, 138412032) = 0 [pid 8375] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8375] ioctl(4, LOOP_SET_FD, 3 [pid 8373] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8375] <... ioctl resumed>) = 0 [pid 8373] <... openat resumed>) = 4 [pid 8373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8375] close(3) = 0 [pid 8375] close(4) = 0 [pid 8375] mkdir("./file0", 0777) = 0 [pid 8378] <... write resumed>) = 2097152 [pid 8375] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8373] close(3) = 0 [ 298.913679][ T8375] loop1: detected capacity change from 0 to 4096 [ 298.922036][ T8373] loop4: detected capacity change from 0 to 4096 [pid 8373] close(4 [pid 8378] munmap(0x7f5817c00000, 138412032 [pid 8373] <... close resumed>) = 0 [pid 8380] <... write resumed>) = 2097152 [pid 8379] <... write resumed>) = 2097152 [pid 8373] mkdir("./file0", 0777 [pid 8379] munmap(0x7f5817c00000, 138412032 [pid 8373] <... mkdir resumed>) = 0 [pid 8373] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8378] <... munmap resumed>) = 0 [pid 8378] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8378] ioctl(4, LOOP_SET_FD, 3 [pid 8380] munmap(0x7f5817c00000, 138412032 [pid 8379] <... munmap resumed>) = 0 [ 298.953840][ T8375] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 298.977875][ T8373] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 298.983162][ T8378] loop3: detected capacity change from 0 to 4096 [pid 8379] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8379] ioctl(4, LOOP_SET_FD, 3 [pid 8380] <... munmap resumed>) = 0 [pid 8379] <... ioctl resumed>) = 0 [pid 8379] close(3) = 0 [pid 8378] <... ioctl resumed>) = 0 [pid 8379] close(4) = 0 [pid 8378] close(3 [pid 8379] mkdir("./file0", 0777 [pid 8378] <... close resumed>) = 0 [pid 8378] close(4) = 0 [pid 8379] <... mkdir resumed>) = 0 [pid 8378] mkdir("./file0", 0777 [pid 8379] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8378] <... mkdir resumed>) = 0 [ 298.999430][ T8379] loop2: detected capacity change from 0 to 4096 [pid 8378] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8380] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8380] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8380] close(3 [pid 8373] <... mount resumed>) = 0 [pid 8380] <... close resumed>) = 0 [pid 8380] close(4 [pid 8375] <... mount resumed>) = 0 [pid 8373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8380] <... close resumed>) = 0 [pid 8375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8373] <... openat resumed>) = 3 [pid 8380] mkdir("./file0", 0777 [pid 8375] <... openat resumed>) = 3 [pid 8373] chdir("./file0" [pid 8380] <... mkdir resumed>) = 0 [pid 8375] chdir("./file0" [pid 8373] <... chdir resumed>) = 0 [pid 8378] <... mount resumed>) = 0 [ 299.032620][ T8379] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 299.045753][ T8380] loop0: detected capacity change from 0 to 4096 [ 299.047344][ T8378] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8375] <... chdir resumed>) = 0 [pid 8373] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8380] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8379] <... mount resumed>) = 0 [pid 8375] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8373] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8373] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8375] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8373] <... futex resumed>) = 1 [pid 8371] <... futex resumed>) = 0 [pid 8375] <... futex resumed>) = 1 [pid 8372] <... futex resumed>) = 0 [pid 8375] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8373] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8372] exit_group(0 [pid 8371] exit_group(0 [pid 8379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8375] <... futex resumed>) = ? [pid 8373] <... futex resumed>) = ? [pid 8372] <... exit_group resumed>) = ? [pid 8371] <... exit_group resumed>) = ? [pid 8378] <... openat resumed>) = 3 [pid 8375] +++ exited with 0 +++ [pid 8372] +++ exited with 0 +++ [pid 8378] chdir("./file0" [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8372, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 8378] <... chdir resumed>) = 0 [pid 8378] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8378] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8373] +++ exited with 0 +++ [pid 8371] +++ exited with 0 +++ [pid 8378] <... futex resumed>) = 1 [pid 8374] <... futex resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8371, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5060] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8378] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8374] exit_group(0 [pid 5060] <... openat resumed>) = 3 [pid 8379] <... openat resumed>) = 3 [pid 8378] <... futex resumed>) = ? [pid 8374] <... exit_group resumed>) = ? [pid 5060] newfstatat(3, "", [pid 8379] chdir("./file0" [pid 5063] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8379] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 8379] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8379] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8378] +++ exited with 0 +++ [pid 8374] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 5060] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8379] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(3, "", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8374, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8379] <... futex resumed>) = 1 [pid 8376] <... futex resumed>) = 0 [ 299.115732][ T8380] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8379] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8376] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(AT_FDCWD, "./332/binderfs", [pid 8379] <... futex resumed>) = ? [pid 8376] <... exit_group resumed>) = ? [pid 5063] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8379] +++ exited with 0 +++ [pid 8376] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] unlink("./332/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./326/binderfs") = 0 [pid 5062] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... unlink resumed>) = 0 [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./327/binderfs") = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8376, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5060] <... umount2 resumed>) = 0 [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5061] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./332/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./326/file0", [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./327/file0", [pid 5061] newfstatat(3, "", [pid 5060] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5060] newfstatat(4, "", [pid 5063] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 5062] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(4, "", [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] unlink("./328/binderfs" [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5061] <... unlink resumed>) = 0 [pid 5060] close(4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(4, [pid 5060] rmdir("./332/file0" [pid 5063] close(4 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] close(4) = 0 [pid 5063] rmdir("./326/file0" [pid 5062] rmdir("./327/file0") = 0 [pid 5060] getdents64(3, [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./328/file0", [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./332" [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5062] close(3 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] close(3 [pid 5062] rmdir("./327" [pid 8380] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8380] chdir("./file0" [pid 5061] newfstatat(4, "", [pid 5060] mkdir("./333", 0777 [pid 8380] <... chdir resumed>) = 0 [pid 5063] rmdir("./326" [pid 5062] mkdir("./328", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8380] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] getdents64(4, [pid 8380] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... mkdir resumed>) = 0 [pid 8380] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(4, [pid 8380] <... futex resumed>) = 1 [pid 8377] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8380] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8377] exit_group(0 [pid 8380] <... futex resumed>) = ? [pid 8377] <... exit_group resumed>) = ? [pid 5061] close(4 [pid 8380] +++ exited with 0 +++ [pid 5063] mkdir("./327", 0777 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8377] +++ exited with 0 +++ [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] rmdir("./328/file0" [pid 5060] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8377, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./328") = 0 [pid 5059] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] mkdir("./329", 0777 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./331/binderfs") = 0 [pid 5059] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5059] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./331/file0") = 0 [pid 5059] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] close(3 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] close(3) = 0 [pid 5059] rmdir("./331" [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8381 [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8381 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8382 [pid 5059] mkdir("./332", 0777 [pid 8381] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8383 attached ) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 8383] set_robust_list(0x5555567436a0, 24 [pid 8381] chdir("./328" [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8383 [pid 8381] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8382 attached [pid 8383] <... set_robust_list resumed>) = 0 [pid 8381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8381] <... prctl resumed>) = 0 [pid 8383] chdir("./327" [pid 8381] setpgid(0, 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8381] <... setpgid resumed>) = 0 [pid 8382] set_robust_list(0x5555567436a0, 24 [pid 5059] <... openat resumed>) = 3 [pid 8382] <... set_robust_list resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8383] <... chdir resumed>) = 0 [pid 8382] chdir("./333" [pid 8381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8382] <... chdir resumed>) = 0 [pid 8382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8382] setpgid(0, 0) = 0 [pid 8383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8383] <... prctl resumed>) = 0 [pid 8383] setpgid(0, 0 [pid 8382] <... openat resumed>) = 3 [pid 8381] <... openat resumed>) = 3 [pid 8382] write(3, "1000", 4 [pid 8383] <... setpgid resumed>) = 0 [pid 8382] <... write resumed>) = 4 [pid 8382] close(3) = 0 [pid 8383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8383] <... openat resumed>) = 3 [pid 8382] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8381] write(3, "1000", 4) = 4 [pid 8382] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8383] write(3, "1000", 4 [pid 8381] close(3 [pid 5061] close(3 [pid 8383] <... write resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8382] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8383] close(3 [pid 8381] <... close resumed>) = 0 [pid 8383] <... close resumed>) = 0 [pid 8381] symlink("/dev/binderfs", "./binderfs" [pid 8383] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8384 attached [pid 8382] <... mprotect resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8384 [pid 8384] set_robust_list(0x5555567436a0, 24 [pid 8383] <... symlink resumed>) = 0 [pid 8382] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8384] <... set_robust_list resumed>) = 0 [pid 8382] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8381] <... symlink resumed>) = 0 [pid 8384] chdir("./329" [pid 8383] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8381] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8385 attached [pid 8383] <... futex resumed>) = 0 [pid 8384] <... chdir resumed>) = 0 [pid 8382] <... clone3 resumed> => {parent_tid=[8385]}, 88) = 8385 [pid 8385] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8383] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8382] rt_sigprocmask(SIG_SETMASK, [], [pid 8381] <... futex resumed>) = 0 [pid 8385] <... rseq resumed>) = 0 [pid 8384] <... prctl resumed>) = 0 [pid 8382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8385] set_robust_list(0x7f58200ee9a0, 24 [pid 8384] setpgid(0, 0 [pid 8383] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8382] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8381] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8384] <... setpgid resumed>) = 0 [pid 8382] <... futex resumed>) = 0 [pid 8381] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8385] <... set_robust_list resumed>) = 0 [pid 8383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8382] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8384] <... openat resumed>) = 3 [pid 8383] <... mmap resumed>) = 0x7f58200ce000 [pid 8384] write(3, "1000", 4 [pid 8381] <... mmap resumed>) = 0x7f58200ce000 [pid 8384] <... write resumed>) = 4 [pid 8383] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8381] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8384] close(3 [pid 8381] <... mprotect resumed>) = 0 [pid 8384] <... close resumed>) = 0 [pid 8384] symlink("/dev/binderfs", "./binderfs" [pid 8381] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8385] memfd_create("syzkaller", 0 [pid 8384] <... symlink resumed>) = 0 [pid 8383] <... mprotect resumed>) = 0 [pid 8381] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8385] <... memfd_create resumed>) = 3 [pid 8384] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8383] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8384] <... futex resumed>) = 0 [pid 8383] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8386 attached [pid 8385] <... mmap resumed>) = 0x7f5817c00000 [pid 8384] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] close(3./strace-static-x86_64: Process 8387 attached [pid 8384] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8383] <... clone3 resumed> => {parent_tid=[8386]}, 88) = 8386 [pid 5059] <... close resumed>) = 0 [pid 8387] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8384] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8388 attached [pid 8387] <... rseq resumed>) = 0 [pid 8386] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8383] rt_sigprocmask(SIG_SETMASK, [], [pid 8381] <... clone3 resumed> => {parent_tid=[8387]}, 88) = 8387 [pid 8388] set_robust_list(0x5555567436a0, 24 [pid 8387] set_robust_list(0x7f58200ee9a0, 24 [pid 8384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8381] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8388 [pid 8388] <... set_robust_list resumed>) = 0 [pid 8387] <... set_robust_list resumed>) = 0 [pid 8386] <... rseq resumed>) = 0 [pid 8384] <... mmap resumed>) = 0x7f58200ce000 [pid 8383] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8388] chdir("./332" [pid 8387] rt_sigprocmask(SIG_SETMASK, [], [pid 8386] set_robust_list(0x7f58200ee9a0, 24 [pid 8384] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8383] <... futex resumed>) = 0 [pid 8381] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8388] <... chdir resumed>) = 0 [pid 8387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8386] <... set_robust_list resumed>) = 0 [pid 8384] <... mprotect resumed>) = 0 [pid 8383] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8381] <... futex resumed>) = 0 [pid 8388] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8387] memfd_create("syzkaller", 0 [pid 8386] rt_sigprocmask(SIG_SETMASK, [], [pid 8384] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8381] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8388] <... prctl resumed>) = 0 [pid 8387] <... memfd_create resumed>) = 3 [pid 8386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8384] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8388] setpgid(0, 0 [pid 8387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8387] <... mmap resumed>) = 0x7f5817c00000 ./strace-static-x86_64: Process 8389 attached [pid 8386] memfd_create("syzkaller", 0 [pid 8385] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8389] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8388] <... setpgid resumed>) = 0 [pid 8388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8384] <... clone3 resumed> => {parent_tid=[8389]}, 88) = 8389 [pid 8388] write(3, "1000", 4 [pid 8384] rt_sigprocmask(SIG_SETMASK, [], [pid 8389] <... rseq resumed>) = 0 [pid 8384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8389] set_robust_list(0x7f58200ee9a0, 24 [pid 8388] <... write resumed>) = 4 [pid 8384] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8389] <... set_robust_list resumed>) = 0 [pid 8388] close(3 [pid 8384] <... futex resumed>) = 0 [pid 8389] rt_sigprocmask(SIG_SETMASK, [], [pid 8388] <... close resumed>) = 0 [pid 8384] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8388] symlink("/dev/binderfs", "./binderfs" [pid 8386] <... memfd_create resumed>) = 3 [pid 8388] <... symlink resumed>) = 0 [pid 8388] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8388] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8389] memfd_create("syzkaller", 0 [pid 8388] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8389] <... memfd_create resumed>) = 3 [pid 8387] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8388] <... mmap resumed>) = 0x7f58200ce000 [pid 8386] <... mmap resumed>) = 0x7f5817c00000 [pid 8385] <... write resumed>) = 2097152 [pid 8388] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8390 attached [pid 8390] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8385] munmap(0x7f5817c00000, 138412032 [pid 8390] <... rseq resumed>) = 0 [pid 8388] <... clone3 resumed> => {parent_tid=[8390]}, 88) = 8390 [pid 8390] set_robust_list(0x7f58200ee9a0, 24 [pid 8388] rt_sigprocmask(SIG_SETMASK, [], [pid 8390] <... set_robust_list resumed>) = 0 [pid 8388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8390] rt_sigprocmask(SIG_SETMASK, [], [pid 8388] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8388] <... futex resumed>) = 0 [pid 8390] memfd_create("syzkaller", 0 [pid 8388] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8390] <... memfd_create resumed>) = 3 [pid 8390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8385] <... munmap resumed>) = 0 [pid 8385] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8387] <... write resumed>) = 2097152 [pid 8385] ioctl(4, LOOP_SET_FD, 3 [pid 8387] munmap(0x7f5817c00000, 138412032 [pid 8389] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8387] <... munmap resumed>) = 0 [pid 8385] <... ioctl resumed>) = 0 [pid 8387] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8385] close(3 [pid 8387] ioctl(4, LOOP_SET_FD, 3 [pid 8385] <... close resumed>) = 0 [pid 8385] close(4) = 0 [pid 8385] mkdir("./file0", 0777) = 0 [pid 8385] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8387] <... ioctl resumed>) = 0 [pid 8386] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8390] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8387] close(3) = 0 [pid 8387] close(4) = 0 [pid 8387] mkdir("./file0", 0777) = 0 [ 299.586368][ T8385] loop1: detected capacity change from 0 to 4096 [ 299.612699][ T8387] loop3: detected capacity change from 0 to 4096 [ 299.619348][ T8385] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8387] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8389] <... write resumed>) = 2097152 [pid 8389] munmap(0x7f5817c00000, 138412032) = 0 [ 299.641965][ T8387] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8390] <... write resumed>) = 2097152 [pid 8389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8386] <... write resumed>) = 2097152 [pid 8385] <... mount resumed>) = 0 [pid 8389] <... openat resumed>) = 4 [pid 8389] ioctl(4, LOOP_SET_FD, 3 [pid 8386] munmap(0x7f5817c00000, 138412032 [pid 8385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8387] <... mount resumed>) = 0 [pid 8387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8387] chdir("./file0") = 0 [pid 8387] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8387] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8387] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8381] <... futex resumed>) = 0 [pid 8381] exit_group(0 [pid 8387] <... futex resumed>) = ? [pid 8381] <... exit_group resumed>) = ? [pid 8387] +++ exited with 0 +++ [pid 8385] <... openat resumed>) = 3 [pid 8390] munmap(0x7f5817c00000, 138412032 [pid 8389] <... ioctl resumed>) = 0 [pid 8386] <... munmap resumed>) = 0 [pid 8385] chdir("./file0" [pid 8381] +++ exited with 0 +++ [pid 8390] <... munmap resumed>) = 0 [pid 8389] close(3 [pid 8386] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8385] <... chdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8381, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8385] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8390] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8389] <... close resumed>) = 0 [pid 8386] <... openat resumed>) = 4 [pid 8385] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8390] <... openat resumed>) = 4 [pid 8389] close(4 [pid 8386] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8390] ioctl(4, LOOP_SET_FD, 3 [pid 8385] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [ 299.721197][ T8389] loop2: detected capacity change from 0 to 4096 [ 299.761216][ T8386] loop4: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8389] <... close resumed>) = 0 [pid 8386] <... ioctl resumed>) = 0 [pid 8385] <... futex resumed>) = 1 [pid 5062] <... openat resumed>) = 3 [pid 8389] mkdir("./file0", 0777 [pid 8386] close(3 [pid 8385] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8382] <... futex resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8389] <... mkdir resumed>) = 0 [pid 8386] <... close resumed>) = 0 [pid 8382] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8389] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8386] close(4 [pid 8382] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 8390] <... ioctl resumed>) = 0 [pid 8385] <... futex resumed>) = ? [pid 8390] close(3 [pid 8385] +++ exited with 0 +++ [pid 8382] +++ exited with 0 +++ [pid 8390] <... close resumed>) = 0 [pid 8390] close(4) = 0 [pid 8390] mkdir("./file0", 0777) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8382, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8390] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8386] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8386] mkdir("./file0", 0777 [pid 5062] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8386] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 299.761344][ T8390] loop0: detected capacity change from 0 to 4096 [ 299.783678][ T8389] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 299.798763][ T8390] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5062] unlink("./328/binderfs" [pid 8386] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... unlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./333/binderfs", [pid 5062] newfstatat(AT_FDCWD, "./328/file0", [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./333/binderfs" [pid 8389] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8389] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 4 [pid 8389] chdir("./file0" [pid 5062] newfstatat(4, "", [pid 8389] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] getdents64(4, [pid 8389] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8389] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 8389] <... futex resumed>) = 1 [pid 8389] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./328/file0" [pid 8384] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8384] exit_group(0 [pid 5062] getdents64(3, [pid 8389] <... futex resumed>) = ? [pid 8384] <... exit_group resumed>) = ? [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8390] <... mount resumed>) = 0 [pid 8389] +++ exited with 0 +++ [pid 8384] +++ exited with 0 +++ [pid 5062] close(3) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8384, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [ 299.823872][ T8386] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... restart_syscall resumed>) = 0 [pid 8390] <... openat resumed>) = 3 [pid 5062] rmdir("./328" [pid 5060] <... umount2 resumed>) = 0 [pid 5061] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8390] chdir("./file0" [pid 5061] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./333/file0", [pid 8390] <... chdir resumed>) = 0 [pid 8386] <... mount resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5062] mkdir("./329", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8390] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8390] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8390] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8390] <... futex resumed>) = 1 [pid 8388] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8390] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8388] exit_group(0 [pid 5061] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8390] <... futex resumed>) = ? [pid 8388] <... exit_group resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8390] +++ exited with 0 +++ [pid 8388] +++ exited with 0 +++ [pid 8386] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] unlink("./329/binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... unlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8388, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8386] chdir("./file0" [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 8386] <... chdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 8386] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8386] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(AT_FDCWD, "./329/file0", [pid 5060] getdents64(4, [pid 8386] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8386] <... futex resumed>) = 1 [pid 8383] <... futex resumed>) = 0 [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8386] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8383] exit_group(0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 5059] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8386] <... futex resumed>) = ? [pid 8383] <... exit_group resumed>) = ? [pid 5061] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 4 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 5059] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] newfstatat(AT_FDCWD, "./332/binderfs", [pid 8386] +++ exited with 0 +++ [pid 8383] +++ exited with 0 +++ [pid 5060] close(4) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8383, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] rmdir("./333/file0" [pid 5063] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5060] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] close(4 [pid 5063] newfstatat(3, "", [pid 5060] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] rmdir("./329/file0" [pid 5060] rmdir("./333" [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] unlink("./332/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5060] mkdir("./334", 0777 [pid 5059] <... unlink resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./327/binderfs", [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(3 [pid 5063] unlink("./327/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] rmdir("./329" [pid 5060] <... openat resumed>) = 3 [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./330", 0777 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5059] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./332/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5059] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5059] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] newfstatat(4, "", [pid 5063] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5059] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./327/file0" [pid 5062] <... ioctl resumed>) = 0 [pid 5059] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./332/file0" [pid 5063] getdents64(3, [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./332" [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./327") = 0 [pid 5059] mkdir("./333", 0777) = 0 [pid 5063] mkdir("./328", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8391 ./strace-static-x86_64: Process 8391 attached [pid 8391] set_robust_list(0x5555567436a0, 24) = 0 [pid 8391] chdir("./329") = 0 [pid 8391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8391] setpgid(0, 0) = 0 [pid 8391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8391] write(3, "1000", 4) = 4 [pid 8391] close(3) = 0 [pid 8391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8391] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8391] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8391] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] close(3) = 0 [pid 8391] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8391] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8392 attached [pid 8392] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8391] <... clone3 resumed> => {parent_tid=[8392]}, 88) = 8392 [pid 8392] <... rseq resumed>) = 0 [pid 8391] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8393 attached [pid 8392] set_robust_list(0x7f58200ee9a0, 24 [pid 8391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8393] set_robust_list(0x5555567436a0, 24 [pid 8392] <... set_robust_list resumed>) = 0 [pid 8392] rt_sigprocmask(SIG_SETMASK, [], [pid 8391] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8393 [pid 8393] <... set_robust_list resumed>) = 0 [pid 8392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8391] <... futex resumed>) = 0 [pid 8393] chdir("./330" [pid 8392] memfd_create("syzkaller", 0 [pid 8391] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... ioctl resumed>) = 0 [pid 8393] <... chdir resumed>) = 0 [pid 5060] close(3 [pid 8393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8393] setpgid(0, 0) = 0 [pid 8393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8392] <... memfd_create resumed>) = 3 [pid 8393] write(3, "1000", 4 [pid 8392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8393] <... write resumed>) = 4 [pid 8393] close(3 [pid 8392] <... mmap resumed>) = 0x7f5817c00000 [pid 8393] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8393] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8393] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8393] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8394]}, 88) = 8394 ./strace-static-x86_64: Process 8394 attached [pid 8393] rt_sigprocmask(SIG_SETMASK, [], [pid 8394] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8394] <... rseq resumed>) = 0 [pid 8393] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8394] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8393] <... futex resumed>) = 0 [pid 8394] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8395 ./strace-static-x86_64: Process 8395 attached [pid 8394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8394] memfd_create("syzkaller", 0 [pid 8393] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8395] set_robust_list(0x5555567436a0, 24 [pid 8394] <... memfd_create resumed>) = 3 [pid 8394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8395] <... set_robust_list resumed>) = 0 [pid 8395] chdir("./334") = 0 [pid 8395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8395] setpgid(0, 0) = 0 [pid 8395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8395] write(3, "1000", 4) = 4 [pid 8395] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 8395] <... close resumed>) = 0 [pid 8395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8395] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 8395] <... futex resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8395] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... ioctl resumed>) = 0 [pid 8395] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] close(3 [pid 8395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8392] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 8396 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8396 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8396] set_robust_list(0x5555567436a0, 24) = 0 [pid 8396] chdir("./328" [pid 8395] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8397 attached [pid 8395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8397 [pid 8397] set_robust_list(0x5555567436a0, 24 [pid 8396] <... chdir resumed>) = 0 [pid 8395] <... mmap resumed>) = 0x7f58200ce000 [pid 8397] <... set_robust_list resumed>) = 0 [pid 8396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8395] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8397] chdir("./333" [pid 8396] <... prctl resumed>) = 0 [pid 8396] setpgid(0, 0 [pid 8395] <... mprotect resumed>) = 0 [pid 8397] <... chdir resumed>) = 0 [pid 8396] <... setpgid resumed>) = 0 [pid 8397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8397] <... prctl resumed>) = 0 [pid 8395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8397] setpgid(0, 0 [pid 8395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8398 attached [pid 8397] <... setpgid resumed>) = 0 [pid 8396] <... openat resumed>) = 3 [pid 8398] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8396] write(3, "1000", 4 [pid 8395] <... clone3 resumed> => {parent_tid=[8398]}, 88) = 8398 [pid 8398] <... rseq resumed>) = 0 [pid 8396] <... write resumed>) = 4 [pid 8398] set_robust_list(0x7f58200ee9a0, 24 [pid 8396] close(3 [pid 8395] rt_sigprocmask(SIG_SETMASK, [], [pid 8398] <... set_robust_list resumed>) = 0 [pid 8397] <... openat resumed>) = 3 [pid 8396] <... close resumed>) = 0 [pid 8398] rt_sigprocmask(SIG_SETMASK, [], [pid 8397] write(3, "1000", 4 [pid 8396] symlink("/dev/binderfs", "./binderfs" [pid 8395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8397] <... write resumed>) = 4 [pid 8396] <... symlink resumed>) = 0 [pid 8395] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8398] memfd_create("syzkaller", 0 [pid 8395] <... futex resumed>) = 0 [pid 8394] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8397] close(3 [pid 8395] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8397] <... close resumed>) = 0 [pid 8396] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8397] symlink("/dev/binderfs", "./binderfs" [pid 8396] <... futex resumed>) = 0 [pid 8398] <... memfd_create resumed>) = 3 [pid 8397] <... symlink resumed>) = 0 [pid 8396] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8396] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8398] <... mmap resumed>) = 0x7f5817c00000 [pid 8397] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8396] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8397] <... futex resumed>) = 0 [pid 8396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8397] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8396] <... mmap resumed>) = 0x7f58200ce000 [pid 8397] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8397] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8396] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8396] <... mprotect resumed>) = 0 [pid 8397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8396] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8397] <... mmap resumed>) = 0x7f58200ce000 [pid 8396] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8397] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8399 attached [pid 8397] <... mprotect resumed>) = 0 [pid 8392] <... write resumed>) = 2097152 [pid 8397] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8396] <... clone3 resumed> => {parent_tid=[8399]}, 88) = 8399 [pid 8399] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8399] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8396] rt_sigprocmask(SIG_SETMASK, [], [pid 8399] rt_sigprocmask(SIG_SETMASK, [], [pid 8397] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8396] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8396] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8400 attached [pid 8399] memfd_create("syzkaller", 0 [pid 8398] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8396] <... futex resumed>) = 0 [pid 8394] <... write resumed>) = 2097152 [pid 8392] munmap(0x7f5817c00000, 138412032 [pid 8400] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8399] <... memfd_create resumed>) = 3 [pid 8397] <... clone3 resumed> => {parent_tid=[8400]}, 88) = 8400 [pid 8396] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8394] munmap(0x7f5817c00000, 138412032 [pid 8392] <... munmap resumed>) = 0 [pid 8400] <... rseq resumed>) = 0 [pid 8399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8397] rt_sigprocmask(SIG_SETMASK, [], [pid 8394] <... munmap resumed>) = 0 [pid 8400] set_robust_list(0x7f58200ee9a0, 24 [pid 8399] <... mmap resumed>) = 0x7f5817c00000 [pid 8397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8400] <... set_robust_list resumed>) = 0 [pid 8397] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8400] rt_sigprocmask(SIG_SETMASK, [], [pid 8397] <... futex resumed>) = 0 [pid 8400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8397] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8400] memfd_create("syzkaller", 0) = 3 [pid 8392] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8392] <... openat resumed>) = 4 [pid 8400] <... mmap resumed>) = 0x7f5817c00000 [pid 8394] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8392] ioctl(4, LOOP_SET_FD, 3 [pid 8394] ioctl(4, LOOP_SET_FD, 3 [pid 8392] <... ioctl resumed>) = 0 [pid 8398] <... write resumed>) = 2097152 [pid 8394] <... ioctl resumed>) = 0 [pid 8392] close(3 [pid 8398] munmap(0x7f5817c00000, 138412032 [pid 8394] close(3 [pid 8392] <... close resumed>) = 0 [pid 8392] close(4) = 0 [pid 8392] mkdir("./file0", 0777 [pid 8394] <... close resumed>) = 0 [pid 8392] <... mkdir resumed>) = 0 [pid 8394] close(4) = 0 [ 300.283267][ T8392] loop3: detected capacity change from 0 to 4096 [ 300.291105][ T8394] loop2: detected capacity change from 0 to 4096 [pid 8394] mkdir("./file0", 0777 [pid 8392] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8400] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8399] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8398] <... munmap resumed>) = 0 [pid 8394] <... mkdir resumed>) = 0 [pid 8394] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8398] close(3) = 0 [pid 8398] close(4) = 0 [pid 8392] <... mount resumed>) = 0 [pid 8398] mkdir("./file0", 0777) = 0 [pid 8392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 300.323887][ T8392] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 300.341633][ T8394] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 300.359982][ T8398] loop1: detected capacity change from 0 to 4096 [pid 8400] <... write resumed>) = 2097152 [pid 8399] <... write resumed>) = 2097152 [pid 8398] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8399] munmap(0x7f5817c00000, 138412032 [pid 8392] chdir("./file0") = 0 [pid 8392] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8392] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8391] <... futex resumed>) = 0 [pid 8392] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8391] exit_group(0 [pid 8392] <... futex resumed>) = ? [pid 8391] <... exit_group resumed>) = ? [pid 8392] +++ exited with 0 +++ [pid 8391] +++ exited with 0 +++ [pid 8400] munmap(0x7f5817c00000, 138412032 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8391, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8400] <... munmap resumed>) = 0 [pid 8399] <... munmap resumed>) = 0 [pid 5062] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8394] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8400] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8399] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... openat resumed>) = 3 [ 300.415173][ T8398] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5062] newfstatat(3, "", [pid 8399] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8399] ioctl(4, LOOP_SET_FD, 3 [pid 5062] getdents64(3, [pid 8400] <... openat resumed>) = 4 [pid 8394] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] ioctl(4, LOOP_SET_FD, 3 [pid 8394] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8394] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8399] <... ioctl resumed>) = 0 [pid 8394] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] unlink("./329/binderfs" [pid 8399] close(3 [pid 8394] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8399] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8399] close(4 [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8399] <... close resumed>) = 0 [pid 8394] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8394] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8393] <... futex resumed>) = 0 [pid 8393] exit_group(0) = ? [pid 8394] <... futex resumed>) = ? [pid 8394] +++ exited with 0 +++ [pid 8399] mkdir("./file0", 0777 [pid 8393] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8393, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8400] <... ioctl resumed>) = 0 [pid 8400] close(3 [pid 5061] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] <... close resumed>) = 0 [pid 8400] close(4 [pid 8399] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8400] <... close resumed>) = 0 [pid 8400] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8400] <... mkdir resumed>) = 0 [pid 8398] <... mount resumed>) = 0 [pid 8400] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8399] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 300.455442][ T8399] loop4: detected capacity change from 0 to 4096 [ 300.464770][ T8400] loop0: detected capacity change from 0 to 4096 [pid 8398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./329/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8398] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(3, [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8398] chdir("./file0" [pid 5062] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8398] <... chdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] newfstatat(4, "", [pid 5061] newfstatat(AT_FDCWD, "./330/binderfs", [pid 8398] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8398] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 5061] unlink("./330/binderfs" [pid 8398] <... futex resumed>) = 1 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... unlink resumed>) = 0 [pid 8398] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] getdents64(4, [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./329/file0" [pid 8395] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./329" [pid 8395] exit_group(0 [pid 5062] <... rmdir resumed>) = 0 [pid 8398] <... futex resumed>) = ? [pid 8395] <... exit_group resumed>) = ? [pid 5062] mkdir("./330", 0777 [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 300.528825][ T8400] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 300.539091][ T8399] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5061] newfstatat(AT_FDCWD, "./330/file0", [pid 8398] +++ exited with 0 +++ [pid 8395] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8395, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5060] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", [pid 5062] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8400] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(3, [pid 8400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8400] <... openat resumed>) = 3 [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./334/binderfs", [pid 5061] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(4, "", [pid 5060] unlink("./334/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] chdir("./file0" [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8400] <... chdir resumed>) = 0 [pid 8400] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] getdents64(4, [pid 8400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8400] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(4 [pid 8400] <... futex resumed>) = 1 [pid 8397] <... futex resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8400] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8397] exit_group(0 [pid 5061] rmdir("./330/file0" [pid 8400] <... futex resumed>) = ? [pid 8397] <... exit_group resumed>) = ? [pid 5061] <... rmdir resumed>) = 0 [pid 5060] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8400] +++ exited with 0 +++ [pid 8397] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8397, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5060] newfstatat(AT_FDCWD, "./334/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./333/binderfs", [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] unlink("./333/binderfs" [pid 5061] rmdir("./330" [pid 5060] <... openat resumed>) = 4 [pid 5059] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5059] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./331", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./334/file0" [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8399] <... mount resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./333/file0", [pid 8399] <... openat resumed>) = 3 [pid 5060] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8399] chdir("./file0") = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8399] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./334" [pid 8399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8399] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8396] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8399] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8396] exit_group(0) = ? [pid 8399] <... futex resumed>) = ? [pid 5060] mkdir("./335", 0777 [pid 5059] newfstatat(4, "", [pid 8399] +++ exited with 0 +++ [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] rmdir("./333/file0" [pid 8396] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8396, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./333" [pid 5063] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./334", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, [pid 5059] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8401 attached [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8401] set_robust_list(0x5555567436a0, 24) = 0 [pid 5063] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8401 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8401] chdir("./330" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8401] <... chdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5059] <... openat resumed>) = 3 [pid 8401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8401] setpgid(0, 0) = 0 [pid 5063] unlink("./328/binderfs" [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8401] write(3, "1000", 4) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 8401] close(3) = 0 [pid 8401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8401] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 8401] <... futex resumed>) = 0 [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8401] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5063] newfstatat(AT_FDCWD, "./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8401] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8401] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8401] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8402 attached [pid 8401] <... clone3 resumed> => {parent_tid=[8402]}, 88) = 8402 [pid 5063] getdents64(4, [pid 8402] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8401] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] close(4 [pid 8402] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8401] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8401] <... futex resumed>) = 0 [pid 5063] rmdir("./328/file0" [pid 8401] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... rmdir resumed>) = 0 [pid 8402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./328" [pid 8402] memfd_create("syzkaller", 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8402] <... memfd_create resumed>) = 3 [pid 5063] mkdir("./329", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8403 attached [pid 8402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8403 [pid 8402] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] <... ioctl resumed>) = 0 [pid 8403] set_robust_list(0x5555567436a0, 24 [pid 5060] close(3 [pid 8403] <... set_robust_list resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8403] chdir("./331" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] close(3./strace-static-x86_64: Process 8404 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8404 [pid 8403] <... chdir resumed>) = 0 [pid 8403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... close resumed>) = 0 [pid 8404] set_robust_list(0x5555567436a0, 24 [pid 8403] <... prctl resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8404] <... set_robust_list resumed>) = 0 [pid 8403] setpgid(0, 0 [pid 8404] chdir("./335" [pid 8403] <... setpgid resumed>) = 0 [pid 8404] <... chdir resumed>) = 0 [pid 8404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8405 [pid 8403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8405 attached [pid 8404] setpgid(0, 0 [pid 8402] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8405] set_robust_list(0x5555567436a0, 24 [pid 8404] <... setpgid resumed>) = 0 [pid 8403] <... openat resumed>) = 3 [pid 8405] <... set_robust_list resumed>) = 0 [pid 8404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8405] chdir("./334") = 0 [pid 8403] write(3, "1000", 4 [pid 8405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8404] write(3, "1000", 4 [pid 8403] <... write resumed>) = 4 [pid 8405] <... prctl resumed>) = 0 [pid 8404] <... write resumed>) = 4 [pid 8403] close(3 [pid 8405] setpgid(0, 0 [pid 8404] close(3 [pid 8403] <... close resumed>) = 0 [pid 8405] <... setpgid resumed>) = 0 [pid 8404] <... close resumed>) = 0 [pid 8403] symlink("/dev/binderfs", "./binderfs" [pid 8405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8404] symlink("/dev/binderfs", "./binderfs" [pid 8403] <... symlink resumed>) = 0 [pid 8404] <... symlink resumed>) = 0 [pid 8403] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8405] <... openat resumed>) = 3 [pid 8404] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8403] <... futex resumed>) = 0 [pid 8403] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8404] <... futex resumed>) = 0 [pid 8405] write(3, "1000", 4 [pid 8403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8405] <... write resumed>) = 4 [pid 8404] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8405] close(3 [pid 8404] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8405] <... close resumed>) = 0 [pid 8404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8403] <... mmap resumed>) = 0x7f58200ce000 [pid 8405] symlink("/dev/binderfs", "./binderfs" [pid 8404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8403] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... ioctl resumed>) = 0 [pid 8404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8403] <... mprotect resumed>) = 0 [pid 8405] <... symlink resumed>) = 0 [pid 8404] <... mmap resumed>) = 0x7f58200ce000 [pid 8403] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] close(3 [pid 8405] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8404] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8403] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 8405] <... futex resumed>) = 0 [pid 8404] <... mprotect resumed>) = 0 [pid 8403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8405] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8404] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 8406 attached [pid 8405] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8404] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8403] <... clone3 resumed> => {parent_tid=[8406]}, 88) = 8406 [pid 8406] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8403] rt_sigprocmask(SIG_SETMASK, [], [pid 8406] <... rseq resumed>) = 0 [pid 8405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8403] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8408 attached ./strace-static-x86_64: Process 8407 attached [pid 8406] set_robust_list(0x7f58200ee9a0, 24 [pid 8405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8404] <... clone3 resumed> => {parent_tid=[8408]}, 88) = 8408 [pid 8403] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8402] <... write resumed>) = 2097152 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8407 [pid 8408] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8407] set_robust_list(0x5555567436a0, 24 [pid 8406] <... set_robust_list resumed>) = 0 [pid 8405] <... mmap resumed>) = 0x7f58200ce000 [pid 8404] rt_sigprocmask(SIG_SETMASK, [], [pid 8403] <... futex resumed>) = 0 [pid 8402] munmap(0x7f5817c00000, 138412032 [pid 8408] <... rseq resumed>) = 0 [pid 8407] <... set_robust_list resumed>) = 0 [pid 8406] rt_sigprocmask(SIG_SETMASK, [], [pid 8405] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8403] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8408] set_robust_list(0x7f58200ee9a0, 24 [pid 8407] chdir("./329" [pid 8406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8405] <... mprotect resumed>) = 0 [pid 8404] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8408] <... set_robust_list resumed>) = 0 [pid 8407] <... chdir resumed>) = 0 [pid 8405] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8404] <... futex resumed>) = 0 [pid 8407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8405] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8404] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8407] <... prctl resumed>) = 0 [pid 8405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8409 attached [pid 8407] setpgid(0, 0 [pid 8409] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8408] rt_sigprocmask(SIG_SETMASK, [], [pid 8407] <... setpgid resumed>) = 0 [pid 8409] <... rseq resumed>) = 0 [pid 8408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8409] set_robust_list(0x7f58200ee9a0, 24 [pid 8407] <... openat resumed>) = 3 [pid 8405] <... clone3 resumed> => {parent_tid=[8409]}, 88) = 8409 [pid 8409] <... set_robust_list resumed>) = 0 [pid 8405] rt_sigprocmask(SIG_SETMASK, [], [pid 8409] rt_sigprocmask(SIG_SETMASK, [], [pid 8406] memfd_create("syzkaller", 0 [pid 8405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8407] write(3, "1000", 4 [pid 8405] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8407] <... write resumed>) = 4 [pid 8405] <... futex resumed>) = 0 [pid 8409] memfd_create("syzkaller", 0 [pid 8407] close(3 [pid 8406] <... memfd_create resumed>) = 3 [pid 8405] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8408] memfd_create("syzkaller", 0 [pid 8406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8402] <... munmap resumed>) = 0 [pid 8408] <... memfd_create resumed>) = 3 [pid 8407] <... close resumed>) = 0 [pid 8406] <... mmap resumed>) = 0x7f5817c00000 [pid 8402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8409] <... memfd_create resumed>) = 3 [pid 8408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8407] symlink("/dev/binderfs", "./binderfs" [pid 8402] <... openat resumed>) = 4 [pid 8407] <... symlink resumed>) = 0 [pid 8409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8408] <... mmap resumed>) = 0x7f5817c00000 [pid 8407] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8402] ioctl(4, LOOP_SET_FD, 3 [pid 8409] <... mmap resumed>) = 0x7f5817c00000 [pid 8407] <... futex resumed>) = 0 [pid 8407] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8407] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8410 attached [pid 8410] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8407] <... clone3 resumed> => {parent_tid=[8410]}, 88) = 8410 [pid 8410] <... rseq resumed>) = 0 [pid 8410] set_robust_list(0x7f58200ee9a0, 24 [pid 8407] rt_sigprocmask(SIG_SETMASK, [], [pid 8410] <... set_robust_list resumed>) = 0 [pid 8410] rt_sigprocmask(SIG_SETMASK, [], [pid 8407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8407] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8410] memfd_create("syzkaller", 0 [pid 8407] <... futex resumed>) = 0 [pid 8402] <... ioctl resumed>) = 0 [pid 8407] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8402] close(3) = 0 [pid 8402] close(4) = 0 [pid 8410] <... memfd_create resumed>) = 3 [pid 8406] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8402] mkdir("./file0", 0777 [pid 8410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8402] <... mkdir resumed>) = 0 [pid 8410] <... mmap resumed>) = 0x7f5817c00000 [pid 8402] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [ 300.915753][ T8402] loop3: detected capacity change from 0 to 4096 [pid 8409] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8408] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8406] <... write resumed>) = 2097152 [pid 8406] munmap(0x7f5817c00000, 138412032 [pid 8410] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8406] <... munmap resumed>) = 0 [pid 8406] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 300.982621][ T8402] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8406] ioctl(4, LOOP_SET_FD, 3 [pid 8409] <... write resumed>) = 2097152 [pid 8409] munmap(0x7f5817c00000, 138412032 [pid 8408] <... write resumed>) = 2097152 [pid 8406] <... ioctl resumed>) = 0 [pid 8408] munmap(0x7f5817c00000, 138412032 [pid 8406] close(3) = 0 [pid 8406] close(4 [pid 8409] <... munmap resumed>) = 0 [pid 8406] <... close resumed>) = 0 [pid 8406] mkdir("./file0", 0777 [pid 8409] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8406] <... mkdir resumed>) = 0 [ 301.047330][ T8406] loop2: detected capacity change from 0 to 4096 [pid 8409] <... openat resumed>) = 4 [pid 8410] <... write resumed>) = 2097152 [pid 8409] ioctl(4, LOOP_SET_FD, 3 [pid 8408] <... munmap resumed>) = 0 [pid 8406] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8408] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8402] <... mount resumed>) = 0 [pid 8408] <... openat resumed>) = 4 [pid 8408] ioctl(4, LOOP_SET_FD, 3 [pid 8402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8408] <... ioctl resumed>) = 0 [pid 8408] close(3) = 0 [pid 8408] close(4) = 0 [pid 8402] <... openat resumed>) = 3 [pid 8402] chdir("./file0" [pid 8408] mkdir("./file0", 0777 [pid 8402] <... chdir resumed>) = 0 [pid 8408] <... mkdir resumed>) = 0 [pid 8402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8410] munmap(0x7f5817c00000, 138412032 [pid 8402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8402] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8401] <... futex resumed>) = 0 [pid 8401] exit_group(0) = ? [pid 8402] <... futex resumed>) = ? [pid 8410] <... munmap resumed>) = 0 [pid 8408] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8409] <... ioctl resumed>) = 0 [pid 8410] <... openat resumed>) = 4 [pid 8409] close(3 [pid 8410] ioctl(4, LOOP_SET_FD, 3 [pid 8409] <... close resumed>) = 0 [pid 8409] close(4) = 0 [pid 8402] +++ exited with 0 +++ [pid 8401] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8401, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [ 301.097749][ T8409] loop0: detected capacity change from 0 to 4096 [ 301.101451][ T8408] loop1: detected capacity change from 0 to 4096 [ 301.105592][ T8406] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 301.133196][ T8408] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8409] mkdir("./file0", 0777 [pid 5062] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8409] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8409] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./330/binderfs") = 0 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8410] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8410] close(3 [pid 8406] <... mount resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./330/file0", [pid 8410] <... close resumed>) = 0 [pid 8406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8410] close(4) = 0 [pid 8406] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8410] mkdir("./file0", 0777 [pid 8406] chdir("./file0" [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8406] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8406] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8410] <... mkdir resumed>) = 0 [pid 8406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 4 [pid 8410] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8406] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(4, "", [pid 8406] <... futex resumed>) = 1 [pid 8403] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 301.143529][ T8410] loop4: detected capacity change from 0 to 4096 [ 301.158677][ T8409] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8406] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8403] exit_group(0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./330/file0") = 0 [pid 8406] <... futex resumed>) = ? [pid 8403] <... exit_group resumed>) = ? [pid 8406] +++ exited with 0 +++ [pid 8403] +++ exited with 0 +++ [pid 5062] getdents64(3, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8403, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./330") = 0 [pid 5061] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] mkdir("./331", 0777) = 0 [pid 5061] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5061] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./331/binderfs") = 0 [ 301.195148][ T8410] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] <... mount resumed>) = 0 [pid 8409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = 0 [pid 8409] <... openat resumed>) = 3 [pid 8409] chdir("./file0") = 0 [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8409] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8405] <... futex resumed>) = 0 [pid 8409] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8405] exit_group(0 [pid 5061] newfstatat(AT_FDCWD, "./331/file0", [pid 8409] <... futex resumed>) = ? [pid 8405] <... exit_group resumed>) = ? [pid 8409] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./331/file0" [pid 8405] +++ exited with 0 +++ [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8405, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8410] <... mount resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./331" [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5061] mkdir("./332", 0777) = 0 [pid 8410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8410] chdir("./file0" [pid 5061] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8410] <... chdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... openat resumed>) = 3 [pid 8410] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] newfstatat(3, "", [pid 8410] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8408] <... mount resumed>) = 0 [pid 8410] <... futex resumed>) = 1 [pid 8407] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8410] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8407] exit_group(0 [pid 5059] getdents64(3, [pid 8410] <... futex resumed>) = ? [pid 8407] <... exit_group resumed>) = ? [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8410] +++ exited with 0 +++ [pid 8408] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8407] +++ exited with 0 +++ [pid 8408] <... openat resumed>) = 3 [pid 5059] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8408] chdir("./file0" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8407, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8408] <... chdir resumed>) = 0 [pid 8408] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8408] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] unlink("./334/binderfs" [pid 8408] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8404] <... futex resumed>) = 0 [pid 8408] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5059] <... unlink resumed>) = 0 [pid 8404] exit_group(0 [pid 5063] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 8404] <... exit_group resumed>) = ? [pid 8408] <... futex resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(3, "", [pid 5059] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8411 attached [pid 8408] +++ exited with 0 +++ [pid 8404] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8411] set_robust_list(0x5555567436a0, 24 [pid 5063] getdents64(3, [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8411 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8404, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8411] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8411] chdir("./331" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8411] <... chdir resumed>) = 0 [pid 5063] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 8411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8411] <... prctl resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./329/binderfs", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./335/binderfs", [pid 8411] setpgid(0, 0 [pid 5063] unlink("./329/binderfs" [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8411] <... setpgid resumed>) = 0 [pid 5060] unlink("./335/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 8411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8411] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./335/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8411] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8411] <... write resumed>) = 4 [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 8411] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8411] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./329/file0", [pid 5060] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8411] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8411] <... symlink resumed>) = 0 [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./334/file0", [pid 8411] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] rmdir("./335/file0" [pid 8411] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8411] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... openat resumed>) = 4 [pid 8411] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 8411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(4, [pid 5060] <... rmdir resumed>) = 0 [pid 5059] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8412 attached [pid 8411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8412] set_robust_list(0x5555567436a0, 24 [pid 8411] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] getdents64(4, [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8412 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8412] <... set_robust_list resumed>) = 0 [pid 8411] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8412] chdir("./332" [pid 8411] <... mprotect resumed>) = 0 [pid 5063] close(4 [pid 5060] close(3 [pid 5059] <... openat resumed>) = 4 [pid 8412] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8411] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] rmdir("./329/file0" [pid 5060] rmdir("./335" [pid 5059] newfstatat(4, "", [pid 8412] <... prctl resumed>) = 0 [pid 8412] setpgid(0, 0 [pid 8411] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8412] <... setpgid resumed>) = 0 [pid 5060] mkdir("./336", 0777 [pid 5059] getdents64(4, [pid 8412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8413 attached [pid 8412] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8412] write(3, "1000", 4 [pid 8411] <... clone3 resumed> => {parent_tid=[8413]}, 88) = 8413 [pid 8413] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8412] <... write resumed>) = 4 [pid 8411] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] getdents64(3, [pid 8413] <... rseq resumed>) = 0 [pid 8412] close(3 [pid 8411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] getdents64(4, [pid 8413] set_robust_list(0x7f58200ee9a0, 24 [pid 8412] <... close resumed>) = 0 [pid 8411] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8413] <... set_robust_list resumed>) = 0 [pid 8412] symlink("/dev/binderfs", "./binderfs" [pid 8411] <... futex resumed>) = 0 [pid 5063] close(3 [pid 5060] <... openat resumed>) = 3 [pid 5059] close(4 [pid 8413] rt_sigprocmask(SIG_SETMASK, [], [pid 8412] <... symlink resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8412] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8411] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] rmdir("./334/file0" [pid 8413] memfd_create("syzkaller", 0 [pid 8412] <... futex resumed>) = 0 [pid 5063] rmdir("./329") = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8412] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5063] mkdir("./330", 0777 [pid 8412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... mkdir resumed>) = 0 [pid 5059] getdents64(3, [pid 8413] <... memfd_create resumed>) = 3 [pid 8412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 8413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... close resumed>) = 0 [pid 8413] <... mmap resumed>) = 0x7f5817c00000 [pid 8412] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] rmdir("./334" [pid 8412] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8412] <... mprotect resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 8412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] mkdir("./335", 0777 [pid 8412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8414 attached [pid 8414] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] <... mkdir resumed>) = 0 [pid 8414] <... rseq resumed>) = 0 [pid 8412] <... clone3 resumed> => {parent_tid=[8414]}, 88) = 8414 [pid 8414] set_robust_list(0x7f58200ee9a0, 24 [pid 8412] rt_sigprocmask(SIG_SETMASK, [], [pid 8414] <... set_robust_list resumed>) = 0 [pid 8412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8412] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8414] memfd_create("syzkaller", 0 [pid 8413] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8412] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8414] <... memfd_create resumed>) = 3 [pid 8412] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8413] <... write resumed>) = 2097152 [pid 8413] munmap(0x7f5817c00000, 138412032) = 0 [pid 8413] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8413] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... ioctl resumed>) = 0 [pid 8413] <... ioctl resumed>) = 0 [pid 8414] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8413] close(3) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 8413] close(4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... ioctl resumed>) = 0 [ 301.502595][ T8413] loop3: detected capacity change from 0 to 4096 [pid 8413] <... close resumed>) = 0 [pid 5063] close(3 [pid 5059] close(3 [pid 8413] mkdir("./file0", 0777 [pid 5063] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8413] <... mkdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8415 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8417 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8416 ./strace-static-x86_64: Process 8416 attached ./strace-static-x86_64: Process 8417 attached ./strace-static-x86_64: Process 8415 attached [pid 8413] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8416] set_robust_list(0x5555567436a0, 24 [pid 8415] set_robust_list(0x5555567436a0, 24 [pid 8416] <... set_robust_list resumed>) = 0 [pid 8416] chdir("./335" [pid 8415] <... set_robust_list resumed>) = 0 [pid 8417] set_robust_list(0x5555567436a0, 24) = 0 [pid 8417] chdir("./330") = 0 [pid 8417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8417] setpgid(0, 0) = 0 [pid 8417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8415] chdir("./336" [pid 8416] <... chdir resumed>) = 0 [pid 8416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8415] <... chdir resumed>) = 0 [pid 8416] <... prctl resumed>) = 0 [pid 8415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8416] setpgid(0, 0 [pid 8415] <... prctl resumed>) = 0 [pid 8415] setpgid(0, 0 [pid 8416] <... setpgid resumed>) = 0 [pid 8415] <... setpgid resumed>) = 0 [pid 8417] <... openat resumed>) = 3 [pid 8415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8415] <... openat resumed>) = 3 [pid 8417] write(3, "1000", 4 [pid 8416] <... openat resumed>) = 3 [pid 8417] <... write resumed>) = 4 [pid 8415] write(3, "1000", 4 [pid 8417] close(3) = 0 [pid 8417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8415] <... write resumed>) = 4 [pid 8416] write(3, "1000", 4 [pid 8415] close(3 [pid 8416] <... write resumed>) = 4 [pid 8417] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8415] <... close resumed>) = 0 [pid 8414] <... write resumed>) = 2097152 [pid 8416] close(3 [pid 8417] <... futex resumed>) = 0 [pid 8415] symlink("/dev/binderfs", "./binderfs" [pid 8417] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8416] <... close resumed>) = 0 [pid 8417] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8415] <... symlink resumed>) = 0 [pid 8416] symlink("/dev/binderfs", "./binderfs" [pid 8417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8415] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8416] <... symlink resumed>) = 0 [pid 8417] <... mmap resumed>) = 0x7f58200ce000 [pid 8415] <... futex resumed>) = 0 [pid 8416] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8417] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8415] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8416] <... futex resumed>) = 0 [pid 8417] <... mprotect resumed>) = 0 [pid 8415] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8416] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8415] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8416] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8416] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8417] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8417] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8415] <... mmap resumed>) = 0x7f58200ce000 ./strace-static-x86_64: Process 8418 attached [pid 8416] <... mmap resumed>) = 0x7f58200ce000 [pid 8415] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8418] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8416] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8417] <... clone3 resumed> => {parent_tid=[8418]}, 88) = 8418 [pid 8416] <... mprotect resumed>) = 0 [pid 8417] rt_sigprocmask(SIG_SETMASK, [], [pid 8415] <... mprotect resumed>) = 0 [pid 8418] <... rseq resumed>) = 0 [pid 8416] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8418] set_robust_list(0x7f58200ee9a0, 24 [pid 8416] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8417] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8414] munmap(0x7f5817c00000, 138412032 [pid 8418] <... set_robust_list resumed>) = 0 [pid 8416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8417] <... futex resumed>) = 0 [pid 8415] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8414] <... munmap resumed>) = 0 [pid 8418] rt_sigprocmask(SIG_SETMASK, [], [pid 8417] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8418] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8419 attached [ 301.574820][ T8413] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8414] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8419] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8418] memfd_create("syzkaller", 0 [pid 8416] <... clone3 resumed> => {parent_tid=[8419]}, 88) = 8419 [pid 8415] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8413] <... mount resumed>) = 0 [pid 8419] <... rseq resumed>) = 0 [pid 8419] set_robust_list(0x7f58200ee9a0, 24 [pid 8416] rt_sigprocmask(SIG_SETMASK, [], [pid 8419] <... set_robust_list resumed>) = 0 [pid 8418] <... memfd_create resumed>) = 3 [pid 8416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 8420 attached [pid 8419] rt_sigprocmask(SIG_SETMASK, [], [pid 8418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8416] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8414] <... openat resumed>) = 4 [pid 8413] <... openat resumed>) = 3 [pid 8420] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8418] <... mmap resumed>) = 0x7f5817c00000 [pid 8416] <... futex resumed>) = 0 [pid 8415] <... clone3 resumed> => {parent_tid=[8420]}, 88) = 8420 [pid 8414] ioctl(4, LOOP_SET_FD, 3 [pid 8413] chdir("./file0" [pid 8420] <... rseq resumed>) = 0 [pid 8419] memfd_create("syzkaller", 0 [pid 8416] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8415] rt_sigprocmask(SIG_SETMASK, [], [pid 8413] <... chdir resumed>) = 0 [pid 8420] set_robust_list(0x7f58200ee9a0, 24 [pid 8419] <... memfd_create resumed>) = 3 [pid 8415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8413] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8420] <... set_robust_list resumed>) = 0 [pid 8419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8415] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8420] rt_sigprocmask(SIG_SETMASK, [], [pid 8419] <... mmap resumed>) = 0x7f5817c00000 [pid 8415] <... futex resumed>) = 0 [pid 8413] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8415] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8413] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8413] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8411] <... futex resumed>) = 0 [pid 8420] memfd_create("syzkaller", 0 [pid 8411] exit_group(0 [pid 8420] <... memfd_create resumed>) = 3 [pid 8413] <... futex resumed>) = ? [pid 8411] <... exit_group resumed>) = ? [pid 8413] +++ exited with 0 +++ [pid 8414] <... ioctl resumed>) = 0 [pid 8414] close(3) = 0 [pid 8414] close(4 [pid 8420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8414] <... close resumed>) = 0 [pid 8411] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8411, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8414] mkdir("./file0", 0777 [pid 5062] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8414] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./331/binderfs", [pid 8414] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 301.655494][ T8414] loop2: detected capacity change from 0 to 4096 [pid 8418] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] unlink("./331/binderfs") = 0 [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./331/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./331" [pid 8420] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... rmdir resumed>) = 0 [ 301.713600][ T8414] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] mkdir("./332", 0777 [pid 8419] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8420] <... write resumed>) = 2097152 [pid 8420] munmap(0x7f5817c00000, 138412032 [pid 8418] <... write resumed>) = 2097152 [pid 8414] <... mount resumed>) = 0 [pid 8418] munmap(0x7f5817c00000, 138412032 [pid 8414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8414] chdir("./file0") = 0 [pid 8414] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8414] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8412] <... futex resumed>) = 0 [pid 8420] <... munmap resumed>) = 0 [pid 8414] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8412] exit_group(0) = ? [pid 8414] <... futex resumed>) = ? [pid 8420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8419] <... write resumed>) = 2097152 [pid 8418] <... munmap resumed>) = 0 [pid 8414] +++ exited with 0 +++ [pid 8412] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8412, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 8420] <... openat resumed>) = 4 [pid 5061] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] ioctl(4, LOOP_SET_FD, 3 [pid 8419] munmap(0x7f5817c00000, 138412032 [pid 8418] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8418] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./332/binderfs") = 0 [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8419] <... munmap resumed>) = 0 [pid 8418] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8420] <... ioctl resumed>) = 0 [pid 8420] close(3) = 0 [pid 8420] close(4 [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8420] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8420] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8420] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] getdents64(4, [pid 8419] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8418] <... ioctl resumed>) = 0 [pid 8419] <... openat resumed>) = 4 [pid 8418] close(3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8419] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] close(4) = 0 [ 301.841411][ T8420] loop1: detected capacity change from 0 to 4096 [ 301.862535][ T8418] loop4: detected capacity change from 0 to 4096 [ 301.872822][ T8420] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5061] rmdir("./332/file0") = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8421 [pid 5061] close(3) = 0 [pid 5061] rmdir("./332") = 0 ./strace-static-x86_64: Process 8421 attached [pid 5061] mkdir("./333", 0777 [pid 8418] <... close resumed>) = 0 [pid 8421] set_robust_list(0x5555567436a0, 24 [pid 8418] close(4 [pid 5061] <... mkdir resumed>) = 0 [pid 8421] <... set_robust_list resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8421] chdir("./332" [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8421] <... chdir resumed>) = 0 [pid 8421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8421] setpgid(0, 0) = 0 [pid 8421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8418] <... close resumed>) = 0 [pid 8421] <... openat resumed>) = 3 [pid 8418] mkdir("./file0", 0777 [pid 8421] write(3, "1000", 4) = 4 [pid 8421] close(3) = 0 [pid 8421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8418] <... mkdir resumed>) = 0 [pid 8421] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8418] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8421] <... futex resumed>) = 0 [pid 8421] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8421] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8419] <... ioctl resumed>) = 0 [pid 8421] <... mprotect resumed>) = 0 [pid 8419] close(3 [pid 8421] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8419] <... close resumed>) = 0 [pid 8421] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8419] close(4 [pid 8421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8419] <... close resumed>) = 0 [pid 8419] mkdir("./file0", 0777./strace-static-x86_64: Process 8422 attached [pid 8421] <... clone3 resumed> => {parent_tid=[8422]}, 88) = 8422 [pid 8421] rt_sigprocmask(SIG_SETMASK, [], [pid 8422] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8422] <... rseq resumed>) = 0 [pid 8421] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8419] <... mkdir resumed>) = 0 [pid 8422] set_robust_list(0x7f58200ee9a0, 24 [pid 8421] <... futex resumed>) = 0 [pid 8421] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8422] <... set_robust_list resumed>) = 0 [pid 8422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8419] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8422] memfd_create("syzkaller", 0) = 3 [pid 8422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [ 301.886271][ T8419] loop0: detected capacity change from 0 to 4096 [ 301.911537][ T8418] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 301.925002][ T8419] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8418] <... mount resumed>) = 0 [pid 8418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8420] <... mount resumed>) = 0 [pid 8418] <... openat resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8418] chdir("./file0" [pid 8420] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 8418] <... chdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8420] <... openat resumed>) = 3 [pid 8418] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8420] chdir("./file0" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8423 [pid 8418] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8420] <... chdir resumed>) = 0 [pid 8420] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8420] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8423 attached ) = 1 [pid 8418] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8415] <... futex resumed>) = 0 [pid 8423] set_robust_list(0x5555567436a0, 24 [pid 8420] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8418] <... futex resumed>) = 1 [pid 8423] <... set_robust_list resumed>) = 0 [pid 8418] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8417] <... futex resumed>) = 0 [pid 8415] exit_group(0 [pid 8423] chdir("./333" [pid 8420] <... futex resumed>) = ? [pid 8417] exit_group(0 [pid 8415] <... exit_group resumed>) = ? [pid 8423] <... chdir resumed>) = 0 [pid 8420] +++ exited with 0 +++ [pid 8417] <... exit_group resumed>) = ? [pid 8423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8423] setpgid(0, 0) = 0 [pid 8423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8418] <... futex resumed>) = ? [pid 8415] +++ exited with 0 +++ [pid 8423] write(3, "1000", 4 [pid 8418] +++ exited with 0 +++ [pid 8417] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8417, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8415, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8423] <... write resumed>) = 4 [pid 8423] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8423] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] <... openat resumed>) = 3 [pid 5063] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8423] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8423] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8423] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8422] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] newfstatat(3, "", [pid 5060] getdents64(3, [pid 8423] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8419] <... mount resumed>) = 0 [pid 8423] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./330/binderfs", [pid 8423] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./330/binderfs" [pid 5060] unlink("./336/binderfs" [pid 8419] <... openat resumed>) = 3 [pid 8419] chdir("./file0" [pid 5063] <... unlink resumed>) = 0 [pid 8419] <... chdir resumed>) = 0 [pid 8419] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... unlink resumed>) = 0 [pid 8419] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8419] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8416] <... futex resumed>) = 0 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8416] exit_group(0 [pid 8419] ???( [pid 8416] <... exit_group resumed>) = ? [pid 8423] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8419] <... ??? resumed>) = ? [pid 8423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8419] +++ exited with 0 +++ [pid 8416] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 8423] <... clone3 resumed> => {parent_tid=[8424]}, 88) = 8424 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8416, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=6 /* 0.06 s */} --- [pid 8423] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 8423] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8423] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8424 attached [pid 8424] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... rseq resumed>) = 0 [pid 8424] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] <... set_robust_list resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8424] memfd_create("syzkaller", 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8424] <... memfd_create resumed>) = 3 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(3, "", [pid 8424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8424] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./336/file0", [pid 5063] newfstatat(AT_FDCWD, "./330/file0", [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./335/binderfs", [pid 5063] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5059] unlink("./335/binderfs") = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 5059] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8422] <... write resumed>) = 2097152 [pid 5063] getdents64(4, [pid 5060] getdents64(4, [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 8422] munmap(0x7f5817c00000, 138412032 [pid 5063] rmdir("./330/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8422] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] close(4 [pid 5059] newfstatat(AT_FDCWD, "./335/file0", [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./336/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5059] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] rmdir("./330" [pid 5060] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5063] mkdir("./331", 0777 [pid 5060] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5060] rmdir("./336" [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] mkdir("./337", 0777 [pid 5059] getdents64(4, [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5059] close(4 [pid 5063] <... close resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] rmdir("./335/file0") = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] getdents64(3, ./strace-static-x86_64: Process 8425 attached [pid 8422] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8425] set_robust_list(0x5555567436a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8425 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8424] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8422] <... openat resumed>) = 4 [pid 8422] ioctl(4, LOOP_SET_FD, 3 [pid 8425] <... set_robust_list resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] close(3 [pid 8425] chdir("./331" [pid 5059] <... close resumed>) = 0 [pid 8425] <... chdir resumed>) = 0 [pid 5059] rmdir("./335" [pid 8425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... rmdir resumed>) = 0 [pid 8422] <... ioctl resumed>) = 0 [pid 8422] close(3) = 0 [pid 8425] <... prctl resumed>) = 0 [pid 8422] close(4 [pid 5059] mkdir("./336", 0777 [pid 8422] <... close resumed>) = 0 [ 302.148039][ T8422] loop3: detected capacity change from 0 to 4096 [pid 8422] mkdir("./file0", 0777) = 0 [pid 8425] setpgid(0, 0 [pid 8424] <... write resumed>) = 2097152 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8422] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8425] <... setpgid resumed>) = 0 [pid 8424] munmap(0x7f5817c00000, 138412032 [pid 8425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... ioctl resumed>) = 0 [pid 8425] <... openat resumed>) = 3 [pid 8425] write(3, "1000", 4) = 4 [pid 8425] close(3) = 0 [pid 8425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] close(3) = 0 [pid 8425] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8425] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8424] <... munmap resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8425] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8425] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8424] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8425] <... mmap resumed>) = 0x7f58200ce000 [pid 8424] <... openat resumed>) = 4 [pid 8424] ioctl(4, LOOP_SET_FD, 3 [pid 8425] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8426]}, 88) = 8426 [pid 8425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 8426 attached [pid 8425] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8425] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8426] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8427 [pid 8426] <... rseq resumed>) = 0 [pid 8426] set_robust_list(0x7f58200ee9a0, 24 [pid 8424] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8427 attached [pid 8424] close(3) = 0 [ 302.201947][ T8422] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 302.221697][ T8424] loop2: detected capacity change from 0 to 4096 [pid 8424] close(4 [pid 8427] set_robust_list(0x5555567436a0, 24 [pid 8424] <... close resumed>) = 0 [pid 8424] mkdir("./file0", 0777) = 0 [pid 8426] <... set_robust_list resumed>) = 0 [pid 8426] rt_sigprocmask(SIG_SETMASK, [], [pid 8424] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8426] memfd_create("syzkaller", 0 [pid 8427] <... set_robust_list resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8426] <... memfd_create resumed>) = 3 [pid 8426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8427] chdir("./337") = 0 [pid 8426] <... mmap resumed>) = 0x7f5817c00000 [pid 8427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8427] setpgid(0, 0) = 0 [pid 8427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] close(3 [pid 8427] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8428 ./strace-static-x86_64: Process 8428 attached [pid 8428] set_robust_list(0x5555567436a0, 24) = 0 [pid 8428] chdir("./336") = 0 [pid 8428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8428] setpgid(0, 0) = 0 [pid 8428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8428] write(3, "1000", 4) = 4 [pid 8428] close(3) = 0 [pid 8428] symlink("/dev/binderfs", "./binderfs" [ 302.261236][ T8424] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8427] write(3, "1000", 4 [pid 8428] <... symlink resumed>) = 0 [pid 8427] <... write resumed>) = 4 [pid 8427] close(3) = 0 [pid 8427] symlink("/dev/binderfs", "./binderfs" [pid 8428] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8428] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8427] <... symlink resumed>) = 0 [pid 8428] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8427] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8427] <... futex resumed>) = 0 [pid 8427] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8428] <... mmap resumed>) = 0x7f58200ce000 [pid 8428] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8427] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8428] <... clone3 resumed> => {parent_tid=[8429]}, 88) = 8429 ./strace-static-x86_64: Process 8429 attached [pid 8428] rt_sigprocmask(SIG_SETMASK, [], [pid 8427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8429] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8429] <... rseq resumed>) = 0 [pid 8428] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8429] set_robust_list(0x7f58200ee9a0, 24 [pid 8428] <... futex resumed>) = 0 [pid 8427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8429] <... set_robust_list resumed>) = 0 [pid 8428] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8422] <... mount resumed>) = 0 [pid 8429] rt_sigprocmask(SIG_SETMASK, [], [pid 8427] <... mmap resumed>) = 0x7f58200ce000 [pid 8429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8429] memfd_create("syzkaller", 0 [pid 8427] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8427] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8422] <... openat resumed>) = 3 [pid 8429] <... memfd_create resumed>) = 3 [pid 8427] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8426] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8422] chdir("./file0" [pid 8429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8430 attached [pid 8429] <... mmap resumed>) = 0x7f5817c00000 [pid 8422] <... chdir resumed>) = 0 [pid 8430] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8427] <... clone3 resumed> => {parent_tid=[8430]}, 88) = 8430 [pid 8430] <... rseq resumed>) = 0 [pid 8427] rt_sigprocmask(SIG_SETMASK, [], [pid 8430] set_robust_list(0x7f58200ee9a0, 24 [pid 8427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8430] <... set_robust_list resumed>) = 0 [pid 8427] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8430] rt_sigprocmask(SIG_SETMASK, [], [pid 8427] <... futex resumed>) = 0 [pid 8430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8427] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8430] memfd_create("syzkaller", 0 [pid 8422] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8422] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8422] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8421] <... futex resumed>) = 0 [pid 8421] exit_group(0 [pid 8422] <... futex resumed>) = ? [pid 8421] <... exit_group resumed>) = ? [pid 8422] +++ exited with 0 +++ [pid 8430] <... memfd_create resumed>) = 3 [pid 8424] <... mount resumed>) = 0 [pid 8430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8421] +++ exited with 0 +++ [pid 8424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8421, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 8424] <... openat resumed>) = 3 [pid 8424] chdir("./file0") = 0 [pid 8424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8424] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8423] <... futex resumed>) = 0 [pid 5062] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8423] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8423] <... exit_group resumed>) = ? [pid 5062] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8424] +++ exited with 0 +++ [pid 8423] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8423, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5061] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(3, "", [pid 8430] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] unlink("./332/binderfs") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./333/binderfs" [pid 8429] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8426] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8430] <... write resumed>) = 2097152 [pid 5062] getdents64(4, [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8426] munmap(0x7f5817c00000, 138412032 [pid 8430] munmap(0x7f5817c00000, 138412032 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] newfstatat(AT_FDCWD, "./333/file0", [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(4 [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] rmdir("./332/file0" [pid 5061] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8430] <... munmap resumed>) = 0 [pid 8426] <... munmap resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8430] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8426] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(3, [pid 5061] <... openat resumed>) = 4 [pid 8430] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(4, "", [pid 8430] ioctl(4, LOOP_SET_FD, 3 [pid 8426] <... openat resumed>) = 4 [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8426] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 5062] rmdir("./332" [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8430] <... ioctl resumed>) = 0 [pid 8426] <... ioctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] getdents64(4, [pid 8430] close(3 [pid 8426] close(3 [pid 5062] mkdir("./333", 0777 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8430] <... close resumed>) = 0 [pid 8429] <... write resumed>) = 2097152 [pid 8426] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] close(4 [pid 8430] close(4 [pid 8429] munmap(0x7f5817c00000, 138412032 [pid 8426] close(4 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 8430] <... close resumed>) = 0 [pid 8429] <... munmap resumed>) = 0 [pid 8426] <... close resumed>) = 0 [pid 5061] rmdir("./333/file0" [pid 8430] mkdir("./file0", 0777 [pid 8429] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8426] mkdir("./file0", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8430] <... mkdir resumed>) = 0 [pid 8429] <... openat resumed>) = 4 [pid 8426] <... mkdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8426] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5061] <... close resumed>) = 0 [pid 8429] ioctl(4, LOOP_SET_FD, 3 [pid 5061] rmdir("./333" [pid 8430] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8429] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./334", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 302.488779][ T8430] loop1: detected capacity change from 0 to 4096 [ 302.489986][ T8426] loop4: detected capacity change from 0 to 4096 [ 302.523248][ T8429] loop0: detected capacity change from 0 to 4096 [ 302.526747][ T8426] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8429] close(3) = 0 [pid 8429] close(4) = 0 [pid 8429] mkdir("./file0", 0777) = 0 [pid 8426] <... mount resumed>) = 0 [ 302.545535][ T8430] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8429] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8426] chdir("./file0") = 0 [pid 8426] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8426] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8425] <... futex resumed>) = 0 [pid 8426] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8425] exit_group(0) = ? [pid 8426] <... futex resumed>) = ? [pid 8426] +++ exited with 0 +++ [pid 8425] +++ exited with 0 +++ [pid 5062] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8425, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8431 [ 302.593118][ T8429] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8431 attached [pid 5063] newfstatat(3, "", [pid 8431] set_robust_list(0x5555567436a0, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8432 attached [pid 8431] <... set_robust_list resumed>) = 0 [pid 5063] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8432] set_robust_list(0x5555567436a0, 24 [pid 8431] chdir("./333" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8432 [pid 8432] <... set_robust_list resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./331/binderfs", [pid 8432] chdir("./334" [pid 8430] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8432] <... chdir resumed>) = 0 [pid 8431] <... chdir resumed>) = 0 [pid 8432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] unlink("./331/binderfs" [pid 8432] setpgid(0, 0) = 0 [pid 8432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8431] <... prctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8432] <... openat resumed>) = 3 [pid 8432] write(3, "1000", 4 [pid 8431] setpgid(0, 0 [pid 8430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8431] <... setpgid resumed>) = 0 [pid 8432] <... write resumed>) = 4 [pid 8432] close(3) = 0 [pid 8432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8430] <... openat resumed>) = 3 [pid 8431] <... openat resumed>) = 3 [pid 8432] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8431] write(3, "1000", 4 [pid 8432] <... futex resumed>) = 0 [pid 8432] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8431] <... write resumed>) = 4 [pid 8430] chdir("./file0" [pid 8432] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8431] close(3 [pid 8430] <... chdir resumed>) = 0 [pid 8432] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8431] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8430] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8431] symlink("/dev/binderfs", "./binderfs" [pid 8430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8432] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8432] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8433]}, 88) = 8433 [pid 8432] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8433 attached NULL, 8) = 0 [pid 8430] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8433] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8432] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8431] <... symlink resumed>) = 0 [pid 8430] <... futex resumed>) = 1 [pid 8433] <... rseq resumed>) = 0 [pid 8432] <... futex resumed>) = 0 [pid 8433] set_robust_list(0x7f58200ee9a0, 24 [pid 8432] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8433] <... set_robust_list resumed>) = 0 [pid 8433] rt_sigprocmask(SIG_SETMASK, [], [pid 8430] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8433] memfd_create("syzkaller", 0) = 3 [pid 8433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8431] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8427] <... futex resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./331/file0", [pid 8431] <... futex resumed>) = 0 [pid 8431] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8427] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8427] <... exit_group resumed>) = ? [pid 8431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8430] <... futex resumed>) = ? [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8430] +++ exited with 0 +++ [pid 8427] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8427, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8431] <... mmap resumed>) = 0x7f58200ce000 [pid 8431] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8431] <... mprotect resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8431] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(4, "", [pid 5060] <... openat resumed>) = 3 [pid 8431] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8429] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", [pid 8431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8429] <... openat resumed>) = 3 [pid 8431] <... clone3 resumed> => {parent_tid=[8434]}, 88) = 8434 [pid 8429] chdir("./file0" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(3, ./strace-static-x86_64: Process 8434 attached [pid 8431] rt_sigprocmask(SIG_SETMASK, [], [pid 8429] <... chdir resumed>) = 0 [pid 8434] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8429] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8434] <... rseq resumed>) = 0 [pid 8431] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8434] set_robust_list(0x7f58200ee9a0, 24 [pid 8431] <... futex resumed>) = 0 [pid 8429] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 5060] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8434] <... set_robust_list resumed>) = 0 [pid 8431] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8429] <... futex resumed>) = 1 [pid 8428] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8434] rt_sigprocmask(SIG_SETMASK, [], [pid 8429] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8428] exit_group(0 [pid 5063] close(4 [pid 5060] newfstatat(AT_FDCWD, "./337/binderfs", [pid 8429] <... futex resumed>) = ? [pid 8428] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 8434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8433] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8429] +++ exited with 0 +++ [pid 8428] +++ exited with 0 +++ [pid 5063] rmdir("./331/file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8434] memfd_create("syzkaller", 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] unlink("./337/binderfs" [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8428, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8434] <... memfd_create resumed>) = 3 [pid 8434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... unlink resumed>) = 0 [pid 8434] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] getdents64(3, [pid 5060] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 5059] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5063] rmdir("./331") = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./332", 0777 [pid 5060] newfstatat(AT_FDCWD, "./337/file0", [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./336/binderfs", [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8433] <... write resumed>) = 2097152 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(4, "", [pid 5059] unlink("./336/binderfs" [pid 8433] munmap(0x7f5817c00000, 138412032 [pid 5059] <... unlink resumed>) = 0 [pid 8434] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5059] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] <... munmap resumed>) = 0 [pid 5060] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8433] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./336/file0", [pid 8433] <... openat resumed>) = 4 [pid 5060] rmdir("./337/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8434] <... write resumed>) = 2097152 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8434] munmap(0x7f5817c00000, 138412032 [pid 5060] close(3 [pid 8433] <... ioctl resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8433] close(3 [pid 5060] rmdir("./337" [pid 8433] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8433] close(4 [pid 5060] mkdir("./338", 0777 [pid 5059] newfstatat(4, "", [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8434] <... munmap resumed>) = 0 [pid 8433] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 8434] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8433] mkdir("./file0", 0777 [pid 8434] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8434] ioctl(4, LOOP_SET_FD, 3 [pid 8433] <... mkdir resumed>) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./336/file0" [ 302.815588][ T8433] loop2: detected capacity change from 0 to 4096 [ 302.845995][ T8434] loop3: detected capacity change from 0 to 4096 [pid 8433] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8434] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./336") = 0 [pid 5059] mkdir("./337", 0777) = 0 [pid 8434] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8434] <... close resumed>) = 0 [pid 8434] close(4) = 0 [pid 8434] mkdir("./file0", 0777) = 0 [pid 5063] <... ioctl resumed>) = 0 [ 302.863992][ T8433] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8434] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8435 ./strace-static-x86_64: Process 8435 attached [pid 8435] set_robust_list(0x5555567436a0, 24) = 0 [pid 8435] chdir("./332") = 0 [pid 8435] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... ioctl resumed>) = 0 [pid 8435] <... prctl resumed>) = 0 [pid 5060] close(3 [pid 8435] setpgid(0, 0) = 0 [ 302.906389][ T8434] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5060] <... close resumed>) = 0 [pid 8435] write(3, "1000", 4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8435] <... write resumed>) = 4 [pid 8435] close(3./strace-static-x86_64: Process 8436 attached ) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8435] symlink("/dev/binderfs", "./binderfs" [pid 8436] set_robust_list(0x5555567436a0, 24) = 0 [pid 8435] <... symlink resumed>) = 0 [pid 8435] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8436] chdir("./338" [pid 8435] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8436] <... chdir resumed>) = 0 [pid 8435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8435] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8435] <... mprotect resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8436 [pid 8435] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8436] <... prctl resumed>) = 0 [pid 8435] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8436] setpgid(0, 0 [pid 8435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] close(3./strace-static-x86_64: Process 8437 attached [pid 8436] <... setpgid resumed>) = 0 [pid 8435] <... clone3 resumed> => {parent_tid=[8437]}, 88) = 8437 [pid 8437] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8435] rt_sigprocmask(SIG_SETMASK, [], [pid 8437] <... rseq resumed>) = 0 [pid 8435] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... close resumed>) = 0 [pid 8437] set_robust_list(0x7f58200ee9a0, 24 [pid 8435] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8437] <... set_robust_list resumed>) = 0 [pid 8436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8435] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8438 attached [pid 8437] rt_sigprocmask(SIG_SETMASK, [], [pid 8436] <... openat resumed>) = 3 [pid 8435] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8433] <... mount resumed>) = 0 [pid 8438] set_robust_list(0x5555567436a0, 24 [pid 8437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8436] write(3, "1000", 4 [pid 8438] <... set_robust_list resumed>) = 0 [pid 8436] <... write resumed>) = 4 [pid 8433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8438 [pid 8436] close(3 [pid 8433] <... openat resumed>) = 3 [pid 8437] memfd_create("syzkaller", 0 [pid 8436] <... close resumed>) = 0 [pid 8433] chdir("./file0" [pid 8436] symlink("/dev/binderfs", "./binderfs" [pid 8437] <... memfd_create resumed>) = 3 [pid 8436] <... symlink resumed>) = 0 [pid 8437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8438] chdir("./337" [pid 8436] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8433] <... chdir resumed>) = 0 [pid 8436] <... futex resumed>) = 0 [pid 8433] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8438] <... chdir resumed>) = 0 [pid 8436] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8433] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8436] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8433] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8438] <... prctl resumed>) = 0 [pid 8436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8433] <... futex resumed>) = 1 [pid 8438] setpgid(0, 0 [pid 8436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8433] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8438] <... setpgid resumed>) = 0 [pid 8436] <... mmap resumed>) = 0x7f58200ce000 [pid 8432] <... futex resumed>) = 0 [pid 8436] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8432] exit_group(0 [pid 8436] <... mprotect resumed>) = 0 [pid 8438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8437] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8436] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8434] <... mount resumed>) = 0 [pid 8433] <... futex resumed>) = ? [pid 8432] <... exit_group resumed>) = ? [pid 8438] <... openat resumed>) = 3 [pid 8436] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8433] +++ exited with 0 +++ [pid 8432] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8432, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8438] write(3, "1000", 4) = 4 [pid 5061] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8438] close(3 [pid 5061] newfstatat(3, "", [pid 8438] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8438] symlink("/dev/binderfs", "./binderfs" [pid 5061] getdents64(3, [pid 8438] <... symlink resumed>) = 0 [pid 8436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8439 attached [pid 8434] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8439] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8436] <... clone3 resumed> => {parent_tid=[8439]}, 88) = 8439 [pid 8434] chdir("./file0" [pid 5061] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8439] <... rseq resumed>) = 0 [pid 8438] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8436] rt_sigprocmask(SIG_SETMASK, [], [pid 8434] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8439] set_robust_list(0x7f58200ee9a0, 24 [pid 8438] <... futex resumed>) = 0 [pid 8437] <... write resumed>) = 2097152 [pid 8436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8434] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8439] <... set_robust_list resumed>) = 0 [pid 8438] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8437] munmap(0x7f5817c00000, 138412032 [pid 8436] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8439] rt_sigprocmask(SIG_SETMASK, [], [pid 8438] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8436] <... futex resumed>) = 0 [pid 8434] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] unlink("./334/binderfs" [pid 8438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8436] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8434] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... unlink resumed>) = 0 [pid 8439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8434] <... futex resumed>) = 1 [pid 8431] <... futex resumed>) = 0 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8434] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8431] exit_group(0 [pid 8438] <... mmap resumed>) = 0x7f58200ce000 [pid 8434] <... futex resumed>) = ? [pid 8431] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = 0 [pid 8438] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8438] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8438] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] newfstatat(AT_FDCWD, "./334/file0", ./strace-static-x86_64: Process 8440 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8440] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8439] memfd_create("syzkaller", 0 [pid 8440] <... rseq resumed>) = 0 [pid 8438] <... clone3 resumed> => {parent_tid=[8440]}, 88) = 8440 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8440] set_robust_list(0x7f58200ee9a0, 24 [pid 8438] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8440] <... set_robust_list resumed>) = 0 [pid 8438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] rt_sigprocmask(SIG_SETMASK, [], [pid 8438] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... openat resumed>) = 4 [pid 8440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8438] <... futex resumed>) = 0 [pid 8440] memfd_create("syzkaller", 0 [pid 8439] <... memfd_create resumed>) = 3 [pid 8438] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] newfstatat(4, "", [pid 8434] +++ exited with 0 +++ [pid 8431] +++ exited with 0 +++ [pid 8439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8431, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8439] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8440] <... memfd_create resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 5061] getdents64(4, [pid 8440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8440] <... mmap resumed>) = 0x7f5817c00000 [pid 8437] <... munmap resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] getdents64(4, [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./333/binderfs") = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8437] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4 [pid 8437] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 8437] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] rmdir("./334/file0" [pid 8437] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] close(3) = 0 [pid 5062] newfstatat(4, "", [pid 5061] rmdir("./334" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8439] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8437] close(3 [pid 5062] getdents64(4, [pid 5061] mkdir("./335", 0777 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... mkdir resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8437] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8437] close(4 [pid 5062] close(4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8437] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8437] mkdir("./file0", 0777 [pid 5062] rmdir("./333/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./333" [pid 8437] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./334", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8437] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [ 303.123762][ T8437] loop4: detected capacity change from 0 to 4096 [pid 8440] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8439] <... write resumed>) = 2097152 [pid 8439] munmap(0x7f5817c00000, 138412032) = 0 [pid 8437] <... mount resumed>) = 0 [ 303.173926][ T8437] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8439] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8439] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8437] chdir("./file0" [pid 8439] close(3 [pid 8437] <... chdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8439] <... close resumed>) = 0 [pid 8439] close(4) = 0 [pid 8437] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] close(3 [pid 8437] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... close resumed>) = 0 [pid 8437] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8435] <... futex resumed>) = 0 [pid 8435] exit_group(0) = ? [pid 8439] mkdir("./file0", 0777) = 0 [pid 8437] <... futex resumed>) = ? [pid 8439] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5062] close(3) = 0 [ 303.215188][ T8439] loop1: detected capacity change from 0 to 4096 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8440] <... write resumed>) = 2097152 [pid 8437] +++ exited with 0 +++ [pid 8435] +++ exited with 0 +++ [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8441 ./strace-static-x86_64: Process 8442 attached [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8442 [pid 8442] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8441 attached [pid 8441] set_robust_list(0x5555567436a0, 24 [pid 8442] <... set_robust_list resumed>) = 0 [pid 8442] chdir("./334" [pid 8441] <... set_robust_list resumed>) = 0 [pid 8441] chdir("./335" [pid 8442] <... chdir resumed>) = 0 [pid 8442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8441] <... chdir resumed>) = 0 [pid 8442] setpgid(0, 0 [pid 8441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8442] <... setpgid resumed>) = 0 [pid 8441] setpgid(0, 0 [pid 8442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8441] <... setpgid resumed>) = 0 [pid 8441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8442] <... openat resumed>) = 3 [pid 8442] write(3, "1000", 4 [pid 8441] write(3, "1000", 4 [pid 8442] <... write resumed>) = 4 [pid 8441] <... write resumed>) = 4 [pid 8442] close(3 [pid 8441] close(3 [pid 8442] <... close resumed>) = 0 [pid 8441] <... close resumed>) = 0 [pid 8442] symlink("/dev/binderfs", "./binderfs" [pid 8441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8442] <... symlink resumed>) = 0 [pid 8441] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8442] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8441] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8442] <... futex resumed>) = 0 [pid 8441] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8442] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8440] munmap(0x7f5817c00000, 138412032 [pid 8442] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8435, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8441] <... mmap resumed>) = 0x7f58200ce000 [pid 8442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8441] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8442] <... mmap resumed>) = 0x7f58200ce000 [pid 8441] <... mprotect resumed>) = 0 [pid 8442] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... restart_syscall resumed>) = 0 [pid 8442] <... mprotect resumed>) = 0 [pid 8441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8440] <... munmap resumed>) = 0 [pid 8442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8442] <... clone3 resumed> => {parent_tid=[8443]}, 88) = 8443 [pid 5063] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8442] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8442] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8444 attached ./strace-static-x86_64: Process 8443 attached [pid 8442] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8441] <... clone3 resumed> => {parent_tid=[8444]}, 88) = 8444 [pid 5063] <... openat resumed>) = 3 [pid 8444] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8443] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8441] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] newfstatat(3, "", [pid 8443] <... rseq resumed>) = 0 [pid 8441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8443] set_robust_list(0x7f58200ee9a0, 24 [pid 8441] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8444] <... rseq resumed>) = 0 [pid 8443] <... set_robust_list resumed>) = 0 [pid 8441] <... futex resumed>) = 0 [pid 8444] set_robust_list(0x7f58200ee9a0, 24 [pid 8443] rt_sigprocmask(SIG_SETMASK, [], [pid 8441] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8444] <... set_robust_list resumed>) = 0 [pid 8443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8444] rt_sigprocmask(SIG_SETMASK, [], [pid 8443] memfd_create("syzkaller", 0 [pid 8440] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] getdents64(3, [pid 8444] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 303.267811][ T8439] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8444] memfd_create("syzkaller", 0 [pid 8440] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8443] <... memfd_create resumed>) = 3 [pid 8440] ioctl(4, LOOP_SET_FD, 3 [pid 8444] <... memfd_create resumed>) = 3 [pid 8443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8443] <... mmap resumed>) = 0x7f5817c00000 [pid 8444] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./332/binderfs" [pid 8440] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8440] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 8440] <... close resumed>) = 0 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8440] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8440] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./332/file0", [pid 8440] mkdir("./file0", 0777 [pid 8443] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8440] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 303.321599][ T8440] loop0: detected capacity change from 0 to 4096 [pid 5063] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... openat resumed>) = 4 [pid 8439] <... mount resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 8444] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8443] <... write resumed>) = 2097152 [pid 8439] <... openat resumed>) = 3 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8439] chdir("./file0" [pid 5063] getdents64(4, [pid 8439] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] close(4 [pid 8439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./332/file0" [pid 8439] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8436] <... futex resumed>) = 0 [pid 8436] exit_group(0) = ? [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 8443] munmap(0x7f5817c00000, 138412032 [pid 8440] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8439] +++ exited with 0 +++ [pid 8436] +++ exited with 0 +++ [pid 5063] rmdir("./332" [pid 8440] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8436, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8440] chdir("./file0" [pid 5060] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] <... chdir resumed>) = 0 [pid 8440] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 5063] mkdir("./333", 0777 [pid 8443] <... munmap resumed>) = 0 [pid 8440] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 303.397028][ T8440] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5060] newfstatat(3, "", [pid 8443] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8444] <... write resumed>) = 2097152 [pid 8440] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8444] munmap(0x7f5817c00000, 138412032 [pid 8443] <... openat resumed>) = 4 [pid 8440] <... futex resumed>) = 1 [pid 8438] <... futex resumed>) = 0 [pid 8443] ioctl(4, LOOP_SET_FD, 3 [pid 8440] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8438] exit_group(0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8444] <... munmap resumed>) = 0 [pid 8443] <... ioctl resumed>) = 0 [pid 8440] <... futex resumed>) = ? [pid 8438] <... exit_group resumed>) = ? [pid 8444] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8443] close(3 [pid 5060] unlink("./338/binderfs" [pid 8444] ioctl(4, LOOP_SET_FD, 3 [pid 8443] <... close resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 8443] close(4 [pid 8440] +++ exited with 0 +++ [pid 8438] +++ exited with 0 +++ [pid 5060] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8438, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8443] <... close resumed>) = 0 [pid 8443] mkdir("./file0", 0777 [pid 8444] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8444] close(3) = 0 [pid 8444] close(4 [pid 8443] <... mkdir resumed>) = 0 [pid 5059] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8444] <... close resumed>) = 0 [pid 8444] mkdir("./file0", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8444] <... mkdir resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8443] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [ 303.472248][ T8443] loop3: detected capacity change from 0 to 4096 [ 303.493075][ T8444] loop2: detected capacity change from 0 to 4096 [pid 8444] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 4 [pid 5059] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(4, "", [pid 5059] unlink("./337/binderfs") = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5059] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./338/file0") = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./338" [pid 5059] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./339", 0777 [pid 5059] newfstatat(AT_FDCWD, "./337/file0", [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./337/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [ 303.513924][ T8443] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 303.525566][ T8444] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5059] rmdir("./337" [pid 8443] <... mount resumed>) = 0 [pid 8443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... rmdir resumed>) = 0 [pid 8443] <... openat resumed>) = 3 [pid 8443] chdir("./file0") = 0 [pid 8443] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5059] mkdir("./338", 0777 [pid 8443] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... mkdir resumed>) = 0 [pid 8443] <... futex resumed>) = 1 [pid 8443] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8442] <... futex resumed>) = 0 [pid 8442] exit_group(0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8444] <... mount resumed>) = 0 [pid 8443] <... futex resumed>) = ? [pid 8442] <... exit_group resumed>) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 8443] +++ exited with 0 +++ [pid 8442] +++ exited with 0 +++ [pid 5063] close(3 [pid 5059] <... openat resumed>) = 3 [pid 8444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8442, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8444] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 8444] chdir("./file0") = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8444] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8444] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8444] <... futex resumed>) = 1 [pid 5062] newfstatat(3, "", [pid 8444] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8445 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8441] <... futex resumed>) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./334/binderfs") = 0 [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8445 attached [pid 8441] exit_group(0 [pid 8444] <... futex resumed>) = ? [pid 8441] <... exit_group resumed>) = ? [pid 8444] +++ exited with 0 +++ [pid 8445] set_robust_list(0x5555567436a0, 24) = 0 [pid 8445] chdir("./333") = 0 [pid 8445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8441] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 8445] <... prctl resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8441, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8445] setpgid(0, 0) = 0 [pid 5061] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 8445] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8445] write(3, "1000", 4) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8445] close(3 [pid 5060] close(3 [pid 5062] newfstatat(AT_FDCWD, "./334/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./335/binderfs") = 0 [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8445] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8446 attached [pid 8445] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(4, "", [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8446] set_robust_list(0x5555567436a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8446 [pid 8446] <... set_robust_list resumed>) = 0 [pid 8446] chdir("./339" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8446] <... chdir resumed>) = 0 [pid 8445] <... symlink resumed>) = 0 [pid 5062] getdents64(4, [pid 8446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = 0 [pid 8445] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8445] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8445] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8445] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8446] <... prctl resumed>) = 0 [pid 8446] setpgid(0, 0 [pid 8445] <... mprotect resumed>) = 0 [pid 8446] <... setpgid resumed>) = 0 [pid 8446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] getdents64(4, [pid 8446] <... openat resumed>) = 3 [pid 8446] write(3, "1000", 4 [pid 8445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8446] <... write resumed>) = 4 [pid 8446] close(3 [pid 5062] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8446] <... close resumed>) = 0 [pid 8446] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./335/file0", [pid 5062] rmdir("./334/file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8446] <... symlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8446] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8446] <... futex resumed>) = 0 [pid 8446] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] getdents64(3, [pid 5061] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8447 attached [pid 8446] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8445] <... clone3 resumed> => {parent_tid=[8447]}, 88) = 8447 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8447] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8445] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] close(3 [pid 8447] <... rseq resumed>) = 0 [pid 8446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8447] set_robust_list(0x7f58200ee9a0, 24 [pid 8446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8445] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8447] <... set_robust_list resumed>) = 0 [pid 8446] <... mmap resumed>) = 0x7f58200ce000 [pid 8445] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8447] rt_sigprocmask(SIG_SETMASK, [], [pid 8446] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8446] <... mprotect resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./334" [pid 5061] close(4 [pid 8447] memfd_create("syzkaller", 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8446] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] rmdir("./335/file0" [pid 8446] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8447] <... memfd_create resumed>) = 3 [pid 8447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] <... rmdir resumed>) = 0 [pid 8446] <... clone3 resumed> => {parent_tid=[8448]}, 88) = 8448 [pid 5062] mkdir("./335", 0777 [pid 5061] getdents64(3, ./strace-static-x86_64: Process 8448 attached [pid 8447] <... mmap resumed>) = 0x7f5817c00000 [pid 8446] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8448] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8446] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 8448] <... rseq resumed>) = 0 [pid 5061] close(3 [pid 8448] set_robust_list(0x7f58200ee9a0, 24 [pid 5061] <... close resumed>) = 0 [pid 8448] <... set_robust_list resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] rmdir("./335" [pid 8448] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] mkdir("./336", 0777 [pid 8448] memfd_create("syzkaller", 0 [pid 8446] <... futex resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8448] <... memfd_create resumed>) = 3 [pid 8446] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8448] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8449 ./strace-static-x86_64: Process 8449 attached [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8449] set_robust_list(0x5555567436a0, 24) = 0 [pid 8449] chdir("./338" [pid 8447] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8449] <... chdir resumed>) = 0 [pid 8449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8449] setpgid(0, 0) = 0 [pid 8449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8449] write(3, "1000", 4 [pid 8448] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 8449] <... write resumed>) = 4 [pid 8449] close(3) = 0 [pid 8447] <... write resumed>) = 2097152 [pid 5062] close(3 [pid 8449] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... close resumed>) = 0 [pid 8449] <... symlink resumed>) = 0 [pid 8447] munmap(0x7f5817c00000, 138412032 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8450 attached [pid 8450] set_robust_list(0x5555567436a0, 24 [pid 8449] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8450] <... set_robust_list resumed>) = 0 [pid 8449] <... futex resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8450 [pid 8450] chdir("./335" [pid 8449] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8450] <... chdir resumed>) = 0 [pid 8449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8447] <... munmap resumed>) = 0 [pid 8449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8447] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8450] <... prctl resumed>) = 0 [pid 8449] <... mmap resumed>) = 0x7f58200ce000 [pid 8447] <... openat resumed>) = 4 [pid 8450] setpgid(0, 0) = 0 [pid 8449] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8447] ioctl(4, LOOP_SET_FD, 3 [pid 8450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8449] <... mprotect resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8450] <... openat resumed>) = 3 [pid 8449] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8447] <... ioctl resumed>) = 0 [pid 8450] write(3, "1000", 4 [pid 8447] close(3 [pid 8449] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8447] <... close resumed>) = 0 [pid 8450] <... write resumed>) = 4 [pid 8447] close(4 [pid 8450] close(3 [pid 8449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8450] <... close resumed>) = 0 [pid 8450] symlink("/dev/binderfs", "./binderfs" [pid 8447] <... close resumed>) = 0 [pid 8447] mkdir("./file0", 0777./strace-static-x86_64: Process 8451 attached [pid 8450] <... symlink resumed>) = 0 [pid 8449] <... clone3 resumed> => {parent_tid=[8451]}, 88) = 8451 [pid 8447] <... mkdir resumed>) = 0 [pid 8451] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8450] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] <... rseq resumed>) = 0 [pid 5061] close(3 [pid 8451] set_robust_list(0x7f58200ee9a0, 24 [pid 5061] <... close resumed>) = 0 [pid 8451] <... set_robust_list resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8451] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8450] <... futex resumed>) = 0 [pid 8450] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8449] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8452 attached [pid 8450] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8452] set_robust_list(0x5555567436a0, 24 [pid 8450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8449] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8452 [pid 8447] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8452] <... set_robust_list resumed>) = 0 [pid 8451] <... futex resumed>) = 0 [pid 8450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8449] <... futex resumed>) = 1 [ 303.840156][ T8447] loop4: detected capacity change from 0 to 4096 [pid 8451] memfd_create("syzkaller", 0 [pid 8450] <... mmap resumed>) = 0x7f58200ce000 [pid 8449] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8452] chdir("./336" [pid 8450] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8452] <... chdir resumed>) = 0 [pid 8452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8452] setpgid(0, 0) = 0 [pid 8452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8451] <... memfd_create resumed>) = 3 [pid 8452] <... openat resumed>) = 3 [pid 8451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8452] write(3, "1000", 4 [pid 8451] <... mmap resumed>) = 0x7f5817c00000 [pid 8452] <... write resumed>) = 4 [pid 8450] <... mprotect resumed>) = 0 [pid 8450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8452] close(3) = 0 [pid 8452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8452] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8452] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8450] <... clone3 resumed> => {parent_tid=[8453]}, 88) = 8453 ./strace-static-x86_64: Process 8453 attached [pid 8452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8450] rt_sigprocmask(SIG_SETMASK, [], [pid 8448] <... write resumed>) = 2097152 [pid 8450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8448] munmap(0x7f5817c00000, 138412032 [pid 8450] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8453] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8452] <... mmap resumed>) = 0x7f58200ce000 [pid 8450] <... futex resumed>) = 0 [pid 8453] <... rseq resumed>) = 0 [pid 8452] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8450] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8453] set_robust_list(0x7f58200ee9a0, 24 [pid 8452] <... mprotect resumed>) = 0 [pid 8453] <... set_robust_list resumed>) = 0 [pid 8452] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8453] rt_sigprocmask(SIG_SETMASK, [], [pid 8452] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8454 attached [pid 8453] memfd_create("syzkaller", 0 [pid 8448] <... munmap resumed>) = 0 [pid 8454] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8452] <... clone3 resumed> => {parent_tid=[8454]}, 88) = 8454 [ 303.891557][ T8447] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8454] <... rseq resumed>) = 0 [pid 8452] rt_sigprocmask(SIG_SETMASK, [], [pid 8454] set_robust_list(0x7f58200ee9a0, 24 [pid 8453] <... memfd_create resumed>) = 3 [pid 8452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8454] <... set_robust_list resumed>) = 0 [pid 8453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8452] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8453] <... mmap resumed>) = 0x7f5817c00000 [pid 8452] <... futex resumed>) = 0 [pid 8448] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8452] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8454] rt_sigprocmask(SIG_SETMASK, [], [pid 8448] <... openat resumed>) = 4 [pid 8454] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8454] memfd_create("syzkaller", 0 [pid 8448] ioctl(4, LOOP_SET_FD, 3 [pid 8454] <... memfd_create resumed>) = 3 [pid 8454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8448] <... ioctl resumed>) = 0 [pid 8447] <... mount resumed>) = 0 [pid 8448] close(3 [pid 8447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8448] <... close resumed>) = 0 [pid 8448] close(4 [pid 8447] <... openat resumed>) = 3 [pid 8448] <... close resumed>) = 0 [pid 8447] chdir("./file0" [pid 8448] mkdir("./file0", 0777) = 0 [pid 8451] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8448] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8447] <... chdir resumed>) = 0 [ 303.957839][ T8448] loop1: detected capacity change from 0 to 4096 [pid 8453] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8447] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8447] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8445] <... futex resumed>) = 0 [pid 8447] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8445] exit_group(0) = ? [pid 8447] <... futex resumed>) = ? [pid 8447] +++ exited with 0 +++ [pid 8445] +++ exited with 0 +++ [pid 8454] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8445, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5063] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 304.014163][ T8448] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8451] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./333/binderfs", [pid 8451] munmap(0x7f5817c00000, 138412032 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8453] <... write resumed>) = 2097152 [pid 5063] unlink("./333/binderfs") = 0 [pid 8448] <... mount resumed>) = 0 [pid 8453] munmap(0x7f5817c00000, 138412032 [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8448] chdir("./file0") = 0 [pid 8448] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8448] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8446] <... futex resumed>) = 0 [pid 8448] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8446] exit_group(0) = ? [pid 8448] <... futex resumed>) = ? [pid 8451] <... munmap resumed>) = 0 [pid 8451] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8454] <... write resumed>) = 2097152 [pid 8453] <... munmap resumed>) = 0 [pid 8448] +++ exited with 0 +++ [pid 8446] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8446, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8451] <... openat resumed>) = 4 [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] munmap(0x7f5817c00000, 138412032 [pid 5060] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8451] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8453] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 8453] <... openat resumed>) = 4 [pid 5060] newfstatat(3, "", [pid 8453] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8454] <... munmap resumed>) = 0 [pid 8451] <... ioctl resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./333/file0", [pid 8454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8453] <... ioctl resumed>) = 0 [pid 5060] getdents64(3, [pid 8453] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8453] <... close resumed>) = 0 [pid 5060] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... openat resumed>) = 4 [pid 8453] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8454] ioctl(4, LOOP_SET_FD, 3 [pid 8451] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./339/binderfs", [pid 8453] <... close resumed>) = 0 [pid 8454] <... ioctl resumed>) = 0 [pid 8453] mkdir("./file0", 0777 [pid 8451] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8454] close(3 [pid 8453] <... mkdir resumed>) = 0 [pid 8451] close(4 [pid 5063] <... openat resumed>) = 4 [pid 5060] unlink("./339/binderfs" [pid 8454] <... close resumed>) = 0 [pid 8453] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8451] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [ 304.123513][ T8451] loop0: detected capacity change from 0 to 4096 [ 304.124497][ T8453] loop3: detected capacity change from 0 to 4096 [ 304.140605][ T8454] loop2: detected capacity change from 0 to 4096 [pid 8454] close(4 [pid 8451] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 8454] <... close resumed>) = 0 [pid 8451] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, [pid 8454] mkdir("./file0", 0777 [pid 8451] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8454] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./333/file0") = 0 [pid 8454] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] getdents64(3, [pid 5060] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./333") = 0 [pid 5063] mkdir("./334", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 304.168116][ T8453] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 304.186172][ T8451] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 304.195354][ T8454] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./339/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./339") = 0 [pid 5060] mkdir("./340", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 8453] <... mount resumed>) = 0 [pid 8453] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 8453] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8455 attached [pid 8453] chdir("./file0" [pid 8455] set_robust_list(0x5555567436a0, 24 [pid 8453] <... chdir resumed>) = 0 [pid 8455] <... set_robust_list resumed>) = 0 [pid 8453] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8455] chdir("./334" [pid 8453] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8455] <... chdir resumed>) = 0 [pid 8455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8453] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8455] <... prctl resumed>) = 0 [pid 8453] <... futex resumed>) = 1 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8455 [pid 8455] setpgid(0, 0 [pid 8450] <... futex resumed>) = 0 [pid 8455] <... setpgid resumed>) = 0 [pid 8450] exit_group(0 [pid 8455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8450] <... exit_group resumed>) = ? [pid 8453] +++ exited with 0 +++ [pid 8455] <... openat resumed>) = 3 [pid 8450] +++ exited with 0 +++ [pid 8455] write(3, "1000", 4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8450, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8455] <... write resumed>) = 4 [pid 8455] close(3) = 0 [pid 5062] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8455] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8455] <... symlink resumed>) = 0 [pid 8454] <... mount resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8455] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] unlink("./335/binderfs" [pid 8455] <... futex resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8454] chdir("./file0" [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8455] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8455] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8451] <... mount resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./335/file0", [pid 8455] <... mmap resumed>) = 0x7f58200ce000 [pid 8455] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8455] <... mprotect resumed>) = 0 [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8455] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8455] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8451] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8454] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8451] chdir("./file0" [pid 5062] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8456 attached [pid 8455] <... clone3 resumed> => {parent_tid=[8456]}, 88) = 8456 [pid 8454] <... futex resumed>) = 1 [pid 8452] <... futex resumed>) = 0 [pid 8451] <... chdir resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8456] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8455] rt_sigprocmask(SIG_SETMASK, [], [pid 8454] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8452] exit_group(0 [pid 8451] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8456] <... rseq resumed>) = 0 [pid 8455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8452] <... exit_group resumed>) = ? [pid 8451] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] getdents64(4, [pid 8456] set_robust_list(0x7f58200ee9a0, 24 [pid 8455] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8454] <... futex resumed>) = ? [pid 8451] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... ioctl resumed>) = 0 [pid 8456] <... set_robust_list resumed>) = 0 [pid 8455] <... futex resumed>) = 0 [pid 8454] +++ exited with 0 +++ [pid 8452] +++ exited with 0 +++ [pid 8451] <... futex resumed>) = 1 [pid 8449] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 8456] rt_sigprocmask(SIG_SETMASK, [], [pid 8455] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8451] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8449] exit_group(0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8452, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8451] <... futex resumed>) = ? [pid 8449] <... exit_group resumed>) = ? [pid 5062] close(4 [pid 5060] close(3 [pid 8451] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] rmdir("./335/file0" [pid 5061] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8457 attached [pid 8449] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8457] set_robust_list(0x5555567436a0, 24 [pid 5062] getdents64(3, [pid 5061] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8457 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8457] <... set_robust_list resumed>) = 0 [pid 5062] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8449, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8457] chdir("./340" [pid 5062] <... close resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5062] rmdir("./335" [pid 8456] memfd_create("syzkaller", 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./336", 0777 [pid 5061] getdents64(3, [pid 8457] <... chdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8457] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8457] <... prctl resumed>) = 0 [pid 5061] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 8457] setpgid(0, 0 [pid 8456] <... memfd_create resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(3, "", [pid 8457] <... setpgid resumed>) = 0 [pid 8456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8457] <... openat resumed>) = 3 [pid 5061] unlink("./336/binderfs" [pid 8457] write(3, "1000", 4 [pid 5061] <... unlink resumed>) = 0 [pid 5059] getdents64(3, [pid 8457] <... write resumed>) = 4 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] close(3 [pid 8456] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8457] <... close resumed>) = 0 [pid 8457] symlink("/dev/binderfs", "./binderfs" [pid 5059] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] <... symlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8457] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8457] <... futex resumed>) = 0 [pid 5059] unlink("./338/binderfs" [pid 8457] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 8457] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8457] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] newfstatat(AT_FDCWD, "./336/file0", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(AT_FDCWD, "./338/file0", [pid 8457] <... mprotect resumed>) = 0 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8457] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8457] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8458 attached ) = 4 [pid 8458] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8457] <... clone3 resumed> => {parent_tid=[8458]}, 88) = 8458 [pid 8458] <... rseq resumed>) = 0 [pid 8456] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(4, "", [pid 8458] set_robust_list(0x7f58200ee9a0, 24 [pid 8457] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... openat resumed>) = 4 [pid 8458] <... set_robust_list resumed>) = 0 [pid 8457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8458] rt_sigprocmask(SIG_SETMASK, [], [pid 8457] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(4, [pid 8458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8457] <... futex resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8457] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5059] getdents64(4, [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5061] close(4 [pid 8458] memfd_create("syzkaller", 0 [pid 5061] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8458] <... memfd_create resumed>) = 3 [pid 5061] rmdir("./336/file0" [pid 5059] rmdir("./338/file0" [pid 8458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8458] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./336") = 0 [pid 5059] getdents64(3, [pid 5061] mkdir("./337", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 8456] <... write resumed>) = 2097152 [pid 5059] <... close resumed>) = 0 [pid 5062] close(3 [pid 5059] rmdir("./338" [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8458] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8456] munmap(0x7f5817c00000, 138412032 [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8459 attached [pid 5059] mkdir("./339", 0777 [pid 8459] set_robust_list(0x5555567436a0, 24) = 0 [pid 8459] chdir("./336") = 0 [pid 8459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8459] setpgid(0, 0 [pid 5059] <... mkdir resumed>) = 0 [pid 8459] <... setpgid resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... openat resumed>) = 3 [pid 8459] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8459] write(3, "1000", 4) = 4 [pid 8459] close(3) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8459 [pid 8459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8459] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8459] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8459] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8456] <... munmap resumed>) = 0 [pid 8459] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8456] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8459] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8456] <... openat resumed>) = 4 [pid 8459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8456] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8460 attached [pid 8460] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8460] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8459] <... clone3 resumed> => {parent_tid=[8460]}, 88) = 8460 [pid 8460] rt_sigprocmask(SIG_SETMASK, [], [pid 8459] rt_sigprocmask(SIG_SETMASK, [], [pid 8460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8460] memfd_create("syzkaller", 0 [pid 8459] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8459] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8460] <... memfd_create resumed>) = 3 [pid 8458] <... write resumed>) = 2097152 [pid 8460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8458] munmap(0x7f5817c00000, 138412032) = 0 [pid 8456] <... ioctl resumed>) = 0 [pid 8456] close(3 [pid 8458] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8456] <... close resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8456] close(4 [pid 5061] close(3 [pid 8458] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8456] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 304.531834][ T8456] loop4: detected capacity change from 0 to 4096 [pid 8456] mkdir("./file0", 0777 [pid 8458] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8456] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8461 attached [pid 8456] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5059] close(3 [pid 8461] set_robust_list(0x5555567436a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8461 [pid 8461] <... set_robust_list resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8458] close(3 [pid 8461] chdir("./337" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8458] <... close resumed>) = 0 [pid 8458] close(4) = 0 [pid 8458] mkdir("./file0", 0777) = 0 [pid 8460] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8461] <... chdir resumed>) = 0 [pid 8458] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8462 ./strace-static-x86_64: Process 8462 attached [pid 8462] set_robust_list(0x5555567436a0, 24) = 0 [pid 8462] chdir("./339") = 0 [pid 8461] <... prctl resumed>) = 0 [pid 8462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8461] setpgid(0, 0 [pid 8462] <... prctl resumed>) = 0 [pid 8462] setpgid(0, 0) = 0 [pid 8462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8461] <... setpgid resumed>) = 0 [pid 8461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8462] <... openat resumed>) = 3 [pid 8461] <... openat resumed>) = 3 [pid 8461] write(3, "1000", 4 [pid 8462] write(3, "1000", 4) = 4 [pid 8462] close(3 [pid 8461] <... write resumed>) = 4 [ 304.574370][ T8458] loop1: detected capacity change from 0 to 4096 [ 304.593873][ T8456] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 304.613483][ T8458] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8461] close(3 [pid 8462] <... close resumed>) = 0 [pid 8462] symlink("/dev/binderfs", "./binderfs" [pid 8461] <... close resumed>) = 0 [pid 8462] <... symlink resumed>) = 0 [pid 8461] symlink("/dev/binderfs", "./binderfs" [pid 8462] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8462] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8461] <... symlink resumed>) = 0 [pid 8461] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8462] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8461] <... futex resumed>) = 0 [pid 8462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8461] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8462] <... mmap resumed>) = 0x7f58200ce000 [pid 8462] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8461] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8461] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8462] <... clone3 resumed> => {parent_tid=[8463]}, 88) = 8463 [pid 8462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8461] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8463 attached [pid 8462] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8463] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8462] <... futex resumed>) = 0 [pid 8461] <... mmap resumed>) = 0x7f58200ce000 [pid 8456] <... mount resumed>) = 0 [pid 8463] <... rseq resumed>) = 0 [pid 8462] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8461] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8463] set_robust_list(0x7f58200ee9a0, 24 [pid 8460] <... write resumed>) = 2097152 [pid 8456] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8463] <... set_robust_list resumed>) = 0 [pid 8461] <... mprotect resumed>) = 0 [pid 8460] munmap(0x7f5817c00000, 138412032 [pid 8456] <... openat resumed>) = 3 [pid 8463] rt_sigprocmask(SIG_SETMASK, [], [pid 8461] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8458] <... mount resumed>) = 0 [pid 8456] chdir("./file0" [pid 8463] memfd_create("syzkaller", 0 [pid 8461] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8456] <... chdir resumed>) = 0 [pid 8461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8456] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 8464 attached [pid 8458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8464] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8461] <... clone3 resumed> => {parent_tid=[8464]}, 88) = 8464 [pid 8460] <... munmap resumed>) = 0 [pid 8458] <... openat resumed>) = 3 [pid 8456] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8464] <... rseq resumed>) = 0 [pid 8463] <... memfd_create resumed>) = 3 [pid 8461] rt_sigprocmask(SIG_SETMASK, [], [pid 8460] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8458] chdir("./file0" [pid 8456] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8464] set_robust_list(0x7f58200ee9a0, 24 [pid 8463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8460] <... openat resumed>) = 4 [pid 8458] <... chdir resumed>) = 0 [pid 8464] <... set_robust_list resumed>) = 0 [pid 8463] <... mmap resumed>) = 0x7f5817c00000 [pid 8461] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8460] ioctl(4, LOOP_SET_FD, 3 [pid 8458] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8456] <... futex resumed>) = 1 [pid 8455] <... futex resumed>) = 0 [pid 8464] rt_sigprocmask(SIG_SETMASK, [], [pid 8458] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8461] <... futex resumed>) = 0 [pid 8455] exit_group(0 [pid 8464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8461] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8458] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8457] <... futex resumed>) = 0 [pid 8458] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8457] exit_group(0 [pid 8458] <... futex resumed>) = ? [pid 8457] <... exit_group resumed>) = ? [pid 8458] +++ exited with 0 +++ [pid 8457] +++ exited with 0 +++ [pid 8455] <... exit_group resumed>) = ? [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8457, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8456] +++ exited with 0 +++ [pid 8464] memfd_create("syzkaller", 0 [pid 8455] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8455, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8464] <... memfd_create resumed>) = 3 [pid 8460] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8460] close(3 [pid 5063] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8464] <... mmap resumed>) = 0x7f5817c00000 [pid 8460] <... close resumed>) = 0 [pid 8463] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 8460] close(4 [pid 5063] newfstatat(3, "", [pid 8460] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 304.726193][ T8460] loop3: detected capacity change from 0 to 4096 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8460] mkdir("./file0", 0777 [pid 5063] getdents64(3, [pid 8463] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8460] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8460] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./334/binderfs", [pid 5060] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./334/binderfs" [pid 5060] unlink("./340/binderfs") = 0 [pid 5060] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8463] munmap(0x7f5817c00000, 138412032 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8463] <... munmap resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8463] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8463] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 4 [pid 8464] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8463] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = 0 [ 304.792126][ T8460] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5060] newfstatat(4, "", [pid 8463] <... ioctl resumed>) = 0 [pid 8460] <... mount resumed>) = 0 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8463] close(3 [pid 8460] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./334/file0", [pid 5060] getdents64(4, [pid 8463] <... close resumed>) = 0 [pid 8460] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8463] close(4 [pid 8460] <... chdir resumed>) = 0 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 8464] <... write resumed>) = 2097152 [pid 8463] <... close resumed>) = 0 [pid 8460] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8460] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] close(4 [pid 8464] munmap(0x7f5817c00000, 138412032 [pid 8460] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 8460] <... futex resumed>) = 1 [pid 8459] <... futex resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 8460] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8459] exit_group(0 [pid 5060] rmdir("./340/file0" [pid 8460] <... futex resumed>) = ? [pid 8459] <... exit_group resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8463] mkdir("./file0", 0777 [pid 8460] +++ exited with 0 +++ [pid 8459] +++ exited with 0 +++ [pid 5063] getdents64(4, [pid 5060] getdents64(3, [pid 8464] <... munmap resumed>) = 0 [pid 8463] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8463] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8459, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5060] close(3 [pid 5062] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./340" [pid 5062] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8464] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [ 304.832558][ T8463] loop0: detected capacity change from 0 to 4096 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8464] <... openat resumed>) = 4 [pid 5063] close(4 [pid 5062] getdents64(3, [pid 5060] mkdir("./341", 0777 [pid 8464] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 8464] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./336/binderfs", [pid 5060] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] unlink("./336/binderfs") = 0 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8464] close(3 [pid 5063] rmdir("./334/file0" [pid 8464] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8464] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8464] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8464] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./336/file0", [pid 8464] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./334" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8464] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] mkdir("./335", 0777 [pid 5062] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [ 304.874745][ T8463] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 304.884849][ T8464] loop2: detected capacity change from 0 to 4096 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./336/file0") = 0 [pid 8463] <... mount resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(3) = 0 [pid 5062] rmdir("./336" [pid 8463] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./337", 0777 [pid 8463] chdir("./file0") = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8463] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8463] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 8463] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8463] <... futex resumed>) = 1 [pid 8462] <... futex resumed>) = 0 [pid 8463] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8462] exit_group(0) = ? [pid 8463] <... futex resumed>) = ? [pid 8463] +++ exited with 0 +++ [pid 8462] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8462, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5059] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 304.932626][ T8464] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] close(3 [pid 5059] newfstatat(AT_FDCWD, "./339/binderfs", [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./339/binderfs") = 0 [pid 5059] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8465 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8465 [pid 8465] set_robust_list(0x5555567436a0, 24 [pid 8464] <... mount resumed>) = 0 [pid 8465] <... set_robust_list resumed>) = 0 [pid 8464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8465] chdir("./341" [pid 8464] <... openat resumed>) = 3 [pid 8465] <... chdir resumed>) = 0 [pid 8464] chdir("./file0" [pid 5059] <... umount2 resumed>) = 0 [pid 8464] <... chdir resumed>) = 0 [pid 8464] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./339/file0", [pid 8465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8464] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./339/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8464] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8465] <... prctl resumed>) = 0 [pid 8465] setpgid(0, 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./339" [pid 8465] <... setpgid resumed>) = 0 [pid 8464] <... futex resumed>) = 1 [pid 8461] <... futex resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8461] exit_group(0 [pid 5059] mkdir("./340", 0777 [pid 8461] <... exit_group resumed>) = ? [pid 5059] <... mkdir resumed>) = 0 [pid 8465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3) = 0 [pid 8465] <... openat resumed>) = 3 [pid 8464] +++ exited with 0 +++ [pid 8461] +++ exited with 0 +++ [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8465] write(3, "1000", 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8461, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] <... openat resumed>) = 3 [pid 8465] <... write resumed>) = 4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8465] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8466 [pid 8465] <... close resumed>) = 0 [pid 5061] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8465] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8465] <... symlink resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 8465] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8465] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, ./strace-static-x86_64: Process 8466 attached NULL, 8) = 0 [pid 5061] getdents64(3, [pid 8466] set_robust_list(0x5555567436a0, 24 [pid 8465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8466] <... set_robust_list resumed>) = 0 [pid 8465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8466] chdir("./335" [pid 8465] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8466] <... chdir resumed>) = 0 [pid 8465] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] newfstatat(AT_FDCWD, "./337/binderfs", [pid 8466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8466] <... prctl resumed>) = 0 [pid 8465] <... mprotect resumed>) = 0 [pid 5061] unlink("./337/binderfs" [pid 8466] setpgid(0, 0 [pid 8465] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... unlink resumed>) = 0 [pid 8465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8466] <... setpgid resumed>) = 0 [pid 8466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8465] <... clone3 resumed> => {parent_tid=[8467]}, 88) = 8467 ./strace-static-x86_64: Process 8467 attached [pid 8467] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8466] <... openat resumed>) = 3 [pid 8465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8467] <... rseq resumed>) = 0 [pid 8467] set_robust_list(0x7f58200ee9a0, 24 [pid 8465] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8467] <... set_robust_list resumed>) = 0 [pid 8466] write(3, "1000", 4 [pid 8465] <... futex resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8467] rt_sigprocmask(SIG_SETMASK, [], [pid 8465] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8466] <... write resumed>) = 4 [pid 8466] close(3) = 0 [pid 8466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8466] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8466] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8466] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] newfstatat(AT_FDCWD, "./337/file0", [pid 8467] memfd_create("syzkaller", 0 [pid 8466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8466] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8466] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8466] <... mprotect resumed>) = 0 [pid 5062] close(3 [pid 5061] <... openat resumed>) = 4 [pid 8466] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8467] <... memfd_create resumed>) = 3 [pid 8466] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8466] <... clone3 resumed> => {parent_tid=[8468]}, 88) = 8468 [pid 8466] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 ./strace-static-x86_64: Process 8468 attached [pid 8467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] rmdir("./337/file0" [pid 8468] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8466] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... rmdir resumed>) = 0 [pid 8467] <... mmap resumed>) = 0x7f5817c00000 ./strace-static-x86_64: Process 8469 attached [pid 8469] set_robust_list(0x5555567436a0, 24 [pid 8468] <... rseq resumed>) = 0 [pid 8466] <... futex resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8469 [pid 5061] getdents64(3, [pid 8468] set_robust_list(0x7f58200ee9a0, 24 [pid 8466] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8468] <... set_robust_list resumed>) = 0 [pid 5061] close(3 [pid 8468] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... close resumed>) = 0 [pid 8468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] rmdir("./337" [pid 8468] memfd_create("syzkaller", 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./338", 0777 [pid 8469] <... set_robust_list resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8469] chdir("./337" [pid 5061] <... openat resumed>) = 3 [pid 5059] <... ioctl resumed>) = 0 [pid 8469] <... chdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8468] <... memfd_create resumed>) = 3 [pid 8468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8469] <... prctl resumed>) = 0 [pid 8469] setpgid(0, 0 [pid 5059] close(3 [pid 8469] <... setpgid resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8470 [pid 8469] <... openat resumed>) = 3 [pid 8469] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 8470 attached [pid 8470] set_robust_list(0x5555567436a0, 24) = 0 [pid 8470] chdir("./340") = 0 [pid 8470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8470] setpgid(0, 0) = 0 [pid 8470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8469] close(3 [pid 8470] write(3, "1000", 4) = 4 [pid 8469] <... close resumed>) = 0 [pid 8469] symlink("/dev/binderfs", "./binderfs" [pid 8470] close(3) = 0 [pid 8470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8469] <... symlink resumed>) = 0 [pid 8468] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8467] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8469] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8470] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8469] <... futex resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8470] <... futex resumed>) = 0 [pid 8470] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8470] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8469] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8469] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8469] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 8471 attached [pid 8470] <... clone3 resumed> => {parent_tid=[8471]}, 88) = 8471 [pid 8471] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8470] rt_sigprocmask(SIG_SETMASK, [], [pid 8469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8471] <... rseq resumed>) = 0 [pid 8470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8467] <... write resumed>) = 2097152 [pid 5061] close(3 [pid 8471] set_robust_list(0x7f58200ee9a0, 24 [pid 8470] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8469] <... mmap resumed>) = 0x7f58200ce000 [pid 8467] munmap(0x7f5817c00000, 138412032 [pid 8471] <... set_robust_list resumed>) = 0 [pid 8470] <... futex resumed>) = 0 [pid 8469] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... close resumed>) = 0 [pid 8471] rt_sigprocmask(SIG_SETMASK, [], [pid 8470] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8469] <... mprotect resumed>) = 0 [pid 8471] memfd_create("syzkaller", 0 [pid 8469] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 8472 attached [pid 8471] <... memfd_create resumed>) = 3 [pid 8469] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8467] <... munmap resumed>) = 0 [pid 8472] set_robust_list(0x5555567436a0, 24 [pid 8471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8472] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8473 attached [pid 8471] <... mmap resumed>) = 0x7f5817c00000 [pid 8473] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8468] <... write resumed>) = 2097152 [pid 8473] <... rseq resumed>) = 0 [pid 8472] chdir("./338" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8472 [pid 8472] <... chdir resumed>) = 0 [pid 8473] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8473] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8469] <... clone3 resumed> => {parent_tid=[8473]}, 88) = 8473 [pid 8472] <... prctl resumed>) = 0 [pid 8469] rt_sigprocmask(SIG_SETMASK, [], [pid 8472] setpgid(0, 0 [pid 8469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8472] <... setpgid resumed>) = 0 [pid 8469] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8468] munmap(0x7f5817c00000, 138412032 [pid 8473] <... futex resumed>) = 0 [pid 8472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8469] <... futex resumed>) = 1 [pid 8467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8473] memfd_create("syzkaller", 0 [pid 8468] <... munmap resumed>) = 0 [pid 8467] <... openat resumed>) = 4 [pid 8473] <... memfd_create resumed>) = 3 [pid 8472] <... openat resumed>) = 3 [pid 8469] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8472] write(3, "1000", 4) = 4 [pid 8471] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8468] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8467] ioctl(4, LOOP_SET_FD, 3 [pid 8472] close(3) = 0 [pid 8472] symlink("/dev/binderfs", "./binderfs" [pid 8468] <... openat resumed>) = 4 [pid 8468] ioctl(4, LOOP_SET_FD, 3 [pid 8472] <... symlink resumed>) = 0 [pid 8468] <... ioctl resumed>) = 0 [pid 8472] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8467] <... ioctl resumed>) = 0 [pid 8472] <... futex resumed>) = 0 [pid 8472] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8468] close(3 [pid 8467] close(3 [pid 8468] <... close resumed>) = 0 [pid 8467] <... close resumed>) = 0 [pid 8472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8468] close(4 [pid 8467] close(4 [pid 8472] <... mmap resumed>) = 0x7f58200ce000 [pid 8467] <... close resumed>) = 0 [pid 8472] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8468] <... close resumed>) = 0 [pid 8467] mkdir("./file0", 0777 [pid 8473] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8472] <... mprotect resumed>) = 0 [pid 8468] mkdir("./file0", 0777 [pid 8467] <... mkdir resumed>) = 0 [pid 8472] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8468] <... mkdir resumed>) = 0 [pid 8467] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8468] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8472] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8474 attached [pid 8474] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [ 305.269655][ T8468] loop4: detected capacity change from 0 to 4096 [ 305.278509][ T8467] loop1: detected capacity change from 0 to 4096 [ 305.307116][ T8467] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8474] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8472] <... clone3 resumed> => {parent_tid=[8474]}, 88) = 8474 [pid 8474] rt_sigprocmask(SIG_SETMASK, [], [pid 8472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8472] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8474] memfd_create("syzkaller", 0 [pid 8472] <... futex resumed>) = 0 [pid 8472] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8471] <... write resumed>) = 2097152 [pid 8474] <... memfd_create resumed>) = 3 [pid 8474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8471] munmap(0x7f5817c00000, 138412032) = 0 [pid 8471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 305.319246][ T8468] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8471] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8471] close(3) = 0 [pid 8471] close(4) = 0 [pid 8471] mkdir("./file0", 0777 [pid 8468] <... mount resumed>) = 0 [ 305.366604][ T8471] loop0: detected capacity change from 0 to 4096 [pid 8468] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8471] <... mkdir resumed>) = 0 [pid 8468] <... openat resumed>) = 3 [pid 8471] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8468] chdir("./file0") = 0 [pid 8468] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8468] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8467] <... mount resumed>) = 0 [pid 8468] <... futex resumed>) = 1 [pid 8466] <... futex resumed>) = 0 [pid 8468] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8466] exit_group(0 [pid 8473] <... write resumed>) = 2097152 [pid 8468] <... futex resumed>) = ? [pid 8467] <... openat resumed>) = 3 [pid 8466] <... exit_group resumed>) = ? [pid 8473] munmap(0x7f5817c00000, 138412032 [pid 8468] +++ exited with 0 +++ [pid 8466] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8466, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8467] chdir("./file0") = 0 [pid 8467] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8467] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8467] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8465] <... futex resumed>) = 0 [pid 8465] exit_group(0 [pid 5063] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8467] <... futex resumed>) = ? [pid 8465] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8473] <... munmap resumed>) = 0 [pid 8467] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8465] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 8473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(3, "", [pid 8473] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8465, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8473] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(3, [pid 5060] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./341/binderfs", [pid 5063] newfstatat(AT_FDCWD, "./335/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./341/binderfs" [pid 5063] unlink("./335/binderfs" [pid 5060] <... unlink resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8473] <... ioctl resumed>) = 0 [pid 8474] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8473] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8473] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8473] close(4 [pid 5060] <... openat resumed>) = 4 [pid 8473] <... close resumed>) = 0 [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [ 305.410175][ T8471] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 305.443658][ T8473] loop3: detected capacity change from 0 to 4096 [pid 8473] mkdir("./file0", 0777) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./335/file0", [pid 5060] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8473] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5060] close(4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] rmdir("./341/file0" [pid 5063] close(4) = 0 [pid 5063] rmdir("./335/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./335" [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./336", 0777 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./341") = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] mkdir("./342", 0777) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8474] <... write resumed>) = 2097152 [pid 8474] munmap(0x7f5817c00000, 138412032 [pid 8471] <... mount resumed>) = 0 [pid 8471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8471] chdir("./file0") = 0 [pid 8471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8471] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8470] <... futex resumed>) = 0 [pid 8470] exit_group(0) = ? [pid 8471] <... futex resumed>) = ? [pid 8474] <... munmap resumed>) = 0 [pid 8471] +++ exited with 0 +++ [pid 8470] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8470, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8474] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5059] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8474] ioctl(4, LOOP_SET_FD, 3 [pid 5059] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 305.503354][ T8473] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./340/binderfs") = 0 [pid 8474] <... ioctl resumed>) = 0 [pid 8474] close(3 [pid 5059] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8474] close(4) = 0 [pid 5059] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] mkdir("./file0", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 8474] <... mkdir resumed>) = 0 [pid 8473] <... mount resumed>) = 0 [ 305.564460][ T8474] loop2: detected capacity change from 0 to 4096 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8474] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 8473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8473] <... openat resumed>) = 3 [pid 5059] close(4 [pid 8473] chdir("./file0" [pid 5059] <... close resumed>) = 0 [pid 8473] <... chdir resumed>) = 0 [pid 5059] rmdir("./340/file0" [pid 8473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 8473] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8473] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(3, [pid 8473] <... futex resumed>) = 1 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8473] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] close(3) = 0 [pid 5059] rmdir("./340" [pid 5063] <... ioctl resumed>) = 0 [pid 8469] <... futex resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./341", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8469] exit_group(0 [pid 5063] close(3 [pid 8473] <... futex resumed>) = ? [pid 8469] <... exit_group resumed>) = ? [pid 8473] +++ exited with 0 +++ [pid 5060] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8469] +++ exited with 0 +++ [pid 5060] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8469, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5062] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 5060] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8475 attached [pid 5062] getdents64(3, [pid 8475] set_robust_list(0x5555567436a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8475 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./337/binderfs", ./strace-static-x86_64: Process 8476 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8475] <... set_robust_list resumed>) = 0 [pid 5062] unlink("./337/binderfs" [pid 8476] set_robust_list(0x5555567436a0, 24 [pid 8475] chdir("./336" [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8476 [pid 8475] <... chdir resumed>) = 0 [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... umount2 resumed>) = 0 [pid 8475] <... prctl resumed>) = 0 [pid 8475] setpgid(0, 0) = 0 [pid 8476] <... set_robust_list resumed>) = 0 [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 305.612213][ T8474] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8476] chdir("./342" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8476] <... chdir resumed>) = 0 [pid 8476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8476] setpgid(0, 0 [pid 5062] newfstatat(AT_FDCWD, "./337/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8475] write(3, "1000", 4 [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8475] <... write resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8475] close(3 [pid 5062] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8475] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8475] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(4, "", [pid 8476] <... setpgid resumed>) = 0 [pid 8475] <... symlink resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8475] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 8476] <... openat resumed>) = 3 [pid 8475] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8475] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] getdents64(4, [pid 8475] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8476] write(3, "1000", 4 [pid 8475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] close(4 [pid 8475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 8475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] rmdir("./337/file0" [pid 8476] <... write resumed>) = 4 [pid 8475] <... mmap resumed>) = 0x7f58200ce000 [pid 8476] close(3) = 0 [pid 8475] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8474] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8476] symlink("/dev/binderfs", "./binderfs" [pid 8475] <... mprotect resumed>) = 0 [pid 8474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8476] <... symlink resumed>) = 0 [pid 8475] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8474] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 8476] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8475] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8474] chdir("./file0" [pid 8476] <... futex resumed>) = 0 [pid 8475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8474] <... chdir resumed>) = 0 [pid 5062] close(3./strace-static-x86_64: Process 8477 attached [pid 8476] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8474] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 8477] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8476] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8475] <... clone3 resumed> => {parent_tid=[8477]}, 88) = 8477 [pid 5062] rmdir("./337" [pid 8476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8474] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... ioctl resumed>) = 0 [pid 8476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8474] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8477] <... rseq resumed>) = 0 [pid 8477] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8477] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8476] <... mmap resumed>) = 0x7f58200ce000 [pid 8475] rt_sigprocmask(SIG_SETMASK, [], [pid 8474] <... futex resumed>) = 1 [pid 8472] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8476] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8474] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8472] exit_group(0 [pid 5062] mkdir("./338", 0777 [pid 8476] <... mprotect resumed>) = 0 [pid 8474] <... futex resumed>) = ? [pid 8472] <... exit_group resumed>) = ? [pid 5062] <... mkdir resumed>) = 0 [pid 8476] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8475] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8474] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8477] <... futex resumed>) = 0 [pid 8475] <... futex resumed>) = 1 [pid 5062] <... openat resumed>) = 3 [pid 8477] memfd_create("syzkaller", 0 [pid 8475] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8472] +++ exited with 0 +++ [pid 8476] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8472, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] close(3./strace-static-x86_64: Process 8478 attached [pid 8477] <... memfd_create resumed>) = 3 [pid 8476] <... clone3 resumed> => {parent_tid=[8478]}, 88) = 8478 [pid 8478] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] <... close resumed>) = 0 [pid 8476] rt_sigprocmask(SIG_SETMASK, [], [pid 8478] <... rseq resumed>) = 0 [pid 8477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8477] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8478] set_robust_list(0x7f58200ee9a0, 24 [pid 8476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8478] <... set_robust_list resumed>) = 0 [pid 8476] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8478] rt_sigprocmask(SIG_SETMASK, [], [pid 8476] <... futex resumed>) = 0 [pid 8478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8476] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8478] memfd_create("syzkaller", 0 [pid 5061] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8478] <... memfd_create resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8479 [pid 5061] newfstatat(AT_FDCWD, "./338/binderfs", ./strace-static-x86_64: Process 8479 attached [pid 8478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8479] set_robust_list(0x5555567436a0, 24) = 0 [pid 8478] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] unlink("./338/binderfs" [pid 8479] chdir("./341" [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8479] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8479] setpgid(0, 0 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8479] <... setpgid resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8479] <... openat resumed>) = 3 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./338/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./338") = 0 [pid 8479] write(3, "1000", 4 [pid 8478] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] mkdir("./339", 0777 [pid 8479] <... write resumed>) = 4 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8479] close(3 [pid 5061] <... openat resumed>) = 3 [pid 8479] <... close resumed>) = 0 [pid 8479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8479] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8479] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5062] close(3 [pid 8479] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8480 ./strace-static-x86_64: Process 8480 attached [pid 8480] set_robust_list(0x5555567436a0, 24) = 0 [pid 8479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8480] chdir("./338"./strace-static-x86_64: Process 8481 attached [pid 8477] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8479] <... clone3 resumed> => {parent_tid=[8481]}, 88) = 8481 [pid 8478] <... write resumed>) = 2097152 [pid 8479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8478] munmap(0x7f5817c00000, 138412032 [pid 8481] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8480] <... chdir resumed>) = 0 [pid 8479] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8481] <... rseq resumed>) = 0 [pid 8480] <... prctl resumed>) = 0 [pid 8481] set_robust_list(0x7f58200ee9a0, 24 [pid 8480] setpgid(0, 0 [pid 8479] <... futex resumed>) = 0 [pid 8481] <... set_robust_list resumed>) = 0 [pid 8480] <... setpgid resumed>) = 0 [pid 8481] rt_sigprocmask(SIG_SETMASK, [], [pid 8480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8479] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8480] <... openat resumed>) = 3 [pid 8481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8480] write(3, "1000", 4 [pid 8481] memfd_create("syzkaller", 0 [pid 8480] <... write resumed>) = 4 [pid 8480] close(3) = 0 [pid 8480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8478] <... munmap resumed>) = 0 [pid 8480] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8478] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8480] <... futex resumed>) = 0 [pid 8478] <... openat resumed>) = 4 [pid 8480] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8478] ioctl(4, LOOP_SET_FD, 3 [pid 8480] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8481] <... memfd_create resumed>) = 3 [pid 8480] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8481] <... mmap resumed>) = 0x7f5817c00000 [pid 8480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8480] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8480] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8478] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8482 attached [pid 8480] <... clone3 resumed> => {parent_tid=[8482]}, 88) = 8482 [pid 8482] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8478] close(3 [pid 8482] <... rseq resumed>) = 0 [pid 8480] rt_sigprocmask(SIG_SETMASK, [], [pid 8478] <... close resumed>) = 0 [pid 8482] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8478] close(4 [pid 8482] rt_sigprocmask(SIG_SETMASK, [], [pid 8480] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8478] <... close resumed>) = 0 [pid 8482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8480] <... futex resumed>) = 0 [pid 8478] mkdir("./file0", 0777 [pid 8480] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8482] memfd_create("syzkaller", 0 [pid 8478] <... mkdir resumed>) = 0 [pid 8477] <... write resumed>) = 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 8482] <... memfd_create resumed>) = 3 [pid 8478] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] close(3 [pid 8482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8477] munmap(0x7f5817c00000, 138412032 [pid 5061] <... close resumed>) = 0 [pid 8482] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8477] <... munmap resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8483 [pid 8477] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 8483 attached [pid 8483] set_robust_list(0x5555567436a0, 24 [pid 8477] <... openat resumed>) = 4 [ 305.870742][ T8478] loop1: detected capacity change from 0 to 4096 [ 305.909876][ T8478] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8477] ioctl(4, LOOP_SET_FD, 3 [pid 8483] <... set_robust_list resumed>) = 0 [pid 8483] chdir("./339") = 0 [pid 8483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8483] setpgid(0, 0 [pid 8481] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8477] <... ioctl resumed>) = 0 [pid 8483] <... setpgid resumed>) = 0 [pid 8483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8477] close(3 [pid 8483] <... openat resumed>) = 3 [pid 8483] write(3, "1000", 4 [pid 8477] <... close resumed>) = 0 [pid 8483] <... write resumed>) = 4 [pid 8477] close(4) = 0 [pid 8483] close(3 [pid 8477] mkdir("./file0", 0777 [pid 8483] <... close resumed>) = 0 [pid 8482] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8477] <... mkdir resumed>) = 0 [pid 8483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8483] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8483] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8477] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8483] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 305.941357][ T8477] loop4: detected capacity change from 0 to 4096 [pid 8483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8483] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8478] <... mount resumed>) = 0 [pid 8483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 8484 attached [pid 8478] chdir("./file0" [pid 8484] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8483] <... clone3 resumed> => {parent_tid=[8484]}, 88) = 8484 [pid 8478] <... chdir resumed>) = 0 [pid 8484] <... rseq resumed>) = 0 [pid 8483] rt_sigprocmask(SIG_SETMASK, [], [pid 8484] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8478] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8484] rt_sigprocmask(SIG_SETMASK, [], [pid 8483] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8478] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8483] <... futex resumed>) = 0 [pid 8478] <... futex resumed>) = 1 [pid 8476] <... futex resumed>) = 0 [pid 8483] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8478] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8476] exit_group(0 [pid 8484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8481] <... write resumed>) = 2097152 [pid 8478] <... futex resumed>) = ? [pid 8476] <... exit_group resumed>) = ? [pid 8484] memfd_create("syzkaller", 0 [pid 8481] munmap(0x7f5817c00000, 138412032 [pid 8478] +++ exited with 0 +++ [pid 8476] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8476, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8484] <... memfd_create resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 8484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8482] <... write resumed>) = 2097152 [pid 8481] <... munmap resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8484] <... mmap resumed>) = 0x7f5817c00000 [ 305.995284][ T8477] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8481] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8482] munmap(0x7f5817c00000, 138412032 [pid 5060] getdents64(3, [pid 8481] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8482] <... munmap resumed>) = 0 [pid 8481] ioctl(4, LOOP_SET_FD, 3 [pid 5060] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8481] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8482] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5060] newfstatat(AT_FDCWD, "./342/binderfs", [pid 8482] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8481] close(3 [pid 8477] <... mount resumed>) = 0 [pid 5060] unlink("./342/binderfs" [pid 8481] <... close resumed>) = 0 [pid 8477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... unlink resumed>) = 0 [pid 8481] close(4 [pid 8477] <... openat resumed>) = 3 [pid 5060] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8477] chdir("./file0") = 0 [pid 8482] <... ioctl resumed>) = 0 [pid 8484] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8481] <... close resumed>) = 0 [pid 8477] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... umount2 resumed>) = 0 [pid 8482] close(3 [pid 8481] mkdir("./file0", 0777 [pid 8477] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8482] <... close resumed>) = 0 [pid 8481] <... mkdir resumed>) = 0 [pid 8477] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8482] close(4 [pid 8477] <... futex resumed>) = 1 [pid 8475] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./342/file0", [pid 8482] <... close resumed>) = 0 [pid 8477] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8475] exit_group(0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 306.072739][ T8481] loop0: detected capacity change from 0 to 4096 [ 306.090326][ T8482] loop3: detected capacity change from 0 to 4096 [pid 8482] mkdir("./file0", 0777 [pid 8481] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8477] <... futex resumed>) = ? [pid 8475] <... exit_group resumed>) = ? [pid 5060] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8482] <... mkdir resumed>) = 0 [pid 8477] +++ exited with 0 +++ [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8482] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8475] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8475, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./342/file0") = 0 [pid 5063] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5060] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5060] close(3) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./336/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] rmdir("./342") = 0 [pid 5060] mkdir("./343", 0777 [pid 5063] unlink("./336/binderfs" [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./336/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./336/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [ 306.135130][ T8481] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 306.147015][ T8482] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5063] close(3) = 0 [pid 5063] rmdir("./336") = 0 [pid 5063] mkdir("./337", 0777) = 0 [pid 8484] <... write resumed>) = 2097152 [pid 8484] munmap(0x7f5817c00000, 138412032 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8484] <... munmap resumed>) = 0 [pid 8484] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8481] <... mount resumed>) = 0 [pid 8481] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8484] <... openat resumed>) = 4 [pid 8481] <... openat resumed>) = 3 [pid 8484] ioctl(4, LOOP_SET_FD, 3 [pid 8481] chdir("./file0") = 0 [pid 8481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8484] <... ioctl resumed>) = 0 [pid 8481] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8484] close(3 [pid 8481] <... futex resumed>) = 1 [pid 8479] <... futex resumed>) = 0 [pid 8481] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8484] <... close resumed>) = 0 [pid 8479] exit_group(0 [pid 8484] close(4) = 0 [pid 8482] <... mount resumed>) = 0 [pid 8481] <... futex resumed>) = ? [pid 8479] <... exit_group resumed>) = ? [pid 8484] mkdir("./file0", 0777 [pid 8481] +++ exited with 0 +++ [pid 8484] <... mkdir resumed>) = 0 [pid 8479] +++ exited with 0 +++ [pid 5063] <... ioctl resumed>) = 0 [pid 8484] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8479, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 8482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8482] chdir("./file0") = 0 [pid 8482] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 8482] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8482] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] <... ioctl resumed>) = 0 [pid 8482] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8485 ./strace-static-x86_64: Process 8485 attached [pid 8485] set_robust_list(0x5555567436a0, 24) = 0 [pid 8485] chdir("./343") = 0 [pid 8485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8485] setpgid(0, 0) = 0 [pid 8485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8480] <... futex resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8485] <... openat resumed>) = 3 [pid 8485] write(3, "1000", 4) = 4 [pid 8485] close(3) = 0 [pid 8485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8480] exit_group(0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8486 [pid 8480] <... exit_group resumed>) = ? [pid 5059] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8486 attached [pid 8485] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8482] <... futex resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8485] <... futex resumed>) = 0 [pid 8482] +++ exited with 0 +++ [pid 8480] +++ exited with 0 +++ [pid 8486] set_robust_list(0x5555567436a0, 24 [pid 8485] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8486] <... set_robust_list resumed>) = 0 [pid 8485] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8486] chdir("./337" [pid 8485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8486] <... chdir resumed>) = 0 [pid 8485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8486] setpgid(0, 0) = 0 [pid 8485] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8485] <... mprotect resumed>) = 0 [pid 8486] <... openat resumed>) = 3 [pid 8486] write(3, "1000", 4) = 4 [pid 8485] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8486] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8480, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5059] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8486] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8486] symlink("/dev/binderfs", "./binderfs" [pid 8485] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] newfstatat(3, "", [pid 8485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [ 306.250550][ T8484] loop2: detected capacity change from 0 to 4096 [ 306.285556][ T8484] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8487 attached [pid 8486] <... symlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8487] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8486] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8485] <... clone3 resumed> => {parent_tid=[8487]}, 88) = 8487 [pid 8487] <... rseq resumed>) = 0 [pid 8486] <... futex resumed>) = 0 [pid 8485] rt_sigprocmask(SIG_SETMASK, [], [pid 8487] set_robust_list(0x7f58200ee9a0, 24 [pid 5062] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(3, [pid 8487] <... set_robust_list resumed>) = 0 [pid 8486] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8487] rt_sigprocmask(SIG_SETMASK, [], [pid 8486] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8485] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8485] <... futex resumed>) = 0 [pid 5059] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8487] memfd_create("syzkaller", 0 [pid 8486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8485] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] newfstatat(3, "", [pid 8486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8486] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8487] <... memfd_create resumed>) = 3 [pid 8486] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(3, [pid 8487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8486] <... mprotect resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8487] <... mmap resumed>) = 0x7f5817c00000 [pid 8486] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] unlink("./341/binderfs" [pid 8486] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... unlink resumed>) = 0 [pid 8486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] newfstatat(AT_FDCWD, "./338/binderfs", ./strace-static-x86_64: Process 8488 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./338/binderfs" [pid 8488] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8486] <... clone3 resumed> => {parent_tid=[8488]}, 88) = 8488 [pid 8488] <... rseq resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8488] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8488] <... set_robust_list resumed>) = 0 [pid 8488] rt_sigprocmask(SIG_SETMASK, [], [pid 8486] rt_sigprocmask(SIG_SETMASK, [], [pid 8488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8488] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8486] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = 0 [pid 8486] <... futex resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./341/file0", [pid 8486] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8488] memfd_create("syzkaller", 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8488] <... memfd_create resumed>) = 3 [pid 5062] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 8488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(4, "", [pid 8488] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 8484] <... mount resumed>) = 0 [pid 5062] getdents64(4, [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(4, [pid 5062] close(4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] close(4 [pid 5062] rmdir("./338/file0" [pid 8484] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 8484] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 8484] <... chdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5059] rmdir("./341/file0") = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5062] close(3 [pid 8484] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8484] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./338" [pid 8484] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] close(3 [pid 8484] <... futex resumed>) = 1 [pid 8483] <... futex resumed>) = 0 [pid 5062] mkdir("./339", 0777 [pid 8484] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5059] rmdir("./341" [pid 8483] exit_group(0) = ? [pid 5059] <... rmdir resumed>) = 0 [pid 8484] <... futex resumed>) = ? [pid 8484] +++ exited with 0 +++ [pid 5059] mkdir("./342", 0777 [pid 8488] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8483] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8483, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... restart_syscall resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./339/binderfs") = 0 [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8487] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8488] <... write resumed>) = 2097152 [pid 8487] <... write resumed>) = 2097152 [pid 5061] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8488] munmap(0x7f5817c00000, 138412032 [pid 8487] munmap(0x7f5817c00000, 138412032 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8488] <... munmap resumed>) = 0 [pid 8487] <... munmap resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8488] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8487] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] close(4 [pid 8488] <... openat resumed>) = 4 [pid 8487] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./339/file0" [pid 8488] ioctl(4, LOOP_SET_FD, 3 [pid 8487] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8487] <... ioctl resumed>) = 0 [pid 8488] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8488] close(3 [pid 5061] close(3 [pid 8488] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8488] close(4 [pid 5061] rmdir("./339" [pid 8488] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8488] mkdir("./file0", 0777 [pid 5061] mkdir("./340", 0777 [pid 8488] <... mkdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] close(3) = 0 [pid 5062] close(3 [ 306.496933][ T8488] loop4: detected capacity change from 0 to 4096 [ 306.512454][ T8487] loop1: detected capacity change from 0 to 4096 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8488] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8487] close(3 [pid 5062] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 8487] <... close resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8489 [pid 8487] close(4) = 0 [pid 8487] mkdir("./file0", 0777 [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8489 attached [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8490 [pid 8487] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8490 attached [pid 8490] set_robust_list(0x5555567436a0, 24) = 0 [pid 8487] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8489] set_robust_list(0x5555567436a0, 24) = 0 [pid 8489] chdir("./342") = 0 [pid 8490] chdir("./339" [pid 8489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8489] setpgid(0, 0) = 0 [pid 8489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8489] write(3, "1000", 4) = 4 [pid 8489] close(3) = 0 [pid 8489] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8489] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8489] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8489] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8490] <... chdir resumed>) = 0 [pid 8489] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8490] setpgid(0, 0 [pid 8489] <... mprotect resumed>) = 0 [pid 8490] <... setpgid resumed>) = 0 [pid 8490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8490] write(3, "1000", 4) = 4 [pid 8490] close(3 [pid 8489] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8490] <... close resumed>) = 0 [pid 8488] <... mount resumed>) = 0 [pid 8489] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8490] symlink("/dev/binderfs", "./binderfs" [pid 8489] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8488] chdir("./file0") = 0 [pid 8488] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8489] <... clone3 resumed> => {parent_tid=[8491]}, 88) = 8491 [pid 8488] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8489] rt_sigprocmask(SIG_SETMASK, [], [pid 8488] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8491 attached [pid 8491] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8488] <... futex resumed>) = 1 [pid 8486] <... futex resumed>) = 0 [pid 8491] <... rseq resumed>) = 0 [pid 8489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8488] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8486] exit_group(0 [pid 8491] set_robust_list(0x7f58200ee9a0, 24 [pid 8489] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8488] <... futex resumed>) = ? [pid 8486] <... exit_group resumed>) = ? [pid 8491] <... set_robust_list resumed>) = 0 [pid 8489] <... futex resumed>) = 0 [ 306.541446][ T8488] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 306.559487][ T8487] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8488] +++ exited with 0 +++ [pid 8486] +++ exited with 0 +++ [pid 8491] rt_sigprocmask(SIG_SETMASK, [], [pid 8490] <... symlink resumed>) = 0 [pid 8489] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... ioctl resumed>) = 0 [pid 8491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8486, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5061] close(3 [pid 8491] memfd_create("syzkaller", 0 [pid 8490] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8490] <... futex resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8490] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8491] <... memfd_create resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8487] <... mount resumed>) = 0 [pid 8491] <... mmap resumed>) = 0x7f5817c00000 [pid 8490] <... mmap resumed>) = 0x7f58200ce000 [pid 8490] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8490] <... mprotect resumed>) = 0 [pid 8487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8490] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] newfstatat(3, "", ./strace-static-x86_64: Process 8492 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8492 [pid 8492] set_robust_list(0x5555567436a0, 24) = 0 [pid 5063] getdents64(3, [pid 8492] chdir("./340" [pid 8487] chdir("./file0" [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8490] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8492] <... chdir resumed>) = 0 [pid 8487] <... chdir resumed>) = 0 [pid 8492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8487] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8492] setpgid(0, 0./strace-static-x86_64: Process 8493 attached ) = 0 [pid 8490] <... clone3 resumed> => {parent_tid=[8493]}, 88) = 8493 [pid 8487] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8493] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8490] rt_sigprocmask(SIG_SETMASK, [], [pid 8487] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8493] <... rseq resumed>) = 0 [pid 8492] <... openat resumed>) = 3 [pid 8490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8487] <... futex resumed>) = 1 [pid 8485] <... futex resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8490] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8487] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8485] exit_group(0) = ? [pid 8492] write(3, "1000", 4) = 4 [pid 8492] close(3) = 0 [pid 8492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8490] <... futex resumed>) = 0 [pid 8487] <... futex resumed>) = ? [pid 8493] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8492] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8492] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8492] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8487] +++ exited with 0 +++ [pid 8485] +++ exited with 0 +++ [pid 8493] rt_sigprocmask(SIG_SETMASK, [], [pid 8492] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8490] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8492] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8485, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 8492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8494]}, 88) = 8494 ./strace-static-x86_64: Process 8494 attached [pid 8493] memfd_create("syzkaller", 0 [pid 8492] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] unlink("./337/binderfs" [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8494] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 8494] <... rseq resumed>) = 0 [pid 8493] <... memfd_create resumed>) = 3 [pid 8492] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8494] set_robust_list(0x7f58200ee9a0, 24 [pid 8493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8492] <... futex resumed>) = 0 [pid 8492] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = 0 [pid 8494] <... set_robust_list resumed>) = 0 [pid 5060] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8493] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8494] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 8494] memfd_create("syzkaller", 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8494] <... memfd_create resumed>) = 3 [pid 8494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8494] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./343/binderfs") = 0 [pid 5060] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./337/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8491] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./343/file0", [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5060] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5060] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5060] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5063] rmdir("./337/file0") = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5060] getdents64(4, [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] close(3 [pid 5060] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./337" [pid 5060] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] mkdir("./338", 0777 [pid 8494] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] rmdir("./343/file0" [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] getdents64(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./343" [pid 8493] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./344", 0777 [pid 8491] <... write resumed>) = 2097152 [pid 8491] munmap(0x7f5817c00000, 138412032 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8491] <... munmap resumed>) = 0 [pid 8491] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8494] <... write resumed>) = 2097152 [pid 8493] <... write resumed>) = 2097152 [pid 8494] munmap(0x7f5817c00000, 138412032) = 0 [pid 8493] munmap(0x7f5817c00000, 138412032 [pid 8491] <... openat resumed>) = 4 [pid 8491] ioctl(4, LOOP_SET_FD, 3 [pid 8493] <... munmap resumed>) = 0 [pid 8494] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8494] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8493] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 8493] <... openat resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 8493] ioctl(4, LOOP_SET_FD, 3 [pid 5060] close(3) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8491] <... ioctl resumed>) = 0 [pid 8491] close(3) = 0 [pid 8491] close(4) = 0 [pid 8491] mkdir("./file0", 0777 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8495 [pid 8491] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8496 attached ./strace-static-x86_64: Process 8495 attached [pid 8494] close(3 [pid 8493] <... ioctl resumed>) = 0 [pid 8495] set_robust_list(0x5555567436a0, 24 [pid 8496] set_robust_list(0x5555567436a0, 24 [pid 8495] <... set_robust_list resumed>) = 0 [pid 8494] <... close resumed>) = 0 [pid 8493] close(3 [pid 8491] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8496] <... set_robust_list resumed>) = 0 [pid 8495] chdir("./338" [ 306.851733][ T8491] loop0: detected capacity change from 0 to 4096 [ 306.864458][ T8494] loop2: detected capacity change from 0 to 4096 [ 306.880091][ T8493] loop3: detected capacity change from 0 to 4096 [pid 8494] close(4 [pid 8493] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8496 [pid 8496] chdir("./344" [pid 8495] <... chdir resumed>) = 0 [pid 8494] <... close resumed>) = 0 [pid 8493] close(4 [pid 8496] <... chdir resumed>) = 0 [pid 8495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8494] mkdir("./file0", 0777 [pid 8493] <... close resumed>) = 0 [pid 8496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8495] <... prctl resumed>) = 0 [pid 8496] <... prctl resumed>) = 0 [pid 8495] setpgid(0, 0 [pid 8494] <... mkdir resumed>) = 0 [pid 8493] mkdir("./file0", 0777 [pid 8496] setpgid(0, 0 [pid 8495] <... setpgid resumed>) = 0 [pid 8494] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8495] write(3, "1000", 4) = 4 [pid 8496] <... setpgid resumed>) = 0 [pid 8495] close(3) = 0 [pid 8496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8495] symlink("/dev/binderfs", "./binderfs" [pid 8493] <... mkdir resumed>) = 0 [pid 8495] <... symlink resumed>) = 0 [pid 8493] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8495] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8496] <... openat resumed>) = 3 [pid 8495] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8496] write(3, "1000", 4 [pid 8495] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8496] <... write resumed>) = 4 [pid 8495] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8496] close(3 [pid 8495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8496] <... close resumed>) = 0 [pid 8495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8496] symlink("/dev/binderfs", "./binderfs" [pid 8495] <... mmap resumed>) = 0x7f58200ce000 [pid 8496] <... symlink resumed>) = 0 [pid 8495] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8496] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8495] <... mprotect resumed>) = 0 [pid 8496] <... futex resumed>) = 0 [pid 8495] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8496] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8495] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8496] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8491] <... mount resumed>) = 0 [pid 8496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8495] <... clone3 resumed> => {parent_tid=[8497]}, 88) = 8497 ./strace-static-x86_64: Process 8497 attached [pid 8496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8495] rt_sigprocmask(SIG_SETMASK, [], [pid 8497] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8496] <... mmap resumed>) = 0x7f58200ce000 [pid 8497] <... rseq resumed>) = 0 [pid 8496] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8491] <... openat resumed>) = 3 [pid 8497] set_robust_list(0x7f58200ee9a0, 24 [pid 8496] <... mprotect resumed>) = 0 [pid 8495] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8491] chdir("./file0" [pid 8497] <... set_robust_list resumed>) = 0 [pid 8496] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8495] <... futex resumed>) = 0 [pid 8491] <... chdir resumed>) = 0 [pid 8497] rt_sigprocmask(SIG_SETMASK, [], [pid 8495] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8491] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8491] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8497] memfd_create("syzkaller", 0 [pid 8491] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8496] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8491] <... futex resumed>) = 1 [pid 8491] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 8498 attached [pid 8497] <... memfd_create resumed>) = 3 [pid 8489] <... futex resumed>) = 0 [pid 8498] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8496] <... clone3 resumed> => {parent_tid=[8498]}, 88) = 8498 [ 306.914733][ T8491] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 306.931157][ T8494] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 306.943070][ T8493] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8489] exit_group(0 [pid 8498] <... rseq resumed>) = 0 [pid 8497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8496] rt_sigprocmask(SIG_SETMASK, [], [pid 8491] <... futex resumed>) = ? [pid 8489] <... exit_group resumed>) = ? [pid 8498] set_robust_list(0x7f58200ee9a0, 24 [pid 8497] <... mmap resumed>) = 0x7f5817c00000 [pid 8496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8491] +++ exited with 0 +++ [pid 8498] <... set_robust_list resumed>) = 0 [pid 8496] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8489] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8489, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8498] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8498] memfd_create("syzkaller", 0 [pid 5059] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 8496] <... futex resumed>) = 0 [pid 8496] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 8498] <... memfd_create resumed>) = 3 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8498] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./342/binderfs") = 0 [pid 5059] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./342/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 8497] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8494] <... mount resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8493] <... mount resumed>) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 8494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 8494] <... openat resumed>) = 3 [pid 8493] <... openat resumed>) = 3 [pid 5059] rmdir("./342/file0" [pid 8494] chdir("./file0" [pid 5059] <... rmdir resumed>) = 0 [pid 8494] <... chdir resumed>) = 0 [pid 8493] chdir("./file0" [pid 8498] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8494] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8493] <... chdir resumed>) = 0 [pid 5059] getdents64(3, [pid 8494] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8493] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8493] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8493] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 8494] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8493] <... futex resumed>) = 1 [pid 8490] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8490] exit_group(0) = ? [pid 8494] <... futex resumed>) = 1 [pid 5059] rmdir("./342" [pid 8494] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8493] +++ exited with 0 +++ [pid 8490] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8490, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] <... rmdir resumed>) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8492] <... futex resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5059] mkdir("./343", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8492] exit_group(0) = ? [pid 8494] <... futex resumed>) = ? [pid 8498] <... write resumed>) = 2097152 [pid 8498] munmap(0x7f5817c00000, 138412032 [pid 5062] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8494] +++ exited with 0 +++ [pid 8492] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8492, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8498] <... munmap resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5061] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8498] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8498] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./339/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8498] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./340/binderfs", [pid 8497] <... write resumed>) = 2097152 [pid 8497] munmap(0x7f5817c00000, 138412032 [pid 8498] <... ioctl resumed>) = 0 [pid 5062] unlink("./339/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8498] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] unlink("./340/binderfs" [pid 8498] <... close resumed>) = 0 [pid 8498] close(4 [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 8498] <... close resumed>) = 0 [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8498] mkdir("./file0", 0777) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8498] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] <... umount2 resumed>) = 0 [pid 8497] <... munmap resumed>) = 0 [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8497] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./339/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./340/file0", [pid 8497] <... openat resumed>) = 4 [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8497] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./340/file0") = 0 [pid 5061] getdents64(3, [pid 5062] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] close(3 [pid 5062] newfstatat(4, "", [pid 5061] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] rmdir("./340" [pid 5062] getdents64(4, [pid 5061] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] mkdir("./341", 0777 [pid 5062] getdents64(4, [pid 5061] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(4 [pid 5061] <... openat resumed>) = 3 [pid 8497] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8497] close(3 [pid 5062] rmdir("./339/file0" [pid 8497] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8497] close(4 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8497] <... close resumed>) = 0 [pid 5062] close(3 [pid 8497] mkdir("./file0", 0777 [pid 5062] <... close resumed>) = 0 [pid 8497] <... mkdir resumed>) = 0 [pid 5062] rmdir("./339" [pid 8497] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... rmdir resumed>) = 0 [ 307.152868][ T8498] loop1: detected capacity change from 0 to 4096 [ 307.173240][ T8498] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 307.187552][ T8497] loop4: detected capacity change from 0 to 4096 [pid 5062] mkdir("./340", 0777 [pid 5059] <... ioctl resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8498] <... mount resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] close(3 [pid 8498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 8498] <... openat resumed>) = 3 [pid 8498] chdir("./file0" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8498] <... chdir resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8499 ./strace-static-x86_64: Process 8499 attached [pid 8498] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8499] set_robust_list(0x5555567436a0, 24 [pid 8498] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8499] <... set_robust_list resumed>) = 0 [pid 8498] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8496] <... futex resumed>) = 0 [pid 8499] chdir("./343" [pid 8498] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8496] exit_group(0 [pid 8499] <... chdir resumed>) = 0 [pid 8498] <... futex resumed>) = ? [pid 8496] <... exit_group resumed>) = ? [pid 8499] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8498] +++ exited with 0 +++ [pid 8497] <... mount resumed>) = 0 [pid 8496] +++ exited with 0 +++ [pid 8499] <... prctl resumed>) = 0 [pid 8497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8499] setpgid(0, 0 [pid 8497] <... openat resumed>) = 3 [pid 8499] <... setpgid resumed>) = 0 [pid 8497] chdir("./file0" [pid 8499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8497] <... chdir resumed>) = 0 [pid 8499] <... openat resumed>) = 3 [pid 8497] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8499] write(3, "1000", 4 [pid 8497] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8499] <... write resumed>) = 4 [pid 8497] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8499] close(3 [pid 8497] <... futex resumed>) = 1 [pid 8499] <... close resumed>) = 0 [pid 8497] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8495] <... futex resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8496, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8499] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8495] exit_group(0 [pid 5060] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8499] <... futex resumed>) = 0 [ 307.217651][ T8497] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8499] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8497] <... futex resumed>) = ? [pid 8495] <... exit_group resumed>) = ? [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8499] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8497] +++ exited with 0 +++ [pid 8499] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8499] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8499] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8495] +++ exited with 0 +++ [pid 5060] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8495, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] <... openat resumed>) = 3 [pid 8499] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8499] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8500]}, 88) = 8500 [pid 8499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8499] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8499] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8500 attached [pid 8500] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8500] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] newfstatat(3, "", [pid 8500] memfd_create("syzkaller", 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8500] <... memfd_create resumed>) = 3 [pid 8500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] getdents64(3, [pid 8500] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5060] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./344/binderfs" [pid 5063] newfstatat(3, "", [pid 5060] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8501 attached [pid 8501] set_robust_list(0x5555567436a0, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8501 [pid 5060] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8501] <... set_robust_list resumed>) = 0 [pid 5063] getdents64(3, [pid 8501] chdir("./341" [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8501] <... chdir resumed>) = 0 [pid 8501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 8501] <... prctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8501] setpgid(0, 0 [pid 5063] newfstatat(AT_FDCWD, "./338/binderfs", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8501] <... setpgid resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] unlink("./338/binderfs" [pid 5060] newfstatat(AT_FDCWD, "./344/file0", ./strace-static-x86_64: Process 8502 attached [pid 8501] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8502] set_robust_list(0x5555567436a0, 24) = 0 [pid 8502] chdir("./340") = 0 [pid 8501] write(3, "1000", 4 [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8502 [pid 5060] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8501] <... write resumed>) = 4 [pid 8501] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8501] <... close resumed>) = 0 [pid 8501] symlink("/dev/binderfs", "./binderfs" [pid 5060] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8501] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 8502] <... prctl resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 8502] setpgid(0, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8502] <... setpgid resumed>) = 0 [pid 8502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8502] write(3, "1000", 4 [pid 8501] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] getdents64(4, [pid 8502] <... write resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8502] close(3) = 0 [pid 8502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8501] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] getdents64(4, [pid 8501] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8501] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 8502] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8500] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] newfstatat(AT_FDCWD, "./338/file0", [pid 8502] <... futex resumed>) = 0 [pid 8501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... close resumed>) = 0 [pid 8502] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8502] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8501] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./344/file0" [pid 8502] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5063] <... openat resumed>) = 4 [pid 8502] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] newfstatat(4, "", [pid 8502] <... mprotect resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8502] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... rmdir resumed>) = 0 [pid 8502] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8501] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] getdents64(4, [pid 5060] getdents64(3, [pid 8502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8501] <... mprotect resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3./strace-static-x86_64: Process 8503 attached [pid 8502] <... clone3 resumed> => {parent_tid=[8503]}, 88) = 8503 [pid 8501] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 8503] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8503] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8502] rt_sigprocmask(SIG_SETMASK, [], [pid 8501] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] rmdir("./344" [pid 8502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] close(4 [pid 8503] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8504 attached [pid 8503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8502] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 8504] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8502] <... futex resumed>) = 0 [pid 8501] <... clone3 resumed> => {parent_tid=[8504]}, 88) = 8504 [pid 5063] rmdir("./338/file0" [pid 8504] <... rseq resumed>) = 0 [pid 8503] memfd_create("syzkaller", 0 [pid 8502] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8501] rt_sigprocmask(SIG_SETMASK, [], [pid 8500] <... write resumed>) = 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] mkdir("./345", 0777 [pid 8504] set_robust_list(0x7f58200ee9a0, 24 [pid 8501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8504] <... set_robust_list resumed>) = 0 [pid 8503] <... memfd_create resumed>) = 3 [pid 8501] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8500] munmap(0x7f5817c00000, 138412032 [pid 5063] getdents64(3, [pid 8504] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... mkdir resumed>) = 0 [pid 8504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8501] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8504] memfd_create("syzkaller", 0 [pid 8501] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] close(3 [pid 8503] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./338" [pid 8504] <... memfd_create resumed>) = 3 [pid 8504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8504] <... mmap resumed>) = 0x7f5817c00000 [pid 8500] <... munmap resumed>) = 0 [pid 8503] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] mkdir("./339", 0777 [pid 8500] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 8500] <... openat resumed>) = 4 [pid 8500] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8504] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8500] <... ioctl resumed>) = 0 [pid 8500] close(3) = 0 [pid 8500] close(4) = 0 [pid 8503] <... write resumed>) = 2097152 [pid 8500] mkdir("./file0", 0777 [pid 8504] <... write resumed>) = 2097152 [pid 8500] <... mkdir resumed>) = 0 [pid 8500] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [ 307.463995][ T8500] loop0: detected capacity change from 0 to 4096 [pid 8503] munmap(0x7f5817c00000, 138412032 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 8503] <... munmap resumed>) = 0 [pid 8504] munmap(0x7f5817c00000, 138412032 [pid 8503] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 8503] <... openat resumed>) = 4 [pid 8503] ioctl(4, LOOP_SET_FD, 3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8503] <... ioctl resumed>) = 0 [pid 8504] <... munmap resumed>) = 0 [pid 8504] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8504] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8505 [pid 8504] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8505 attached [pid 8505] set_robust_list(0x5555567436a0, 24) = 0 [pid 8505] chdir("./345") = 0 [pid 8505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8505] setpgid(0, 0) = 0 [pid 8505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8505] write(3, "1000", 4) = 4 [pid 8505] close(3) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8504] close(3 [pid 5063] close(3 [pid 8504] <... close resumed>) = 0 [pid 8503] close(3 [pid 8504] close(4 [pid 8503] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8505] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8504] <... close resumed>) = 0 [pid 8503] close(4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8505] <... futex resumed>) = 0 [pid 8500] <... mount resumed>) = 0 [pid 8505] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [ 307.519462][ T8500] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 307.544086][ T8503] loop3: detected capacity change from 0 to 4096 [ 307.554501][ T8504] loop2: detected capacity change from 0 to 4096 [pid 8503] <... close resumed>) = 0 [pid 8500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 8506 attached [pid 8505] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8504] mkdir("./file0", 0777 [pid 8503] mkdir("./file0", 0777 [pid 8506] set_robust_list(0x5555567436a0, 24 [pid 8505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8500] <... openat resumed>) = 3 [pid 8505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8505] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8506] <... set_robust_list resumed>) = 0 [pid 8505] <... mprotect resumed>) = 0 [pid 8503] <... mkdir resumed>) = 0 [pid 8500] chdir("./file0" [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8506 [pid 8506] chdir("./339" [pid 8505] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8504] <... mkdir resumed>) = 0 [pid 8503] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8500] <... chdir resumed>) = 0 [pid 8506] <... chdir resumed>) = 0 [pid 8505] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8504] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8500] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8507 attached [pid 8506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8500] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8506] <... prctl resumed>) = 0 [pid 8507] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8505] <... clone3 resumed> => {parent_tid=[8507]}, 88) = 8507 [pid 8507] <... rseq resumed>) = 0 [pid 8505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8506] setpgid(0, 0 [pid 8500] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8507] set_robust_list(0x7f58200ee9a0, 24 [pid 8505] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8507] <... set_robust_list resumed>) = 0 [pid 8505] <... futex resumed>) = 0 [pid 8505] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8507] memfd_create("syzkaller", 0) = 3 [pid 8506] <... setpgid resumed>) = 0 [pid 8500] <... futex resumed>) = 1 [pid 8499] <... futex resumed>) = 0 [pid 8499] exit_group(0) = ? [pid 8507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8500] +++ exited with 0 +++ [pid 8499] +++ exited with 0 +++ [pid 8506] write(3, "1000", 4) = 4 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8499, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8506] close(3) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8506] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... restart_syscall resumed>) = 0 [pid 8506] <... symlink resumed>) = 0 [ 307.623487][ T8503] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 307.633888][ T8504] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8506] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8506] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./343/binderfs") = 0 [pid 5059] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8507] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8506] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./343/file0", [pid 8506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8506] <... mmap resumed>) = 0x7f58200ce000 [pid 8506] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8506] <... mprotect resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8506] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] newfstatat(4, "", [pid 8506] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8504] <... mount resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8508 attached [pid 8506] <... clone3 resumed> => {parent_tid=[8508]}, 88) = 8508 [pid 8508] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8506] rt_sigprocmask(SIG_SETMASK, [], [pid 8504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] getdents64(4, [pid 8508] <... rseq resumed>) = 0 [pid 8506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8504] <... openat resumed>) = 3 [pid 8508] set_robust_list(0x7f58200ee9a0, 24 [pid 8506] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8504] chdir("./file0" [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8508] <... set_robust_list resumed>) = 0 [pid 8506] <... futex resumed>) = 0 [pid 8504] <... chdir resumed>) = 0 [pid 8508] rt_sigprocmask(SIG_SETMASK, [], [pid 8506] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8504] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] getdents64(4, [pid 8508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8504] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8503] <... mount resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 8504] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 8504] <... futex resumed>) = 1 [pid 8503] <... openat resumed>) = 3 [pid 8501] <... futex resumed>) = 0 [pid 5059] rmdir("./343/file0" [pid 8504] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8501] exit_group(0 [pid 8508] memfd_create("syzkaller", 0 [pid 8504] <... futex resumed>) = ? [pid 8503] chdir("./file0" [pid 8501] <... exit_group resumed>) = ? [pid 5059] <... rmdir resumed>) = 0 [pid 8503] <... chdir resumed>) = 0 [pid 5059] getdents64(3, [pid 8508] <... memfd_create resumed>) = 3 [pid 8507] <... write resumed>) = 2097152 [pid 8504] +++ exited with 0 +++ [pid 8503] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8501] +++ exited with 0 +++ [pid 8508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8503] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8501, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8507] munmap(0x7f5817c00000, 138412032 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8508] <... mmap resumed>) = 0x7f5817c00000 [pid 8503] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8507] <... munmap resumed>) = 0 [pid 5059] close(3 [pid 8507] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8503] <... futex resumed>) = 1 [pid 8502] <... futex resumed>) = 0 [pid 8508] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8507] <... openat resumed>) = 4 [pid 8503] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8502] exit_group(0 [pid 5061] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 8507] ioctl(4, LOOP_SET_FD, 3 [pid 8503] <... futex resumed>) = ? [pid 8502] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8503] +++ exited with 0 +++ [pid 5059] rmdir("./343") = 0 [pid 8508] <... write resumed>) = 2097152 [pid 8507] <... ioctl resumed>) = 0 [pid 8502] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] mkdir("./344", 0777 [pid 8508] munmap(0x7f5817c00000, 138412032 [pid 8507] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8502, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 8507] <... close resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8507] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8507] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8507] mkdir("./file0", 0777 [pid 8508] <... munmap resumed>) = 0 [pid 8507] <... mkdir resumed>) = 0 [pid 5061] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8507] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8508] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8508] <... openat resumed>) = 4 [pid 5062] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8508] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 307.771655][ T8507] loop1: detected capacity change from 0 to 4096 [pid 5062] <... openat resumed>) = 3 [pid 5061] unlink("./341/binderfs" [pid 5062] newfstatat(3, "", [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./340/binderfs") = 0 [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8508] <... ioctl resumed>) = 0 [pid 8508] close(3) = 0 [pid 8508] close(4) = 0 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./341/file0", [pid 8508] mkdir("./file0", 0777 [pid 5062] newfstatat(AT_FDCWD, "./340/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8508] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8508] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8507] <... mount resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [ 307.818314][ T8508] loop4: detected capacity change from 0 to 4096 [ 307.823094][ T8507] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5061] close(4 [pid 5062] close(4 [pid 5061] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] rmdir("./341/file0" [pid 5062] rmdir("./340/file0" [pid 5061] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] getdents64(3, [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5062] close(3 [pid 5061] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] rmdir("./341" [pid 5062] rmdir("./340" [pid 5061] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./341", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] mkdir("./342", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8507] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 8507] chdir("./file0" [pid 5059] close(3 [pid 8507] <... chdir resumed>) = 0 [pid 8507] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 8507] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8507] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8505] <... futex resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8507] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8505] exit_group(0./strace-static-x86_64: Process 8509 attached [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8509 [pid 8509] set_robust_list(0x5555567436a0, 24 [pid 8505] <... exit_group resumed>) = ? [pid 8509] <... set_robust_list resumed>) = 0 [pid 8507] <... futex resumed>) = ? [pid 8509] chdir("./344" [pid 8507] +++ exited with 0 +++ [pid 8505] +++ exited with 0 +++ [pid 8509] <... chdir resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8505, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 307.882267][ T8508] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... restart_syscall resumed>) = 0 [pid 8509] <... prctl resumed>) = 0 [pid 8509] setpgid(0, 0 [pid 5060] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8509] <... setpgid resumed>) = 0 [pid 5060] unlink("./345/binderfs") = 0 [pid 5060] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8509] <... openat resumed>) = 3 [pid 8509] write(3, "1000", 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8509] <... write resumed>) = 4 [pid 8509] close(3 [pid 5060] newfstatat(AT_FDCWD, "./345/file0", [pid 8509] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8509] symlink("/dev/binderfs", "./binderfs" [pid 5060] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8509] <... symlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8509] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8509] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 8509] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8509] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8509] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8509] <... mmap resumed>) = 0x7f58200ce000 [pid 8509] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] close(4 [pid 8509] <... mprotect resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8509] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] rmdir("./345/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5060] close(3 [pid 8509] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] rmdir("./345") = 0 ./strace-static-x86_64: Process 8510 attached [pid 8509] <... clone3 resumed> => {parent_tid=[8510]}, 88) = 8510 ./strace-static-x86_64: Process 8511 attached [pid 8510] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8509] rt_sigprocmask(SIG_SETMASK, [], [pid 8511] set_robust_list(0x5555567436a0, 24 [pid 8510] <... rseq resumed>) = 0 [pid 8509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8511] <... set_robust_list resumed>) = 0 [pid 8510] set_robust_list(0x7f58200ee9a0, 24 [pid 8509] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8511 [pid 8511] chdir("./341" [pid 8510] <... set_robust_list resumed>) = 0 [pid 8509] <... futex resumed>) = 0 [pid 5060] mkdir("./346", 0777 [pid 8511] <... chdir resumed>) = 0 [pid 8510] rt_sigprocmask(SIG_SETMASK, [], [pid 8509] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] close(3 [pid 8511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8510] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8508] <... mount resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8511] <... prctl resumed>) = 0 [pid 8510] memfd_create("syzkaller", 0 [pid 8508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8511] setpgid(0, 0 [pid 8508] <... openat resumed>) = 3 [pid 8511] <... setpgid resumed>) = 0 [pid 8511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8510] <... memfd_create resumed>) = 3 [pid 8508] chdir("./file0" [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 8512 attached [pid 8512] set_robust_list(0x5555567436a0, 24 [pid 8510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8508] <... chdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8512 [pid 5060] <... openat resumed>) = 3 [pid 8512] <... set_robust_list resumed>) = 0 [pid 8511] <... openat resumed>) = 3 [pid 8510] <... mmap resumed>) = 0x7f5817c00000 [pid 8508] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8512] chdir("./342" [pid 8508] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8511] write(3, "1000", 4 [pid 8512] <... chdir resumed>) = 0 [pid 8512] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8511] <... write resumed>) = 4 [pid 8512] <... prctl resumed>) = 0 [pid 8511] close(3 [pid 8512] setpgid(0, 0 [pid 8511] <... close resumed>) = 0 [pid 8512] <... setpgid resumed>) = 0 [pid 8511] symlink("/dev/binderfs", "./binderfs" [pid 8512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8511] <... symlink resumed>) = 0 [pid 8508] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8511] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8508] <... futex resumed>) = 1 [pid 8506] <... futex resumed>) = 0 [pid 8512] <... openat resumed>) = 3 [pid 8511] <... futex resumed>) = 0 [pid 8508] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8506] exit_group(0 [pid 8512] write(3, "1000", 4) = 4 [pid 8512] close(3) = 0 [pid 8508] <... futex resumed>) = ? [pid 8512] symlink("/dev/binderfs", "./binderfs" [pid 8508] +++ exited with 0 +++ [pid 8511] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8506] <... exit_group resumed>) = ? [pid 8512] <... symlink resumed>) = 0 [pid 8511] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8511] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8512] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8512] <... futex resumed>) = 0 [pid 8511] <... mmap resumed>) = 0x7f58200ce000 [pid 8511] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8506] +++ exited with 0 +++ [pid 8511] <... mprotect resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8506, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8511] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8511] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8513 attached [pid 8512] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8513] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8510] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8512] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8513] <... rseq resumed>) = 0 [pid 8512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8511] <... clone3 resumed> => {parent_tid=[8513]}, 88) = 8513 [pid 5063] <... openat resumed>) = 3 [pid 8513] set_robust_list(0x7f58200ee9a0, 24 [pid 8512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8511] rt_sigprocmask(SIG_SETMASK, [], [pid 8512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8512] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8513] <... set_robust_list resumed>) = 0 [pid 8512] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(3, "", [pid 8511] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8511] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8510] <... write resumed>) = 2097152 [pid 8510] munmap(0x7f5817c00000, 138412032 [pid 8513] rt_sigprocmask(SIG_SETMASK, [], [pid 8512] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8513] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8513] memfd_create("syzkaller", 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./339/binderfs") = 0 [pid 8513] <... memfd_create resumed>) = 3 [pid 8513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8514 attached [pid 8512] <... clone3 resumed> => {parent_tid=[8514]}, 88) = 8514 [pid 8514] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8512] rt_sigprocmask(SIG_SETMASK, [], [pid 8510] <... munmap resumed>) = 0 [pid 8512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8514] <... rseq resumed>) = 0 [pid 8512] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8510] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8514] set_robust_list(0x7f58200ee9a0, 24 [pid 8512] <... futex resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8514] <... set_robust_list resumed>) = 0 [pid 8512] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8514] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] close(3 [pid 8514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8510] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8514] memfd_create("syzkaller", 0 [pid 8510] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./339/file0") = 0 [pid 5063] getdents64(3, ./strace-static-x86_64: Process 8515 attached [pid 8510] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8510] close(3 [pid 8515] set_robust_list(0x5555567436a0, 24 [pid 8510] <... close resumed>) = 0 [pid 8515] <... set_robust_list resumed>) = 0 [pid 8514] <... memfd_create resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8515 [pid 8510] close(4 [pid 8515] chdir("./346" [pid 5063] close(3 [pid 8510] <... close resumed>) = 0 [pid 8514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8515] <... chdir resumed>) = 0 [pid 8510] mkdir("./file0", 0777 [pid 8515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8514] <... mmap resumed>) = 0x7f5817c00000 [pid 8513] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./339" [pid 8510] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8515] <... prctl resumed>) = 0 [pid 8510] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8515] setpgid(0, 0 [pid 5063] mkdir("./340", 0777 [pid 8515] <... setpgid resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [ 308.122573][ T8510] loop0: detected capacity change from 0 to 4096 [pid 8515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8515] <... openat resumed>) = 3 [pid 8515] write(3, "1000", 4) = 4 [pid 8515] close(3) = 0 [pid 8515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8515] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8515] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8515] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8515] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8514] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8513] <... write resumed>) = 2097152 [pid 8515] <... mprotect resumed>) = 0 [ 308.171640][ T8510] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8515] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8513] munmap(0x7f5817c00000, 138412032) = 0 [pid 8515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8516 attached => {parent_tid=[8516]}, 88) = 8516 [pid 8513] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 8516] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8515] rt_sigprocmask(SIG_SETMASK, [], [pid 8513] <... openat resumed>) = 4 [pid 8516] set_robust_list(0x7f58200ee9a0, 24 [pid 8515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8513] ioctl(4, LOOP_SET_FD, 3 [pid 8516] <... set_robust_list resumed>) = 0 [pid 8515] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8516] rt_sigprocmask(SIG_SETMASK, [], [pid 8515] <... futex resumed>) = 0 [pid 8516] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] close(3 [pid 8516] memfd_create("syzkaller", 0 [pid 8515] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8516] <... memfd_create resumed>) = 3 [pid 8516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8514] <... write resumed>) = 2097152 [pid 5063] <... close resumed>) = 0 [pid 8510] <... mount resumed>) = 0 [pid 8514] munmap(0x7f5817c00000, 138412032 [pid 8513] <... ioctl resumed>) = 0 [pid 8510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8513] close(3 [pid 8510] <... openat resumed>) = 3 [pid 8513] <... close resumed>) = 0 [pid 8513] close(4) = 0 [pid 8513] mkdir("./file0", 0777 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8513] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8517 attached [pid 8514] <... munmap resumed>) = 0 [pid 8510] chdir("./file0" [pid 8514] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8510] <... chdir resumed>) = 0 [ 308.251347][ T8513] loop3: detected capacity change from 0 to 4096 [pid 8514] <... openat resumed>) = 4 [pid 8513] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8510] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8517 [pid 8514] ioctl(4, LOOP_SET_FD, 3 [pid 8517] set_robust_list(0x5555567436a0, 24) = 0 [pid 8517] chdir("./340") = 0 [pid 8517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8514] <... ioctl resumed>) = 0 [pid 8510] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8517] <... prctl resumed>) = 0 [pid 8517] setpgid(0, 0) = 0 [pid 8517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8517] write(3, "1000", 4) = 4 [pid 8517] close(3) = 0 [pid 8517] symlink("/dev/binderfs", "./binderfs" [pid 8510] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8517] <... symlink resumed>) = 0 [pid 8510] <... futex resumed>) = 1 [pid 8509] <... futex resumed>) = 0 [pid 8517] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8509] exit_group(0 [pid 8517] <... futex resumed>) = 0 [pid 8514] close(3 [pid 8509] <... exit_group resumed>) = ? [pid 8517] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8514] <... close resumed>) = 0 [pid 8510] +++ exited with 0 +++ [pid 8509] +++ exited with 0 +++ [pid 8514] close(4 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8509, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8514] <... close resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8517] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8514] mkdir("./file0", 0777 [pid 5059] <... restart_syscall resumed>) = 0 [pid 8517] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8514] <... mkdir resumed>) = 0 [pid 8517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8514] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5059] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8517] <... mmap resumed>) = 0x7f58200ce000 [pid 8516] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8517] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 308.303426][ T8514] loop2: detected capacity change from 0 to 4096 [ 308.310221][ T8513] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8517] <... mprotect resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8517] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... openat resumed>) = 3 [pid 8517] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] newfstatat(3, "", ./strace-static-x86_64: Process 8518 attached [pid 8518] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8517] <... clone3 resumed> => {parent_tid=[8518]}, 88) = 8518 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8518] <... rseq resumed>) = 0 [pid 8517] rt_sigprocmask(SIG_SETMASK, [], [pid 8518] set_robust_list(0x7f58200ee9a0, 24 [pid 8517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] getdents64(3, [pid 8517] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8517] <... futex resumed>) = 0 [pid 8518] <... set_robust_list resumed>) = 0 [pid 8518] rt_sigprocmask(SIG_SETMASK, [], [pid 8517] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8518] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8518] memfd_create("syzkaller", 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8513] <... mount resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8518] <... memfd_create resumed>) = 3 [pid 8513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] unlink("./344/binderfs" [pid 8518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... unlink resumed>) = 0 [pid 8518] <... mmap resumed>) = 0x7f5817c00000 [pid 8513] <... openat resumed>) = 3 [pid 5059] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8513] chdir("./file0") = 0 [pid 5059] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8513] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./344/file0", [pid 8513] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8513] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8511] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8511] exit_group(0 [pid 8513] <... futex resumed>) = ? [pid 8511] <... exit_group resumed>) = ? [pid 8513] +++ exited with 0 +++ [pid 8511] +++ exited with 0 +++ [pid 5059] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8511, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 308.349939][ T8514] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] <... openat resumed>) = 4 [pid 5062] newfstatat(3, "", [pid 5059] newfstatat(4, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./341/binderfs") = 0 [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] getdents64(4, [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] close(4 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 8516] <... write resumed>) = 2097152 [pid 5062] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] rmdir("./341/file0" [pid 5059] rmdir("./344/file0" [pid 8516] munmap(0x7f5817c00000, 138412032 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5059] close(3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] close(3 [pid 5059] rmdir("./344" [pid 5062] <... close resumed>) = 0 [pid 8516] <... munmap resumed>) = 0 [pid 5062] rmdir("./341" [pid 5059] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] mkdir("./345", 0777 [pid 5062] mkdir("./342", 0777) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8516] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8518] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8516] <... openat resumed>) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] <... openat resumed>) = 3 [pid 8516] ioctl(4, LOOP_SET_FD, 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8518] <... write resumed>) = 2097152 [pid 8516] <... ioctl resumed>) = 0 [pid 8514] <... mount resumed>) = 0 [pid 8518] munmap(0x7f5817c00000, 138412032 [pid 8516] close(3 [pid 8514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8516] <... close resumed>) = 0 [pid 8514] <... openat resumed>) = 3 [pid 8516] close(4 [pid 8514] chdir("./file0" [pid 8516] <... close resumed>) = 0 [pid 8514] <... chdir resumed>) = 0 [pid 8516] mkdir("./file0", 0777 [pid 8514] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8516] <... mkdir resumed>) = 0 [pid 8514] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8514] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8512] <... futex resumed>) = 0 [pid 8512] exit_group(0) = ? [pid 8514] +++ exited with 0 +++ [pid 8512] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8512, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8516] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8518] <... munmap resumed>) = 0 [pid 8518] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8518] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8518] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [ 308.469753][ T8516] loop1: detected capacity change from 0 to 4096 [ 308.499317][ T8516] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5061] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./342/binderfs") = 0 [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8518] <... ioctl resumed>) = 0 [pid 8518] close(3) = 0 [pid 8518] close(4) = 0 [pid 8518] mkdir("./file0", 0777) = 0 [pid 8518] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8516] <... mount resumed>) = 0 [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 308.520080][ T8518] loop4: detected capacity change from 0 to 4096 [ 308.544396][ T8518] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5062] close(3 [pid 5061] newfstatat(AT_FDCWD, "./342/file0", [pid 5059] <... close resumed>) = 0 [pid 8516] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8516] chdir("./file0") = 0 [pid 8516] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8516] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8515] <... futex resumed>) = 0 [pid 8515] exit_group(0) = ? [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8520 attached ./strace-static-x86_64: Process 8519 attached [pid 8516] +++ exited with 0 +++ [pid 8515] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8519] set_robust_list(0x5555567436a0, 24 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8515, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 8520] set_robust_list(0x5555567436a0, 24 [pid 8519] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8520 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8519 [pid 8520] <... set_robust_list resumed>) = 0 [pid 8519] chdir("./345" [pid 5061] getdents64(4, [pid 8520] chdir("./342" [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 8519] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4 [pid 8519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./342/file0" [pid 5060] <... openat resumed>) = 3 [pid 8519] <... prctl resumed>) = 0 [pid 8519] setpgid(0, 0) = 0 [pid 8519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... rmdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 8520] <... chdir resumed>) = 0 [pid 8519] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8519] write(3, "1000", 4 [pid 5061] getdents64(3, [pid 5060] getdents64(3, [pid 8519] <... write resumed>) = 4 [pid 8519] close(3) = 0 [pid 8519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8519] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8519] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8519] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8520] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8518] <... mount resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8520] <... prctl resumed>) = 0 [pid 8518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] close(3 [pid 5060] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8520] setpgid(0, 0 [pid 8518] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8520] <... setpgid resumed>) = 0 [pid 8519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8518] chdir("./file0" [pid 5061] rmdir("./342" [pid 5060] newfstatat(AT_FDCWD, "./346/binderfs", ./strace-static-x86_64: Process 8521 attached [pid 8520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8518] <... chdir resumed>) = 0 [pid 8519] <... clone3 resumed> => {parent_tid=[8521]}, 88) = 8521 [pid 8519] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... rmdir resumed>) = 0 [pid 8521] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8520] <... openat resumed>) = 3 [pid 8519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8518] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8521] <... rseq resumed>) = 0 [pid 8520] write(3, "1000", 4 [pid 8519] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8518] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] unlink("./346/binderfs" [pid 8521] set_robust_list(0x7f58200ee9a0, 24 [pid 8520] <... write resumed>) = 4 [pid 8519] <... futex resumed>) = 0 [pid 8518] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8521] <... set_robust_list resumed>) = 0 [pid 8520] close(3 [pid 8519] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... unlink resumed>) = 0 [pid 8521] rt_sigprocmask(SIG_SETMASK, [], [pid 8520] <... close resumed>) = 0 [pid 8517] <... futex resumed>) = 0 [pid 8518] <... futex resumed>) = 1 [pid 5060] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8520] symlink("/dev/binderfs", "./binderfs" [pid 8518] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8517] exit_group(0 [pid 5061] mkdir("./343", 0777 [pid 8520] <... symlink resumed>) = 0 [pid 8517] <... exit_group resumed>) = ? [pid 8520] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = 0 [pid 8520] <... futex resumed>) = 0 [pid 8521] memfd_create("syzkaller", 0 [pid 8520] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] <... mkdir resumed>) = 0 [pid 8518] <... futex resumed>) = ? [pid 8520] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8518] +++ exited with 0 +++ [pid 8517] +++ exited with 0 +++ [pid 8520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8517, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8521] <... memfd_create resumed>) = 3 [pid 8520] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8520] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... openat resumed>) = 3 [pid 8521] <... mmap resumed>) = 0x7f5817c00000 [pid 8520] <... mprotect resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5060] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./346/file0", [pid 8520] <... clone3 resumed> => {parent_tid=[8522]}, 88) = 8522 [pid 8520] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8522 attached ) = 3 [pid 8522] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5063] newfstatat(3, "", [pid 8522] <... rseq resumed>) = 0 [pid 8522] set_robust_list(0x7f58200ee9a0, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8522] <... set_robust_list resumed>) = 0 [pid 5063] getdents64(3, [pid 8522] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8520] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5060] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8520] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8520] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] unlink("./340/binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8522] memfd_create("syzkaller", 0 [pid 5063] <... unlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8522] <... memfd_create resumed>) = 3 [pid 5060] getdents64(4, [pid 8522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8522] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] getdents64(4, [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5060] close(4 [pid 5063] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] rmdir("./340/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./340") = 0 [pid 5063] mkdir("./341", 0777) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5060] rmdir("./346/file0") = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] getdents64(3, [pid 8521] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5061] close(3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8522] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./346") = 0 [pid 5060] mkdir("./347", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8523 ./strace-static-x86_64: Process 8523 attached [pid 8523] set_robust_list(0x5555567436a0, 24) = 0 [pid 8523] chdir("./343") = 0 [pid 8523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8523] setpgid(0, 0) = 0 [pid 8523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8523] write(3, "1000", 4) = 4 [pid 8523] close(3) = 0 [pid 8523] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8523] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8523] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8523] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8521] <... write resumed>) = 2097152 [pid 8523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8522] <... write resumed>) = 2097152 [pid 8521] munmap(0x7f5817c00000, 138412032 [pid 8523] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8522] munmap(0x7f5817c00000, 138412032 [pid 8523] <... mprotect resumed>) = 0 [pid 8523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8524 attached [pid 8524] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8523] <... clone3 resumed> => {parent_tid=[8524]}, 88) = 8524 [pid 8524] set_robust_list(0x7f58200ee9a0, 24 [pid 8523] rt_sigprocmask(SIG_SETMASK, [], [pid 8524] <... set_robust_list resumed>) = 0 [pid 8523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8524] rt_sigprocmask(SIG_SETMASK, [], [pid 8523] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8522] <... munmap resumed>) = 0 [pid 8524] memfd_create("syzkaller", 0 [pid 8523] <... futex resumed>) = 0 [pid 8523] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8524] <... memfd_create resumed>) = 3 [pid 8524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8521] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8522] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8522] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8521] ioctl(4, LOOP_SET_FD, 3 [pid 8522] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8525 ./strace-static-x86_64: Process 8525 attached [pid 8525] set_robust_list(0x5555567436a0, 24 [pid 8522] close(3 [pid 8521] <... ioctl resumed>) = 0 [pid 8525] <... set_robust_list resumed>) = 0 [pid 8522] <... close resumed>) = 0 [pid 8521] close(3 [pid 8525] chdir("./341" [pid 8522] close(4 [pid 8521] <... close resumed>) = 0 [pid 8525] <... chdir resumed>) = 0 [pid 8522] <... close resumed>) = 0 [pid 8521] close(4 [pid 8525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8522] mkdir("./file0", 0777 [pid 8521] <... close resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8525] <... prctl resumed>) = 0 [pid 8521] mkdir("./file0", 0777 [pid 8525] setpgid(0, 0) = 0 [pid 8525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8521] <... mkdir resumed>) = 0 [pid 8525] <... openat resumed>) = 3 [pid 8522] <... mkdir resumed>) = 0 [ 308.844122][ T8522] loop3: detected capacity change from 0 to 4096 [ 308.850773][ T8521] loop0: detected capacity change from 0 to 4096 [ 308.880944][ T8522] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5060] close(3 [pid 8525] write(3, "1000", 4 [pid 8522] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8521] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5060] <... close resumed>) = 0 [pid 8525] <... write resumed>) = 4 [pid 8525] close(3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8525] <... close resumed>) = 0 [pid 8525] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8526 attached ) = 0 [pid 8524] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8526] set_robust_list(0x5555567436a0, 24 [pid 8525] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8526 [pid 8525] <... futex resumed>) = 0 [pid 8526] <... set_robust_list resumed>) = 0 [pid 8525] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8526] chdir("./347" [pid 8525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8526] <... chdir resumed>) = 0 [pid 8525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8525] <... mmap resumed>) = 0x7f58200ce000 [pid 8526] <... prctl resumed>) = 0 [pid 8525] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8526] setpgid(0, 0 [pid 8525] <... mprotect resumed>) = 0 [pid 8526] <... setpgid resumed>) = 0 [pid 8525] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8525] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8526] <... openat resumed>) = 3 [pid 8526] write(3, "1000", 4 [pid 8525] <... clone3 resumed> => {parent_tid=[8527]}, 88) = 8527 ./strace-static-x86_64: Process 8527 attached [pid 8526] <... write resumed>) = 4 [pid 8525] rt_sigprocmask(SIG_SETMASK, [], [pid 8527] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8526] close(3 [pid 8525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8527] <... rseq resumed>) = 0 [pid 8526] <... close resumed>) = 0 [pid 8525] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] set_robust_list(0x7f58200ee9a0, 24 [pid 8526] symlink("/dev/binderfs", "./binderfs" [pid 8525] <... futex resumed>) = 0 [pid 8527] <... set_robust_list resumed>) = 0 [pid 8526] <... symlink resumed>) = 0 [ 308.882638][ T8521] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8525] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8527] rt_sigprocmask(SIG_SETMASK, [], [pid 8526] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8521] <... mount resumed>) = 0 [pid 8527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8526] <... futex resumed>) = 0 [pid 8521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8527] memfd_create("syzkaller", 0 [pid 8526] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8521] <... openat resumed>) = 3 [pid 8526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8521] chdir("./file0" [pid 8526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8521] <... chdir resumed>) = 0 [pid 8527] <... memfd_create resumed>) = 3 [pid 8526] <... mmap resumed>) = 0x7f58200ce000 [pid 8521] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8526] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8521] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8526] <... mprotect resumed>) = 0 [pid 8527] <... mmap resumed>) = 0x7f5817c00000 [pid 8526] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8521] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8519] <... futex resumed>) = 0 [pid 8526] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8521] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8519] exit_group(0 [pid 8526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8521] <... futex resumed>) = ? [pid 8519] <... exit_group resumed>) = ? [pid 8521] +++ exited with 0 +++ [pid 8519] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8519, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 8528 attached [pid 8528] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8526] <... clone3 resumed> => {parent_tid=[8528]}, 88) = 8528 [pid 8526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8526] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] <... rseq resumed>) = 0 [pid 8526] <... futex resumed>) = 0 [pid 8528] set_robust_list(0x7f58200ee9a0, 24 [pid 8526] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8522] <... mount resumed>) = 0 [pid 8528] <... set_robust_list resumed>) = 0 [pid 5059] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8528] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... openat resumed>) = 3 [pid 8528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] newfstatat(3, "", [pid 8528] memfd_create("syzkaller", 0 [pid 8524] <... write resumed>) = 2097152 [pid 8522] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 8524] munmap(0x7f5817c00000, 138412032 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8522] <... openat resumed>) = 3 [pid 5059] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8528] <... memfd_create resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8522] chdir("./file0" [pid 5059] newfstatat(AT_FDCWD, "./345/binderfs", [pid 8524] <... munmap resumed>) = 0 [pid 8522] <... chdir resumed>) = 0 [pid 8528] <... mmap resumed>) = 0x7f5817c00000 [pid 8524] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8522] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8524] <... openat resumed>) = 4 [pid 8522] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8522] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8520] <... futex resumed>) = 0 [pid 8520] exit_group(0 [pid 5059] unlink("./345/binderfs" [pid 8524] ioctl(4, LOOP_SET_FD, 3 [pid 8520] <... exit_group resumed>) = ? [pid 5059] <... unlink resumed>) = 0 [pid 8522] +++ exited with 0 +++ [pid 5059] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8520] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8520, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5059] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./345/file0", [pid 5062] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5059] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8524] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(4, "", [pid 5062] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, [pid 5062] unlink("./342/binderfs" [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8524] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5059] getdents64(4, [pid 8527] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8524] <... close resumed>) = 0 [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8524] close(4 [pid 5059] close(4 [pid 8524] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./345/file0" [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./342/file0", [pid 5059] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./345" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... rmdir resumed>) = 0 [pid 8524] mkdir("./file0", 0777) = 0 [pid 5062] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] mkdir("./346", 0777 [pid 5062] <... openat resumed>) = 4 [pid 8524] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [ 308.997935][ T8524] loop2: detected capacity change from 0 to 4096 [pid 5062] newfstatat(4, "", [pid 5059] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... openat resumed>) = 3 [pid 8528] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] getdents64(4, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5062] close(4 [pid 5059] close(3 [pid 5062] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] rmdir("./342/file0" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8529 attached [pid 5062] <... rmdir resumed>) = 0 [pid 8529] set_robust_list(0x5555567436a0, 24 [pid 5062] getdents64(3, [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8529 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8529] <... set_robust_list resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8529] chdir("./346" [pid 5062] rmdir("./342") = 0 [pid 8529] <... chdir resumed>) = 0 [pid 5062] mkdir("./343", 0777 [pid 8529] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... mkdir resumed>) = 0 [pid 8529] <... prctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8529] setpgid(0, 0 [pid 5062] <... openat resumed>) = 3 [pid 8529] <... setpgid resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8529] <... openat resumed>) = 3 [ 309.059804][ T8524] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8529] write(3, "1000", 4./strace-static-x86_64: Process 8530 attached ) = 4 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8530 [pid 8530] set_robust_list(0x5555567436a0, 24 [pid 8529] close(3 [pid 8530] <... set_robust_list resumed>) = 0 [pid 8530] chdir("./343" [pid 8529] <... close resumed>) = 0 [pid 8530] <... chdir resumed>) = 0 [pid 8529] symlink("/dev/binderfs", "./binderfs" [pid 8530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8529] <... symlink resumed>) = 0 [pid 8530] <... prctl resumed>) = 0 [pid 8527] <... write resumed>) = 2097152 [pid 8530] setpgid(0, 0) = 0 [pid 8530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8529] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8528] <... write resumed>) = 2097152 [pid 8527] munmap(0x7f5817c00000, 138412032 [pid 8529] <... futex resumed>) = 0 [pid 8528] munmap(0x7f5817c00000, 138412032 [pid 8530] <... openat resumed>) = 3 [pid 8527] <... munmap resumed>) = 0 [pid 8530] write(3, "1000", 4) = 4 [pid 8529] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8528] <... munmap resumed>) = 0 [pid 8530] close(3 [pid 8529] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8529] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8530] <... close resumed>) = 0 [pid 8530] symlink("/dev/binderfs", "./binderfs" [pid 8529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8527] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8529] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8527] <... openat resumed>) = 4 [pid 8529] <... mprotect resumed>) = 0 [pid 8527] ioctl(4, LOOP_SET_FD, 3 [pid 8530] <... symlink resumed>) = 0 [pid 8529] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8531 attached [pid 8530] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8530] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8527] <... ioctl resumed>) = 0 [pid 8527] close(3 [pid 8529] <... clone3 resumed> => {parent_tid=[8531]}, 88) = 8531 [pid 8531] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8529] rt_sigprocmask(SIG_SETMASK, [], [pid 8527] <... close resumed>) = 0 [pid 8531] <... rseq resumed>) = 0 [pid 8530] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8528] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8527] close(4 [pid 8531] set_robust_list(0x7f58200ee9a0, 24 [pid 8530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8529] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8527] <... close resumed>) = 0 [pid 8531] <... set_robust_list resumed>) = 0 [pid 8530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8529] <... futex resumed>) = 0 [pid 8528] <... openat resumed>) = 4 [pid 8527] mkdir("./file0", 0777 [pid 8531] rt_sigprocmask(SIG_SETMASK, [], [pid 8529] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8531] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 309.184660][ T8527] loop4: detected capacity change from 0 to 4096 [ 309.223878][ T8528] loop1: detected capacity change from 0 to 4096 [pid 8531] memfd_create("syzkaller", 0 [pid 8530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8528] ioctl(4, LOOP_SET_FD, 3 [pid 8527] <... mkdir resumed>) = 0 [pid 8524] <... mount resumed>) = 0 [pid 8530] <... mmap resumed>) = 0x7f58200ce000 [pid 8531] <... memfd_create resumed>) = 3 [pid 8531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8530] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8527] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8530] <... mprotect resumed>) = 0 [pid 8530] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8524] <... openat resumed>) = 3 [pid 8530] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8532]}, 88) = 8532 [pid 8524] chdir("./file0"./strace-static-x86_64: Process 8532 attached [pid 8532] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8532] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8530] rt_sigprocmask(SIG_SETMASK, [], [pid 8528] <... ioctl resumed>) = 0 [pid 8524] <... chdir resumed>) = 0 [pid 8530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8530] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8524] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8530] <... futex resumed>) = 0 [pid 8524] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8532] rt_sigprocmask(SIG_SETMASK, [], [pid 8530] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8528] close(3 [pid 8524] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8528] <... close resumed>) = 0 [pid 8524] <... futex resumed>) = 1 [pid 8523] <... futex resumed>) = 0 [pid 8532] memfd_create("syzkaller", 0 [pid 8528] close(4 [pid 8524] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8523] exit_group(0 [pid 8532] <... memfd_create resumed>) = 3 [pid 8528] <... close resumed>) = 0 [pid 8524] <... futex resumed>) = ? [pid 8523] <... exit_group resumed>) = ? [pid 8524] +++ exited with 0 +++ [pid 8532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8528] mkdir("./file0", 0777 [pid 8523] +++ exited with 0 +++ [pid 8532] <... mmap resumed>) = 0x7f5817c00000 [pid 8528] <... mkdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8523, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 309.233490][ T8527] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8528] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./343/binderfs") = 0 [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8527] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8527] chdir("./file0") = 0 [pid 8527] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8527] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(AT_FDCWD, "./343/file0", [pid 8527] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8525] <... futex resumed>) = 0 [pid 8531] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8527] <... futex resumed>) = 1 [ 309.285438][ T8528] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8527] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8525] exit_group(0) = ? [pid 8532] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8528] <... mount resumed>) = 0 [pid 8527] <... futex resumed>) = ? [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8528] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8527] +++ exited with 0 +++ [pid 8525] +++ exited with 0 +++ [pid 8528] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8525, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8528] chdir("./file0") = 0 [pid 5061] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8528] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] <... openat resumed>) = 4 [pid 8528] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 8528] <... futex resumed>) = 1 [pid 8526] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8528] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8526] exit_group(0 [pid 5063] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 8528] <... futex resumed>) = ? [pid 8526] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8528] +++ exited with 0 +++ [pid 5063] newfstatat(3, "", [pid 5061] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5061] close(4 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 5063] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./343/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./341/binderfs", [pid 5061] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] unlink("./341/binderfs" [pid 5061] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./343" [pid 8531] <... write resumed>) = 2097152 [pid 8526] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./344", 0777 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8526, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8531] munmap(0x7f5817c00000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mkdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./341/file0", [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] <... openat resumed>) = 3 [pid 5063] newfstatat(4, "", [pid 5060] newfstatat(3, "", [pid 8532] <... write resumed>) = 2097152 [pid 8531] <... munmap resumed>) = 0 [pid 8532] munmap(0x7f5817c00000, 138412032 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8531] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] getdents64(4, [pid 5060] getdents64(3, [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8531] <... openat resumed>) = 4 [pid 5060] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8531] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8532] <... munmap resumed>) = 0 [pid 5063] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8532] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 8532] <... openat resumed>) = 4 [pid 5063] rmdir("./341/file0") = 0 [pid 8532] ioctl(4, LOOP_SET_FD, 3 [pid 8531] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 5060] unlink("./347/binderfs" [pid 8531] close(3 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 8531] <... close resumed>) = 0 [pid 5063] close(3 [pid 5060] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8531] close(4 [pid 5063] <... close resumed>) = 0 [pid 8531] <... close resumed>) = 0 [pid 8531] mkdir("./file0", 0777 [pid 5063] rmdir("./341" [pid 5060] <... umount2 resumed>) = 0 [pid 8531] <... mkdir resumed>) = 0 [pid 5060] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8532] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8532] close(3) = 0 [pid 5063] mkdir("./342", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8532] close(4 [pid 5063] <... mkdir resumed>) = 0 [pid 8532] <... close resumed>) = 0 [pid 8532] mkdir("./file0", 0777 [pid 5060] newfstatat(AT_FDCWD, "./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8532] <... mkdir resumed>) = 0 [pid 8532] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8531] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5060] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5060] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./347/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./347") = 0 [pid 5060] mkdir("./348", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8533 ./strace-static-x86_64: Process 8533 attached [pid 8533] set_robust_list(0x5555567436a0, 24) = 0 [pid 8533] chdir("./344") = 0 [pid 8533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8533] setpgid(0, 0) = 0 [ 309.411393][ T8531] loop0: detected capacity change from 0 to 4096 [ 309.416927][ T8532] loop3: detected capacity change from 0 to 4096 [ 309.439355][ T8531] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 309.451936][ T8532] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8533] write(3, "1000", 4) = 4 [pid 8533] close(3) = 0 [pid 8533] symlink("/dev/binderfs", "./binderfs" [pid 8531] <... mount resumed>) = 0 [pid 8533] <... symlink resumed>) = 0 [pid 8531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8533] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8531] <... openat resumed>) = 3 [pid 8533] <... futex resumed>) = 0 [pid 8533] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8531] chdir("./file0") = 0 [pid 8531] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8533] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8533] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8531] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8532] <... mount resumed>) = 0 [pid 8531] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... ioctl resumed>) = 0 [pid 8533] <... mmap resumed>) = 0x7f58200ce000 [pid 8532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8531] <... futex resumed>) = 1 [pid 8533] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8529] <... futex resumed>) = 0 [pid 8531] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8529] exit_group(0 [pid 8533] <... mprotect resumed>) = 0 [pid 8531] <... futex resumed>) = ? [pid 8529] <... exit_group resumed>) = ? [pid 5060] close(3 [pid 8531] +++ exited with 0 +++ [pid 8529] +++ exited with 0 +++ [pid 5060] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8529, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8532] <... openat resumed>) = 3 [pid 5059] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 8532] chdir("./file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8532] <... chdir resumed>) = 0 [pid 5059] getdents64(3, [pid 8533] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8532] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8533] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8532] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8534 attached [pid 8533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8532] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8535 attached [pid 8534] set_robust_list(0x5555567436a0, 24 [pid 8532] <... futex resumed>) = 1 [pid 8530] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8535] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8534] <... set_robust_list resumed>) = 0 [pid 8533] <... clone3 resumed> => {parent_tid=[8535]}, 88) = 8535 [pid 8532] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8530] exit_group(0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8534 [pid 5059] newfstatat(AT_FDCWD, "./346/binderfs", [pid 8535] <... rseq resumed>) = 0 [pid 8534] chdir("./348" [pid 8533] rt_sigprocmask(SIG_SETMASK, [], [pid 8532] <... futex resumed>) = ? [pid 8530] <... exit_group resumed>) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8535] set_robust_list(0x7f58200ee9a0, 24 [pid 8534] <... chdir resumed>) = 0 [pid 8533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8532] +++ exited with 0 +++ [pid 8530] +++ exited with 0 +++ [pid 5059] unlink("./346/binderfs" [pid 8535] <... set_robust_list resumed>) = 0 [pid 8534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8533] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8530, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] <... unlink resumed>) = 0 [pid 8535] rt_sigprocmask(SIG_SETMASK, [], [pid 8534] <... prctl resumed>) = 0 [pid 8533] <... futex resumed>) = 0 [pid 8535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8533] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8535] memfd_create("syzkaller", 0 [pid 8534] setpgid(0, 0 [pid 5063] close(3 [pid 5059] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8535] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5062] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 8534] <... setpgid resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8534] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 8534] write(3, "1000", 4 [pid 5062] newfstatat(3, "", [pid 8534] <... write resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8534] close(3 [pid 5062] getdents64(3, [pid 8534] <... close resumed>) = 0 [pid 8534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(AT_FDCWD, "./346/file0", [pid 8534] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8534] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8536 attached [pid 8534] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8536 [pid 5062] newfstatat(AT_FDCWD, "./343/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8536] set_robust_list(0x5555567436a0, 24 [pid 8534] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8536] <... set_robust_list resumed>) = 0 [pid 8534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] unlink("./343/binderfs" [pid 8536] chdir("./342" [pid 5059] <... openat resumed>) = 4 [pid 8534] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... unlink resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 8534] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8534] <... mprotect resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5059] getdents64(4, [pid 8534] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8536] <... chdir resumed>) = 0 [pid 8534] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, ./strace-static-x86_64: Process 8537 attached [pid 8536] <... prctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8537] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8536] setpgid(0, 0 [pid 8534] <... clone3 resumed> => {parent_tid=[8537]}, 88) = 8537 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(4 [pid 8537] <... rseq resumed>) = 0 [pid 8536] <... setpgid resumed>) = 0 [pid 8534] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... close resumed>) = 0 [pid 8537] set_robust_list(0x7f58200ee9a0, 24 [pid 8536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8534] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] newfstatat(AT_FDCWD, "./343/file0", [pid 5059] rmdir("./346/file0" [pid 8537] <... set_robust_list resumed>) = 0 [pid 8536] <... openat resumed>) = 3 [pid 8534] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8537] rt_sigprocmask(SIG_SETMASK, [], [pid 8536] write(3, "1000", 4 [pid 8534] <... futex resumed>) = 0 [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8536] <... write resumed>) = 4 [pid 8534] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8537] memfd_create("syzkaller", 0 [pid 8536] close(3 [pid 5062] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(3, [pid 8536] <... close resumed>) = 0 [pid 8536] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(4, "", [pid 5059] close(3 [pid 8536] <... symlink resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... close resumed>) = 0 [pid 8537] <... memfd_create resumed>) = 3 [pid 8536] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 8537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] rmdir("./346" [pid 8537] <... mmap resumed>) = 0x7f5817c00000 [pid 8536] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 5059] <... rmdir resumed>) = 0 [pid 8536] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8535] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8536] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] mkdir("./347", 0777 [pid 8536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8536] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 8536] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] close(4 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8536] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./343/file0" [pid 5059] <... openat resumed>) = 3 [pid 8536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8538 attached [pid 5062] <... rmdir resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8538] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8538] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8538] rt_sigprocmask(SIG_SETMASK, [], [pid 8536] <... clone3 resumed> => {parent_tid=[8538]}, 88) = 8538 [pid 5062] getdents64(3, [pid 8538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8536] rt_sigprocmask(SIG_SETMASK, [], [pid 8538] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8536] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8538] <... futex resumed>) = 0 [pid 8536] <... futex resumed>) = 1 [pid 5062] close(3 [pid 8536] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 8538] memfd_create("syzkaller", 0 [pid 5062] rmdir("./343" [pid 8538] <... memfd_create resumed>) = 3 [pid 8538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8538] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] mkdir("./344", 0777 [pid 8537] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8535] <... write resumed>) = 2097152 [pid 8535] munmap(0x7f5817c00000, 138412032) = 0 [pid 8538] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8537] <... write resumed>) = 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 8535] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5059] close(3 [pid 8537] munmap(0x7f5817c00000, 138412032 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8537] <... munmap resumed>) = 0 [pid 8535] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8539 ./strace-static-x86_64: Process 8539 attached [pid 8535] <... ioctl resumed>) = 0 [pid 8539] set_robust_list(0x5555567436a0, 24) = 0 [pid 8539] chdir("./347" [pid 8537] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8539] <... chdir resumed>) = 0 [pid 8537] <... openat resumed>) = 4 [pid 8539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8539] setpgid(0, 0 [pid 8537] ioctl(4, LOOP_SET_FD, 3 [pid 8539] <... setpgid resumed>) = 0 [pid 8535] close(3) = 0 [pid 8535] close(4) = 0 [pid 8535] mkdir("./file0", 0777 [pid 8539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8539] write(3, "1000", 4) = 4 [pid 8535] <... mkdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 8539] close(3) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8535] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8539] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8540 ./strace-static-x86_64: Process 8540 attached [pid 8539] <... futex resumed>) = 0 [pid 8540] set_robust_list(0x5555567436a0, 24 [pid 8539] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8537] <... ioctl resumed>) = 0 [pid 8540] <... set_robust_list resumed>) = 0 [pid 8539] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8539] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 309.781953][ T8535] loop2: detected capacity change from 0 to 4096 [ 309.795766][ T8537] loop1: detected capacity change from 0 to 4096 [pid 8539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8540] chdir("./344" [pid 8539] <... mmap resumed>) = 0x7f58200ce000 [pid 8537] close(3 [pid 8539] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8537] <... close resumed>) = 0 [pid 8540] <... chdir resumed>) = 0 [pid 8540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8537] close(4 [pid 8539] <... mprotect resumed>) = 0 [pid 8537] <... close resumed>) = 0 [pid 8540] <... prctl resumed>) = 0 [pid 8539] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8537] mkdir("./file0", 0777 [pid 8540] setpgid(0, 0 [pid 8539] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8540] <... setpgid resumed>) = 0 [pid 8540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8537] <... mkdir resumed>) = 0 [pid 8540] write(3, "1000", 4) = 4 [pid 8539] <... clone3 resumed> => {parent_tid=[8541]}, 88) = 8541 [pid 8540] close(3 [pid 8539] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8541 attached [pid 8540] <... close resumed>) = 0 [pid 8539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8540] symlink("/dev/binderfs", "./binderfs" [pid 8541] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8540] <... symlink resumed>) = 0 [pid 8539] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8537] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8541] <... rseq resumed>) = 0 [pid 8539] <... futex resumed>) = 0 [pid 8541] set_robust_list(0x7f58200ee9a0, 24 [pid 8540] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8539] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8538] <... write resumed>) = 2097152 [pid 8540] <... futex resumed>) = 0 [pid 8538] munmap(0x7f5817c00000, 138412032 [pid 8540] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8538] <... munmap resumed>) = 0 [pid 8540] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8541] <... set_robust_list resumed>) = 0 [pid 8541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8540] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8541] memfd_create("syzkaller", 0 [pid 8540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8542 attached [pid 8541] <... memfd_create resumed>) = 3 [pid 8538] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8542] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8540] <... clone3 resumed> => {parent_tid=[8542]}, 88) = 8542 [pid 8538] <... openat resumed>) = 4 [pid 8541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8542] <... rseq resumed>) = 0 [pid 8540] rt_sigprocmask(SIG_SETMASK, [], [pid 8538] ioctl(4, LOOP_SET_FD, 3 [pid 8542] set_robust_list(0x7f58200ee9a0, 24 [pid 8541] <... mmap resumed>) = 0x7f5817c00000 [pid 8540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8542] <... set_robust_list resumed>) = 0 [pid 8540] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8542] rt_sigprocmask(SIG_SETMASK, [], [pid 8540] <... futex resumed>) = 0 [pid 8542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8540] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8542] memfd_create("syzkaller", 0) = 3 [pid 8542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8538] <... ioctl resumed>) = 0 [pid 8538] close(3) = 0 [pid 8538] close(4) = 0 [pid 8538] mkdir("./file0", 0777) = 0 [ 309.823574][ T8535] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 309.845786][ T8537] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 309.865040][ T8538] loop4: detected capacity change from 0 to 4096 [pid 8538] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8535] <... mount resumed>) = 0 [pid 8535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8535] chdir("./file0") = 0 [pid 8535] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8535] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8533] <... futex resumed>) = 0 [pid 8535] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8533] exit_group(0 [pid 8535] <... futex resumed>) = ? [pid 8533] <... exit_group resumed>) = ? [pid 8535] +++ exited with 0 +++ [pid 8533] +++ exited with 0 +++ [pid 8542] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8541] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8533, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 309.910371][ T8538] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5061] getdents64(3, [pid 8537] <... mount resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./344/binderfs", [pid 8537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8542] <... write resumed>) = 2097152 [pid 8537] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8542] munmap(0x7f5817c00000, 138412032) = 0 [pid 8537] chdir("./file0" [pid 5061] unlink("./344/binderfs" [pid 8537] <... chdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8538] <... mount resumed>) = 0 [pid 8537] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8542] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8538] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8537] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = 0 [pid 8542] <... openat resumed>) = 4 [pid 8542] ioctl(4, LOOP_SET_FD, 3 [pid 8537] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8541] <... write resumed>) = 2097152 [pid 8538] <... openat resumed>) = 3 [pid 8537] <... futex resumed>) = 1 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8538] chdir("./file0" [pid 8537] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] newfstatat(AT_FDCWD, "./344/file0", [pid 8541] munmap(0x7f5817c00000, 138412032 [pid 8538] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8542] <... ioctl resumed>) = 0 [pid 8541] <... munmap resumed>) = 0 [pid 8538] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8534] <... futex resumed>) = 0 [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8542] close(3 [pid 8534] exit_group(0 [pid 8542] <... close resumed>) = 0 [pid 8541] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8538] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8542] close(4 [pid 8537] <... futex resumed>) = ? [pid 8534] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8538] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8537] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8538] <... futex resumed>) = 1 [pid 8536] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8538] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8536] exit_group(0 [pid 5061] newfstatat(4, "", [pid 8538] <... futex resumed>) = ? [pid 8536] <... exit_group resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8541] <... openat resumed>) = 4 [pid 8538] +++ exited with 0 +++ [pid 8536] +++ exited with 0 +++ [pid 8534] +++ exited with 0 +++ [pid 5061] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8536, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8534, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 310.023507][ T8542] loop3: detected capacity change from 0 to 4096 [pid 5061] getdents64(4, [pid 8542] <... close resumed>) = 0 [pid 8541] ioctl(4, LOOP_SET_FD, 3 [pid 8542] mkdir("./file0", 0777 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4 [pid 5060] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] rmdir("./344/file0" [pid 5060] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5063] newfstatat(3, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5060] getdents64(3, [pid 5063] getdents64(3, [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] close(3 [pid 5060] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8541] <... ioctl resumed>) = 0 [pid 5063] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5061] rmdir("./344" [pid 5060] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8542] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8542] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] unlink("./342/binderfs" [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5060] unlink("./348/binderfs") = 0 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./345", 0777 [pid 5060] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 8541] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8541] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./342/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8541] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./348/file0", [pid 8541] <... close resumed>) = 0 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8541] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8541] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(4, "", [pid 5060] <... openat resumed>) = 4 [pid 8541] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 5063] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5063] getdents64(4, [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(4, [pid 5063] close(4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [ 310.064447][ T8541] loop0: detected capacity change from 0 to 4096 [ 310.078861][ T8542] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5060] close(4 [pid 5063] rmdir("./342/file0" [pid 5060] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] rmdir("./348/file0" [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5063] close(3) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./342" [pid 8542] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] close(3 [pid 8542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] mkdir("./343", 0777 [pid 5060] <... close resumed>) = 0 [pid 8542] <... openat resumed>) = 3 [ 310.114222][ T8541] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5060] rmdir("./348" [pid 5061] <... ioctl resumed>) = 0 [pid 8542] chdir("./file0" [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8542] <... chdir resumed>) = 0 [pid 5060] mkdir("./349", 0777 [pid 8542] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] close(3) = 0 [pid 8542] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... mkdir resumed>) = 0 [pid 8542] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8542] <... futex resumed>) = 1 [pid 5063] <... openat resumed>) = 3 [pid 8542] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8540] <... futex resumed>) = 0 [pid 8540] exit_group(0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8543 [pid 5060] <... openat resumed>) = 3 [pid 8540] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8543 attached [pid 8542] <... futex resumed>) = ? [pid 8541] <... mount resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8543] set_robust_list(0x5555567436a0, 24 [pid 8542] +++ exited with 0 +++ [pid 8541] chdir("./file0" [pid 8540] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8540, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8543] <... set_robust_list resumed>) = 0 [pid 8541] <... chdir resumed>) = 0 [pid 8541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8541] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8543] chdir("./345" [pid 5062] <... openat resumed>) = 3 [pid 8543] <... chdir resumed>) = 0 [pid 8541] <... futex resumed>) = 1 [pid 8539] <... futex resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8541] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8539] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8539] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 8543] <... prctl resumed>) = 0 [pid 8541] <... futex resumed>) = ? [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8541] +++ exited with 0 +++ [pid 8539] +++ exited with 0 +++ [pid 8543] setpgid(0, 0 [pid 5062] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8539, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8543] <... setpgid resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... restart_syscall resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8543] <... openat resumed>) = 3 [pid 5062] unlink("./344/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... ioctl resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... unlink resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8543] write(3, "1000", 4) = 4 [pid 5059] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8543] close(3 [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8543] <... close resumed>) = 0 [pid 5059] getdents64(3, [pid 8543] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8543] <... symlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./344/file0", [pid 5059] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8543] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8543] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8543] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8543] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 8543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] newfstatat(4, "", [pid 8543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] unlink("./347/binderfs" [pid 8543] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8543] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(4, [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8544 [pid 5059] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8544 attached [pid 8543] <... mprotect resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] close(3 [pid 5062] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 8543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8544] set_robust_list(0x5555567436a0, 24 [pid 8543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8544] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8546 attached [pid 8544] chdir("./343" [pid 5062] close(4./strace-static-x86_64: Process 8545 attached [pid 8546] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8545] set_robust_list(0x5555567436a0, 24 [pid 8544] <... chdir resumed>) = 0 [pid 8543] <... clone3 resumed> => {parent_tid=[8546]}, 88) = 8546 [pid 5062] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8545 [pid 5059] <... umount2 resumed>) = 0 [pid 8546] <... rseq resumed>) = 0 [pid 8544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8543] rt_sigprocmask(SIG_SETMASK, [], [pid 8546] set_robust_list(0x7f58200ee9a0, 24 [pid 8544] <... prctl resumed>) = 0 [pid 5062] rmdir("./344/file0" [pid 8543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8544] setpgid(0, 0 [pid 8543] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] <... set_robust_list resumed>) = 0 [pid 8545] chdir("./349" [pid 8543] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8544] <... setpgid resumed>) = 0 [pid 8546] <... set_robust_list resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8545] <... chdir resumed>) = 0 [pid 8544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8543] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8546] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(AT_FDCWD, "./347/file0", [pid 8546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8545] <... prctl resumed>) = 0 [pid 8545] setpgid(0, 0) = 0 [pid 8545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8546] memfd_create("syzkaller", 0 [pid 8545] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8544] <... openat resumed>) = 3 [pid 5059] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] write(3, "1000", 4 [pid 8544] write(3, "1000", 4 [pid 5062] close(3 [pid 8545] <... write resumed>) = 4 [pid 8544] <... write resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8545] close(3 [pid 5062] rmdir("./344" [pid 5059] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8545] <... close resumed>) = 0 [pid 8545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8544] close(3 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8545] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8544] <... close resumed>) = 0 [pid 8546] <... memfd_create resumed>) = 3 [pid 8545] <... futex resumed>) = 0 [pid 8544] symlink("/dev/binderfs", "./binderfs" [pid 5062] mkdir("./345", 0777 [pid 5059] newfstatat(4, "", [pid 8545] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8544] <... symlink resumed>) = 0 [pid 5059] getdents64(4, [pid 8545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8545] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] getdents64(4, [pid 8546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8545] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8544] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8546] <... mmap resumed>) = 0x7f5817c00000 [pid 8545] <... mprotect resumed>) = 0 [pid 8544] <... futex resumed>) = 0 [pid 5059] close(4 [pid 8545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5059] <... close resumed>) = 0 [pid 8544] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... mkdir resumed>) = 0 [pid 5059] rmdir("./347/file0" [pid 8545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8544] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8547 attached [pid 8547] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... rmdir resumed>) = 0 [pid 8547] <... rseq resumed>) = 0 [pid 8545] <... clone3 resumed> => {parent_tid=[8547]}, 88) = 8547 [pid 8544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] getdents64(3, [pid 8547] set_robust_list(0x7f58200ee9a0, 24 [pid 8545] rt_sigprocmask(SIG_SETMASK, [], [pid 8544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8547] <... set_robust_list resumed>) = 0 [pid 8545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8547] rt_sigprocmask(SIG_SETMASK, [], [pid 8545] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8545] <... futex resumed>) = 0 [pid 8544] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... openat resumed>) = 3 [pid 5059] close(3 [pid 8544] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8547] memfd_create("syzkaller", 0 [pid 8545] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8544] <... mprotect resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./347" [pid 8547] <... memfd_create resumed>) = 3 [pid 8544] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... rmdir resumed>) = 0 [pid 8544] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8547] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] mkdir("./348", 0777./strace-static-x86_64: Process 8548 attached [pid 8546] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... mkdir resumed>) = 0 [pid 8548] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8544] <... clone3 resumed> => {parent_tid=[8548]}, 88) = 8548 [pid 8544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8544] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8544] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8548] <... rseq resumed>) = 0 [pid 8548] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8548] memfd_create("syzkaller", 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8548] <... memfd_create resumed>) = 3 [pid 8548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8547] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8546] <... write resumed>) = 2097152 [pid 8546] munmap(0x7f5817c00000, 138412032 [pid 5062] <... ioctl resumed>) = 0 [pid 8546] <... munmap resumed>) = 0 [pid 8547] <... write resumed>) = 2097152 [pid 8546] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(3 [pid 8548] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8547] munmap(0x7f5817c00000, 138412032 [pid 8546] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 8546] ioctl(4, LOOP_SET_FD, 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8549 ./strace-static-x86_64: Process 8549 attached [pid 8549] set_robust_list(0x5555567436a0, 24) = 0 [pid 8549] chdir("./345" [pid 8547] <... munmap resumed>) = 0 [pid 8549] <... chdir resumed>) = 0 [pid 8549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8549] setpgid(0, 0) = 0 [pid 8549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8549] write(3, "1000", 4) = 4 [pid 8549] close(3) = 0 [pid 8549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8549] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8546] <... ioctl resumed>) = 0 [pid 8549] <... futex resumed>) = 0 [pid 8546] close(3 [pid 8549] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8549] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8546] <... close resumed>) = 0 [pid 8546] close(4) = 0 [pid 8549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8547] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8546] mkdir("./file0", 0777 [pid 8549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8549] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8547] <... openat resumed>) = 4 [pid 8547] ioctl(4, LOOP_SET_FD, 3 [pid 8546] <... mkdir resumed>) = 0 [pid 8549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8546] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5059] <... ioctl resumed>) = 0 [ 310.447771][ T8546] loop2: detected capacity change from 0 to 4096 [ 310.481776][ T8547] loop1: detected capacity change from 0 to 4096 [pid 5059] close(3) = 0 [pid 8549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8550 attached => {parent_tid=[8550]}, 88) = 8550 [pid 8550] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8549] rt_sigprocmask(SIG_SETMASK, [], [pid 8550] <... rseq resumed>) = 0 [pid 8549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8547] <... ioctl resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8550] set_robust_list(0x7f58200ee9a0, 24 [pid 8549] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8547] close(3 [pid 8550] <... set_robust_list resumed>) = 0 [pid 8549] <... futex resumed>) = 0 [pid 8550] rt_sigprocmask(SIG_SETMASK, [], [pid 8549] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8550] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8551 attached [pid 8550] memfd_create("syzkaller", 0 [pid 8547] <... close resumed>) = 0 [pid 8551] set_robust_list(0x5555567436a0, 24 [pid 8548] <... write resumed>) = 2097152 [pid 8547] close(4 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8551 [pid 8551] <... set_robust_list resumed>) = 0 [pid 8551] chdir("./348" [pid 8550] <... memfd_create resumed>) = 3 [pid 8548] munmap(0x7f5817c00000, 138412032 [pid 8547] <... close resumed>) = 0 [pid 8551] <... chdir resumed>) = 0 [pid 8551] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8547] mkdir("./file0", 0777 [pid 8551] setpgid(0, 0 [pid 8550] <... mmap resumed>) = 0x7f5817c00000 [pid 8551] <... setpgid resumed>) = 0 [pid 8547] <... mkdir resumed>) = 0 [pid 8551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8548] <... munmap resumed>) = 0 [ 310.504280][ T8546] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8547] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8551] <... openat resumed>) = 3 [pid 8548] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8551] write(3, "1000", 4) = 4 [pid 8551] close(3) = 0 [pid 8548] ioctl(4, LOOP_SET_FD, 3 [pid 8551] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8548] <... ioctl resumed>) = 0 [pid 8551] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8548] close(3 [pid 8551] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8548] <... close resumed>) = 0 [pid 8551] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8548] close(4 [pid 8551] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8548] <... close resumed>) = 0 [pid 8551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8550] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8548] mkdir("./file0", 0777 [pid 8551] <... mmap resumed>) = 0x7f58200ce000 [pid 8551] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 310.561202][ T8547] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 310.574283][ T8548] loop4: detected capacity change from 0 to 4096 [pid 8551] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8548] <... mkdir resumed>) = 0 [pid 8551] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8548] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8551] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8552 attached [pid 8552] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8551] <... clone3 resumed> => {parent_tid=[8552]}, 88) = 8552 [pid 8552] <... rseq resumed>) = 0 [pid 8552] set_robust_list(0x7f58200ee9a0, 24 [pid 8551] rt_sigprocmask(SIG_SETMASK, [], [pid 8552] <... set_robust_list resumed>) = 0 [pid 8551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8552] rt_sigprocmask(SIG_SETMASK, [], [pid 8551] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8552] memfd_create("syzkaller", 0) = 3 [pid 8551] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8547] <... mount resumed>) = 0 [pid 8547] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8547] chdir("./file0") = 0 [pid 8547] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8546] <... mount resumed>) = 0 [pid 8547] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8548] <... mount resumed>) = 0 [pid 8548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8547] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8548] <... openat resumed>) = 3 [pid 8547] <... futex resumed>) = 1 [pid 8545] <... futex resumed>) = 0 [ 310.604256][ T8548] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8550] <... write resumed>) = 2097152 [pid 8548] chdir("./file0" [pid 8547] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8546] <... openat resumed>) = 3 [pid 8545] exit_group(0 [pid 8548] <... chdir resumed>) = 0 [pid 8547] <... futex resumed>) = ? [pid 8545] <... exit_group resumed>) = ? [pid 8548] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8547] +++ exited with 0 +++ [pid 8546] chdir("./file0" [pid 8548] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8546] <... chdir resumed>) = 0 [pid 8548] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8546] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8544] <... futex resumed>) = 0 [pid 8546] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8548] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8544] exit_group(0) = ? [pid 8546] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8548] <... futex resumed>) = ? [pid 8546] <... futex resumed>) = 1 [pid 8543] <... futex resumed>) = 0 [pid 8543] exit_group(0) = ? [pid 8548] +++ exited with 0 +++ [pid 8546] +++ exited with 0 +++ [pid 8544] +++ exited with 0 +++ [pid 8543] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8544, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5063] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8552] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8550] munmap(0x7f5817c00000, 138412032 [pid 8545] +++ exited with 0 +++ [pid 5063] newfstatat(3, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8543, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5063] getdents64(3, [pid 5061] <... restart_syscall resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8545, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8550] <... munmap resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./343/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8550] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8550] <... openat resumed>) = 4 [pid 5063] unlink("./343/binderfs") = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8552] <... write resumed>) = 2097152 [pid 8550] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(3, "", [pid 8552] munmap(0x7f5817c00000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8552] <... munmap resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8552] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8550] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8552] <... openat resumed>) = 4 [pid 8550] close(3 [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./349/binderfs", [pid 8552] ioctl(4, LOOP_SET_FD, 3 [pid 8550] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./345/binderfs", [pid 8550] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8550] <... close resumed>) = 0 [pid 8552] <... ioctl resumed>) = 0 [pid 8550] mkdir("./file0", 0777 [pid 5063] newfstatat(AT_FDCWD, "./343/file0", [pid 5061] unlink("./345/binderfs" [pid 5060] unlink("./349/binderfs" [pid 8552] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8550] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8552] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8550] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] <... unlink resumed>) = 0 [pid 8552] close(4) = 0 [pid 8552] mkdir("./file0", 0777 [pid 5060] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 8552] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8552] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4) = 0 [ 310.723751][ T8550] loop3: detected capacity change from 0 to 4096 [ 310.744637][ T8552] loop0: detected capacity change from 0 to 4096 [ 310.759308][ T8550] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5063] rmdir("./343/file0" [pid 5060] newfstatat(AT_FDCWD, "./349/file0", [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5060] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./343" [pid 5060] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./344", 0777 [pid 5060] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./345/file0", [pid 5063] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] getdents64(4, [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./345/file0" [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./345") = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5061] mkdir("./346", 0777 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./349/file0") = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8552] <... mount resumed>) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] close(3 [pid 8552] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 8552] <... openat resumed>) = 3 [pid 5060] rmdir("./349" [ 310.772536][ T8552] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8552] chdir("./file0" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8552] <... chdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./350", 0777 [pid 8550] <... mount resumed>) = 0 [pid 8552] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] <... mkdir resumed>) = 0 [pid 8550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8552] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8550] <... openat resumed>) = 3 [pid 8552] <... futex resumed>) = 1 [pid 8551] <... futex resumed>) = 0 [pid 8551] exit_group(0 [pid 8550] chdir("./file0") = 0 [pid 8552] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 8551] <... exit_group resumed>) = ? [pid 8550] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8552] +++ exited with 0 +++ [pid 8550] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8550] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8549] <... futex resumed>) = 0 [pid 8550] <... futex resumed>) = 1 [pid 8551] +++ exited with 0 +++ [pid 8550] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8549] exit_group(0 [pid 8550] <... futex resumed>) = ? [pid 8549] <... exit_group resumed>) = ? [pid 8550] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8551, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8549] +++ exited with 0 +++ [pid 5059] newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8549, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] unlink("./348/binderfs") = 0 [pid 5059] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5062] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5061] close(3 [pid 5060] close(3 [pid 5059] <... umount2 resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8553 attached [pid 5059] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8554 attached [pid 8553] set_robust_list(0x5555567436a0, 24 [pid 5062] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8554] set_robust_list(0x5555567436a0, 24 [pid 8553] <... set_robust_list resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8554 [pid 8554] <... set_robust_list resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./348/file0", [pid 8554] chdir("./350" [pid 8553] chdir("./344" [pid 5062] newfstatat(AT_FDCWD, "./345/binderfs", [pid 8554] <... chdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8554] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8553] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... prctl resumed>) = 0 [pid 8553] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8553 [pid 5062] unlink("./345/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8554] setpgid(0, 0 [pid 8553] <... prctl resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8555 attached [pid 8554] <... setpgid resumed>) = 0 [pid 8553] setpgid(0, 0 [pid 5059] <... openat resumed>) = 4 [pid 8555] set_robust_list(0x5555567436a0, 24 [pid 8554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8553] <... setpgid resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8555 [pid 5059] newfstatat(4, "", [pid 8555] <... set_robust_list resumed>) = 0 [pid 8554] <... openat resumed>) = 3 [pid 8553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... unlink resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8555] chdir("./346" [pid 8554] write(3, "1000", 4 [pid 8553] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 8555] <... chdir resumed>) = 0 [pid 8554] <... write resumed>) = 4 [pid 8553] write(3, "1000", 4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8555] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8554] close(3 [pid 8553] <... write resumed>) = 4 [pid 5059] getdents64(4, [pid 8555] <... prctl resumed>) = 0 [pid 8554] <... close resumed>) = 0 [pid 8553] close(3 [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8555] setpgid(0, 0 [pid 8554] symlink("/dev/binderfs", "./binderfs" [pid 8553] <... close resumed>) = 0 [pid 5059] close(4 [pid 8555] <... setpgid resumed>) = 0 [pid 8554] <... symlink resumed>) = 0 [pid 8553] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... close resumed>) = 0 [pid 8555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8554] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8553] <... symlink resumed>) = 0 [pid 5059] rmdir("./348/file0" [pid 8555] <... openat resumed>) = 3 [pid 8554] <... futex resumed>) = 0 [pid 8553] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8554] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] getdents64(3, [pid 8554] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8553] <... futex resumed>) = 0 [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8555] write(3, "1000", 4 [pid 8554] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8553] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 8555] <... write resumed>) = 4 [pid 8554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8553] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] newfstatat(AT_FDCWD, "./345/file0", [pid 8555] close(3 [pid 8554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8553] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 8555] <... close resumed>) = 0 [pid 8554] <... mmap resumed>) = 0x7f58200ce000 [pid 8553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] rmdir("./348" [pid 8555] symlink("/dev/binderfs", "./binderfs" [pid 8554] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 8555] <... symlink resumed>) = 0 [pid 8554] <... mprotect resumed>) = 0 [pid 8553] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8554] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8553] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] newfstatat(4, "", [pid 8555] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8553] <... mprotect resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 8555] <... futex resumed>) = 0 [pid 8554] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8553] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] mkdir("./349", 0777 [pid 8555] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8553] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] getdents64(4, [pid 5059] <... mkdir resumed>) = 0 [pid 8555] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4./strace-static-x86_64: Process 8556 attached [pid 8555] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8554] <... clone3 resumed> => {parent_tid=[8556]}, 88) = 8556 [pid 8553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 8557 attached [pid 8556] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8554] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] rmdir("./345/file0" [pid 8557] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8556] <... rseq resumed>) = 0 [pid 8555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8553] <... clone3 resumed> => {parent_tid=[8557]}, 88) = 8557 [pid 5059] <... openat resumed>) = 3 [pid 8557] <... rseq resumed>) = 0 [pid 8556] set_robust_list(0x7f58200ee9a0, 24 [pid 8555] <... mmap resumed>) = 0x7f58200ce000 [pid 8554] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8553] rt_sigprocmask(SIG_SETMASK, [], [pid 8556] <... set_robust_list resumed>) = 0 [pid 8555] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8554] <... futex resumed>) = 0 [pid 8553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... rmdir resumed>) = 0 [pid 8557] set_robust_list(0x7f58200ee9a0, 24 [pid 8556] rt_sigprocmask(SIG_SETMASK, [], [pid 8555] <... mprotect resumed>) = 0 [pid 8554] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8553] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8557] <... set_robust_list resumed>) = 0 [pid 8556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8555] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8553] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 8557] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8557] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8556] memfd_create("syzkaller", 0 [pid 8555] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8553] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] close(3 [pid 8555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./345"./strace-static-x86_64: Process 8558 attached [pid 8556] <... memfd_create resumed>) = 3 [pid 8555] <... clone3 resumed> => {parent_tid=[8558]}, 88) = 8558 [pid 5062] <... rmdir resumed>) = 0 [pid 8558] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8557] memfd_create("syzkaller", 0 [pid 8556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8555] rt_sigprocmask(SIG_SETMASK, [], [pid 8558] <... rseq resumed>) = 0 [pid 8556] <... mmap resumed>) = 0x7f5817c00000 [pid 8555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8558] set_robust_list(0x7f58200ee9a0, 24 [pid 8557] <... memfd_create resumed>) = 3 [pid 8555] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] mkdir("./346", 0777 [pid 8558] <... set_robust_list resumed>) = 0 [pid 8557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8555] <... futex resumed>) = 0 [pid 8558] rt_sigprocmask(SIG_SETMASK, [], [pid 8555] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8557] <... mmap resumed>) = 0x7f5817c00000 [pid 8558] memfd_create("syzkaller", 0) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 8558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8558] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] <... openat resumed>) = 3 [pid 8557] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8556] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8558] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 8557] <... write resumed>) = 2097152 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8559 [pid 8557] munmap(0x7f5817c00000, 138412032 [pid 8556] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 8559 attached [pid 8559] set_robust_list(0x5555567436a0, 24) = 0 [pid 8559] chdir("./349") = 0 [pid 8559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8559] setpgid(0, 0) = 0 [pid 8559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8559] write(3, "1000", 4) = 4 [pid 8559] close(3) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8559] symlink("/dev/binderfs", "./binderfs" [pid 8556] munmap(0x7f5817c00000, 138412032 [pid 8557] <... munmap resumed>) = 0 [pid 5062] close(3 [pid 8559] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8558] <... write resumed>) = 2097152 [pid 8556] <... munmap resumed>) = 0 [pid 8559] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8556] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8559] <... futex resumed>) = 0 [pid 8557] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8556] <... openat resumed>) = 4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8559] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8556] ioctl(4, LOOP_SET_FD, 3 [pid 8559] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8559] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8558] munmap(0x7f5817c00000, 138412032./strace-static-x86_64: Process 8560 attached [pid 8559] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8558] <... munmap resumed>) = 0 [pid 8557] <... openat resumed>) = 4 [pid 8559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8559] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8559] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8559] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8561]}, 88) = 8561 [pid 8559] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8559] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8559] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8560 [pid 8557] ioctl(4, LOOP_SET_FD, 3 [pid 8560] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8561 attached [pid 8558] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8561] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8558] <... openat resumed>) = 4 [pid 8561] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8558] ioctl(4, LOOP_SET_FD, 3 [pid 8561] memfd_create("syzkaller", 0 [pid 8560] <... set_robust_list resumed>) = 0 [pid 8557] <... ioctl resumed>) = 0 [pid 8556] <... ioctl resumed>) = 0 [pid 8556] close(3 [pid 8560] chdir("./346" [pid 8556] <... close resumed>) = 0 [pid 8556] close(4) = 0 [pid 8556] mkdir("./file0", 0777 [pid 8560] <... chdir resumed>) = 0 [pid 8557] close(3 [pid 8556] <... mkdir resumed>) = 0 [pid 8560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8557] <... close resumed>) = 0 [pid 8560] <... prctl resumed>) = 0 [pid 8557] close(4) = 0 [pid 8560] setpgid(0, 0 [pid 8557] mkdir("./file0", 0777 [pid 8556] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8560] <... setpgid resumed>) = 0 [pid 8560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8557] <... mkdir resumed>) = 0 [pid 8561] <... memfd_create resumed>) = 3 [pid 8560] <... openat resumed>) = 3 [pid 8558] <... ioctl resumed>) = 0 [pid 8557] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8560] write(3, "1000", 4) = 4 [pid 8560] close(3 [pid 8561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [ 311.146989][ T8556] loop1: detected capacity change from 0 to 4096 [ 311.158635][ T8557] loop4: detected capacity change from 0 to 4096 [ 311.162674][ T8558] loop2: detected capacity change from 0 to 4096 [ 311.184214][ T8556] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8560] <... close resumed>) = 0 [pid 8558] close(3 [pid 8560] symlink("/dev/binderfs", "./binderfs" [pid 8558] <... close resumed>) = 0 [pid 8560] <... symlink resumed>) = 0 [pid 8558] close(4) = 0 [pid 8558] mkdir("./file0", 0777) = 0 [pid 8560] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8558] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8560] <... futex resumed>) = 0 [pid 8560] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8556] <... mount resumed>) = 0 [pid 8560] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8560] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8556] chdir("./file0" [pid 8560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8556] <... chdir resumed>) = 0 [pid 8560] <... mmap resumed>) = 0x7f58200ce000 [pid 8560] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8556] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8560] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8556] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8560] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8556] <... futex resumed>) = 1 [pid 8554] <... futex resumed>) = 0 [pid 8560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8556] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 311.207419][ T8557] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 311.244530][ T8558] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8554] exit_group(0 [pid 8561] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8560] <... clone3 resumed> => {parent_tid=[8562]}, 88) = 8562 ./strace-static-x86_64: Process 8562 attached [pid 8560] rt_sigprocmask(SIG_SETMASK, [], [pid 8557] <... mount resumed>) = 0 [pid 8556] <... futex resumed>) = ? [pid 8554] <... exit_group resumed>) = ? [pid 8562] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8556] +++ exited with 0 +++ [pid 8554] +++ exited with 0 +++ [pid 8562] <... rseq resumed>) = 0 [pid 8562] set_robust_list(0x7f58200ee9a0, 24 [pid 8557] <... openat resumed>) = 3 [pid 8562] <... set_robust_list resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8554, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8562] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8557] chdir("./file0" [pid 5060] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8560] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8557] <... chdir resumed>) = 0 [pid 8562] <... futex resumed>) = 0 [pid 8560] <... futex resumed>) = 1 [pid 8557] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 8562] memfd_create("syzkaller", 0 [pid 8560] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8557] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(3, "", [pid 8557] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8562] <... memfd_create resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] getdents64(3, [pid 8562] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./350/binderfs") = 0 [pid 8557] <... futex resumed>) = 1 [pid 8557] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8553] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./350/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8553] exit_group(0 [pid 5060] newfstatat(4, "", [pid 8557] <... futex resumed>) = ? [pid 8553] <... exit_group resumed>) = ? [pid 8557] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./350/file0" [pid 8553] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8553, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] close(3 [pid 5063] newfstatat(3, "", [pid 5060] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] rmdir("./350" [pid 5063] getdents64(3, [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./344/binderfs") = 0 [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8561] <... write resumed>) = 2097152 [pid 5060] mkdir("./351", 0777 [pid 8561] munmap(0x7f5817c00000, 138412032 [pid 5060] <... mkdir resumed>) = 0 [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./344/file0", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8561] <... munmap resumed>) = 0 [pid 8561] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8561] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./344/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8562] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8561] <... ioctl resumed>) = 0 [pid 8558] <... mount resumed>) = 0 [pid 8558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 8558] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 8561] close(3 [pid 8558] chdir("./file0" [pid 5063] rmdir("./344" [pid 8561] <... close resumed>) = 0 [pid 8558] <... chdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8558] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] mkdir("./345", 0777 [pid 8561] close(4 [pid 8558] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8561] <... close resumed>) = 0 [pid 8558] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... mkdir resumed>) = 0 [pid 8562] <... write resumed>) = 2097152 [pid 8561] mkdir("./file0", 0777 [pid 8558] <... futex resumed>) = 1 [pid 8555] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8558] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8555] exit_group(0 [pid 5063] <... openat resumed>) = 3 [pid 8555] <... exit_group resumed>) = ? [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8558] <... futex resumed>) = ? [pid 8561] <... mkdir resumed>) = 0 [pid 8558] +++ exited with 0 +++ [pid 8555] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8555, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 311.371985][ T8561] loop0: detected capacity change from 0 to 4096 [pid 8562] munmap(0x7f5817c00000, 138412032 [pid 8561] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5061] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8562] <... munmap resumed>) = 0 [pid 5061] unlink("./346/binderfs" [pid 8562] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8562] <... openat resumed>) = 4 [pid 8562] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = 0 [pid 8562] <... ioctl resumed>) = 0 [pid 8562] close(3 [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./346/file0", [pid 8562] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8562] close(4 [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8561] <... mount resumed>) = 0 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./346/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./346") = 0 [pid 8562] <... close resumed>) = 0 [pid 8561] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 311.437545][ T8561] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 311.463142][ T8562] loop3: detected capacity change from 0 to 4096 [pid 5060] close(3 [pid 8562] mkdir("./file0", 0777 [pid 8561] <... openat resumed>) = 3 [pid 5061] mkdir("./347", 0777 [pid 5060] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8562] <... mkdir resumed>) = 0 [pid 8561] chdir("./file0" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8562] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8561] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8561] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8563 attached [pid 8563] set_robust_list(0x5555567436a0, 24) = 0 [pid 8563] chdir("./351" [pid 8561] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(3 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8563 [pid 8561] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] <... chdir resumed>) = 0 [pid 8561] <... futex resumed>) = 1 [pid 8559] <... futex resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8559] exit_group(0 [pid 8563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8559] <... exit_group resumed>) = ? [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8563] <... prctl resumed>) = 0 [pid 8561] +++ exited with 0 +++ [pid 8559] +++ exited with 0 +++ [pid 8563] setpgid(0, 0) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8559, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 8564 attached [pid 8563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8563] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8564 [pid 5059] <... restart_syscall resumed>) = 0 [pid 8564] set_robust_list(0x5555567436a0, 24 [pid 8563] write(3, "1000", 4) = 4 [pid 8563] close(3 [pid 8564] <... set_robust_list resumed>) = 0 [pid 8563] <... close resumed>) = 0 [pid 5059] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] chdir("./345" [pid 8563] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] <... chdir resumed>) = 0 [pid 8563] <... symlink resumed>) = 0 [pid 8564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8563] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8564] <... prctl resumed>) = 0 [pid 8563] <... futex resumed>) = 0 [pid 8564] setpgid(0, 0 [pid 8563] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8564] <... setpgid resumed>) = 0 [pid 8563] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... ioctl resumed>) = 0 [pid 8563] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8564] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 8564] write(3, "1000", 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8564] <... write resumed>) = 4 [pid 8564] close(3 [pid 5059] getdents64(3, [pid 8564] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8564] symlink("/dev/binderfs", "./binderfs" [pid 5059] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] <... symlink resumed>) = 0 [pid 8562] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [ 311.509403][ T8562] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5059] newfstatat(AT_FDCWD, "./349/binderfs", [pid 8563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8564] <... futex resumed>) = 0 [pid 8563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] unlink("./349/binderfs" [pid 8564] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8563] <... mmap resumed>) = 0x7f58200ce000 [pid 8562] <... openat resumed>) = 3 [pid 5059] <... unlink resumed>) = 0 [pid 8564] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8563] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8564] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8563] <... mprotect resumed>) = 0 [pid 8562] chdir("./file0" [pid 5061] close(3 [pid 5059] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8563] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8562] <... chdir resumed>) = 0 [pid 8564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8562] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8564] <... mmap resumed>) = 0x7f58200ce000 [pid 8564] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8562] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... close resumed>) = 0 [pid 8564] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8563] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8562] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8564] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8562] <... futex resumed>) = 1 [pid 8560] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8566 attached [pid 8564] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8562] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8560] exit_group(0./strace-static-x86_64: Process 8565 attached [pid 8566] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8563] <... clone3 resumed> => {parent_tid=[8566]}, 88) = 8566 [pid 8562] <... futex resumed>) = ? [pid 8560] <... exit_group resumed>) = ? [pid 8565] set_robust_list(0x5555567436a0, 24 [pid 8566] <... rseq resumed>) = 0 [pid 8564] <... clone3 resumed> => {parent_tid=[8567]}, 88) = 8567 [pid 8563] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8565 [pid 5059] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8565] <... set_robust_list resumed>) = 0 [pid 8566] set_robust_list(0x7f58200ee9a0, 24 [pid 8564] rt_sigprocmask(SIG_SETMASK, [], [pid 8563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8565] chdir("./347" [pid 8566] <... set_robust_list resumed>) = 0 [pid 8564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8563] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8566] rt_sigprocmask(SIG_SETMASK, [], [pid 8564] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8563] <... futex resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./349/file0", ./strace-static-x86_64: Process 8567 attached [pid 8565] <... chdir resumed>) = 0 [pid 8566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8564] <... futex resumed>) = 0 [pid 8563] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8567] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8566] memfd_create("syzkaller", 0 [pid 8564] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8565] <... prctl resumed>) = 0 [pid 8567] <... rseq resumed>) = 0 [pid 8565] setpgid(0, 0 [pid 8567] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8565] <... setpgid resumed>) = 0 [pid 8567] <... set_robust_list resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8567] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... openat resumed>) = 4 [pid 8565] <... openat resumed>) = 3 [pid 8566] <... memfd_create resumed>) = 3 [pid 5059] newfstatat(4, "", [pid 8565] write(3, "1000", 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8565] <... write resumed>) = 4 [pid 8566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] getdents64(4, [pid 8565] close(3 [pid 8567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8566] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8565] <... close resumed>) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./349/file0" [pid 8562] +++ exited with 0 +++ [pid 8560] +++ exited with 0 +++ [pid 5059] <... rmdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8560, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 8565] symlink("/dev/binderfs", "./binderfs" [pid 8567] memfd_create("syzkaller", 0 [pid 8565] <... symlink resumed>) = 0 [pid 5062] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8565] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] close(3 [pid 8567] <... memfd_create resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5059] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] rmdir("./349" [pid 8567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] getdents64(3, [pid 5059] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8565] <... futex resumed>) = 0 [pid 5062] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8565] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./350", 0777 [pid 5062] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5059] <... mkdir resumed>) = 0 [pid 8565] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] unlink("./346/binderfs" [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... unlink resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8565] <... mmap resumed>) = 0x7f58200ce000 [pid 8565] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8565] <... mprotect resumed>) = 0 [pid 8567] <... mmap resumed>) = 0x7f5817c00000 [pid 8565] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... umount2 resumed>) = 0 [pid 8565] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8568]}, 88) = 8568 [pid 8565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8565] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8565] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./346/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8568 attached ) = 4 [pid 8568] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5062] newfstatat(4, "", [pid 8568] <... rseq resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8568] set_robust_list(0x7f58200ee9a0, 24 [pid 5062] getdents64(4, [pid 8568] <... set_robust_list resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8568] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] getdents64(4, [pid 8568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8568] memfd_create("syzkaller", 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./346/file0") = 0 [pid 8568] <... memfd_create resumed>) = 3 [pid 8568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8566] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8567] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./346") = 0 [pid 5062] mkdir("./347", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8569 ./strace-static-x86_64: Process 8569 attached [pid 8569] set_robust_list(0x5555567436a0, 24) = 0 [pid 8569] chdir("./347") = 0 [pid 8569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8569] setpgid(0, 0) = 0 [pid 8569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8569] write(3, "1000", 4) = 4 [pid 8569] close(3) = 0 [pid 8569] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8569] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8569] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8569] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8569] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... ioctl resumed>) = 0 [pid 8569] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8570]}, 88) = 8570 [pid 8569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8569] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8569] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8570 attached [pid 8570] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8570] set_robust_list(0x7f58200ee9a0, 24 [pid 8568] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8570] <... set_robust_list resumed>) = 0 [pid 8570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8570] memfd_create("syzkaller", 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8571 ./strace-static-x86_64: Process 8571 attached [pid 8570] <... memfd_create resumed>) = 3 [pid 8571] set_robust_list(0x5555567436a0, 24) = 0 [pid 8570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8567] <... write resumed>) = 2097152 [pid 8571] chdir("./350" [pid 8567] munmap(0x7f5817c00000, 138412032 [pid 8571] <... chdir resumed>) = 0 [pid 8567] <... munmap resumed>) = 0 [pid 8566] <... write resumed>) = 2097152 [pid 8566] munmap(0x7f5817c00000, 138412032) = 0 [pid 8571] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8567] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8571] <... prctl resumed>) = 0 [pid 8566] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8567] <... openat resumed>) = 4 [pid 8566] ioctl(4, LOOP_SET_FD, 3 [pid 8571] setpgid(0, 0) = 0 [pid 8567] ioctl(4, LOOP_SET_FD, 3 [pid 8571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8571] write(3, "1000", 4 [pid 8567] <... ioctl resumed>) = 0 [pid 8571] <... write resumed>) = 4 [pid 8571] close(3 [pid 8568] <... write resumed>) = 2097152 [pid 8567] close(3 [pid 8566] <... ioctl resumed>) = 0 [pid 8571] <... close resumed>) = 0 [pid 8567] <... close resumed>) = 0 [pid 8568] munmap(0x7f5817c00000, 138412032 [pid 8566] close(3 [pid 8571] symlink("/dev/binderfs", "./binderfs" [pid 8567] close(4) = 0 [pid 8566] <... close resumed>) = 0 [pid 8567] mkdir("./file0", 0777 [pid 8566] close(4 [pid 8571] <... symlink resumed>) = 0 [pid 8567] <... mkdir resumed>) = 0 [pid 8566] <... close resumed>) = 0 [pid 8566] mkdir("./file0", 0777 [pid 8571] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8571] <... futex resumed>) = 0 [pid 8568] <... munmap resumed>) = 0 [pid 8566] <... mkdir resumed>) = 0 [ 311.810042][ T8566] loop1: detected capacity change from 0 to 4096 [ 311.821590][ T8567] loop4: detected capacity change from 0 to 4096 [ 311.843586][ T8567] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8566] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8568] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8571] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8570] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8571] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8571] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8568] <... openat resumed>) = 4 [pid 8571] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8568] ioctl(4, LOOP_SET_FD, 3 [pid 8571] <... mprotect resumed>) = 0 [pid 8571] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8572 attached [pid 8572] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8571] <... clone3 resumed> => {parent_tid=[8572]}, 88) = 8572 [pid 8572] <... rseq resumed>) = 0 [pid 8572] set_robust_list(0x7f58200ee9a0, 24 [pid 8571] rt_sigprocmask(SIG_SETMASK, [], [pid 8572] <... set_robust_list resumed>) = 0 [pid 8571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8572] rt_sigprocmask(SIG_SETMASK, [], [pid 8571] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8572] memfd_create("syzkaller", 0 [pid 8571] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8568] <... ioctl resumed>) = 0 [pid 8568] close(3) = 0 [pid 8568] close(4) = 0 [pid 8568] mkdir("./file0", 0777) = 0 [pid 8572] <... memfd_create resumed>) = 3 [ 311.853948][ T8566] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 311.874448][ T8568] loop2: detected capacity change from 0 to 4096 [pid 8572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8568] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8570] <... write resumed>) = 2097152 [pid 8567] <... mount resumed>) = 0 [pid 8567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8567] chdir("./file0" [pid 8570] munmap(0x7f5817c00000, 138412032) = 0 [pid 8567] <... chdir resumed>) = 0 [pid 8567] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8567] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 311.923827][ T8568] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8567] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8572] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8570] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8568] <... mount resumed>) = 0 [pid 8566] <... mount resumed>) = 0 [pid 8564] <... futex resumed>) = 0 [pid 8570] <... openat resumed>) = 4 [pid 8570] ioctl(4, LOOP_SET_FD, 3 [pid 8564] exit_group(0 [pid 8568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8567] <... futex resumed>) = ? [pid 8564] <... exit_group resumed>) = ? [pid 8567] +++ exited with 0 +++ [pid 8568] <... openat resumed>) = 3 [pid 8568] chdir("./file0" [pid 8566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8568] <... chdir resumed>) = 0 [pid 8568] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8566] <... openat resumed>) = 3 [pid 8568] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8566] chdir("./file0" [pid 8564] +++ exited with 0 +++ [pid 8568] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8566] <... chdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8564, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8566] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8566] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8566] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8568] <... futex resumed>) = 1 [pid 8565] <... futex resumed>) = 0 [pid 8566] <... futex resumed>) = 1 [pid 5063] <... openat resumed>) = 3 [pid 8566] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8565] exit_group(0 [pid 8563] <... futex resumed>) = 0 [pid 5063] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8563] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8565] <... exit_group resumed>) = ? [pid 8566] <... futex resumed>) = ? [pid 8563] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./345/binderfs", [pid 8566] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./345/binderfs") = 0 [pid 8568] +++ exited with 0 +++ [pid 8565] +++ exited with 0 +++ [pid 8563] +++ exited with 0 +++ [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8565, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8563, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 8570] <... ioctl resumed>) = 0 [pid 8570] close(3) = 0 [pid 5060] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8570] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./345/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8570] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(3, [pid 8570] <... mkdir resumed>) = 0 [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] unlink("./347/binderfs" [pid 8570] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [ 312.004332][ T8570] loop3: detected capacity change from 0 to 4096 [pid 8572] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8572] munmap(0x7f5817c00000, 138412032 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(4, "", [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./351/binderfs", [pid 8570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] getdents64(4, [pid 5061] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8570] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 4 [pid 8570] chdir("./file0" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8570] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] unlink("./351/binderfs" [pid 8570] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5060] <... unlink resumed>) = 0 [pid 8570] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(4 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./345/file0" [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8570] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] close(4 [pid 8570] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 8570] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] exit_group(0) = ? [pid 5061] <... close resumed>) = 0 [pid 8570] <... futex resumed>) = ? [pid 8572] <... munmap resumed>) = 0 [pid 5061] rmdir("./347/file0" [pid 5063] getdents64(3, [pid 5061] <... rmdir resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8572] <... openat resumed>) = 4 [pid 5063] close(3 [pid 8572] ioctl(4, LOOP_SET_FD, 3 [pid 8570] +++ exited with 0 +++ [pid 8569] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5061] getdents64(3, [ 312.055238][ T8570] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5060] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./345" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8569, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5061] close(3 [pid 5060] newfstatat(AT_FDCWD, "./351/file0", [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8572] <... ioctl resumed>) = 0 [pid 5061] rmdir("./347" [pid 5060] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8572] close(3 [pid 5063] mkdir("./346", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8572] <... close resumed>) = 0 [pid 5062] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./348", 0777 [pid 5060] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8572] close(4 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 8572] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5060] close(4 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./351/file0" [pid 5062] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./347/binderfs", [pid 5060] close(3 [pid 8572] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] rmdir("./351" [pid 5062] unlink("./347/binderfs" [pid 8572] <... mkdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... unlink resumed>) = 0 [pid 5060] mkdir("./352", 0777 [pid 8572] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [ 312.100526][ T8572] loop0: detected capacity change from 0 to 4096 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] newfstatat(AT_FDCWD, "./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./347/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./347") = 0 [pid 5062] mkdir("./348", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 8572] <... mount resumed>) = 0 [pid 8572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5061] close(3 [pid 8572] <... openat resumed>) = 3 [ 312.141296][ T8572] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 8572] chdir("./file0" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8572] <... chdir resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8572] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8571] <... futex resumed>) = 0 [pid 8571] exit_group(0) = ? [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8573 ./strace-static-x86_64: Process 8573 attached [pid 8572] +++ exited with 0 +++ [pid 8571] +++ exited with 0 +++ [pid 8573] set_robust_list(0x5555567436a0, 24) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8571, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8573] chdir("./348" [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8573] <... chdir resumed>) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 8573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8573] setpgid(0, 0) = 0 [pid 5059] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8573] <... openat resumed>) = 3 [pid 8573] write(3, "1000", 4) = 4 [pid 8573] close(3) = 0 [pid 8573] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8573] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 5059] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8573] <... futex resumed>) = 0 [pid 8573] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8573] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8573] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8573] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8574 [pid 8573] <... mprotect resumed>) = 0 [pid 5059] getdents64(3, [pid 8573] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8574 attached [pid 8573] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8574] set_robust_list(0x5555567436a0, 24 [pid 8573] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8574] <... set_robust_list resumed>) = 0 [pid 8574] chdir("./346" [pid 8573] <... clone3 resumed> => {parent_tid=[8575]}, 88) = 8575 ./strace-static-x86_64: Process 8575 attached [pid 8574] <... chdir resumed>) = 0 [pid 8573] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... ioctl resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./350/binderfs", [pid 8575] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8573] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8575] <... rseq resumed>) = 0 [pid 8574] <... prctl resumed>) = 0 [pid 8573] <... futex resumed>) = 0 [pid 8575] set_robust_list(0x7f58200ee9a0, 24 [pid 8574] setpgid(0, 0 [pid 8573] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8575] <... set_robust_list resumed>) = 0 [pid 8574] <... setpgid resumed>) = 0 [pid 8575] rt_sigprocmask(SIG_SETMASK, [], [pid 8574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] unlink("./350/binderfs"./strace-static-x86_64: Process 8576 attached [pid 8575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8574] <... openat resumed>) = 3 [pid 8576] set_robust_list(0x5555567436a0, 24 [pid 8575] memfd_create("syzkaller", 0 [pid 8574] write(3, "1000", 4 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8576 [pid 5059] <... unlink resumed>) = 0 [pid 8576] <... set_robust_list resumed>) = 0 [pid 8574] <... write resumed>) = 4 [pid 8574] close(3 [pid 8576] chdir("./352") = 0 [pid 8575] <... memfd_create resumed>) = 3 [pid 8574] <... close resumed>) = 0 [pid 8576] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8574] symlink("/dev/binderfs", "./binderfs" [pid 8576] <... prctl resumed>) = 0 [pid 8575] <... mmap resumed>) = 0x7f5817c00000 [pid 8574] <... symlink resumed>) = 0 [pid 8576] setpgid(0, 0 [pid 8574] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = 0 [pid 8576] <... setpgid resumed>) = 0 [pid 8574] <... futex resumed>) = 0 [pid 8574] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8574] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8576] <... openat resumed>) = 3 [pid 8574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8576] write(3, "1000", 4 [pid 8574] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8574] <... mprotect resumed>) = 0 [pid 8574] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8574] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] newfstatat(AT_FDCWD, "./350/file0", [pid 8576] <... write resumed>) = 4 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8576] close(3./strace-static-x86_64: Process 8577 attached ) = 0 [pid 8574] <... clone3 resumed> => {parent_tid=[8577]}, 88) = 8577 [pid 5059] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8574] rt_sigprocmask(SIG_SETMASK, [], [pid 8576] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8577] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8576] <... symlink resumed>) = 0 [pid 8574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] close(3 [pid 5059] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8576] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... close resumed>) = 0 [pid 8577] <... rseq resumed>) = 0 [pid 8574] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 4 [pid 8577] set_robust_list(0x7f58200ee9a0, 24 [pid 8574] <... futex resumed>) = 0 [pid 8577] <... set_robust_list resumed>) = 0 [pid 8574] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] newfstatat(4, "", [pid 8577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8577] memfd_create("syzkaller", 0 [pid 8576] <... futex resumed>) = 0 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 8578 attached [pid 8577] <... memfd_create resumed>) = 3 [pid 8576] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8578] set_robust_list(0x5555567436a0, 24 [pid 8577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8576] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8578 [pid 5059] getdents64(4, [pid 8578] <... set_robust_list resumed>) = 0 [pid 8577] <... mmap resumed>) = 0x7f5817c00000 [pid 8576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] close(4 [pid 8578] chdir("./348" [pid 8576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... close resumed>) = 0 [pid 8578] <... chdir resumed>) = 0 [pid 8576] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] rmdir("./350/file0" [pid 8578] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8576] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... rmdir resumed>) = 0 [pid 8578] <... prctl resumed>) = 0 [pid 8576] <... mprotect resumed>) = 0 [pid 5059] getdents64(3, [pid 8578] setpgid(0, 0 [pid 8576] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8578] <... setpgid resumed>) = 0 [pid 8576] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] close(3 [pid 8578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... close resumed>) = 0 [pid 8578] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8579 attached [pid 8575] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] rmdir("./350" [pid 8579] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8578] write(3, "1000", 4 [pid 8576] <... clone3 resumed> => {parent_tid=[8579]}, 88) = 8579 [pid 8579] <... rseq resumed>) = 0 [pid 8578] <... write resumed>) = 4 [pid 8576] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... rmdir resumed>) = 0 [pid 8579] set_robust_list(0x7f58200ee9a0, 24 [pid 8578] close(3 [pid 8576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8579] <... set_robust_list resumed>) = 0 [pid 8578] <... close resumed>) = 0 [pid 8579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8579] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8578] symlink("/dev/binderfs", "./binderfs" [pid 8576] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] mkdir("./351", 0777 [pid 8579] <... futex resumed>) = 0 [pid 8578] <... symlink resumed>) = 0 [pid 8576] <... futex resumed>) = 1 [pid 5059] <... mkdir resumed>) = 0 [pid 8576] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8578] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8579] memfd_create("syzkaller", 0 [pid 8578] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8578] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] <... openat resumed>) = 3 [pid 8578] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8578] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8578] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8579] <... memfd_create resumed>) = 3 [pid 8578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8578] <... mmap resumed>) = 0x7f58200ce000 [pid 8579] <... mmap resumed>) = 0x7f5817c00000 [pid 8578] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8578] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8578] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8577] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8578] <... clone3 resumed> => {parent_tid=[8580]}, 88) = 8580 [pid 8578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8578] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8578] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8580 attached [pid 8580] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8575] <... write resumed>) = 2097152 [pid 8580] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8580] memfd_create("syzkaller", 0) = 3 [pid 8575] munmap(0x7f5817c00000, 138412032 [pid 8580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8579] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8577] <... write resumed>) = 2097152 [pid 8575] <... munmap resumed>) = 0 [pid 8575] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8575] ioctl(4, LOOP_SET_FD, 3 [pid 8577] munmap(0x7f5817c00000, 138412032) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8581 ./strace-static-x86_64: Process 8581 attached [pid 8581] set_robust_list(0x5555567436a0, 24) = 0 [pid 8581] chdir("./351") = 0 [pid 8577] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8581] setpgid(0, 0 [pid 8577] <... openat resumed>) = 4 [pid 8581] <... setpgid resumed>) = 0 [pid 8577] ioctl(4, LOOP_SET_FD, 3 [pid 8581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8575] <... ioctl resumed>) = 0 [pid 8581] <... openat resumed>) = 3 [pid 8581] write(3, "1000", 4) = 4 [pid 8581] close(3) = 0 [pid 8581] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8581] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8581] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8581] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8580] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8579] <... write resumed>) = 2097152 [pid 8577] <... ioctl resumed>) = 0 [pid 8575] close(3 [pid 8581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8579] munmap(0x7f5817c00000, 138412032 [pid 8577] close(3 [pid 8575] <... close resumed>) = 0 [pid 8581] <... mmap resumed>) = 0x7f58200ce000 [pid 8575] close(4 [pid 8581] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8577] <... close resumed>) = 0 [pid 8575] <... close resumed>) = 0 [pid 8581] <... mprotect resumed>) = 0 [pid 8579] <... munmap resumed>) = 0 [pid 8577] close(4 [pid 8575] mkdir("./file0", 0777 [pid 8581] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8577] <... close resumed>) = 0 [pid 8575] <... mkdir resumed>) = 0 [pid 8577] mkdir("./file0", 0777 [ 312.445312][ T8575] loop2: detected capacity change from 0 to 4096 [ 312.475916][ T8577] loop4: detected capacity change from 0 to 4096 [pid 8575] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8581] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8580] <... write resumed>) = 2097152 [pid 8577] <... mkdir resumed>) = 0 [pid 8577] mount("/dev/loop4", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8582 attached [pid 8582] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8582] set_robust_list(0x7f58200ee9a0, 24 [pid 8579] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8582] <... set_robust_list resumed>) = 0 [pid 8579] <... openat resumed>) = 4 [pid 8582] rt_sigprocmask(SIG_SETMASK, [], [pid 8579] ioctl(4, LOOP_SET_FD, 3 [pid 8582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8582] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8581] <... clone3 resumed> => {parent_tid=[8582]}, 88) = 8582 [pid 8580] munmap(0x7f5817c00000, 138412032 [pid 8579] <... ioctl resumed>) = 0 [pid 8581] rt_sigprocmask(SIG_SETMASK, [], [pid 8580] <... munmap resumed>) = 0 [pid 8581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8581] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8579] close(3 [pid 8581] <... futex resumed>) = 1 [pid 8581] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8582] <... futex resumed>) = 0 [pid 8582] memfd_create("syzkaller", 0 [pid 8580] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8579] <... close resumed>) = 0 [pid 8582] <... memfd_create resumed>) = 3 [pid 8582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [ 312.524088][ T8575] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 312.535232][ T8577] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 312.536391][ T8579] loop1: detected capacity change from 0 to 4096 [pid 8580] <... openat resumed>) = 4 [pid 8579] close(4 [pid 8580] ioctl(4, LOOP_SET_FD, 3 [pid 8579] <... close resumed>) = 0 [pid 8579] mkdir("./file0", 0777) = 0 [pid 8579] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8580] <... ioctl resumed>) = 0 [pid 8580] close(3) = 0 [pid 8580] close(4) = 0 [pid 8580] mkdir("./file0", 0777) = 0 [pid 8580] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8575] <... mount resumed>) = 0 [ 312.584530][ T8580] loop3: detected capacity change from 0 to 4096 [ 312.586590][ T8579] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8577] <... mount resumed>) = 0 [pid 8575] <... openat resumed>) = 3 [pid 8577] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8577] chdir("./file0") = 0 [pid 8577] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8577] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8574] <... futex resumed>) = 0 [pid 8577] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8574] exit_group(0 [pid 8577] <... futex resumed>) = ? [pid 8575] chdir("./file0" [pid 8574] <... exit_group resumed>) = ? [pid 8577] +++ exited with 0 +++ [pid 8575] <... chdir resumed>) = 0 [pid 8574] +++ exited with 0 +++ [pid 8575] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8574, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8575] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8575] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8575] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] exit_group(0 [ 312.625706][ T8580] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8582] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8575] <... futex resumed>) = ? [pid 8573] <... exit_group resumed>) = ? [pid 8575] +++ exited with 0 +++ [pid 8573] +++ exited with 0 +++ [pid 5063] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8573, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./348/binderfs", [pid 5063] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8579] <... mount resumed>) = 0 [pid 5063] unlink("./346/binderfs" [pid 5061] unlink("./348/binderfs" [pid 8579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... unlink resumed>) = 0 [pid 8579] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8579] chdir("./file0" [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8579] <... chdir resumed>) = 0 [pid 8579] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8579] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8579] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8580] <... mount resumed>) = 0 [pid 8576] <... futex resumed>) = 0 [pid 8580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8576] exit_group(0) = ? [pid 8580] <... openat resumed>) = 3 [pid 8580] chdir("./file0" [pid 8579] <... futex resumed>) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 8582] <... write resumed>) = 2097152 [pid 8580] <... chdir resumed>) = 0 [pid 8579] +++ exited with 0 +++ [pid 8576] +++ exited with 0 +++ [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 8582] munmap(0x7f5817c00000, 138412032 [pid 8580] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./346/file0", [pid 8580] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8580] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8578] <... futex resumed>) = 0 [pid 8580] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8578] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8576, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=3 /* 0.03 s */} --- [pid 8580] <... futex resumed>) = ? [pid 8578] <... exit_group resumed>) = ? [pid 5060] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8580] +++ exited with 0 +++ [pid 8578] +++ exited with 0 +++ [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8578, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=4 /* 0.04 s */} --- [pid 5060] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8582] <... munmap resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 8582] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./348/file0", [pid 5060] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8582] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 8582] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(4, "", [pid 5062] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, [pid 5060] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5060] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(4 [pid 5060] unlink("./352/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] <... unlink resumed>) = 0 [pid 5063] rmdir("./346/file0" [pid 5060] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8582] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8582] close(3 [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 5061] getdents64(4, [pid 8582] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(3, "", [pid 8582] close(4 [pid 5063] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] getdents64(4, [pid 5060] <... umount2 resumed>) = 0 [pid 5063] rmdir("./346" [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8582] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] close(4 [pid 5060] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8582] mkdir("./file0", 0777 [pid 5063] mkdir("./347", 0777 [pid 5062] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./348/binderfs", [pid 5061] rmdir("./348/file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./352/file0", [pid 8582] <... mkdir resumed>) = 0 [pid 5062] unlink("./348/binderfs" [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8582] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... openat resumed>) = 3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] close(3 [pid 5060] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5061] rmdir("./348" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./349", 0777 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5060] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5060] close(4 [pid 5062] <... openat resumed>) = 4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5060] rmdir("./352/file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(3, [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5060] close(3 [pid 5062] rmdir("./348/file0") = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] rmdir("./352" [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] close(3 [pid 5060] mkdir("./353", 0777 [pid 5062] <... close resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5062] rmdir("./348") = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] mkdir("./349", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [ 312.769975][ T8582] loop0: detected capacity change from 0 to 4096 [ 312.795515][ T8582] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5061] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8582] <... mount resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8583 [pid 8582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 8584 attached ./strace-static-x86_64: Process 8583 attached ) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8584 [pid 8584] set_robust_list(0x5555567436a0, 24 [pid 8583] set_robust_list(0x5555567436a0, 24 [pid 5062] <... ioctl resumed>) = 0 [pid 8584] <... set_robust_list resumed>) = 0 [pid 8584] chdir("./349" [pid 8582] chdir("./file0") = 0 [pid 8584] <... chdir resumed>) = 0 [pid 8582] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8582] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8584] <... prctl resumed>) = 0 [pid 8582] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8584] setpgid(0, 0 [pid 8582] <... futex resumed>) = 1 [pid 8584] <... setpgid resumed>) = 0 [pid 8582] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8583] <... set_robust_list resumed>) = 0 [pid 8584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8583] chdir("./347" [pid 8581] <... futex resumed>) = 0 [pid 8584] <... openat resumed>) = 3 [pid 8583] <... chdir resumed>) = 0 [pid 8584] write(3, "1000", 4 [pid 8581] exit_group(0 [pid 8584] <... write resumed>) = 4 [pid 8583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8582] <... futex resumed>) = ? [pid 8581] <... exit_group resumed>) = ? [pid 8584] close(3 [pid 8583] <... prctl resumed>) = 0 [pid 8582] +++ exited with 0 +++ [pid 8584] <... close resumed>) = 0 [pid 8583] setpgid(0, 0 [pid 8581] +++ exited with 0 +++ [pid 5062] close(3 [pid 8584] symlink("/dev/binderfs", "./binderfs" [pid 8583] <... setpgid resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8581, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8584] <... symlink resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8584] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 8585 attached [pid 8584] <... futex resumed>) = 0 [pid 8583] <... openat resumed>) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8585 [pid 8585] set_robust_list(0x5555567436a0, 24 [pid 8584] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8585] <... set_robust_list resumed>) = 0 [pid 8584] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8583] write(3, "1000", 4 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8583] <... write resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] chdir("./349" [pid 8584] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] newfstatat(3, "", [pid 8584] <... mmap resumed>) = 0x7f58200ce000 [pid 8583] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8585] <... chdir resumed>) = 0 [pid 8584] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] getdents64(3, [pid 8585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8584] <... mprotect resumed>) = 0 [pid 8583] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8585] <... prctl resumed>) = 0 [pid 8584] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8583] symlink("/dev/binderfs", "./binderfs" [pid 5059] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] setpgid(0, 0 [pid 8584] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8583] <... symlink resumed>) = 0 [pid 5060] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] <... setpgid resumed>) = 0 [pid 8584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8583] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./351/binderfs", ./strace-static-x86_64: Process 8586 attached [pid 8585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8586] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8585] <... openat resumed>) = 3 [pid 8584] <... clone3 resumed> => {parent_tid=[8586]}, 88) = 8586 [pid 8583] <... futex resumed>) = 0 [pid 5059] unlink("./351/binderfs" [pid 8586] <... rseq resumed>) = 0 [pid 8585] write(3, "1000", 4 [pid 8584] rt_sigprocmask(SIG_SETMASK, [], [pid 8583] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] <... unlink resumed>) = 0 [pid 8583] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8587 [pid 5059] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8587 attached [pid 8586] set_robust_list(0x7f58200ee9a0, 24 [pid 8584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... umount2 resumed>) = 0 [pid 8587] set_robust_list(0x5555567436a0, 24 [pid 8586] <... set_robust_list resumed>) = 0 [pid 8585] <... write resumed>) = 4 [pid 8584] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8587] <... set_robust_list resumed>) = 0 [pid 8586] rt_sigprocmask(SIG_SETMASK, [], [pid 8583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8587] chdir("./353" [pid 8583] <... mmap resumed>) = 0x7f58200ce000 [pid 8587] <... chdir resumed>) = 0 [pid 8586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8585] close(3 [pid 8584] <... futex resumed>) = 0 [pid 8583] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8584] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8585] <... close resumed>) = 0 [pid 8583] <... mprotect resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./351/file0", [pid 8587] <... prctl resumed>) = 0 [pid 8586] memfd_create("syzkaller", 0 [pid 8585] symlink("/dev/binderfs", "./binderfs" [pid 8583] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8587] setpgid(0, 0 [pid 8583] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8585] <... symlink resumed>) = 0 [pid 8583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8588 attached [pid 8587] <... setpgid resumed>) = 0 [pid 8586] <... memfd_create resumed>) = 3 [pid 8585] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8588] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8585] <... futex resumed>) = 0 [pid 8583] <... clone3 resumed> => {parent_tid=[8588]}, 88) = 8588 [pid 5059] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8588] <... rseq resumed>) = 0 [pid 8587] <... openat resumed>) = 3 [pid 8586] <... mmap resumed>) = 0x7f5817c00000 [pid 8585] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8583] rt_sigprocmask(SIG_SETMASK, [], [pid 8588] set_robust_list(0x7f58200ee9a0, 24 [pid 8587] write(3, "1000", 4 [pid 8585] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8588] <... set_robust_list resumed>) = 0 [pid 8587] <... write resumed>) = 4 [pid 8585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8583] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8588] rt_sigprocmask(SIG_SETMASK, [], [pid 8587] close(3 [pid 8585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8583] <... futex resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 8588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8587] <... close resumed>) = 0 [pid 8585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8583] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8588] memfd_create("syzkaller", 0 [pid 8587] symlink("/dev/binderfs", "./binderfs" [pid 8585] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8585] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8586] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8585] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8587] <... symlink resumed>) = 0 [pid 8585] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] getdents64(4, ./strace-static-x86_64: Process 8589 attached [pid 8588] <... memfd_create resumed>) = 3 [pid 8587] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8587] <... futex resumed>) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8588] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] close(4) = 0 [pid 8585] <... clone3 resumed> => {parent_tid=[8589]}, 88) = 8589 [pid 5059] rmdir("./351/file0" [pid 8587] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8589] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8585] rt_sigprocmask(SIG_SETMASK, [], [pid 8587] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8587] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8585] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8589] <... rseq resumed>) = 0 [pid 8585] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8589] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8589] memfd_create("syzkaller", 0 [pid 8587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5059] getdents64(3, [pid 8587] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8589] <... memfd_create resumed>) = 3 [pid 8587] <... mprotect resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8587] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] close(3) = 0 [pid 8587] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] rmdir("./351" [pid 8588] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./352", 0777 [pid 8587] <... clone3 resumed> => {parent_tid=[8590]}, 88) = 8590 [pid 5059] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8590 attached [pid 8587] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8590] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8587] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8587] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... openat resumed>) = 3 [pid 8586] <... write resumed>) = 2097152 [pid 8590] <... rseq resumed>) = 0 [pid 8586] munmap(0x7f5817c00000, 138412032 [pid 8590] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8590] memfd_create("syzkaller", 0 [pid 8589] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8588] <... write resumed>) = 2097152 [pid 8590] <... memfd_create resumed>) = 3 [pid 8588] munmap(0x7f5817c00000, 138412032 [pid 8590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8589] <... write resumed>) = 2097152 [pid 8586] <... munmap resumed>) = 0 [pid 8590] <... mmap resumed>) = 0x7f5817c00000 [pid 8589] munmap(0x7f5817c00000, 138412032 [pid 8588] <... munmap resumed>) = 0 [pid 8589] <... munmap resumed>) = 0 [pid 8588] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8586] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8588] <... openat resumed>) = 4 [pid 8586] <... openat resumed>) = 4 [pid 8588] ioctl(4, LOOP_SET_FD, 3 [pid 8589] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8586] ioctl(4, LOOP_SET_FD, 3 [pid 8589] <... openat resumed>) = 4 [pid 8589] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8589] close(3) = 0 [pid 8589] close(4) = 0 [pid 8588] <... ioctl resumed>) = 0 [pid 8586] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8588] close(3) = 0 [pid 5059] close(3 [pid 8588] close(4 [pid 8589] mkdir("./file0", 0777 [pid 8590] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8589] <... mkdir resumed>) = 0 [ 313.119018][ T8588] loop4: detected capacity change from 0 to 4096 [ 313.134537][ T8589] loop3: detected capacity change from 0 to 4096 [ 313.134806][ T8586] loop2: detected capacity change from 0 to 4096 [pid 8588] <... close resumed>) = 0 [pid 8586] close(3 [pid 5059] <... close resumed>) = 0 [pid 8588] mkdir("./file0", 0777 [pid 8586] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8589] mount("/dev/loop3", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8591 attached [pid 8588] <... mkdir resumed>) = 0 [pid 8586] close(4 [pid 8591] set_robust_list(0x5555567436a0, 24 [pid 8588] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8586] <... close resumed>) = 0 [pid 8591] <... set_robust_list resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8591 [pid 8591] chdir("./352") = 0 [pid 8591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8591] setpgid(0, 0 [pid 8586] mkdir("./file0", 0777 [pid 8591] <... setpgid resumed>) = 0 [pid 8586] <... mkdir resumed>) = 0 [pid 8591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 313.174764][ T8589] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 313.197785][ T8588] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8586] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8591] <... openat resumed>) = 3 [pid 8590] <... write resumed>) = 2097152 [pid 8591] write(3, "1000", 4) = 4 [pid 8591] close(3) = 0 [pid 8591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8591] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8591] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8591] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8590] munmap(0x7f5817c00000, 138412032 [pid 8589] <... mount resumed>) = 0 [pid 8591] <... mmap resumed>) = 0x7f58200ce000 [pid 8590] <... munmap resumed>) = 0 [pid 8589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8591] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8591] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8589] <... openat resumed>) = 3 [pid 8591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8589] chdir("./file0") = 0 [pid 8589] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8592 attached [pid 8592] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8591] <... clone3 resumed> => {parent_tid=[8592]}, 88) = 8592 [pid 8592] <... rseq resumed>) = 0 [pid 8591] rt_sigprocmask(SIG_SETMASK, [], [pid 8589] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8589] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8592] set_robust_list(0x7f58200ee9a0, 24 [pid 8591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8590] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8589] <... futex resumed>) = 1 [pid 8588] <... mount resumed>) = 0 [pid 8585] <... futex resumed>) = 0 [pid 8592] <... set_robust_list resumed>) = 0 [pid 8591] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8590] <... openat resumed>) = 4 [pid 8589] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8585] exit_group(0 [pid 8592] rt_sigprocmask(SIG_SETMASK, [], [pid 8591] <... futex resumed>) = 0 [ 313.225977][ T8586] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8590] ioctl(4, LOOP_SET_FD, 3 [pid 8589] <... futex resumed>) = ? [pid 8588] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8585] <... exit_group resumed>) = ? [pid 8592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8591] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8588] <... openat resumed>) = 3 [pid 8588] chdir("./file0") = 0 [pid 8588] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8592] memfd_create("syzkaller", 0 [pid 8590] <... ioctl resumed>) = 0 [pid 8589] +++ exited with 0 +++ [pid 8588] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8585] +++ exited with 0 +++ [pid 8592] <... memfd_create resumed>) = 3 [pid 8590] close(3 [pid 8588] <... futex resumed>) = 1 [pid 8583] <... futex resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8585, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8590] <... close resumed>) = 0 [pid 8588] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8583] exit_group(0 [pid 8592] <... mmap resumed>) = 0x7f5817c00000 [pid 8590] close(4 [pid 8588] <... futex resumed>) = ? [pid 8583] <... exit_group resumed>) = ? [pid 8590] <... close resumed>) = 0 [pid 8588] +++ exited with 0 +++ [pid 8583] +++ exited with 0 +++ [pid 5062] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] mkdir("./file0", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8583, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8590] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8590] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5062] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [ 313.280844][ T8590] loop1: detected capacity change from 0 to 4096 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 5063] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8586] <... mount resumed>) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./349/binderfs", [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./349/binderfs" [pid 8586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8586] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8586] chdir("./file0" [pid 5063] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8586] <... chdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8586] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] unlink("./347/binderfs" [pid 8586] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8592] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8586] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8586] <... futex resumed>) = 1 [pid 8584] <... futex resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./349/file0", [pid 8586] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8584] exit_group(0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8586] <... futex resumed>) = ? [pid 8584] <... exit_group resumed>) = ? [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 313.333054][ T8590] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5062] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8586] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 8584] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8584, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5062] newfstatat(4, "", [pid 5061] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 3 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 5061] newfstatat(3, "", [pid 5063] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5061] getdents64(3, [pid 5063] rmdir("./347/file0" [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] rmdir("./349/file0" [pid 5061] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./347") = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8590] <... mount resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] newfstatat(AT_FDCWD, "./349/binderfs", [pid 8590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] mkdir("./348", 0777 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8590] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 5061] unlink("./349/binderfs" [pid 8590] chdir("./file0" [pid 5062] <... close resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8590] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] rmdir("./349" [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8590] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./350", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8590] <... futex resumed>) = 1 [pid 8587] <... futex resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./349/file0", [pid 8590] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8587] exit_group(0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8590] <... futex resumed>) = ? [pid 8587] <... exit_group resumed>) = ? [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] +++ exited with 0 +++ [pid 8587] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8587, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] <... openat resumed>) = 4 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5061] newfstatat(4, "", [pid 5062] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5060] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 5060] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8592] <... write resumed>) = 2097152 [pid 5061] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 8592] munmap(0x7f5817c00000, 138412032 [pid 5061] rmdir("./349/file0" [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8592] <... munmap resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8592] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5061] getdents64(3, [pid 5060] newfstatat(AT_FDCWD, "./353/binderfs", [pid 8592] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(3 [pid 5060] unlink("./353/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5061] rmdir("./349") = 0 [pid 5060] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./350", 0777 [pid 8592] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8592] close(3) = 0 [pid 8592] close(4) = 0 [pid 8592] mkdir("./file0", 0777) = 0 [pid 8592] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5060] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] newfstatat(4, "", [pid 5061] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5060] getdents64(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 ./strace-static-x86_64: Process 8593 attached [pid 5060] rmdir("./353/file0" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... rmdir resumed>) = 0 [pid 8593] set_robust_list(0x5555567436a0, 24) = 0 [pid 5060] getdents64(3, [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8593 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8593] chdir("./348" [pid 5060] close(3) = 0 [pid 8593] <... chdir resumed>) = 0 [pid 5060] rmdir("./353") = 0 [pid 8593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] mkdir("./354", 0777) = 0 [pid 8593] <... prctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8593] setpgid(0, 0 [pid 5060] <... openat resumed>) = 3 [pid 8593] <... setpgid resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8593] write(3, "1000", 4) = 4 [pid 8593] close(3) = 0 [pid 8593] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8593] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] close(3 [pid 8593] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8593] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [ 313.457357][ T8592] loop0: detected capacity change from 0 to 4096 [ 313.494448][ T8592] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8593] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8593] <... mmap resumed>) = 0x7f58200ce000 [pid 8593] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 8594 attached [pid 8593] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8594] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8594 [pid 8593] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8594] <... set_robust_list resumed>) = 0 [pid 8593] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8595 attached [pid 8595] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8593] <... clone3 resumed> => {parent_tid=[8595]}, 88) = 8595 [pid 8595] <... rseq resumed>) = 0 [pid 8593] rt_sigprocmask(SIG_SETMASK, [], [pid 8595] set_robust_list(0x7f58200ee9a0, 24 [pid 8593] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8595] <... set_robust_list resumed>) = 0 [pid 8593] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8595] rt_sigprocmask(SIG_SETMASK, [], [pid 8593] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8595] memfd_create("syzkaller", 0) = 3 [pid 8594] chdir("./350") = 0 [pid 8594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8594] setpgid(0, 0 [pid 8595] <... mmap resumed>) = 0x7f5817c00000 [pid 8594] <... setpgid resumed>) = 0 [pid 8594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8594] write(3, "1000", 4) = 4 [pid 8594] close(3) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8594] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8594] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] close(3 [pid 8594] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8594] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... close resumed>) = 0 [pid 8594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8596 attached [pid 8594] <... mmap resumed>) = 0x7f58200ce000 [pid 8594] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8592] <... mount resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8596 [pid 5060] close(3 [pid 8594] <... mprotect resumed>) = 0 [pid 8592] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 8596] set_robust_list(0x5555567436a0, 24 [pid 8594] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8592] <... openat resumed>) = 3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8596] <... set_robust_list resumed>) = 0 [pid 8594] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8592] chdir("./file0" [pid 8596] chdir("./350" [pid 8594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8592] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8598 attached [pid 8592] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8596] <... chdir resumed>) = 0 [pid 8592] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8592] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8597 [pid 8596] <... prctl resumed>) = 0 [pid 8592] <... futex resumed>) = 1 [pid 8591] <... futex resumed>) = 0 [pid 8596] setpgid(0, 0 [pid 8592] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8591] exit_group(0./strace-static-x86_64: Process 8597 attached [pid 8598] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8596] <... setpgid resumed>) = 0 [pid 8594] <... clone3 resumed> => {parent_tid=[8598]}, 88) = 8598 [pid 8592] <... futex resumed>) = ? [pid 8591] <... exit_group resumed>) = ? [pid 8597] set_robust_list(0x5555567436a0, 24 [pid 8598] <... rseq resumed>) = 0 [pid 8596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8594] rt_sigprocmask(SIG_SETMASK, [], [pid 8592] +++ exited with 0 +++ [pid 8591] +++ exited with 0 +++ [pid 8597] <... set_robust_list resumed>) = 0 [pid 8598] set_robust_list(0x7f58200ee9a0, 24 [pid 8596] <... openat resumed>) = 3 [pid 8594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8591, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8597] chdir("./354" [pid 8598] <... set_robust_list resumed>) = 0 [pid 8596] write(3, "1000", 4 [pid 8595] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8594] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8597] <... chdir resumed>) = 0 [pid 8598] rt_sigprocmask(SIG_SETMASK, [], [pid 8596] <... write resumed>) = 4 [pid 8594] <... futex resumed>) = 0 [pid 8597] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8596] close(3 [pid 8594] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8597] <... prctl resumed>) = 0 [pid 8596] <... close resumed>) = 0 [pid 5059] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8597] setpgid(0, 0 [pid 8598] memfd_create("syzkaller", 0 [pid 8596] <... symlink resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8597] <... setpgid resumed>) = 0 [pid 8597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8598] <... memfd_create resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 8597] <... openat resumed>) = 3 [pid 8597] write(3, "1000", 4 [pid 8598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] newfstatat(3, "", [pid 8597] <... write resumed>) = 4 [pid 8598] <... mmap resumed>) = 0x7f5817c00000 [pid 8596] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8597] close(3 [pid 8596] <... futex resumed>) = 0 [pid 5059] getdents64(3, [pid 8597] <... close resumed>) = 0 [pid 8596] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8597] symlink("/dev/binderfs", "./binderfs" [pid 8596] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8597] <... symlink resumed>) = 0 [pid 8596] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./352/binderfs") = 0 [pid 8596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8597] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8597] <... futex resumed>) = 0 [pid 8596] <... mprotect resumed>) = 0 [pid 8597] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8596] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8597] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8596] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8597] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8597] <... mprotect resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8599 attached [pid 8597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8600 attached [pid 8599] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8596] <... clone3 resumed> => {parent_tid=[8599]}, 88) = 8599 [pid 8600] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8599] <... rseq resumed>) = 0 [pid 8597] <... clone3 resumed> => {parent_tid=[8600]}, 88) = 8600 [pid 8596] rt_sigprocmask(SIG_SETMASK, [], [pid 8595] <... write resumed>) = 2097152 [pid 8599] set_robust_list(0x7f58200ee9a0, 24 [pid 8596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8600] <... rseq resumed>) = 0 [pid 8597] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] set_robust_list(0x7f58200ee9a0, 24 [pid 8599] <... set_robust_list resumed>) = 0 [pid 8597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8598] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8596] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8595] munmap(0x7f5817c00000, 138412032 [pid 8599] rt_sigprocmask(SIG_SETMASK, [], [pid 8597] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] <... futex resumed>) = 0 [pid 8599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8596] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8599] memfd_create("syzkaller", 0 [pid 8597] <... futex resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./352/file0", [pid 8600] <... set_robust_list resumed>) = 0 [pid 8597] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8599] <... memfd_create resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8599] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8595] <... munmap resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8600] memfd_create("syzkaller", 0 [pid 5059] newfstatat(4, "", [pid 8600] <... memfd_create resumed>) = 3 [pid 8600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8595] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] getdents64(4, [pid 8595] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8595] ioctl(4, LOOP_SET_FD, 3 [pid 5059] close(4) = 0 [pid 5059] rmdir("./352/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./352") = 0 [pid 5059] mkdir("./353", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8598] <... write resumed>) = 2097152 [pid 8595] <... ioctl resumed>) = 0 [pid 8595] close(3) = 0 [pid 8598] munmap(0x7f5817c00000, 138412032 [pid 8595] close(4) = 0 [pid 8595] mkdir("./file0", 0777) = 0 [pid 8595] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8600] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8599] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8598] <... munmap resumed>) = 0 [pid 8598] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 313.756402][ T8595] loop4: detected capacity change from 0 to 4096 [ 313.789308][ T8595] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8598] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8598] close(3) = 0 [pid 8598] close(4) = 0 [pid 8598] mkdir("./file0", 0777) = 0 [pid 8598] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] <... ioctl resumed>) = 0 [ 313.825053][ T8598] loop3: detected capacity change from 0 to 4096 [pid 8600] <... write resumed>) = 2097152 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8599] <... write resumed>) = 2097152 [pid 8599] munmap(0x7f5817c00000, 138412032) = 0 [pid 8600] munmap(0x7f5817c00000, 138412032) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8601 ./strace-static-x86_64: Process 8601 attached [pid 8601] set_robust_list(0x5555567436a0, 24) = 0 [pid 8601] chdir("./353") = 0 [pid 8601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8599] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8601] setpgid(0, 0 [pid 8599] <... openat resumed>) = 4 [pid 8601] <... setpgid resumed>) = 0 [pid 8599] ioctl(4, LOOP_SET_FD, 3 [pid 8601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8600] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8599] <... ioctl resumed>) = 0 [pid 8601] write(3, "1000", 4 [pid 8600] <... openat resumed>) = 4 [pid 8599] close(3 [pid 8601] <... write resumed>) = 4 [pid 8599] <... close resumed>) = 0 [pid 8599] close(4) = 0 [pid 8599] mkdir("./file0", 0777 [pid 8601] close(3 [pid 8600] ioctl(4, LOOP_SET_FD, 3 [pid 8599] <... mkdir resumed>) = 0 [ 313.874353][ T8598] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 313.914001][ T8599] loop2: detected capacity change from 0 to 4096 [pid 8601] <... close resumed>) = 0 [pid 8599] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8601] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8601] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8601] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8601] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8601] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8601] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8602 attached => {parent_tid=[8602]}, 88) = 8602 [pid 8595] <... mount resumed>) = 0 [pid 8601] rt_sigprocmask(SIG_SETMASK, [], [pid 8595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8602] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8595] <... openat resumed>) = 3 [pid 8602] <... rseq resumed>) = 0 [pid 8601] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] <... ioctl resumed>) = 0 [pid 8595] chdir("./file0" [pid 8602] set_robust_list(0x7f58200ee9a0, 24 [pid 8601] <... futex resumed>) = 0 [pid 8600] close(3 [pid 8595] <... chdir resumed>) = 0 [pid 8602] <... set_robust_list resumed>) = 0 [pid 8601] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8600] <... close resumed>) = 0 [pid 8595] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8602] rt_sigprocmask(SIG_SETMASK, [], [pid 8600] close(4 [pid 8598] <... mount resumed>) = 0 [pid 8595] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8600] <... close resumed>) = 0 [pid 8595] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] memfd_create("syzkaller", 0 [pid 8600] mkdir("./file0", 0777 [pid 8598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8595] <... futex resumed>) = 1 [pid 8593] <... futex resumed>) = 0 [pid 8595] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8598] <... openat resumed>) = 3 [pid 8593] exit_group(0 [pid 8595] <... futex resumed>) = ? [pid 8593] <... exit_group resumed>) = ? [pid 8600] <... mkdir resumed>) = 0 [pid 8598] chdir("./file0" [pid 8595] +++ exited with 0 +++ [pid 8602] <... memfd_create resumed>) = 3 [pid 8600] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8598] <... chdir resumed>) = 0 [pid 8593] +++ exited with 0 +++ [ 313.931222][ T8600] loop1: detected capacity change from 0 to 4096 [ 313.942177][ T8599] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8598] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8593, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 8598] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8602] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8598] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8594] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8598] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8594] exit_group(0) = ? [pid 8598] <... futex resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8598] +++ exited with 0 +++ [pid 8594] +++ exited with 0 +++ [pid 5063] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8594, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... restart_syscall resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./348/binderfs" [pid 5062] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5062] newfstatat(3, "", [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, [pid 5063] getdents64(4, [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5062] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 313.999440][ T8600] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5063] rmdir("./348/file0") = 0 [pid 5062] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5062] unlink("./350/binderfs" [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5063] close(3 [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./348") = 0 [pid 5063] mkdir("./349", 0777) = 0 [pid 8599] <... mount resumed>) = 0 [pid 8599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8602] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8599] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 8599] chdir("./file0") = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8599] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = 0 [pid 8599] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./350/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8599] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8596] exit_group(0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 8599] <... futex resumed>) = ? [pid 8596] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8599] +++ exited with 0 +++ [pid 5062] getdents64(4, [pid 8596] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8596, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5062] getdents64(4, [pid 5061] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./350/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 8600] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5061] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8600] chdir("./file0" [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8602] <... write resumed>) = 2097152 [pid 8600] <... chdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 8602] munmap(0x7f5817c00000, 138412032 [pid 5062] rmdir("./350" [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8602] <... munmap resumed>) = 0 [pid 8600] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5061] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./350/binderfs", [pid 8600] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8600] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8600] <... futex resumed>) = 1 [pid 8600] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8597] <... futex resumed>) = 0 [pid 8597] exit_group(0 [pid 5061] unlink("./350/binderfs" [pid 8597] <... exit_group resumed>) = ? [pid 8600] <... futex resumed>) = ? [pid 8602] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] mkdir("./351", 0777 [pid 5061] <... unlink resumed>) = 0 [pid 8602] <... openat resumed>) = 4 [pid 8600] +++ exited with 0 +++ [pid 8597] +++ exited with 0 +++ [pid 5062] <... mkdir resumed>) = 0 [pid 8602] ioctl(4, LOOP_SET_FD, 3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8597, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8602] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... openat resumed>) = 3 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8602] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 8602] <... close resumed>) = 0 [pid 5060] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8602] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8602] <... close resumed>) = 0 [pid 5063] close(3 [pid 5060] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8602] mkdir("./file0", 0777 [pid 5060] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./350/file0", [pid 8602] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(3, "", [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8602] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 4 [pid 5060] getdents64(3, [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] close(4) = 0 [pid 5061] rmdir("./350/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./350") = 0 [pid 5061] mkdir("./351", 0777) = 0 ./strace-static-x86_64: Process 8603 attached [pid 5060] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8603 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] unlink("./354/binderfs" [pid 8603] set_robust_list(0x5555567436a0, 24 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... unlink resumed>) = 0 [pid 8603] <... set_robust_list resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8603] chdir("./349") = 0 [pid 8603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8603] setpgid(0, 0) = 0 [pid 8603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./354/file0", [pid 8603] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8603] write(3, "1000", 4) = 4 [pid 8603] close(3) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 8603] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [ 314.144004][ T8602] loop0: detected capacity change from 0 to 4096 [ 314.175557][ T8602] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8603] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] getdents64(4, [pid 8603] <... futex resumed>) = 0 [pid 8603] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8603] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] close(4 [pid 8603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... close resumed>) = 0 [pid 8603] <... mmap resumed>) = 0x7f58200ce000 [pid 8603] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] rmdir("./354/file0" [pid 8603] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... rmdir resumed>) = 0 [pid 8603] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8602] <... mount resumed>) = 0 [pid 5060] getdents64(3, ./strace-static-x86_64: Process 8604 attached [pid 8603] <... clone3 resumed> => {parent_tid=[8604]}, 88) = 8604 [pid 8604] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8603] rt_sigprocmask(SIG_SETMASK, [], [pid 8602] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8604] <... rseq resumed>) = 0 [pid 8603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8604] set_robust_list(0x7f58200ee9a0, 24 [pid 8603] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... set_robust_list resumed>) = 0 [pid 8603] <... futex resumed>) = 0 [pid 8602] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8604] rt_sigprocmask(SIG_SETMASK, [], [pid 8603] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8602] chdir("./file0" [pid 5062] close(3 [pid 5060] close(3 [pid 8604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8602] <... chdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8604] memfd_create("syzkaller", 0 [pid 8602] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8602] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 8605 attached [pid 8604] <... memfd_create resumed>) = 3 [pid 8602] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./354" [pid 8604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8602] <... futex resumed>) = 1 [pid 8601] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8601] exit_group(0 [pid 8605] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8605 [pid 8605] <... set_robust_list resumed>) = 0 [pid 8605] chdir("./351") = 0 [pid 8605] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] mkdir("./355", 0777 [pid 8605] <... prctl resumed>) = 0 [pid 8605] setpgid(0, 0 [pid 8604] <... mmap resumed>) = 0x7f5817c00000 [pid 8605] <... setpgid resumed>) = 0 [pid 8602] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... mkdir resumed>) = 0 [pid 8605] <... openat resumed>) = 3 [pid 8602] <... futex resumed>) = ? [pid 8601] <... exit_group resumed>) = ? [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8602] +++ exited with 0 +++ [pid 8605] write(3, "1000", 4) = 4 [pid 8605] close(3) = 0 [pid 8605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8605] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... openat resumed>) = 3 [pid 8605] <... futex resumed>) = 0 [pid 8605] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8605] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8605] <... mmap resumed>) = 0x7f58200ce000 [pid 8605] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8601] +++ exited with 0 +++ ./strace-static-x86_64: Process 8606 attached [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8601, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5059] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8606] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8606] <... rseq resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8606] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] <... openat resumed>) = 3 [pid 8606] <... set_robust_list resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8606] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] getdents64(3, [pid 8606] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8605] <... clone3 resumed> => {parent_tid=[8606]}, 88) = 8606 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8605] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(AT_FDCWD, "./353/binderfs", [pid 8605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./353/binderfs") = 0 [pid 5059] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8605] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... futex resumed>) = 0 [pid 8605] <... futex resumed>) = 1 [pid 8606] memfd_create("syzkaller", 0 [pid 8605] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8606] <... memfd_create resumed>) = 3 [pid 8606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8607 [pid 5059] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8607 attached [pid 5059] getdents64(4, [pid 8607] set_robust_list(0x5555567436a0, 24 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8607] <... set_robust_list resumed>) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./353/file0") = 0 [pid 5059] getdents64(3, [pid 8607] chdir("./351" [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8607] <... chdir resumed>) = 0 [pid 5059] close(3 [pid 8607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... close resumed>) = 0 [pid 8607] setpgid(0, 0 [pid 5059] rmdir("./353" [pid 8607] <... setpgid resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8607] write(3, "1000", 4 [pid 5059] mkdir("./354", 0777) = 0 [pid 8607] <... write resumed>) = 4 [pid 8607] close(3) = 0 [pid 8604] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8607] symlink("/dev/binderfs", "./binderfs" [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8607] <... symlink resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8607] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8607] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8607] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8607] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8607] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8608]}, 88) = 8608 [pid 8607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8607] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8607] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8608 attached [pid 8606] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... ioctl resumed>) = 0 [pid 8608] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8608] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8604] <... write resumed>) = 2097152 [pid 5060] close(3) = 0 [pid 8608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8608] memfd_create("syzkaller", 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8608] <... memfd_create resumed>) = 3 [pid 8608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 ./strace-static-x86_64: Process 8609 attached [pid 8604] munmap(0x7f5817c00000, 138412032 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8609 [pid 8609] set_robust_list(0x5555567436a0, 24) = 0 [pid 8609] chdir("./355" [pid 8604] <... munmap resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8604] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8609] <... chdir resumed>) = 0 [pid 8604] ioctl(4, LOOP_SET_FD, 3 [pid 8609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8609] setpgid(0, 0) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8606] <... write resumed>) = 2097152 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8610 [pid 8609] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8610 attached [pid 8609] write(3, "1000", 4 [pid 8606] munmap(0x7f5817c00000, 138412032 [pid 8609] <... write resumed>) = 4 [pid 8610] set_robust_list(0x5555567436a0, 24) = 0 [pid 8610] chdir("./354") = 0 [pid 8610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8604] <... ioctl resumed>) = 0 [pid 8604] close(3 [pid 8610] setpgid(0, 0 [pid 8604] <... close resumed>) = 0 [pid 8610] <... setpgid resumed>) = 0 [pid 8604] close(4 [pid 8610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8609] close(3 [pid 8606] <... munmap resumed>) = 0 [pid 8604] <... close resumed>) = 0 [pid 8610] <... openat resumed>) = 3 [pid 8609] <... close resumed>) = 0 [pid 8609] symlink("/dev/binderfs", "./binderfs" [pid 8604] mkdir("./file0", 0777 [pid 8610] write(3, "1000", 4 [pid 8609] <... symlink resumed>) = 0 [pid 8604] <... mkdir resumed>) = 0 [pid 8610] <... write resumed>) = 4 [pid 8609] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8610] close(3 [ 314.440533][ T8604] loop4: detected capacity change from 0 to 4096 [pid 8604] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8610] <... close resumed>) = 0 [pid 8609] <... futex resumed>) = 0 [pid 8608] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8606] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8610] symlink("/dev/binderfs", "./binderfs" [pid 8609] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8606] <... openat resumed>) = 4 [pid 8609] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8606] ioctl(4, LOOP_SET_FD, 3 [pid 8609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8610] <... symlink resumed>) = 0 [pid 8609] <... mmap resumed>) = 0x7f58200ce000 [pid 8609] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8610] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8610] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8610] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 ./strace-static-x86_64: Process 8611 attached [pid 8610] <... clone3 resumed> => {parent_tid=[8611]}, 88) = 8611 [pid 8611] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8610] rt_sigprocmask(SIG_SETMASK, [], [pid 8609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8611] <... rseq resumed>) = 0 [pid 8610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8611] set_robust_list(0x7f58200ee9a0, 24 [pid 8610] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8611] <... set_robust_list resumed>) = 0 [pid 8610] <... futex resumed>) = 0 [pid 8611] rt_sigprocmask(SIG_SETMASK, [], [pid 8610] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8606] <... ioctl resumed>) = 0 [pid 8611] memfd_create("syzkaller", 0) = 3 [pid 8606] close(3) = 0 [pid 8606] close(4) = 0 ./strace-static-x86_64: Process 8612 attached [pid 8611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8606] mkdir("./file0", 0777 [pid 8611] <... mmap resumed>) = 0x7f5817c00000 [pid 8609] <... clone3 resumed> => {parent_tid=[8612]}, 88) = 8612 [ 314.482420][ T8604] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 314.498198][ T8606] loop3: detected capacity change from 0 to 4096 [pid 8612] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8609] rt_sigprocmask(SIG_SETMASK, [], [pid 8606] <... mkdir resumed>) = 0 [pid 8612] <... rseq resumed>) = 0 [pid 8609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8608] <... write resumed>) = 2097152 [pid 8606] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8612] set_robust_list(0x7f58200ee9a0, 24 [pid 8608] munmap(0x7f5817c00000, 138412032 [pid 8612] <... set_robust_list resumed>) = 0 [pid 8612] rt_sigprocmask(SIG_SETMASK, [], [pid 8608] <... munmap resumed>) = 0 [pid 8612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8612] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8609] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8608] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8612] <... futex resumed>) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8612] memfd_create("syzkaller", 0 [pid 8608] <... openat resumed>) = 4 [pid 8609] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8608] ioctl(4, LOOP_SET_FD, 3 [pid 8612] <... memfd_create resumed>) = 3 [pid 8608] <... ioctl resumed>) = 0 [pid 8612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8608] close(3 [pid 8604] <... mount resumed>) = 0 [pid 8612] <... mmap resumed>) = 0x7f5817c00000 [pid 8608] <... close resumed>) = 0 [pid 8604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8608] close(4 [pid 8604] <... openat resumed>) = 3 [pid 8608] <... close resumed>) = 0 [pid 8604] chdir("./file0" [pid 8611] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8608] mkdir("./file0", 0777 [pid 8604] <... chdir resumed>) = 0 [pid 8604] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8608] <... mkdir resumed>) = 0 [pid 8604] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8603] <... futex resumed>) = 0 [pid 8604] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8603] exit_group(0 [pid 8604] <... futex resumed>) = ? [pid 8603] <... exit_group resumed>) = ? [pid 8604] +++ exited with 0 +++ [ 314.548360][ T8606] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 314.563116][ T8608] loop2: detected capacity change from 0 to 4096 [pid 8603] +++ exited with 0 +++ [pid 8608] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8603, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./349/binderfs") = 0 [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8606] <... mount resumed>) = 0 [pid 8606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8606] chdir("./file0") = 0 [pid 8606] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8606] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8606] <... futex resumed>) = 1 [pid 8605] <... futex resumed>) = 0 [pid 8606] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8605] exit_group(0 [pid 5063] newfstatat(AT_FDCWD, "./349/file0", [pid 8606] <... futex resumed>) = ? [pid 8605] <... exit_group resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8606] +++ exited with 0 +++ [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8608] <... mount resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8605] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 4 [pid 8608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8611] <... write resumed>) = 2097152 [pid 5063] newfstatat(4, "", [pid 8608] <... openat resumed>) = 3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8605, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8608] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8608] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8608] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [ 314.610560][ T8608] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8611] munmap(0x7f5817c00000, 138412032 [pid 8608] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, [pid 8612] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8608] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8608] <... futex resumed>) = 1 [pid 8607] <... futex resumed>) = 0 [pid 5063] close(4 [pid 5062] newfstatat(3, "", [pid 8608] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8607] <... exit_group resumed>) = ? [pid 5063] rmdir("./349/file0" [pid 5062] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8608] <... futex resumed>) = ? [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./351/binderfs", [pid 5063] close(3) = 0 [pid 8611] <... munmap resumed>) = 0 [pid 8608] +++ exited with 0 +++ [pid 8607] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./351/binderfs" [pid 8611] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8607, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 8611] <... openat resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 8611] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./349" [pid 5061] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] mkdir("./350", 0777 [pid 5061] unlink("./351/binderfs" [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8611] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8611] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8612] <... write resumed>) = 2097152 [pid 8611] <... close resumed>) = 0 [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8612] munmap(0x7f5817c00000, 138412032 [pid 8611] close(4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8611] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./351/file0", [pid 8611] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8611] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./351/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8611] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./351/file0" [pid 8612] <... munmap resumed>) = 0 [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8612] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8612] <... openat resumed>) = 4 [pid 8612] ioctl(4, LOOP_SET_FD, 3 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./351") = 0 [pid 5062] mkdir("./352", 0777) = 0 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8612] <... ioctl resumed>) = 0 [pid 8611] <... mount resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8612] close(3 [pid 8611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8612] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./351/file0") = 0 [pid 5061] getdents64(3, [pid 8612] close(4) = 0 [ 314.694297][ T8611] loop0: detected capacity change from 0 to 4096 [ 314.717320][ T8611] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 314.729859][ T8612] loop1: detected capacity change from 0 to 4096 [pid 8612] mkdir("./file0", 0777 [pid 8611] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8612] <... mkdir resumed>) = 0 [pid 8611] chdir("./file0" [pid 5061] close(3 [pid 8611] <... chdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./351" [pid 8611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8612] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] <... rmdir resumed>) = 0 [pid 8611] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8611] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8610] <... futex resumed>) = 0 [pid 8610] exit_group(0) = ? [pid 8611] <... futex resumed>) = ? [pid 8611] +++ exited with 0 +++ [pid 8610] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8610, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./354/binderfs") = 0 [pid 5059] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./352", 0777) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./354/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8613 attached [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8613 [pid 8613] set_robust_list(0x5555567436a0, 24 [pid 5059] getdents64(4, [pid 8613] <... set_robust_list resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8613] chdir("./352") = 0 [pid 5059] getdents64(4, [pid 8613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 8613] <... prctl resumed>) = 0 [pid 5059] rmdir("./354/file0" [pid 8613] setpgid(0, 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8613] <... setpgid resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] close(3) = 0 [pid 5063] close(3 [ 314.803413][ T8612] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5059] rmdir("./354" [pid 5063] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8613] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] mkdir("./355", 0777) = 0 [pid 8613] write(3, "1000", 4) = 4 [pid 8613] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8613] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... openat resumed>) = 3 [pid 8613] <... symlink resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8614 [pid 8613] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8613] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8613] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8615 attached ./strace-static-x86_64: Process 8614 attached [pid 8615] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8614] set_robust_list(0x5555567436a0, 24 [pid 8613] <... clone3 resumed> => {parent_tid=[8615]}, 88) = 8615 [pid 8615] <... rseq resumed>) = 0 [pid 8614] <... set_robust_list resumed>) = 0 [pid 8613] rt_sigprocmask(SIG_SETMASK, [], [pid 8615] set_robust_list(0x7f58200ee9a0, 24 [pid 8613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8615] <... set_robust_list resumed>) = 0 [pid 8613] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8614] chdir("./350" [pid 8613] <... futex resumed>) = 0 [pid 8614] <... chdir resumed>) = 0 [pid 8614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8613] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8614] <... prctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8615] memfd_create("syzkaller", 0 [pid 8614] setpgid(0, 0 [pid 8615] <... memfd_create resumed>) = 3 [pid 8615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8614] <... setpgid resumed>) = 0 [pid 8614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] close(3 [pid 8614] write(3, "1000", 4 [pid 5061] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8614] <... write resumed>) = 4 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8614] close(3./strace-static-x86_64: Process 8616 attached ) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8616 [pid 8614] symlink("/dev/binderfs", "./binderfs" [pid 8616] set_robust_list(0x5555567436a0, 24 [pid 8614] <... symlink resumed>) = 0 [pid 8616] <... set_robust_list resumed>) = 0 [pid 8614] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8616] chdir("./352" [pid 8614] <... futex resumed>) = 0 [pid 8614] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8616] <... chdir resumed>) = 0 [pid 8612] <... mount resumed>) = 0 [pid 5059] close(3 [pid 8616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8616] <... prctl resumed>) = 0 [pid 8614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8612] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8616] setpgid(0, 0) = 0 [pid 8614] <... mmap resumed>) = 0x7f58200ce000 [pid 8612] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8614] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8612] chdir("./file0"./strace-static-x86_64: Process 8617 attached [pid 8617] set_robust_list(0x5555567436a0, 24) = 0 [pid 8612] <... chdir resumed>) = 0 [pid 8614] <... mprotect resumed>) = 0 [pid 8617] chdir("./355" [pid 8616] <... openat resumed>) = 3 [pid 8612] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8617] <... chdir resumed>) = 0 [pid 8616] write(3, "1000", 4 [pid 8614] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8612] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8616] <... write resumed>) = 4 [pid 8612] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8616] close(3 [pid 8614] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8612] <... futex resumed>) = 1 [pid 8609] <... futex resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8617 [pid 8616] <... close resumed>) = 0 [pid 8614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8612] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8609] exit_group(0 [pid 8616] symlink("/dev/binderfs", "./binderfs" [pid 8609] <... exit_group resumed>) = ? [pid 8612] <... futex resumed>) = ? [pid 8617] <... prctl resumed>) = 0 [pid 8617] setpgid(0, 0) = 0 [pid 8617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8617] write(3, "1000", 4) = 4 [pid 8617] close(3) = 0 [pid 8616] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 8618 attached [pid 8617] symlink("/dev/binderfs", "./binderfs" [pid 8616] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8612] +++ exited with 0 +++ [pid 8609] +++ exited with 0 +++ [pid 8618] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8617] <... symlink resumed>) = 0 [pid 8616] <... futex resumed>) = 0 [pid 8614] <... clone3 resumed> => {parent_tid=[8618]}, 88) = 8618 [pid 8618] <... rseq resumed>) = 0 [pid 8616] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8614] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8609, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8618] set_robust_list(0x7f58200ee9a0, 24 [pid 8617] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8616] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8618] <... set_robust_list resumed>) = 0 [pid 8617] <... futex resumed>) = 0 [pid 8616] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8614] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... restart_syscall resumed>) = 0 [pid 8618] rt_sigprocmask(SIG_SETMASK, [], [pid 8617] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8614] <... futex resumed>) = 0 [pid 8618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8617] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8614] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8616] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8617] <... mmap resumed>) = 0x7f58200ce000 [pid 8617] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8616] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8617] <... mprotect resumed>) = 0 [pid 8618] memfd_create("syzkaller", 0 [pid 8617] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8616] <... mprotect resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8618] <... memfd_create resumed>) = 3 [pid 8617] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8616] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... openat resumed>) = 3 [pid 8618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8616] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8615] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] newfstatat(3, "", ./strace-static-x86_64: Process 8619 attached [pid 8618] <... mmap resumed>) = 0x7f5817c00000 [pid 8616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8620 attached [pid 8619] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8617] <... clone3 resumed> => {parent_tid=[8619]}, 88) = 8619 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8619] <... rseq resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./355/binderfs", [pid 8619] set_robust_list(0x7f58200ee9a0, 24 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8619] <... set_robust_list resumed>) = 0 [pid 5060] unlink("./355/binderfs" [pid 8619] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... unlink resumed>) = 0 [pid 8619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8619] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8616] <... clone3 resumed> => {parent_tid=[8620]}, 88) = 8620 [pid 5060] <... umount2 resumed>) = 0 [pid 8616] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8616] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(AT_FDCWD, "./355/file0", [pid 8616] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8616] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./355/file0") = 0 [pid 8617] rt_sigprocmask(SIG_SETMASK, [], [pid 8620] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 8620] <... rseq resumed>) = 0 [pid 8617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] rmdir("./355" [pid 8620] set_robust_list(0x7f58200ee9a0, 24 [pid 8617] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... rmdir resumed>) = 0 [pid 8620] <... set_robust_list resumed>) = 0 [pid 5060] mkdir("./356", 0777 [pid 8620] rt_sigprocmask(SIG_SETMASK, [], [pid 8619] <... futex resumed>) = 0 [pid 8617] <... futex resumed>) = 1 [pid 5060] <... mkdir resumed>) = 0 [pid 8620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8619] memfd_create("syzkaller", 0 [pid 8617] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8619] <... memfd_create resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 8619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8619] <... mmap resumed>) = 0x7f5817c00000 [pid 8620] memfd_create("syzkaller", 0 [pid 8615] <... write resumed>) = 2097152 [pid 8620] <... memfd_create resumed>) = 3 [pid 8615] munmap(0x7f5817c00000, 138412032 [pid 8620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8615] <... munmap resumed>) = 0 [pid 8620] <... mmap resumed>) = 0x7f5817c00000 [pid 8619] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8615] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8615] ioctl(4, LOOP_SET_FD, 3 [pid 8618] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8615] <... ioctl resumed>) = 0 [pid 8615] close(3) = 0 [pid 8615] close(4) = 0 [pid 8615] mkdir("./file0", 0777) = 0 [pid 8615] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] <... ioctl resumed>) = 0 [pid 8620] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8618] <... write resumed>) = 2097152 [pid 8619] <... write resumed>) = 2097152 [pid 8619] munmap(0x7f5817c00000, 138412032) = 0 [ 315.073213][ T8615] loop3: detected capacity change from 0 to 4096 [ 315.107544][ T8615] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8618] munmap(0x7f5817c00000, 138412032 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8621 attached [pid 8619] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8618] <... munmap resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8621 [pid 8621] set_robust_list(0x5555567436a0, 24) = 0 [pid 8619] <... openat resumed>) = 4 [pid 8621] chdir("./356" [pid 8620] <... write resumed>) = 2097152 [pid 8618] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8621] <... chdir resumed>) = 0 [pid 8620] munmap(0x7f5817c00000, 138412032 [pid 8619] ioctl(4, LOOP_SET_FD, 3 [pid 8618] <... openat resumed>) = 4 [pid 8615] <... mount resumed>) = 0 [pid 8621] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8620] <... munmap resumed>) = 0 [pid 8621] <... prctl resumed>) = 0 [pid 8621] setpgid(0, 0 [pid 8620] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8619] <... ioctl resumed>) = 0 [pid 8618] ioctl(4, LOOP_SET_FD, 3 [pid 8615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8621] <... setpgid resumed>) = 0 [pid 8621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8615] <... openat resumed>) = 3 [pid 8621] <... openat resumed>) = 3 [pid 8621] write(3, "1000", 4) = 4 [pid 8621] close(3) = 0 [pid 8621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8621] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8621] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8620] <... openat resumed>) = 4 [pid 8619] close(3 [pid 8618] <... ioctl resumed>) = 0 [pid 8615] chdir("./file0" [pid 8621] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8620] ioctl(4, LOOP_SET_FD, 3 [pid 8619] <... close resumed>) = 0 [pid 8618] close(3 [pid 8615] <... chdir resumed>) = 0 [pid 8619] close(4 [pid 8615] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8621] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8619] <... close resumed>) = 0 [pid 8621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8619] mkdir("./file0", 0777 [pid 8621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8620] <... ioctl resumed>) = 0 [pid 8619] <... mkdir resumed>) = 0 [pid 8618] <... close resumed>) = 0 [pid 8615] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8621] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8620] close(3 [pid 8619] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8618] close(4 [pid 8615] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8621] <... mprotect resumed>) = 0 [pid 8620] <... close resumed>) = 0 [pid 8621] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8615] <... futex resumed>) = 1 [pid 8613] <... futex resumed>) = 0 [pid 8613] exit_group(0 [pid 8615] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 8613] <... exit_group resumed>) = ? [pid 8621] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8621] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8618] <... close resumed>) = 0 [pid 8618] mkdir("./file0", 0777) = 0 [pid 8615] +++ exited with 0 +++ [pid 8613] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8613, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8620] close(4 [pid 8621] <... clone3 resumed> => {parent_tid=[8622]}, 88) = 8622 [pid 8620] <... close resumed>) = 0 [ 315.195843][ T8619] loop0: detected capacity change from 0 to 4096 [ 315.204324][ T8618] loop4: detected capacity change from 0 to 4096 [ 315.222025][ T8620] loop2: detected capacity change from 0 to 4096 [ 315.233412][ T8619] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8618] mount("/dev/loop4", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8622 attached [pid 8621] rt_sigprocmask(SIG_SETMASK, [], [pid 8620] mkdir("./file0", 0777 [pid 8622] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8622] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8621] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8621] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8622] memfd_create("syzkaller", 0 [pid 8620] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8622] <... memfd_create resumed>) = 3 [pid 8622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./352/binderfs") = 0 [pid 5062] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8622] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] <... umount2 resumed>) = 0 [pid 8620] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./352/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./352/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./352") = 0 [pid 5062] mkdir("./353", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8619] <... mount resumed>) = 0 [ 315.252798][ T8618] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 315.276750][ T8620] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8618] <... mount resumed>) = 0 [pid 8620] <... mount resumed>) = 0 [pid 8619] chdir("./file0") = 0 [pid 8618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8619] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8618] <... openat resumed>) = 3 [pid 8620] <... openat resumed>) = 3 [pid 8619] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8619] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8618] chdir("./file0" [pid 8620] chdir("./file0" [pid 8619] <... futex resumed>) = 1 [pid 8617] <... futex resumed>) = 0 [pid 8620] <... chdir resumed>) = 0 [pid 8619] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8618] <... chdir resumed>) = 0 [pid 8617] exit_group(0 [pid 8620] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8619] <... futex resumed>) = ? [pid 8618] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8617] <... exit_group resumed>) = ? [pid 8622] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8620] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8619] +++ exited with 0 +++ [pid 8618] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8617] +++ exited with 0 +++ [pid 8618] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8617, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8620] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8618] <... futex resumed>) = 1 [pid 8614] <... futex resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8620] <... futex resumed>) = 1 [pid 8618] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8620] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8616] <... futex resumed>) = 0 [pid 8614] exit_group(0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 8618] <... futex resumed>) = ? [pid 8616] exit_group(0 [pid 8614] <... exit_group resumed>) = ? [pid 8616] <... exit_group resumed>) = ? [pid 5059] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8620] <... futex resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8618] +++ exited with 0 +++ [pid 8614] +++ exited with 0 +++ [pid 5059] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8620] +++ exited with 0 +++ [pid 8616] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8614, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5059] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8616, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=1 /* 0.01 s */} --- [pid 5063] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... restart_syscall resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] unlink("./355/binderfs" [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(3 [pid 5061] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5061] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] unlink("./350/binderfs") = 0 ./strace-static-x86_64: Process 8623 attached [pid 5061] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8623 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./352/binderfs", [pid 8623] <... set_robust_list resumed>) = 0 [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] chdir("./353" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./352/binderfs" [pid 8623] <... chdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] <... prctl resumed>) = 0 [pid 8623] setpgid(0, 0 [pid 5059] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] <... setpgid resumed>) = 0 [pid 8623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8623] <... openat resumed>) = 3 [pid 5059] newfstatat(AT_FDCWD, "./355/file0", [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./350/file0", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8623] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 8623] <... write resumed>) = 4 [pid 8622] <... write resumed>) = 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8623] close(3 [pid 5059] getdents64(4, [pid 8623] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] close(4) = 0 [pid 5063] getdents64(4, [pid 5059] rmdir("./355/file0" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5059] getdents64(3, [pid 8622] munmap(0x7f5817c00000, 138412032 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8623] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 8623] <... futex resumed>) = 0 [pid 5063] close(4 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 8623] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8623] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] newfstatat(AT_FDCWD, "./352/file0", [pid 8623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./350/file0" [pid 5059] rmdir("./355" [pid 8623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8623] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 8623] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8622] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./356", 0777 [pid 8623] <... mprotect resumed>) = 0 [pid 8622] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... mkdir resumed>) = 0 [pid 8623] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8622] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8623] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8622] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 8623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8622] <... ioctl resumed>) = 0 [pid 5063] rmdir("./350" [pid 5059] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8624 attached [pid 5061] newfstatat(4, "", [pid 8624] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8623] <... clone3 resumed> => {parent_tid=[8624]}, 88) = 8624 [pid 8624] <... rseq resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8623] rt_sigprocmask(SIG_SETMASK, [], [pid 8624] set_robust_list(0x7f58200ee9a0, 24 [pid 8623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8624] <... set_robust_list resumed>) = 0 [pid 8623] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(4, [pid 8624] rt_sigprocmask(SIG_SETMASK, [], [pid 8623] <... futex resumed>) = 0 [pid 8624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8623] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8622] close(3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8624] memfd_create("syzkaller", 0 [pid 8622] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8624] <... memfd_create resumed>) = 3 [pid 8622] close(4 [pid 5061] getdents64(4, [pid 8624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8622] <... close resumed>) = 0 [pid 5063] mkdir("./351", 0777 [pid 8624] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8622] mkdir("./file0", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8622] <... mkdir resumed>) = 0 [pid 5061] close(4) = 0 [pid 8622] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] rmdir("./352/file0") = 0 [ 315.474590][ T8622] loop1: detected capacity change from 0 to 4096 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./352") = 0 [pid 5061] mkdir("./353", 0777 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8625 [pid 5061] <... openat resumed>) = 3 [ 315.518115][ T8622] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8624] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 8625 attached [pid 8625] set_robust_list(0x5555567436a0, 24) = 0 [pid 8625] chdir("./356") = 0 [pid 8625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8625] setpgid(0, 0) = 0 [pid 8622] <... mount resumed>) = 0 [pid 8625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... ioctl resumed>) = 0 [pid 8625] <... openat resumed>) = 3 [pid 8622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8625] write(3, "1000", 4) = 4 [pid 8625] close(3) = 0 [pid 8625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8625] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8625] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8625] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8625] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8622] <... openat resumed>) = 3 [pid 5063] close(3 [pid 8625] <... mprotect resumed>) = 0 [pid 8622] chdir("./file0") = 0 [pid 8622] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8625] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8622] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8622] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8621] <... futex resumed>) = 0 [pid 8622] <... futex resumed>) = 1 [pid 8621] exit_group(0 [pid 8622] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 8621] <... exit_group resumed>) = ? [pid 8625] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8622] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 8625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8626 attached [pid 8621] +++ exited with 0 +++ [pid 8625] <... clone3 resumed> => {parent_tid=[8626]}, 88) = 8626 [pid 8625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8625] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8625] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8627 ./strace-static-x86_64: Process 8627 attached [pid 8627] set_robust_list(0x5555567436a0, 24) = 0 [pid 8627] chdir("./351") = 0 [pid 8627] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8626] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8621, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8627] <... prctl resumed>) = 0 [pid 8626] <... rseq resumed>) = 0 [pid 8624] <... write resumed>) = 2097152 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8627] setpgid(0, 0) = 0 [pid 8627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... restart_syscall resumed>) = 0 [pid 8627] <... openat resumed>) = 3 [pid 8626] set_robust_list(0x7f58200ee9a0, 24 [pid 8627] write(3, "1000", 4 [pid 8626] <... set_robust_list resumed>) = 0 [pid 8627] <... write resumed>) = 4 [pid 8626] rt_sigprocmask(SIG_SETMASK, [], [pid 8627] close(3 [pid 8626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8627] <... close resumed>) = 0 [pid 8627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8626] memfd_create("syzkaller", 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8627] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8627] <... futex resumed>) = 0 [pid 8627] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] <... openat resumed>) = 3 [pid 8627] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] newfstatat(3, "", [pid 8627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8626] <... memfd_create resumed>) = 3 [pid 8624] munmap(0x7f5817c00000, 138412032 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8627] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8624] <... munmap resumed>) = 0 [pid 5060] getdents64(3, [pid 8627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8627] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8627] <... mprotect resumed>) = 0 [pid 8626] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8627] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] newfstatat(AT_FDCWD, "./356/binderfs", [pid 8627] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] unlink("./356/binderfs") = 0 [pid 8627] <... clone3 resumed> => {parent_tid=[8628]}, 88) = 8628 [pid 5060] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8627] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8628 attached [pid 8627] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8628] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8627] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8628] set_robust_list(0x7f58200ee9a0, 24 [pid 8627] <... futex resumed>) = 0 [pid 8628] <... set_robust_list resumed>) = 0 [pid 8627] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8628] rt_sigprocmask(SIG_SETMASK, [], [pid 8624] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8624] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = 0 [pid 8628] memfd_create("syzkaller", 0 [pid 5061] close(3 [pid 8624] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... close resumed>) = 0 [pid 5060] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... memfd_create resumed>) = 3 [pid 8628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 8629 attached ) = 0x7f5817c00000 [pid 5060] newfstatat(AT_FDCWD, "./356/file0", [pid 8629] set_robust_list(0x5555567436a0, 24 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8629] <... set_robust_list resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8629 [pid 5060] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8624] <... ioctl resumed>) = 0 [pid 8624] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8629] chdir("./353" [pid 8624] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8629] <... chdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 8629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8624] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8629] <... prctl resumed>) = 0 [pid 5060] getdents64(4, [pid 8629] setpgid(0, 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8629] <... setpgid resumed>) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 8624] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8624] mkdir("./file0", 0777) = 0 [ 315.676604][ T8624] loop3: detected capacity change from 0 to 4096 [pid 8624] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8626] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] rmdir("./356/file0" [pid 8629] <... openat resumed>) = 3 [pid 8629] write(3, "1000", 4 [pid 8628] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 8629] <... write resumed>) = 4 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8629] close(3 [pid 5060] close(3 [pid 8629] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8629] symlink("/dev/binderfs", "./binderfs" [pid 5060] rmdir("./356") = 0 [pid 5060] mkdir("./357", 0777) = 0 [pid 8629] <... symlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8629] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8629] <... futex resumed>) = 0 [pid 8629] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8629] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8629] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8629] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8630 attached => {parent_tid=[8630]}, 88) = 8630 [ 315.720463][ T8624] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8629] rt_sigprocmask(SIG_SETMASK, [], [pid 8630] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8630] <... rseq resumed>) = 0 [pid 8628] <... write resumed>) = 2097152 [pid 8630] set_robust_list(0x7f58200ee9a0, 24 [pid 8629] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8630] <... set_robust_list resumed>) = 0 [pid 8629] <... futex resumed>) = 0 [pid 8630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8629] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8630] memfd_create("syzkaller", 0) = 3 [pid 8628] munmap(0x7f5817c00000, 138412032 [pid 8626] <... write resumed>) = 2097152 [pid 8630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8626] munmap(0x7f5817c00000, 138412032 [pid 8630] <... mmap resumed>) = 0x7f5817c00000 [pid 8626] <... munmap resumed>) = 0 [pid 8628] <... munmap resumed>) = 0 [pid 8624] <... mount resumed>) = 0 [pid 8628] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8626] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8628] <... openat resumed>) = 4 [pid 8626] <... openat resumed>) = 4 [pid 8624] chdir("./file0" [pid 8628] ioctl(4, LOOP_SET_FD, 3 [pid 8626] ioctl(4, LOOP_SET_FD, 3 [pid 8624] <... chdir resumed>) = 0 [pid 8624] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8624] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8624] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8628] <... ioctl resumed>) = 0 [pid 8628] close(3) = 0 [pid 8628] close(4 [pid 8623] <... futex resumed>) = 0 [pid 8628] <... close resumed>) = 0 [pid 8623] exit_group(0 [pid 8628] mkdir("./file0", 0777 [pid 8624] <... futex resumed>) = ? [pid 8623] <... exit_group resumed>) = ? [pid 8624] +++ exited with 0 +++ [pid 8626] <... ioctl resumed>) = 0 [pid 8628] <... mkdir resumed>) = 0 [pid 8626] close(3) = 0 [pid 8626] close(4 [pid 8628] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8626] <... close resumed>) = 0 [pid 8626] mkdir("./file0", 0777) = 0 [pid 8630] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8623] +++ exited with 0 +++ [ 315.816736][ T8628] loop4: detected capacity change from 0 to 4096 [ 315.825674][ T8626] loop0: detected capacity change from 0 to 4096 [ 315.850334][ T8628] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8626] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8623, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5062] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8631 ./strace-static-x86_64: Process 8631 attached [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8631] set_robust_list(0x5555567436a0, 24) = 0 [pid 5062] newfstatat(AT_FDCWD, "./353/binderfs", [pid 8631] chdir("./357" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./353/binderfs" [pid 8631] <... chdir resumed>) = 0 [pid 8631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... unlink resumed>) = 0 [pid 8631] <... prctl resumed>) = 0 [pid 5062] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8631] setpgid(0, 0) = 0 [pid 8631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8631] <... openat resumed>) = 3 [pid 5062] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8631] write(3, "1000", 4 [pid 5062] <... openat resumed>) = 4 [pid 8631] <... write resumed>) = 4 [ 315.864340][ T8626] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5062] newfstatat(4, "", [pid 8631] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8631] <... close resumed>) = 0 [pid 8631] symlink("/dev/binderfs", "./binderfs" [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8631] <... symlink resumed>) = 0 [pid 5062] getdents64(4, [pid 8631] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8631] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8631] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] rmdir("./353/file0" [pid 8631] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5062] getdents64(3, [pid 8631] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8631] <... mprotect resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./353") = 0 [pid 8631] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8628] <... mount resumed>) = 0 [pid 5062] mkdir("./354", 0777 [pid 8631] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8632 attached [pid 8628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 8632] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8631] <... clone3 resumed> => {parent_tid=[8632]}, 88) = 8632 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8632] <... rseq resumed>) = 0 [pid 8631] rt_sigprocmask(SIG_SETMASK, [], [pid 8628] <... openat resumed>) = 3 [pid 8632] set_robust_list(0x7f58200ee9a0, 24 [pid 8631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8632] <... set_robust_list resumed>) = 0 [pid 8631] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8628] chdir("./file0" [pid 8626] <... mount resumed>) = 0 [pid 8632] rt_sigprocmask(SIG_SETMASK, [], [pid 8631] <... futex resumed>) = 0 [pid 8628] <... chdir resumed>) = 0 [pid 8632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8631] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8630] <... write resumed>) = 2097152 [pid 8628] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8628] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8628] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8626] <... openat resumed>) = 3 [pid 8628] <... futex resumed>) = 1 [pid 8627] <... futex resumed>) = 0 [pid 8628] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8627] exit_group(0 [pid 8626] chdir("./file0" [pid 8632] memfd_create("syzkaller", 0 [pid 8628] <... futex resumed>) = ? [pid 8627] <... exit_group resumed>) = ? [pid 8626] <... chdir resumed>) = 0 [pid 8632] <... memfd_create resumed>) = 3 [pid 8630] munmap(0x7f5817c00000, 138412032 [pid 8628] +++ exited with 0 +++ [pid 8627] +++ exited with 0 +++ [pid 8626] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8630] <... munmap resumed>) = 0 [pid 8626] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8632] <... mmap resumed>) = 0x7f5817c00000 [pid 8630] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8626] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8627, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8626] <... futex resumed>) = 1 [pid 8625] <... futex resumed>) = 0 [pid 5063] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8626] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8625] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8630] <... openat resumed>) = 4 [pid 8626] <... futex resumed>) = ? [pid 8625] <... exit_group resumed>) = ? [pid 5063] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8630] ioctl(4, LOOP_SET_FD, 3 [pid 8626] +++ exited with 0 +++ [pid 8625] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 8630] <... ioctl resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] <... ioctl resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8625, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] close(3) = 0 [pid 5059] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5063] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] getdents64(3, [pid 5063] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./356/binderfs", [pid 5063] newfstatat(AT_FDCWD, "./351/binderfs", [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./356/binderfs" [pid 5063] unlink("./351/binderfs" [pid 5059] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8633 attached [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8633 [pid 8633] set_robust_list(0x5555567436a0, 24 [pid 5063] <... unlink resumed>) = 0 [pid 5059] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8633] <... set_robust_list resumed>) = 0 [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8633] chdir("./354" [pid 8630] close(3) = 0 [pid 8633] <... chdir resumed>) = 0 [pid 8633] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8632] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8630] close(4 [pid 5063] <... umount2 resumed>) = 0 [pid 8633] <... prctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8630] <... close resumed>) = 0 [pid 8633] setpgid(0, 0 [ 316.033546][ T8630] loop2: detected capacity change from 0 to 4096 [pid 8630] mkdir("./file0", 0777 [pid 5059] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8633] <... setpgid resumed>) = 0 [pid 8630] <... mkdir resumed>) = 0 [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8630] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./351/file0", [pid 5059] newfstatat(AT_FDCWD, "./356/file0", [pid 8633] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8633] write(3, "1000", 4 [pid 5059] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8633] <... write resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8633] close(3 [pid 5059] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8633] <... close resumed>) = 0 [pid 8633] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 4 [pid 8633] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(4, "", [pid 5063] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5059] getdents64(4, [pid 8633] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8632] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8632] munmap(0x7f5817c00000, 138412032 [pid 5059] getdents64(4, [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8633] <... futex resumed>) = 0 [pid 5059] close(4 [pid 5063] close(4 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./356/file0" [pid 8633] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./351/file0" [pid 5059] getdents64(3, [pid 8633] <... mmap resumed>) = 0x7f58200ce000 [pid 8633] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8633] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] close(3) = 0 [pid 5059] rmdir("./356" [pid 8633] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./357", 0777./strace-static-x86_64: Process 8634 attached [pid 8634] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8633] <... clone3 resumed> => {parent_tid=[8634]}, 88) = 8634 [pid 8634] <... rseq resumed>) = 0 [pid 8633] rt_sigprocmask(SIG_SETMASK, [], [pid 8634] set_robust_list(0x7f58200ee9a0, 24 [pid 8633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8634] <... set_robust_list resumed>) = 0 [pid 8633] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8632] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] <... mkdir resumed>) = 0 [pid 8633] <... futex resumed>) = 0 [pid 8634] rt_sigprocmask(SIG_SETMASK, [], [pid 8633] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8632] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [ 316.075231][ T8630] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8634] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8632] <... openat resumed>) = 4 [pid 8630] <... mount resumed>) = 0 [pid 5063] close(3 [pid 5059] <... openat resumed>) = 3 [pid 8632] ioctl(4, LOOP_SET_FD, 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 8634] memfd_create("syzkaller", 0 [pid 8630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] rmdir("./351" [pid 8634] <... memfd_create resumed>) = 3 [pid 8630] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 8630] chdir("./file0" [pid 5063] mkdir("./352", 0777 [pid 8634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8630] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8630] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8630] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8629] <... futex resumed>) = 0 [pid 8629] exit_group(0) = ? [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8632] <... ioctl resumed>) = 0 [pid 8630] +++ exited with 0 +++ [pid 8629] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8629, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8632] close(3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./353/binderfs") = 0 [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] close(4) = 0 [pid 8632] mkdir("./file0", 0777) = 0 [ 316.131025][ T8632] loop1: detected capacity change from 0 to 4096 [pid 8632] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8634] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./353/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5063] close(3 [pid 5061] rmdir("./353") = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] mkdir("./354", 0777) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8635 ./strace-static-x86_64: Process 8635 attached [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] close(3 [pid 8635] set_robust_list(0x5555567436a0, 24) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [ 316.193309][ T8632] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8632] <... mount resumed>) = 0 [pid 8632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8632] chdir("./file0" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8632] <... chdir resumed>) = 0 [pid 8632] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8632] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8631] <... futex resumed>) = 0 [pid 8632] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8631] exit_group(0 [pid 8632] <... futex resumed>) = ? [pid 8631] <... exit_group resumed>) = ? [pid 8632] +++ exited with 0 +++ [pid 8631] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8631, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8635] chdir("./352") = 0 [pid 8635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8635] setpgid(0, 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8635] <... setpgid resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... openat resumed>) = 3 [pid 8635] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8635] write(3, "1000", 4 [pid 5060] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8635] <... write resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8635] close(3 [pid 5060] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8635] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8635] symlink("/dev/binderfs", "./binderfs" [pid 8634] <... write resumed>) = 2097152 [pid 5060] unlink("./357/binderfs" [pid 8635] <... symlink resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8636 [pid 5060] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8635] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8636 attached ) = 0 [pid 8636] set_robust_list(0x5555567436a0, 24 [pid 8635] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8636] <... set_robust_list resumed>) = 0 [pid 8635] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8636] chdir("./357" [pid 8635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8636] <... chdir resumed>) = 0 [pid 8635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8635] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8636] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8635] <... mprotect resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8636] <... prctl resumed>) = 0 [pid 8635] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8636] setpgid(0, 0 [pid 8635] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8636] <... setpgid resumed>) = 0 [pid 8635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] newfstatat(AT_FDCWD, "./357/file0", ./strace-static-x86_64: Process 8637 attached [pid 8636] <... openat resumed>) = 3 [pid 8635] <... clone3 resumed> => {parent_tid=[8637]}, 88) = 8637 [pid 8634] munmap(0x7f5817c00000, 138412032 [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8637] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8636] write(3, "1000", 4 [pid 8635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8635] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8635] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8636] <... write resumed>) = 4 [pid 8637] <... rseq resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8637] set_robust_list(0x7f58200ee9a0, 24 [pid 8636] close(3 [pid 5060] <... openat resumed>) = 4 [pid 8636] <... close resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 8636] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8636] <... symlink resumed>) = 0 [pid 5060] getdents64(4, [pid 8634] <... munmap resumed>) = 0 [pid 8637] <... set_robust_list resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8637] rt_sigprocmask(SIG_SETMASK, [], [pid 8634] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 8637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] rmdir("./357/file0" [pid 8637] memfd_create("syzkaller", 0 [pid 8636] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8634] <... openat resumed>) = 4 [pid 5060] <... rmdir resumed>) = 0 [pid 8636] <... futex resumed>) = 0 [pid 8634] ioctl(4, LOOP_SET_FD, 3 [pid 8636] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] getdents64(3, [pid 8636] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] close(3 [pid 8636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 8637] <... memfd_create resumed>) = 3 [pid 8636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] rmdir("./357" [pid 8636] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] <... rmdir resumed>) = 0 [pid 8636] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] mkdir("./358", 0777 [pid 8636] <... mprotect resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8636] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] close(3 [pid 5060] <... openat resumed>) = 3 [pid 8636] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] <... close resumed>) = 0 [pid 8637] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8639 attached [pid 8636] <... clone3 resumed> => {parent_tid=[8638]}, 88) = 8638 [pid 8634] <... ioctl resumed>) = 0 [pid 8636] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8638 attached NULL, 8) = 0 [pid 8638] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8636] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8638] <... rseq resumed>) = 0 [pid 8636] <... futex resumed>) = 0 [pid 8634] close(3 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8639 [pid 8639] set_robust_list(0x5555567436a0, 24 [pid 8638] set_robust_list(0x7f58200ee9a0, 24 [pid 8636] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8634] <... close resumed>) = 0 [pid 8639] <... set_robust_list resumed>) = 0 [pid 8638] <... set_robust_list resumed>) = 0 [pid 8634] close(4 [pid 8639] chdir("./354" [pid 8638] rt_sigprocmask(SIG_SETMASK, [], [pid 8634] <... close resumed>) = 0 [pid 8639] <... chdir resumed>) = 0 [pid 8638] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8638] memfd_create("syzkaller", 0 [pid 8639] <... prctl resumed>) = 0 [pid 8634] mkdir("./file0", 0777 [pid 8638] <... memfd_create resumed>) = 3 [pid 8638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8639] setpgid(0, 0 [pid 8638] <... mmap resumed>) = 0x7f5817c00000 [ 316.327713][ T8634] loop3: detected capacity change from 0 to 4096 [pid 8639] <... setpgid resumed>) = 0 [pid 8634] <... mkdir resumed>) = 0 [pid 8639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8634] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8639] <... openat resumed>) = 3 [pid 8639] write(3, "1000", 4) = 4 [pid 8639] close(3 [pid 8637] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8639] <... close resumed>) = 0 [pid 8639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8639] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8639] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8639] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8639] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 316.374471][ T8634] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8638] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8639] <... clone3 resumed> => {parent_tid=[8640]}, 88) = 8640 ./strace-static-x86_64: Process 8640 attached [pid 8639] rt_sigprocmask(SIG_SETMASK, [], [pid 8640] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8640] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8640] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 8639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8639] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... futex resumed>) = 0 [pid 8639] <... futex resumed>) = 1 [pid 8640] memfd_create("syzkaller", 0 [pid 8639] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8641 ./strace-static-x86_64: Process 8641 attached [pid 8640] <... memfd_create resumed>) = 3 [pid 8638] <... write resumed>) = 2097152 [pid 8637] <... write resumed>) = 2097152 [pid 8634] <... mount resumed>) = 0 [pid 8641] set_robust_list(0x5555567436a0, 24 [pid 8640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8638] munmap(0x7f5817c00000, 138412032 [pid 8637] munmap(0x7f5817c00000, 138412032 [pid 8634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8641] <... set_robust_list resumed>) = 0 [pid 8640] <... mmap resumed>) = 0x7f5817c00000 [pid 8638] <... munmap resumed>) = 0 [pid 8637] <... munmap resumed>) = 0 [pid 8634] <... openat resumed>) = 3 [pid 8641] chdir("./358") = 0 [pid 8641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8641] setpgid(0, 0) = 0 [pid 8641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8634] chdir("./file0" [pid 8641] <... openat resumed>) = 3 [pid 8637] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8634] <... chdir resumed>) = 0 [pid 8641] write(3, "1000", 4 [pid 8638] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8637] <... openat resumed>) = 4 [pid 8634] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8641] <... write resumed>) = 4 [pid 8638] <... openat resumed>) = 4 [pid 8637] ioctl(4, LOOP_SET_FD, 3 [pid 8641] close(3 [pid 8638] ioctl(4, LOOP_SET_FD, 3 [pid 8634] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8641] <... close resumed>) = 0 [pid 8634] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8634] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8633] <... futex resumed>) = 0 [pid 8633] exit_group(0 [pid 8634] <... futex resumed>) = ? [pid 8633] <... exit_group resumed>) = ? [pid 8637] <... ioctl resumed>) = 0 [pid 8637] close(3) = 0 [pid 8637] close(4) = 0 [pid 8641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8637] mkdir("./file0", 0777 [pid 8641] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8641] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8637] <... mkdir resumed>) = 0 [pid 8641] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8641] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8640] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8638] <... ioctl resumed>) = 0 [pid 8637] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8634] +++ exited with 0 +++ [pid 8633] +++ exited with 0 +++ [ 316.502097][ T8637] loop4: detected capacity change from 0 to 4096 [ 316.503294][ T8638] loop0: detected capacity change from 0 to 4096 [pid 8641] <... mprotect resumed>) = 0 [pid 8638] close(3 [pid 8641] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8638] <... close resumed>) = 0 [pid 8641] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8638] close(4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8633, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8638] <... close resumed>) = 0 ./strace-static-x86_64: Process 8642 attached [pid 8638] mkdir("./file0", 0777 [pid 8642] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8641] <... clone3 resumed> => {parent_tid=[8642]}, 88) = 8642 [pid 8641] rt_sigprocmask(SIG_SETMASK, [], [pid 8642] <... rseq resumed>) = 0 [pid 5062] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8642] set_robust_list(0x7f58200ee9a0, 24 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8641] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8642] <... set_robust_list resumed>) = 0 [pid 8641] <... futex resumed>) = 0 [pid 8642] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8641] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8642] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8638] <... mkdir resumed>) = 0 [pid 8638] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8642] memfd_create("syzkaller", 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8642] <... memfd_create resumed>) = 3 [pid 5062] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8640] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8638] <... mount resumed>) = 0 [pid 8640] munmap(0x7f5817c00000, 138412032 [pid 5062] unlink("./354/binderfs") = 0 [pid 5062] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8640] <... munmap resumed>) = 0 [pid 8638] <... openat resumed>) = 3 [pid 8638] chdir("./file0") = 0 [ 316.543393][ T8637] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 316.572228][ T8638] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8638] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 8638] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8638] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8636] <... futex resumed>) = 0 [pid 8638] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8636] exit_group(0) = ? [pid 8640] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8638] <... futex resumed>) = ? [pid 8640] ioctl(4, LOOP_SET_FD, 3 [pid 8638] +++ exited with 0 +++ [pid 8636] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8636, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./354/file0", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8640] <... ioctl resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8637] <... mount resumed>) = 0 [pid 5062] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5059] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8642] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8640] close(3 [pid 8637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] getdents64(4, [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8640] <... close resumed>) = 0 [pid 8640] close(4) = 0 [pid 5059] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8640] mkdir("./file0", 0777 [pid 8637] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8640] <... mkdir resumed>) = 0 [pid 8637] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8637] <... chdir resumed>) = 0 [pid 5062] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8637] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 8640] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8637] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./354/file0" [pid 5059] unlink("./357/binderfs" [pid 8637] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 8637] <... futex resumed>) = 1 [pid 8635] <... futex resumed>) = 0 [pid 8635] exit_group(0 [pid 5059] <... unlink resumed>) = 0 [pid 8637] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] getdents64(3, [pid 5059] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8637] <... futex resumed>) = ? [pid 8635] <... exit_group resumed>) = ? [pid 5062] close(3 [pid 8637] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./354" [pid 8635] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [ 316.628848][ T8640] loop2: detected capacity change from 0 to 4096 [pid 5059] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8642] <... write resumed>) = 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8635, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] mkdir("./355", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./357/file0", [pid 5063] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8642] munmap(0x7f5817c00000, 138412032 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5063] getdents64(3, [pid 5059] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5059] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./352/binderfs") = 0 [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8642] <... munmap resumed>) = 0 [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8642] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(4 [pid 5063] newfstatat(AT_FDCWD, "./352/file0", [pid 5059] <... close resumed>) = 0 [pid 8642] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] rmdir("./357/file0" [pid 8642] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 8642] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5063] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./357") = 0 [pid 5059] mkdir("./358", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8642] close(3 [pid 8640] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8642] <... close resumed>) = 0 [pid 8640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(4, "", [pid 8642] close(4 [pid 8640] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8640] chdir("./file0" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8640] <... chdir resumed>) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8640] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] close(4 [pid 8640] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [ 316.687173][ T8640] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 316.724611][ T8642] loop1: detected capacity change from 0 to 4096 [pid 5063] rmdir("./352/file0" [pid 8642] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8642] mkdir("./file0", 0777 [pid 8640] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8640] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] getdents64(3, [pid 8639] exit_group(0 [pid 8640] <... futex resumed>) = ? [pid 8639] <... exit_group resumed>) = ? [pid 8640] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8642] <... mkdir resumed>) = 0 [pid 8639] +++ exited with 0 +++ [pid 8642] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5063] rmdir("./352" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8639, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5059] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./353", 0777) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5062] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(3, "", [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8643 attached [pid 8643] set_robust_list(0x5555567436a0, 24) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8643 [pid 8643] chdir("./358" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8643] <... chdir resumed>) = 0 [pid 8643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8643] setpgid(0, 0) = 0 [pid 8643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8643] <... openat resumed>) = 3 [pid 8643] write(3, "1000", 4) = 4 [pid 8643] close(3) = 0 [pid 8643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8643] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8643] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 ./strace-static-x86_64: Process 8644 attached [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8644 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8644] set_robust_list(0x5555567436a0, 24 [pid 5061] unlink("./354/binderfs" [pid 8643] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8644] <... set_robust_list resumed>) = 0 [pid 8643] <... mprotect resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8643] rt_sigprocmask(SIG_BLOCK, ~[], [ 316.796716][ T8642] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8644] chdir("./355") = 0 [pid 8643] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8645]}, 88) = 8645 [pid 8643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8645 attached [pid 8644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8645] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8645] <... rseq resumed>) = 0 [pid 8644] <... prctl resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./354/file0", [pid 8645] set_robust_list(0x7f58200ee9a0, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8645] <... set_robust_list resumed>) = 0 [pid 8644] setpgid(0, 0 [pid 8645] rt_sigprocmask(SIG_SETMASK, [], [pid 8644] <... setpgid resumed>) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8643] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8643] <... futex resumed>) = 0 [pid 8643] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... openat resumed>) = 4 [pid 8644] <... openat resumed>) = 3 [pid 8644] write(3, "1000", 4 [pid 5061] newfstatat(4, "", [pid 8644] <... write resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8644] close(3 [pid 5061] getdents64(4, [pid 8644] <... close resumed>) = 0 [pid 8644] symlink("/dev/binderfs", "./binderfs" [pid 8642] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 8645] memfd_create("syzkaller", 0 [pid 8644] <... symlink resumed>) = 0 [pid 8642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8642] <... openat resumed>) = 3 [pid 8645] <... memfd_create resumed>) = 3 [pid 8642] chdir("./file0" [pid 5061] <... close resumed>) = 0 [pid 8642] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 5061] rmdir("./354/file0" [pid 8645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8642] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8645] <... mmap resumed>) = 0x7f5817c00000 [pid 8644] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8642] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8642] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8641] <... futex resumed>) = 0 [pid 8644] <... futex resumed>) = 0 [pid 8642] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8641] exit_group(0 [pid 5061] getdents64(3, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8646 ./strace-static-x86_64: Process 8646 attached [pid 8646] set_robust_list(0x5555567436a0, 24) = 0 [pid 8641] <... exit_group resumed>) = ? [pid 8646] chdir("./353" [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8644] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8642] <... futex resumed>) = ? [pid 5061] close(3 [pid 8646] <... chdir resumed>) = 0 [pid 8646] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... close resumed>) = 0 [pid 8646] <... prctl resumed>) = 0 [pid 8646] setpgid(0, 0) = 0 [pid 8646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8646] write(3, "1000", 4) = 4 [pid 8646] close(3) = 0 [pid 8646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8644] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8642] +++ exited with 0 +++ [pid 8641] +++ exited with 0 +++ [pid 5061] rmdir("./354" [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8641, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] <... rmdir resumed>) = 0 [pid 5060] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8646] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8646] <... futex resumed>) = 0 [pid 8644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8646] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... openat resumed>) = 3 [pid 8646] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] mkdir("./355", 0777 [pid 5060] newfstatat(3, "", [pid 8646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8644] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] getdents64(3, [pid 8646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8646] <... mmap resumed>) = 0x7f58200ce000 [pid 8644] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8646] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8644] <... mprotect resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8646] <... mprotect resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./358/binderfs", [pid 8646] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8644] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8646] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8644] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] unlink("./358/binderfs" [pid 8646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8647 attached [pid 5060] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8648 attached [pid 8647] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8644] <... clone3 resumed> => {parent_tid=[8647]}, 88) = 8647 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8648] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8647] <... rseq resumed>) = 0 [pid 8646] <... clone3 resumed> => {parent_tid=[8648]}, 88) = 8648 [pid 8644] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... umount2 resumed>) = 0 [pid 8648] <... rseq resumed>) = 0 [pid 8645] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8644] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8648] set_robust_list(0x7f58200ee9a0, 24 [pid 8647] set_robust_list(0x7f58200ee9a0, 24 [pid 8646] rt_sigprocmask(SIG_SETMASK, [], [pid 8644] <... futex resumed>) = 0 [pid 5060] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8648] <... set_robust_list resumed>) = 0 [pid 8647] <... set_robust_list resumed>) = 0 [pid 8646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8644] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8648] rt_sigprocmask(SIG_SETMASK, [], [pid 8647] rt_sigprocmask(SIG_SETMASK, [], [pid 8646] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(AT_FDCWD, "./358/file0", [pid 8648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8646] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8647] memfd_create("syzkaller", 0 [pid 5060] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 8646] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8648] memfd_create("syzkaller", 0 [pid 8647] <... memfd_create resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 8648] <... memfd_create resumed>) = 3 [pid 5060] rmdir("./358/file0" [pid 8648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8648] <... mmap resumed>) = 0x7f5817c00000 [pid 8647] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] getdents64(3, [pid 8645] <... write resumed>) = 2097152 [pid 8645] munmap(0x7f5817c00000, 138412032 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./358") = 0 [pid 5060] mkdir("./359", 0777) = 0 [pid 8645] <... munmap resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8645] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8648] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8645] <... openat resumed>) = 4 [pid 8645] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8647] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8649 attached , child_tidptr=0x555556743690) = 8649 [pid 8649] set_robust_list(0x5555567436a0, 24) = 0 [pid 8649] chdir("./355" [pid 8645] <... ioctl resumed>) = 0 [pid 8649] <... chdir resumed>) = 0 [pid 8645] close(3 [pid 8649] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8645] <... close resumed>) = 0 [pid 8649] <... prctl resumed>) = 0 [pid 8645] close(4) = 0 [pid 8645] mkdir("./file0", 0777 [pid 8649] setpgid(0, 0) = 0 [pid 8645] <... mkdir resumed>) = 0 [ 317.019448][ T8645] loop0: detected capacity change from 0 to 4096 [pid 8645] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8649] write(3, "1000", 4 [pid 8648] <... write resumed>) = 2097152 [pid 5060] <... ioctl resumed>) = 0 [pid 8649] <... write resumed>) = 4 [pid 8649] close(3 [pid 5060] close(3) = 0 [pid 8649] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8649] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8650 attached ) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8650 [pid 8650] set_robust_list(0x5555567436a0, 24) = 0 [pid 8650] chdir("./359" [pid 8649] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8650] <... chdir resumed>) = 0 [pid 8649] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8650] <... prctl resumed>) = 0 [pid 8649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8648] munmap(0x7f5817c00000, 138412032 [pid 8650] setpgid(0, 0 [pid 8649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8647] <... write resumed>) = 2097152 [pid 8649] <... mmap resumed>) = 0x7f58200ce000 [pid 8650] <... setpgid resumed>) = 0 [pid 8649] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8649] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8650] <... openat resumed>) = 3 [pid 8650] write(3, "1000", 4 [pid 8649] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8647] munmap(0x7f5817c00000, 138412032 [pid 8650] <... write resumed>) = 4 [pid 8649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8648] <... munmap resumed>) = 0 [pid 8650] close(3) = 0 [pid 8650] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 8651 attached [pid 8650] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8649] <... clone3 resumed> => {parent_tid=[8651]}, 88) = 8651 [pid 8651] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8650] <... futex resumed>) = 0 [pid 8649] rt_sigprocmask(SIG_SETMASK, [], [pid 8648] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8651] <... rseq resumed>) = 0 [pid 8650] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8648] <... openat resumed>) = 4 [pid 8647] <... munmap resumed>) = 0 [pid 8651] set_robust_list(0x7f58200ee9a0, 24 [pid 8650] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8649] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8651] <... set_robust_list resumed>) = 0 [pid 8649] <... futex resumed>) = 0 [pid 8651] rt_sigprocmask(SIG_SETMASK, [], [pid 8649] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8651] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 317.090804][ T8645] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8648] ioctl(4, LOOP_SET_FD, 3 [pid 8651] memfd_create("syzkaller", 0 [pid 8650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8647] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8647] <... openat resumed>) = 4 [pid 8650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8647] ioctl(4, LOOP_SET_FD, 3 [pid 8650] <... mmap resumed>) = 0x7f58200ce000 [pid 8651] <... memfd_create resumed>) = 3 [pid 8650] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8650] <... mprotect resumed>) = 0 [pid 8651] <... mmap resumed>) = 0x7f5817c00000 [pid 8650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8645] <... mount resumed>) = 0 [pid 8650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 8652 attached [pid 8645] chdir("./file0" [pid 8650] <... clone3 resumed> => {parent_tid=[8652]}, 88) = 8652 [pid 8645] <... chdir resumed>) = 0 [pid 8652] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8645] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8652] set_robust_list(0x7f58200ee9a0, 24 [pid 8650] rt_sigprocmask(SIG_SETMASK, [], [pid 8648] <... ioctl resumed>) = 0 [pid 8652] <... set_robust_list resumed>) = 0 [pid 8650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8648] close(3 [pid 8645] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8652] rt_sigprocmask(SIG_SETMASK, [], [pid 8650] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8645] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8650] <... futex resumed>) = 0 [pid 8648] <... close resumed>) = 0 [pid 8647] <... ioctl resumed>) = 0 [pid 8645] <... futex resumed>) = 1 [pid 8643] <... futex resumed>) = 0 [pid 8648] close(4 [pid 8647] close(3 [pid 8643] exit_group(0 [pid 8652] memfd_create("syzkaller", 0 [pid 8650] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8648] <... close resumed>) = 0 [pid 8647] <... close resumed>) = 0 [pid 8643] <... exit_group resumed>) = ? [pid 8652] <... memfd_create resumed>) = 3 [pid 8648] mkdir("./file0", 0777 [pid 8647] close(4 [pid 8645] +++ exited with 0 +++ [pid 8643] +++ exited with 0 +++ [pid 8652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8647] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8643, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8652] <... mmap resumed>) = 0x7f5817c00000 [pid 8648] <... mkdir resumed>) = 0 [pid 8647] mkdir("./file0", 0777 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8647] <... mkdir resumed>) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 8648] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [ 317.147500][ T8648] loop4: detected capacity change from 0 to 4096 [ 317.157313][ T8647] loop3: detected capacity change from 0 to 4096 [pid 8647] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./358/binderfs") = 0 [pid 5059] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./358/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./358/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./358") = 0 [pid 5059] mkdir("./359", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8651] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 317.216230][ T8647] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 317.225536][ T8648] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8652] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8651] <... write resumed>) = 2097152 [pid 8651] munmap(0x7f5817c00000, 138412032) = 0 [pid 8651] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8651] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... ioctl resumed>) = 0 [pid 8651] <... ioctl resumed>) = 0 [pid 8652] <... write resumed>) = 2097152 [pid 8648] <... mount resumed>) = 0 [pid 5059] close(3 [pid 8651] close(3) = 0 [pid 8651] close(4) = 0 [pid 8647] <... mount resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8651] mkdir("./file0", 0777 [pid 8648] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8651] <... mkdir resumed>) = 0 [pid 8648] <... openat resumed>) = 3 [pid 8647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8652] munmap(0x7f5817c00000, 138412032 [pid 8648] chdir("./file0" [pid 8647] <... openat resumed>) = 3 [pid 8651] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8648] <... chdir resumed>) = 0 [ 317.344411][ T8651] loop2: detected capacity change from 0 to 4096 [pid 8647] chdir("./file0" [pid 8648] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8647] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8653 attached [pid 8648] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8647] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8653] set_robust_list(0x5555567436a0, 24 [pid 8652] <... munmap resumed>) = 0 [pid 8648] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8647] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8653 [pid 8653] <... set_robust_list resumed>) = 0 [pid 8648] <... futex resumed>) = 1 [pid 8647] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8646] <... futex resumed>) = 0 [pid 8653] chdir("./359" [pid 8652] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8647] <... futex resumed>) = 1 [pid 8646] exit_group(0 [pid 8644] <... futex resumed>) = 0 [pid 8653] <... chdir resumed>) = 0 [pid 8646] <... exit_group resumed>) = ? [pid 8644] exit_group(0 [pid 8653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8652] <... openat resumed>) = 4 [pid 8647] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8653] <... prctl resumed>) = 0 [pid 8652] ioctl(4, LOOP_SET_FD, 3 [pid 8647] <... futex resumed>) = ? [pid 8644] <... exit_group resumed>) = ? [pid 8653] setpgid(0, 0 [pid 8647] +++ exited with 0 +++ [pid 8648] +++ exited with 0 +++ [pid 8646] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8646, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8653] <... setpgid resumed>) = 0 [pid 5063] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8653] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 8653] write(3, "1000", 4 [pid 8644] +++ exited with 0 +++ [pid 5063] newfstatat(3, "", [pid 8653] <... write resumed>) = 4 [pid 8652] <... ioctl resumed>) = 0 [pid 8653] close(3 [pid 8652] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8653] <... close resumed>) = 0 [pid 8652] <... close resumed>) = 0 [pid 8653] symlink("/dev/binderfs", "./binderfs" [pid 8651] <... mount resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8644, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8652] close(4 [pid 8651] <... openat resumed>) = 3 [pid 8653] <... symlink resumed>) = 0 [pid 8652] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8652] mkdir("./file0", 0777 [pid 8651] chdir("./file0" [pid 5063] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8653] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8651] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8651] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 8653] <... futex resumed>) = 0 [pid 8652] <... mkdir resumed>) = 0 [pid 8651] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 8653] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8652] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8651] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(AT_FDCWD, "./353/binderfs", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 317.387079][ T8651] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 317.408777][ T8652] loop1: detected capacity change from 0 to 4096 [pid 8653] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8651] <... futex resumed>) = 1 [pid 8649] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(3, [pid 8653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8651] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8649] exit_group(0 [pid 5063] unlink("./353/binderfs" [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8651] <... futex resumed>) = ? [pid 8649] <... exit_group resumed>) = ? [pid 5062] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8651] +++ exited with 0 +++ [pid 8649] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./355/binderfs") = 0 [pid 5062] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8649, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 8653] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8653] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./355/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8653] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8653] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 8653] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] newfstatat(AT_FDCWD, "./353/file0", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8654 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 8654] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8653] <... clone3 resumed> => {parent_tid=[8654]}, 88) = 8654 [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8654] <... rseq resumed>) = 0 [pid 8653] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8654] set_robust_list(0x7f58200ee9a0, 24 [pid 8653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(4, "", [pid 5061] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8654] <... set_robust_list resumed>) = 0 [pid 8653] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8654] rt_sigprocmask(SIG_SETMASK, [], [pid 8653] <... futex resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5062] getdents64(4, [pid 5061] newfstatat(AT_FDCWD, "./355/binderfs", [pid 8654] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8653] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8654] memfd_create("syzkaller", 0 [pid 5063] getdents64(4, [pid 8654] <... memfd_create resumed>) = 3 [pid 8652] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5061] unlink("./355/binderfs" [pid 8654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] getdents64(4, [pid 8654] <... mmap resumed>) = 0x7f5817c00000 [pid 8652] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5063] close(4 [pid 8652] chdir("./file0" [pid 5063] <... close resumed>) = 0 [pid 5062] close(4 [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8652] <... chdir resumed>) = 0 [pid 5063] rmdir("./353/file0" [pid 8652] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] rmdir("./355/file0" [pid 8652] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8652] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] rmdir("./353" [pid 8652] <... futex resumed>) = 1 [pid 8650] <... futex resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8650] exit_group(0 [pid 5063] mkdir("./354", 0777 [ 317.456924][ T8652] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5062] getdents64(3, [pid 8650] <... exit_group resumed>) = ? [pid 5063] <... mkdir resumed>) = 0 [pid 8652] +++ exited with 0 +++ [pid 8650] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8650, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] close(3) = 0 [pid 5062] rmdir("./355") = 0 [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./355/file0", [pid 5060] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./359/binderfs") = 0 [pid 5060] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = 0 [pid 5062] mkdir("./356", 0777 [pid 5061] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 3 [pid 5061] getdents64(4, [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./355/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./355") = 0 [pid 8654] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./356", 0777 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./359/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8654] <... write resumed>) = 2097152 [pid 5060] rmdir("./359" [pid 8654] munmap(0x7f5817c00000, 138412032 [pid 5060] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8655 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8655 [pid 8655] set_robust_list(0x5555567436a0, 24) = 0 [pid 8655] chdir("./354" [pid 5060] mkdir("./360", 0777) = 0 [pid 8655] <... chdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... openat resumed>) = 3 [pid 8655] <... prctl resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8655] setpgid(0, 0) = 0 [pid 8655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8655] write(3, "1000", 4) = 4 [pid 8655] close(3) = 0 [pid 8655] symlink("/dev/binderfs", "./binderfs" [pid 8654] <... munmap resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8655] <... symlink resumed>) = 0 [pid 8655] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8655] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8655] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8655] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8654] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] close(3 [pid 8654] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 8655] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8655] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8654] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8656 attached [pid 8655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8656 [pid 8656] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8657 attached ) = 0 [pid 8655] <... clone3 resumed> => {parent_tid=[8657]}, 88) = 8657 [pid 5061] <... ioctl resumed>) = 0 [pid 8657] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8656] chdir("./356" [pid 8655] rt_sigprocmask(SIG_SETMASK, [], [pid 8656] <... chdir resumed>) = 0 [pid 8655] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8654] <... ioctl resumed>) = 0 [pid 8656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8655] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8654] close(3 [pid 8656] <... prctl resumed>) = 0 [pid 8655] <... futex resumed>) = 0 [pid 8654] <... close resumed>) = 0 [pid 8656] setpgid(0, 0 [pid 8655] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8654] close(4 [pid 8656] <... setpgid resumed>) = 0 [pid 8654] <... close resumed>) = 0 [pid 5061] close(3 [pid 8656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8654] mkdir("./file0", 0777 [pid 8657] <... rseq resumed>) = 0 [pid 8656] <... openat resumed>) = 3 [pid 8654] <... mkdir resumed>) = 0 [pid 8657] set_robust_list(0x7f58200ee9a0, 24 [pid 8656] write(3, "1000", 4 [pid 8654] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8657] <... set_robust_list resumed>) = 0 [pid 8656] <... write resumed>) = 4 [pid 8656] close(3 [pid 5061] <... close resumed>) = 0 [pid 8656] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8656] symlink("/dev/binderfs", "./binderfs" [pid 8657] rt_sigprocmask(SIG_SETMASK, [], [pid 8656] <... symlink resumed>) = 0 [pid 8656] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8656] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8656] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8658 [pid 8656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8657] memfd_create("syzkaller", 0 [pid 8656] <... mmap resumed>) = 0x7f58200ce000 [pid 8656] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 8658 attached [pid 8656] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8658] set_robust_list(0x5555567436a0, 24 [pid 8656] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8658] <... set_robust_list resumed>) = 0 [pid 8656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8658] chdir("./356") = 0 [pid 8656] <... clone3 resumed> => {parent_tid=[8659]}, 88) = 8659 [pid 8658] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8656] rt_sigprocmask(SIG_SETMASK, [], [pid 8658] <... prctl resumed>) = 0 [pid 8656] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8659 attached [pid 8658] setpgid(0, 0 [pid 8656] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8659] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8658] <... setpgid resumed>) = 0 [pid 8656] <... futex resumed>) = 0 [pid 8659] <... rseq resumed>) = 0 [pid 8658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8656] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8659] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8657] <... memfd_create resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 8659] rt_sigprocmask(SIG_SETMASK, [], [pid 8658] <... openat resumed>) = 3 [pid 8657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8658] write(3, "1000", 4 [pid 8657] <... mmap resumed>) = 0x7f5817c00000 [pid 8658] <... write resumed>) = 4 [pid 8658] close(3) = 0 [pid 8658] symlink("/dev/binderfs", "./binderfs" [pid 8659] memfd_create("syzkaller", 0 [pid 8658] <... symlink resumed>) = 0 [pid 8658] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8658] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8659] <... memfd_create resumed>) = 3 [pid 8658] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8659] <... mmap resumed>) = 0x7f5817c00000 [pid 8658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [ 317.648370][ T8654] loop0: detected capacity change from 0 to 4096 [ 317.678937][ T8654] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8658] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] close(3 [pid 8658] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... close resumed>) = 0 [pid 8658] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8661]}, 88) = 8661 [pid 8658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 8661 attached [pid 8658] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8661] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8658] <... futex resumed>) = 0 [pid 8661] <... rseq resumed>) = 0 [pid 8658] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8661] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8661] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8660 ./strace-static-x86_64: Process 8660 attached [pid 8661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8660] set_robust_list(0x5555567436a0, 24 [pid 8661] memfd_create("syzkaller", 0 [pid 8660] <... set_robust_list resumed>) = 0 [pid 8660] chdir("./360" [pid 8661] <... memfd_create resumed>) = 3 [pid 8661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8660] <... chdir resumed>) = 0 [pid 8661] <... mmap resumed>) = 0x7f5817c00000 [pid 8660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8660] setpgid(0, 0) = 0 [pid 8660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8660] write(3, "1000", 4) = 4 [pid 8660] close(3) = 0 [pid 8660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8660] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8660] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8660] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8660] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8660] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8662 attached [pid 8662] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8657] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8662] <... rseq resumed>) = 0 [pid 8660] <... clone3 resumed> => {parent_tid=[8662]}, 88) = 8662 [pid 8659] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8654] <... mount resumed>) = 0 [pid 8662] set_robust_list(0x7f58200ee9a0, 24 [pid 8660] rt_sigprocmask(SIG_SETMASK, [], [pid 8662] <... set_robust_list resumed>) = 0 [pid 8662] rt_sigprocmask(SIG_SETMASK, [], [pid 8660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8660] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8660] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8661] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8654] chdir("./file0" [pid 8662] memfd_create("syzkaller", 0) = 3 [pid 8662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8654] <... chdir resumed>) = 0 [pid 8662] <... mmap resumed>) = 0x7f5817c00000 [pid 8654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8654] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8653] <... futex resumed>) = 0 [pid 8654] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8653] exit_group(0) = ? [pid 8654] <... futex resumed>) = ? [pid 8654] +++ exited with 0 +++ [pid 8653] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8653, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./359/binderfs") = 0 [pid 8659] <... write resumed>) = 2097152 [pid 5059] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./359/file0" [pid 8657] <... write resumed>) = 2097152 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 8659] munmap(0x7f5817c00000, 138412032 [pid 5059] <... close resumed>) = 0 [pid 8662] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8659] <... munmap resumed>) = 0 [pid 8657] munmap(0x7f5817c00000, 138412032 [pid 5059] rmdir("./359") = 0 [pid 5059] mkdir("./360", 0777 [pid 8661] <... write resumed>) = 2097152 [pid 5059] <... mkdir resumed>) = 0 [pid 8661] munmap(0x7f5817c00000, 138412032 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8659] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8661] <... munmap resumed>) = 0 [pid 8657] <... munmap resumed>) = 0 [pid 8661] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8657] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8661] ioctl(4, LOOP_SET_FD, 3 [pid 8657] <... openat resumed>) = 4 [pid 8659] <... openat resumed>) = 4 [pid 8662] <... write resumed>) = 2097152 [pid 8659] ioctl(4, LOOP_SET_FD, 3 [pid 8661] <... ioctl resumed>) = 0 [pid 8657] ioctl(4, LOOP_SET_FD, 3 [pid 8662] munmap(0x7f5817c00000, 138412032 [pid 8659] <... ioctl resumed>) = 0 [pid 8662] <... munmap resumed>) = 0 [pid 8661] close(3 [pid 8659] close(3 [pid 8661] <... close resumed>) = 0 [pid 8657] <... ioctl resumed>) = 0 [pid 8662] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8661] close(4 [pid 8659] <... close resumed>) = 0 [pid 8662] <... openat resumed>) = 4 [pid 8661] <... close resumed>) = 0 [pid 8659] close(4 [pid 8657] close(3 [pid 8662] ioctl(4, LOOP_SET_FD, 3 [pid 8659] <... close resumed>) = 0 [pid 8662] <... ioctl resumed>) = 0 [pid 8659] mkdir("./file0", 0777 [pid 8657] <... close resumed>) = 0 [pid 8657] close(4 [pid 8661] mkdir("./file0", 0777) = 0 [pid 8657] <... close resumed>) = 0 [pid 8657] mkdir("./file0", 0777 [pid 8659] <... mkdir resumed>) = 0 [pid 8657] <... mkdir resumed>) = 0 [pid 8659] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] <... ioctl resumed>) = 0 [pid 8661] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [ 317.914773][ T8661] loop2: detected capacity change from 0 to 4096 [ 317.920999][ T8659] loop3: detected capacity change from 0 to 4096 [ 317.928492][ T8657] loop4: detected capacity change from 0 to 4096 [ 317.953049][ T8662] loop1: detected capacity change from 0 to 4096 [pid 8657] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8662] close(3) = 0 [pid 8662] close(4) = 0 [pid 8662] mkdir("./file0", 0777) = 0 [pid 8662] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8663 attached , child_tidptr=0x555556743690) = 8663 [pid 8663] set_robust_list(0x5555567436a0, 24) = 0 [pid 8663] chdir("./360") = 0 [pid 8663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8663] setpgid(0, 0 [pid 8657] <... mount resumed>) = 0 [pid 8657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8663] <... setpgid resumed>) = 0 [pid 8657] <... openat resumed>) = 3 [pid 8663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8657] chdir("./file0" [pid 8663] <... openat resumed>) = 3 [pid 8657] <... chdir resumed>) = 0 [ 317.970342][ T8659] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 317.972320][ T8657] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 317.989106][ T8662] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 317.990197][ T8661] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8663] write(3, "1000", 4) = 4 [pid 8657] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8663] close(3) = 0 [pid 8659] <... mount resumed>) = 0 [pid 8657] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8663] symlink("/dev/binderfs", "./binderfs" [pid 8657] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8655] <... futex resumed>) = 0 [pid 8655] exit_group(0) = ? [pid 8663] <... symlink resumed>) = 0 [pid 8657] +++ exited with 0 +++ [pid 8655] +++ exited with 0 +++ [pid 8663] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8655, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=7 /* 0.07 s */} --- [pid 8663] <... futex resumed>) = 0 [pid 8663] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8663] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8659] <... openat resumed>) = 3 [pid 8663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8659] chdir("./file0" [pid 8663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8659] <... chdir resumed>) = 0 [pid 8663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8659] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8663] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8659] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8659] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8663] <... mprotect resumed>) = 0 [pid 8659] <... futex resumed>) = 1 [pid 8656] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8663] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8659] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8656] exit_group(0 [pid 8663] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8659] <... futex resumed>) = ? [pid 8656] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 8663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8659] +++ exited with 0 +++ [pid 8656] +++ exited with 0 +++ [pid 5063] newfstatat(3, "", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8656, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8663] <... clone3 resumed> => {parent_tid=[8664]}, 88) = 8664 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 8664 attached [pid 8663] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] getdents64(3, [pid 5062] <... restart_syscall resumed>) = 0 [pid 8664] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8664] <... rseq resumed>) = 0 [pid 8663] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8663] <... futex resumed>) = 0 [pid 8661] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8664] set_robust_list(0x7f58200ee9a0, 24 [pid 8663] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5062] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8664] <... set_robust_list resumed>) = 0 [pid 8661] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8664] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] newfstatat(3, "", [pid 8664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8661] chdir("./file0" [pid 5063] unlink("./354/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8664] memfd_create("syzkaller", 0 [pid 8661] <... chdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8661] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8661] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8661] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8661] <... futex resumed>) = 1 [pid 8658] <... futex resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./356/binderfs", [pid 8664] <... memfd_create resumed>) = 3 [pid 8658] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8661] ???( [pid 8664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8658] <... exit_group resumed>) = ? [pid 5062] unlink("./356/binderfs" [pid 8664] <... mmap resumed>) = 0x7f5817c00000 [pid 8661] <... ??? resumed>) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8662] <... mount resumed>) = 0 [pid 5062] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8662] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8662] chdir("./file0" [pid 8661] +++ exited with 0 +++ [pid 8658] +++ exited with 0 +++ [pid 5063] newfstatat(AT_FDCWD, "./354/file0", [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8662] <... chdir resumed>) = 0 [pid 5063] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8658, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8662] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8662] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... restart_syscall resumed>) = 0 [pid 8662] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8662] <... futex resumed>) = 1 [pid 8660] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8662] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8660] exit_group(0 [pid 5063] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./356/file0", [pid 5063] newfstatat(4, "", [pid 5061] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8660] <... exit_group resumed>) = ? [pid 5063] getdents64(4, [pid 5062] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8662] <... futex resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 8662] +++ exited with 0 +++ [pid 8660] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8660, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5063] close(4 [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./354/file0" [pid 5062] getdents64(4, [pid 5060] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8664] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] getdents64(3, [pid 5062] close(4 [pid 5061] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3) = 0 [pid 5062] rmdir("./356/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5063] rmdir("./354") = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5063] mkdir("./355", 0777 [pid 5062] getdents64(3, [pid 5061] newfstatat(AT_FDCWD, "./356/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5060] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./356" [pid 5060] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./356/binderfs" [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./357", 0777 [pid 5060] newfstatat(AT_FDCWD, "./360/binderfs", [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./360/binderfs") = 0 [pid 5060] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./356/file0", ./strace-static-x86_64: Process 8665 attached [pid 8664] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8665 [pid 5060] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] set_robust_list(0x5555567436a0, 24 [pid 8664] munmap(0x7f5817c00000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8665] <... set_robust_list resumed>) = 0 [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] chdir("./357" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(AT_FDCWD, "./360/file0", [pid 5063] <... ioctl resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(3 [pid 5060] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... openat resumed>) = 4 [pid 8665] <... prctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8665] setpgid(0, 0 [pid 5061] newfstatat(4, "", [pid 8665] <... setpgid resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... openat resumed>) = 4 [pid 8665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8664] <... munmap resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 8665] write(3, "1000", 4./strace-static-x86_64: Process 8666 attached [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8665] <... write resumed>) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8666 [pid 5060] getdents64(4, [pid 8666] set_robust_list(0x5555567436a0, 24 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8666] <... set_robust_list resumed>) = 0 [pid 8665] close(3 [pid 5060] getdents64(4, [pid 8666] chdir("./355" [pid 8665] <... close resumed>) = 0 [pid 8666] <... chdir resumed>) = 0 [pid 8665] symlink("/dev/binderfs", "./binderfs" [pid 5061] getdents64(4, [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8666] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] close(4) = 0 [pid 5060] rmdir("./360/file0" [pid 8666] <... prctl resumed>) = 0 [pid 8665] <... symlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... rmdir resumed>) = 0 [pid 8666] setpgid(0, 0 [pid 5061] getdents64(4, [pid 8666] <... setpgid resumed>) = 0 [pid 5060] getdents64(3, [pid 8666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8666] <... openat resumed>) = 3 [pid 8665] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5061] close(4 [pid 5060] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8666] write(3, "1000", 4 [pid 8665] <... futex resumed>) = 0 [pid 5060] rmdir("./360" [pid 8665] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] <... rmdir resumed>) = 0 [pid 8665] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8666] <... write resumed>) = 4 [pid 8666] close(3 [pid 8665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8664] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] rmdir("./356/file0" [pid 8666] <... close resumed>) = 0 [pid 8665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] mkdir("./361", 0777 [pid 8666] symlink("/dev/binderfs", "./binderfs" [pid 8665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8665] <... mmap resumed>) = 0x7f58200ce000 [pid 8666] <... symlink resumed>) = 0 [pid 8664] <... openat resumed>) = 4 [pid 8666] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8664] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(3, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8665] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8666] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 8666] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8665] <... mprotect resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8666] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8666] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8665] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8664] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8664] close(3 [pid 5061] <... close resumed>) = 0 [pid 8665] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8664] <... close resumed>) = 0 [pid 8665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] rmdir("./356" [pid 8664] close(4./strace-static-x86_64: Process 8667 attached ) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8667] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8665] <... clone3 resumed> => {parent_tid=[8667]}, 88) = 8667 [pid 8664] mkdir("./file0", 0777 [pid 8666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8668]}, 88) = 8668 [pid 8664] <... mkdir resumed>) = 0 [pid 8665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 8668 attached [ 318.257888][ T8664] loop0: detected capacity change from 0 to 4096 [pid 8666] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8668] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8667] <... rseq resumed>) = 0 [pid 8666] <... futex resumed>) = 0 [pid 8665] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8664] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5061] mkdir("./357", 0777 [pid 8667] set_robust_list(0x7f58200ee9a0, 24 [pid 8665] <... futex resumed>) = 0 [pid 8665] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8667] <... set_robust_list resumed>) = 0 [pid 8667] rt_sigprocmask(SIG_SETMASK, [], [pid 8666] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... mkdir resumed>) = 0 [pid 8668] <... rseq resumed>) = 0 [pid 8668] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8668] memfd_create("syzkaller", 0 [pid 8667] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8668] <... memfd_create resumed>) = 3 [pid 8668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8667] memfd_create("syzkaller", 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8667] <... memfd_create resumed>) = 3 [pid 8667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [ 318.305034][ T8664] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8669 attached [pid 8669] set_robust_list(0x5555567436a0, 24) = 0 [pid 8669] chdir("./361") = 0 [pid 8669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8669 [pid 8669] <... prctl resumed>) = 0 [pid 8669] setpgid(0, 0) = 0 [pid 8669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8669] write(3, "1000", 4) = 4 [pid 8669] close(3) = 0 [pid 8669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8669] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8668] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8669] <... futex resumed>) = 0 [pid 8664] <... mount resumed>) = 0 [pid 8669] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8669] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8664] <... openat resumed>) = 3 [pid 8669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8664] chdir("./file0" [pid 8669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8664] <... chdir resumed>) = 0 [pid 8669] <... mmap resumed>) = 0x7f58200ce000 [pid 8664] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 8669] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8664] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] close(3 [pid 8669] <... mprotect resumed>) = 0 [pid 8664] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8664] <... futex resumed>) = 1 [pid 8663] <... futex resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8664] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8663] exit_group(0 [pid 8669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8664] <... futex resumed>) = ? [pid 8663] <... exit_group resumed>) = ? [pid 8669] <... clone3 resumed> => {parent_tid=[8670]}, 88) = 8670 [pid 8669] rt_sigprocmask(SIG_SETMASK, [], [pid 8664] +++ exited with 0 +++ [pid 8669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8663] +++ exited with 0 +++ [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8670 attached [pid 8669] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8669] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8670] <... rseq resumed>) = 0 [pid 8670] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8670] memfd_create("syzkaller", 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8663, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 8671 attached [pid 8670] <... memfd_create resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8671 [pid 8671] set_robust_list(0x5555567436a0, 24 [pid 8670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8670] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8671] <... set_robust_list resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8671] chdir("./357" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8671] <... chdir resumed>) = 0 [pid 8671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8671] <... prctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8671] setpgid(0, 0) = 0 [pid 5059] newfstatat(AT_FDCWD, "./360/binderfs", [pid 8671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8667] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./360/binderfs" [pid 8671] write(3, "1000", 4) = 4 [pid 8671] close(3 [pid 5059] <... unlink resumed>) = 0 [pid 8671] <... close resumed>) = 0 [pid 8671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8671] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8671] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8671] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8672 attached [pid 8672] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8671] <... clone3 resumed> => {parent_tid=[8672]}, 88) = 8672 [pid 8672] set_robust_list(0x7f58200ee9a0, 24 [pid 8671] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8672] <... set_robust_list resumed>) = 0 [pid 8671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8668] <... write resumed>) = 2097152 [pid 8672] rt_sigprocmask(SIG_SETMASK, [], [pid 8671] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8671] <... futex resumed>) = 0 [pid 8672] memfd_create("syzkaller", 0 [pid 8671] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8672] <... memfd_create resumed>) = 3 [pid 8670] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8668] munmap(0x7f5817c00000, 138412032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] newfstatat(AT_FDCWD, "./360/file0", [pid 8667] <... write resumed>) = 2097152 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8672] <... mmap resumed>) = 0x7f5817c00000 [pid 8667] munmap(0x7f5817c00000, 138412032) = 0 [pid 5059] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8668] <... munmap resumed>) = 0 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 8668] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 8668] <... openat resumed>) = 4 [pid 8668] ioctl(4, LOOP_SET_FD, 3 [pid 8667] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./360/file0" [pid 8667] <... openat resumed>) = 4 [pid 8667] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./360" [pid 8668] <... ioctl resumed>) = 0 [pid 8668] close(3) = 0 [pid 8668] close(4) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8668] mkdir("./file0", 0777) = 0 [pid 8668] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8667] <... ioctl resumed>) = 0 [pid 8670] <... write resumed>) = 2097152 [pid 5059] mkdir("./361", 0777 [pid 8667] close(3) = 0 [pid 8667] close(4) = 0 [pid 8667] mkdir("./file0", 0777 [pid 5059] <... mkdir resumed>) = 0 [pid 8667] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8667] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] <... openat resumed>) = 3 [pid 8670] munmap(0x7f5817c00000, 138412032 [ 318.527861][ T8668] loop4: detected capacity change from 0 to 4096 [ 318.536604][ T8667] loop3: detected capacity change from 0 to 4096 [ 318.551365][ T8668] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8670] <... munmap resumed>) = 0 [pid 8670] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8670] close(3 [pid 8672] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8670] <... close resumed>) = 0 [ 318.573231][ T8667] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 318.592598][ T8670] loop1: detected capacity change from 0 to 4096 [pid 8670] close(4 [pid 8668] <... mount resumed>) = 0 [pid 8670] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8670] mkdir("./file0", 0777) = 0 [pid 8668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8668] chdir("./file0") = 0 [pid 8668] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8668] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8666] <... futex resumed>) = 0 [pid 8670] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8668] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8666] exit_group(0 [pid 8668] <... futex resumed>) = ? [pid 8666] <... exit_group resumed>) = ? [pid 8668] +++ exited with 0 +++ [pid 8666] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8666, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./355/binderfs") = 0 [pid 5063] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 5063] newfstatat(AT_FDCWD, "./355/file0", [pid 5059] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8667] <... mount resumed>) = 0 [pid 8667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8667] chdir("./file0" [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8673 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8667] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8673 attached [pid 5063] getdents64(4, [pid 8673] set_robust_list(0x5555567436a0, 24 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8673] <... set_robust_list resumed>) = 0 [pid 8667] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8673] chdir("./361") = 0 [pid 5063] close(4) = 0 [pid 8673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] rmdir("./355/file0") = 0 [pid 5063] getdents64(3, [pid 8673] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8673] setpgid(0, 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./355" [pid 8667] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... rmdir resumed>) = 0 [pid 8667] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8665] <... futex resumed>) = 0 [ 318.661374][ T8670] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8667] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8673] <... setpgid resumed>) = 0 [pid 8665] exit_group(0 [pid 5063] mkdir("./356", 0777 [pid 8673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8667] <... futex resumed>) = ? [pid 8665] <... exit_group resumed>) = ? [pid 5063] <... mkdir resumed>) = 0 [pid 8667] +++ exited with 0 +++ [pid 8665] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8665, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8673] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8673] write(3, "1000", 4 [pid 5063] <... openat resumed>) = 3 [pid 8673] <... write resumed>) = 4 [pid 8673] close(3) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8673] symlink("/dev/binderfs", "./binderfs" [pid 8672] <... write resumed>) = 2097152 [pid 5062] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8673] <... symlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8672] munmap(0x7f5817c00000, 138412032 [pid 5062] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8673] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 8673] <... futex resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8673] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8673] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8672] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] getdents64(3, [pid 8673] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8673] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8673] <... mprotect resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8673] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8673] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./357/binderfs" [pid 8673] <... clone3 resumed> => {parent_tid=[8674]}, 88) = 8674 [pid 5062] <... unlink resumed>) = 0 [pid 8673] rt_sigprocmask(SIG_SETMASK, [], [pid 8672] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8674 attached [pid 8673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8672] <... openat resumed>) = 4 [pid 8674] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8673] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8672] ioctl(4, LOOP_SET_FD, 3 [pid 8674] <... rseq resumed>) = 0 [pid 8673] <... futex resumed>) = 0 [pid 8674] set_robust_list(0x7f58200ee9a0, 24 [pid 8673] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8674] <... set_robust_list resumed>) = 0 [pid 8670] <... mount resumed>) = 0 [pid 8674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8674] memfd_create("syzkaller", 0 [pid 8670] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 8670] chdir("./file0" [pid 8674] <... memfd_create resumed>) = 3 [pid 8670] <... chdir resumed>) = 0 [pid 8670] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8672] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8672] close(3 [pid 5062] <... openat resumed>) = 4 [pid 8672] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8672] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8672] <... close resumed>) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8672] mkdir("./file0", 0777 [pid 5062] close(4) = 0 [pid 8672] <... mkdir resumed>) = 0 [pid 8672] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] rmdir("./357/file0" [pid 8674] <... mmap resumed>) = 0x7f5817c00000 [pid 8670] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... rmdir resumed>) = 0 [pid 8670] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 8670] <... futex resumed>) = 1 [pid 8669] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8670] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8669] exit_group(0 [pid 8670] <... futex resumed>) = ? [pid 8669] <... exit_group resumed>) = ? [pid 5062] close(3) = 0 [pid 8670] +++ exited with 0 +++ [pid 8669] +++ exited with 0 +++ [pid 5062] rmdir("./357") = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8669, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... ioctl resumed>) = 0 [pid 5062] mkdir("./358", 0777 [pid 5060] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(AT_FDCWD, "./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./361/binderfs" [pid 5063] close(3) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8675 ./strace-static-x86_64: Process 8675 attached [pid 5060] <... umount2 resumed>) = 0 [ 318.757843][ T8672] loop2: detected capacity change from 0 to 4096 [ 318.797638][ T8672] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8675] set_robust_list(0x5555567436a0, 24 [pid 5060] newfstatat(AT_FDCWD, "./361/file0", [pid 8675] <... set_robust_list resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8675] chdir("./356" [pid 5060] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8675] <... chdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... openat resumed>) = 4 [pid 8675] <... prctl resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 8675] setpgid(0, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8675] <... setpgid resumed>) = 0 [pid 5060] getdents64(4, [pid 8675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8675] <... openat resumed>) = 3 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8675] write(3, "1000", 4 [pid 5060] close(4 [pid 8675] <... write resumed>) = 4 [pid 8675] close(3 [pid 5060] <... close resumed>) = 0 [pid 8675] <... close resumed>) = 0 [pid 5060] rmdir("./361/file0" [pid 8675] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... rmdir resumed>) = 0 [pid 8675] <... symlink resumed>) = 0 [pid 8675] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(3, [pid 8675] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8675] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] close(3 [pid 8675] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... close resumed>) = 0 [pid 8675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] rmdir("./361" [pid 8675] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] <... rmdir resumed>) = 0 [pid 8675] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] mkdir("./362", 0777 [pid 8675] <... mprotect resumed>) = 0 [pid 8674] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... mkdir resumed>) = 0 [pid 8675] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8672] <... mount resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8675] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... openat resumed>) = 3 [pid 8672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8676 attached [pid 5062] <... ioctl resumed>) = 0 [pid 8676] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8675] <... clone3 resumed> => {parent_tid=[8676]}, 88) = 8676 [pid 8672] <... openat resumed>) = 3 [pid 8676] <... rseq resumed>) = 0 [pid 8676] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8676] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] close(3 [pid 8675] rt_sigprocmask(SIG_SETMASK, [], [pid 8672] chdir("./file0" [pid 8675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8672] <... chdir resumed>) = 0 [pid 8675] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8672] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8676] <... futex resumed>) = 0 [pid 8675] <... futex resumed>) = 1 [pid 8676] memfd_create("syzkaller", 0 [pid 8675] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8672] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8676] <... memfd_create resumed>) = 3 [pid 8676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8672] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8672] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8671] <... futex resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8677 [pid 8671] exit_group(0./strace-static-x86_64: Process 8677 attached [pid 8677] set_robust_list(0x5555567436a0, 24 [pid 8672] <... futex resumed>) = ? [pid 8671] <... exit_group resumed>) = ? [pid 8672] +++ exited with 0 +++ [pid 8677] <... set_robust_list resumed>) = 0 [pid 8671] +++ exited with 0 +++ [pid 8677] chdir("./358" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8671, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 8677] <... chdir resumed>) = 0 [pid 8674] <... write resumed>) = 2097152 [pid 5061] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8677] <... prctl resumed>) = 0 [pid 5061] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8677] setpgid(0, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8677] <... setpgid resumed>) = 0 [pid 5061] unlink("./357/binderfs" [pid 5060] <... ioctl resumed>) = 0 [pid 8677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... unlink resumed>) = 0 [pid 5060] close(3 [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 8677] write(3, "1000", 4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8677] <... write resumed>) = 4 [pid 8674] munmap(0x7f5817c00000, 138412032./strace-static-x86_64: Process 8678 attached [pid 8677] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 8678] set_robust_list(0x5555567436a0, 24 [pid 8677] <... close resumed>) = 0 [pid 8678] <... set_robust_list resumed>) = 0 [pid 8677] symlink("/dev/binderfs", "./binderfs" [pid 8678] chdir("./362" [pid 8677] <... symlink resumed>) = 0 [pid 8678] <... chdir resumed>) = 0 [pid 8677] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8676] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8678 [pid 8677] <... futex resumed>) = 0 [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8677] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8674] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8677] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8678] <... prctl resumed>) = 0 [pid 8677] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] newfstatat(AT_FDCWD, "./357/file0", [pid 8678] setpgid(0, 0 [pid 8677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8678] <... setpgid resumed>) = 0 [pid 8677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8677] <... mmap resumed>) = 0x7f58200ce000 [pid 8674] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8678] <... openat resumed>) = 3 [pid 8677] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8674] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8678] write(3, "1000", 4 [pid 8677] <... mprotect resumed>) = 0 [pid 8674] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... openat resumed>) = 4 [pid 8678] <... write resumed>) = 4 [pid 8677] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8678] close(3 [pid 8677] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8678] <... close resumed>) = 0 [pid 8677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8678] symlink("/dev/binderfs", "./binderfs" [pid 5061] newfstatat(4, "", ./strace-static-x86_64: Process 8679 attached [pid 8678] <... symlink resumed>) = 0 [pid 8677] <... clone3 resumed> => {parent_tid=[8679]}, 88) = 8679 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8679] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8678] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8677] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] getdents64(4, [pid 8679] <... rseq resumed>) = 0 [pid 8678] <... futex resumed>) = 0 [pid 8677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8679] set_robust_list(0x7f58200ee9a0, 24 [pid 8678] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8677] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(4, [pid 8679] <... set_robust_list resumed>) = 0 [pid 8678] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8677] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8679] rt_sigprocmask(SIG_SETMASK, [], [pid 8678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8677] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] close(4 [pid 8679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8678] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 8674] <... ioctl resumed>) = 0 [pid 5061] rmdir("./357/file0" [pid 8679] memfd_create("syzkaller", 0 [pid 8678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8674] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 8679] <... memfd_create resumed>) = 3 [pid 8678] <... mmap resumed>) = 0x7f58200ce000 [pid 8674] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 8679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8678] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8674] close(4 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8678] <... mprotect resumed>) = 0 [pid 8674] <... close resumed>) = 0 [pid 5061] close(3 [pid 8676] <... write resumed>) = 2097152 [pid 8679] <... mmap resumed>) = 0x7f5817c00000 [pid 8678] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8676] munmap(0x7f5817c00000, 138412032 [pid 8674] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 8674] <... mkdir resumed>) = 0 [pid 5061] rmdir("./357" [pid 8678] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] mkdir("./358", 0777./strace-static-x86_64: Process 8680 attached [pid 8674] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5061] <... mkdir resumed>) = 0 [pid 8680] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8678] <... clone3 resumed> => {parent_tid=[8680]}, 88) = 8680 [pid 8680] <... rseq resumed>) = 0 [pid 8680] set_robust_list(0x7f58200ee9a0, 24 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8680] <... set_robust_list resumed>) = 0 [pid 8678] rt_sigprocmask(SIG_SETMASK, [], [pid 8676] <... munmap resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8680] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8678] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8678] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8680] memfd_create("syzkaller", 0 [pid 8678] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8676] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 319.019795][ T8674] loop0: detected capacity change from 0 to 4096 [ 319.059199][ T8674] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8676] ioctl(4, LOOP_SET_FD, 3 [pid 8680] <... memfd_create resumed>) = 3 [pid 8680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8676] <... ioctl resumed>) = 0 [pid 8676] close(3) = 0 [pid 8676] close(4 [pid 8679] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8676] <... close resumed>) = 0 [pid 8676] mkdir("./file0", 0777) = 0 [ 319.076352][ T8676] loop4: detected capacity change from 0 to 4096 [pid 8676] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8680] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8679] <... write resumed>) = 2097152 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8681 ./strace-static-x86_64: Process 8681 attached [pid 8681] set_robust_list(0x5555567436a0, 24) = 0 [pid 8681] chdir("./358" [pid 8674] <... mount resumed>) = 0 [pid 8681] <... chdir resumed>) = 0 [pid 8681] prctl(PR_SET_PDEATHSIG, SIGKILL [ 319.135236][ T8676] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8674] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8681] <... prctl resumed>) = 0 [pid 8674] <... openat resumed>) = 3 [pid 8681] setpgid(0, 0 [pid 8674] chdir("./file0") = 0 [pid 8674] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8681] <... setpgid resumed>) = 0 [pid 8674] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8674] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8681] <... openat resumed>) = 3 [pid 8679] munmap(0x7f5817c00000, 138412032 [pid 8676] <... mount resumed>) = 0 [pid 8676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8681] write(3, "1000", 4 [pid 8679] <... munmap resumed>) = 0 [pid 8676] <... openat resumed>) = 3 [pid 8674] <... futex resumed>) = 1 [pid 8681] <... write resumed>) = 4 [pid 8674] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8681] close(3 [pid 8673] <... futex resumed>) = 0 [pid 8681] <... close resumed>) = 0 [pid 8673] exit_group(0 [pid 8674] <... futex resumed>) = ? [pid 8676] chdir("./file0" [pid 8673] <... exit_group resumed>) = ? [pid 8679] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8676] <... chdir resumed>) = 0 [pid 8674] +++ exited with 0 +++ [pid 8673] +++ exited with 0 +++ [pid 8676] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8673, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8681] symlink("/dev/binderfs", "./binderfs" [pid 8679] <... openat resumed>) = 4 [pid 8676] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8681] <... symlink resumed>) = 0 [pid 8676] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8681] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8676] <... futex resumed>) = 1 [pid 8675] <... futex resumed>) = 0 [pid 8681] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8679] ioctl(4, LOOP_SET_FD, 3 [pid 8676] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8675] exit_group(0 [pid 8681] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5059] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8681] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8681] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... openat resumed>) = 3 [pid 8679] <... ioctl resumed>) = 0 [pid 8676] <... futex resumed>) = ? [pid 8675] <... exit_group resumed>) = ? [pid 5059] newfstatat(3, "", [pid 8681] <... mprotect resumed>) = 0 [pid 8679] close(3 [pid 8676] +++ exited with 0 +++ [pid 8679] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8679] close(4 [pid 8681] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8680] <... write resumed>) = 2097152 [pid 8679] <... close resumed>) = 0 [pid 8675] +++ exited with 0 +++ [pid 5059] getdents64(3, [pid 8681] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8679] mkdir("./file0", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8675, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8679] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8682 attached [pid 5059] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8679] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8682] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8681] <... clone3 resumed> => {parent_tid=[8682]}, 88) = 8682 [pid 8680] munmap(0x7f5817c00000, 138412032 [pid 5059] newfstatat(AT_FDCWD, "./361/binderfs", [pid 8682] <... rseq resumed>) = 0 [pid 8681] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8682] set_robust_list(0x7f58200ee9a0, 24 [pid 8681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./361/binderfs" [pid 8682] <... set_robust_list resumed>) = 0 [pid 8681] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... unlink resumed>) = 0 [pid 8682] rt_sigprocmask(SIG_SETMASK, [], [pid 8681] <... futex resumed>) = 0 [pid 8680] <... munmap resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8682] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8681] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8680] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = 0 [pid 8682] memfd_create("syzkaller", 0 [pid 8680] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8682] <... memfd_create resumed>) = 3 [pid 8680] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [ 319.237233][ T8679] loop3: detected capacity change from 0 to 4096 [ 319.268293][ T8679] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5059] newfstatat(AT_FDCWD, "./361/file0", [pid 8682] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./356/binderfs") = 0 [pid 5059] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8680] <... ioctl resumed>) = 0 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8680] close(3 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8680] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 8680] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8680] <... close resumed>) = 0 [pid 8680] mkdir("./file0", 0777 [pid 5059] close(4) = 0 [pid 5059] rmdir("./361/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5063] newfstatat(AT_FDCWD, "./356/file0", [pid 5059] rmdir("./361" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] mkdir("./362", 0777 [pid 8682] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8680] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8680] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8679] <... mount resumed>) = 0 [pid 5063] newfstatat(4, "", [ 319.298406][ T8680] loop1: detected capacity change from 0 to 4096 [pid 8679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./356/file0" [pid 8679] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 8679] chdir("./file0") = 0 [pid 8679] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8679] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 8679] <... futex resumed>) = 1 [pid 8677] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8679] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8677] exit_group(0 [pid 5063] close(3 [pid 8679] <... futex resumed>) = ? [pid 8677] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 8679] +++ exited with 0 +++ [pid 5063] rmdir("./356" [pid 8677] +++ exited with 0 +++ [pid 5063] <... rmdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8677, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] mkdir("./357", 0777) = 0 [pid 5062] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8680] <... mount resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./358/binderfs", [pid 8680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8682] <... write resumed>) = 2097152 [pid 8680] <... openat resumed>) = 3 [pid 5062] unlink("./358/binderfs") = 0 [ 319.353797][ T8680] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5059] <... ioctl resumed>) = 0 [pid 8682] munmap(0x7f5817c00000, 138412032 [pid 8680] chdir("./file0" [pid 5062] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8680] <... chdir resumed>) = 0 [pid 8680] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] close(3 [pid 8680] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8680] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8678] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8680] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8678] exit_group(0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8682] <... munmap resumed>) = 0 [pid 8680] <... futex resumed>) = ? [pid 8678] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8683 attached [pid 8680] +++ exited with 0 +++ [pid 8678] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8683 [pid 8683] set_robust_list(0x5555567436a0, 24) = 0 [pid 8683] chdir("./362") = 0 [pid 8683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8682] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8678, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8683] <... prctl resumed>) = 0 [pid 8682] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8683] setpgid(0, 0 [pid 8682] ioctl(4, LOOP_SET_FD, 3 [pid 5062] newfstatat(AT_FDCWD, "./358/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8683] <... setpgid resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... openat resumed>) = 3 [pid 5062] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8683] <... openat resumed>) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 8683] write(3, "1000", 4 [pid 5062] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8683] <... write resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5060] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5062] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8683] close(3 [pid 5062] getdents64(4, [pid 5060] unlink("./362/binderfs" [pid 8683] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... unlink resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5062] close(4 [pid 8683] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./358/file0" [pid 5060] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8683] <... futex resumed>) = 0 [pid 8683] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] close(3 [pid 8683] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 8683] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8683] <... mmap resumed>) = 0x7f58200ce000 [pid 8683] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./362/file0", [pid 5062] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8683] <... mprotect resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8683] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8682] <... ioctl resumed>) = 0 [pid 5062] rmdir("./358" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8684 attached [pid 8683] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8682] close(3 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8684] set_robust_list(0x5555567436a0, 24 [pid 8683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8682] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8684 [pid 5062] mkdir("./359", 0777./strace-static-x86_64: Process 8685 attached [pid 8684] <... set_robust_list resumed>) = 0 [pid 8682] close(4 [pid 5060] <... openat resumed>) = 4 [pid 8685] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8684] chdir("./357" [pid 8682] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8685] <... rseq resumed>) = 0 [pid 8683] <... clone3 resumed> => {parent_tid=[8685]}, 88) = 8685 [pid 8685] set_robust_list(0x7f58200ee9a0, 24 [pid 8684] <... chdir resumed>) = 0 [pid 8683] rt_sigprocmask(SIG_SETMASK, [], [pid 8685] <... set_robust_list resumed>) = 0 [pid 8684] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8685] rt_sigprocmask(SIG_SETMASK, [], [pid 8684] <... prctl resumed>) = 0 [pid 8683] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8684] setpgid(0, 0 [pid 8683] <... futex resumed>) = 0 [pid 8685] memfd_create("syzkaller", 0 [pid 8684] <... setpgid resumed>) = 0 [pid 8683] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] newfstatat(4, "", [pid 8685] <... memfd_create resumed>) = 3 [pid 8684] <... openat resumed>) = 3 [pid 8682] mkdir("./file0", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8682] <... mkdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(4, [pid 8685] <... mmap resumed>) = 0x7f5817c00000 [ 319.460185][ T8682] loop2: detected capacity change from 0 to 4096 [pid 8684] write(3, "1000", 4 [pid 8682] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8684] <... write resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8684] close(3) = 0 [pid 8684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8684] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8684] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] getdents64(4, [pid 8684] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8684] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] close(4 [pid 8684] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./362/file0" [pid 8684] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 8684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./362"./strace-static-x86_64: Process 8686 attached ) = 0 [pid 8686] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5060] mkdir("./363", 0777 [pid 8686] <... rseq resumed>) = 0 [pid 8684] <... clone3 resumed> => {parent_tid=[8686]}, 88) = 8686 [pid 8686] set_robust_list(0x7f58200ee9a0, 24 [pid 8684] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... mkdir resumed>) = 0 [pid 8686] <... set_robust_list resumed>) = 0 [pid 8684] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8686] rt_sigprocmask(SIG_SETMASK, [], [pid 8684] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... openat resumed>) = 3 [pid 8684] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8682] <... mount resumed>) = 0 [pid 8682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8682] chdir("./file0") = 0 [pid 8682] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8682] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8681] <... futex resumed>) = 0 [pid 8681] exit_group(0) = ? [ 319.521126][ T8682] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8686] memfd_create("syzkaller", 0) = 3 [pid 8686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8682] +++ exited with 0 +++ [pid 8681] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8681, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8685] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8687 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./358/binderfs") = 0 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8687 attached [pid 8687] set_robust_list(0x5555567436a0, 24) = 0 [pid 8687] chdir("./359") = 0 [pid 8687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8687] setpgid(0, 0) = 0 [pid 8687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8687] write(3, "1000", 4) = 4 [pid 8687] close(3) = 0 [pid 8687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8686] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./358/file0", [pid 8687] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8687] <... futex resumed>) = 0 [pid 8687] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8687] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8687] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5061] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... openat resumed>) = 4 [pid 8687] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] newfstatat(4, "", [pid 8687] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8687] <... mprotect resumed>) = 0 [pid 5061] getdents64(4, [pid 8687] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8687] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8688 attached [pid 8687] <... clone3 resumed> => {parent_tid=[8688]}, 88) = 8688 [pid 5061] close(4 [pid 8688] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8687] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... close resumed>) = 0 [pid 8688] <... rseq resumed>) = 0 [pid 8687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8688] set_robust_list(0x7f58200ee9a0, 24 [pid 8687] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] rmdir("./358/file0" [pid 8688] <... set_robust_list resumed>) = 0 [pid 8688] rt_sigprocmask(SIG_SETMASK, [], [pid 8687] <... futex resumed>) = 0 [pid 8688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8688] memfd_create("syzkaller", 0 [pid 8687] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./358" [pid 8685] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 8688] <... memfd_create resumed>) = 3 [pid 8688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] mkdir("./359", 0777 [pid 8688] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... mkdir resumed>) = 0 [pid 8685] munmap(0x7f5817c00000, 138412032 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8685] <... munmap resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8685] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 8685] <... openat resumed>) = 4 [pid 5060] close(3 [pid 8685] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8686] <... write resumed>) = 2097152 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8689 ./strace-static-x86_64: Process 8689 attached [pid 8689] set_robust_list(0x5555567436a0, 24 [pid 8686] munmap(0x7f5817c00000, 138412032 [pid 8685] <... ioctl resumed>) = 0 [pid 8689] <... set_robust_list resumed>) = 0 [pid 8685] close(3 [pid 8689] chdir("./363" [pid 8685] <... close resumed>) = 0 [pid 8685] close(4 [pid 8689] <... chdir resumed>) = 0 [pid 8688] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8686] <... munmap resumed>) = 0 [pid 8685] <... close resumed>) = 0 [pid 8689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8685] mkdir("./file0", 0777 [ 319.707033][ T8685] loop0: detected capacity change from 0 to 4096 [pid 8689] setpgid(0, 0) = 0 [pid 8685] <... mkdir resumed>) = 0 [pid 8689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8686] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8685] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8689] <... openat resumed>) = 3 [pid 8686] <... openat resumed>) = 4 [pid 8686] ioctl(4, LOOP_SET_FD, 3 [pid 8689] write(3, "1000", 4) = 4 [pid 8689] close(3 [pid 8686] <... ioctl resumed>) = 0 [pid 8689] <... close resumed>) = 0 [pid 8686] close(3 [pid 8689] symlink("/dev/binderfs", "./binderfs" [pid 8686] <... close resumed>) = 0 [pid 8689] <... symlink resumed>) = 0 [pid 8686] close(4 [pid 8689] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8686] <... close resumed>) = 0 [pid 8689] <... futex resumed>) = 0 [pid 8686] mkdir("./file0", 0777 [pid 8689] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8686] <... mkdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8689] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8686] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [ 319.753837][ T8685] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 319.764671][ T8686] loop4: detected capacity change from 0 to 4096 [pid 8689] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8689] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8690 [pid 8689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8691]}, 88) = 8691 ./strace-static-x86_64: Process 8691 attached [pid 8689] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8690 attached [pid 8691] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8691] <... rseq resumed>) = 0 [pid 8690] set_robust_list(0x5555567436a0, 24 [pid 8689] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8688] <... write resumed>) = 2097152 [pid 8691] set_robust_list(0x7f58200ee9a0, 24 [pid 8690] <... set_robust_list resumed>) = 0 [pid 8689] <... futex resumed>) = 0 [pid 8688] munmap(0x7f5817c00000, 138412032 [pid 8691] <... set_robust_list resumed>) = 0 [pid 8690] chdir("./359" [pid 8689] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8691] rt_sigprocmask(SIG_SETMASK, [], [pid 8690] <... chdir resumed>) = 0 [pid 8691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8690] setpgid(0, 0 [pid 8691] memfd_create("syzkaller", 0 [pid 8690] <... setpgid resumed>) = 0 [pid 8690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8690] write(3, "1000", 4 [pid 8691] <... memfd_create resumed>) = 3 [pid 8690] <... write resumed>) = 4 [pid 8685] <... mount resumed>) = 0 [pid 8690] close(3 [pid 8691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8690] <... close resumed>) = 0 [pid 8691] <... mmap resumed>) = 0x7f5817c00000 [pid 8690] symlink("/dev/binderfs", "./binderfs" [pid 8685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8690] <... symlink resumed>) = 0 [pid 8685] <... openat resumed>) = 3 [pid 8690] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8685] chdir("./file0" [pid 8690] <... futex resumed>) = 0 [pid 8685] <... chdir resumed>) = 0 [pid 8688] <... munmap resumed>) = 0 [pid 8690] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8685] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8690] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8688] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8685] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8688] <... openat resumed>) = 4 [pid 8685] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8685] <... futex resumed>) = 1 [pid 8683] <... futex resumed>) = 0 [ 319.796664][ T8686] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8683] exit_group(0 [pid 8690] <... mmap resumed>) = 0x7f58200ce000 [pid 8683] <... exit_group resumed>) = ? [pid 8690] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8688] ioctl(4, LOOP_SET_FD, 3 [pid 8690] <... mprotect resumed>) = 0 [pid 8690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8692]}, 88) = 8692 ./strace-static-x86_64: Process 8692 attached [pid 8690] rt_sigprocmask(SIG_SETMASK, [], [pid 8692] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8692] <... rseq resumed>) = 0 [pid 8690] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8685] +++ exited with 0 +++ [pid 8683] +++ exited with 0 +++ [pid 8692] set_robust_list(0x7f58200ee9a0, 24 [pid 8690] <... futex resumed>) = 0 [pid 8692] <... set_robust_list resumed>) = 0 [pid 8690] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8683, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8692] rt_sigprocmask(SIG_SETMASK, [], [pid 8688] <... ioctl resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8688] close(3 [pid 5059] <... restart_syscall resumed>) = 0 [pid 8692] memfd_create("syzkaller", 0 [pid 8688] <... close resumed>) = 0 [pid 8688] close(4 [pid 5059] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8692] <... memfd_create resumed>) = 3 [pid 8688] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8692] <... mmap resumed>) = 0x7f5817c00000 [pid 8688] mkdir("./file0", 0777 [pid 8686] <... mount resumed>) = 0 [pid 5059] getdents64(3, [pid 8691] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8688] <... mkdir resumed>) = 0 [pid 8686] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./362/binderfs") = 0 [ 319.858131][ T8688] loop3: detected capacity change from 0 to 4096 [pid 8688] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8686] <... openat resumed>) = 3 [pid 5059] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8686] chdir("./file0") = 0 [pid 8686] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8686] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8686] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8684] <... futex resumed>) = 0 [pid 8684] exit_group(0) = ? [pid 8686] <... futex resumed>) = ? [pid 8686] +++ exited with 0 +++ [pid 8684] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8684, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./362/file0", [pid 5063] newfstatat(AT_FDCWD, "./357/binderfs", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8692] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 319.919584][ T8688] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5059] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./357/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5063] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./362/file0") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 8691] <... write resumed>) = 2097152 [pid 8688] <... mount resumed>) = 0 [pid 8688] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8688] chdir("./file0") = 0 [pid 5059] rmdir("./362" [pid 8688] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8691] munmap(0x7f5817c00000, 138412032 [pid 8688] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... rmdir resumed>) = 0 [pid 8688] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8688] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8687] <... futex resumed>) = 0 [pid 8687] exit_group(0 [pid 8688] <... futex resumed>) = ? [pid 8687] <... exit_group resumed>) = ? [pid 8688] +++ exited with 0 +++ [pid 8687] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8687, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] mkdir("./363", 0777 [pid 8691] <... munmap resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./357/file0", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... mkdir resumed>) = 0 [pid 8691] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8691] <... openat resumed>) = 4 [pid 5063] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 8691] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] getdents64(3, [pid 5063] newfstatat(4, "", [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] newfstatat(AT_FDCWD, "./359/binderfs", [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] unlink("./359/binderfs" [pid 5063] close(4 [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8692] <... write resumed>) = 2097152 [pid 8691] <... ioctl resumed>) = 0 [pid 5063] rmdir("./357/file0" [pid 8692] munmap(0x7f5817c00000, 138412032 [pid 8691] close(3) = 0 [pid 8691] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 8692] <... munmap resumed>) = 0 [pid 8691] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = 0 [pid 8692] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8691] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8692] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./359/file0", [pid 5063] rmdir("./357" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8691] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8691] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5063] mkdir("./358", 0777 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./359/file0" [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./359") = 0 [pid 8692] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] mkdir("./360", 0777 [pid 8692] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8692] <... close resumed>) = 0 [pid 8692] close(4) = 0 [pid 8692] mkdir("./file0", 0777) = 0 [ 320.022626][ T8691] loop1: detected capacity change from 0 to 4096 [ 320.043060][ T8692] loop2: detected capacity change from 0 to 4096 [ 320.055790][ T8691] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8692] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8691] <... mount resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 8693 attached [pid 8691] chdir("./file0" [pid 8693] set_robust_list(0x5555567436a0, 24 [pid 8691] <... chdir resumed>) = 0 [pid 8691] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8693 [pid 8693] <... set_robust_list resumed>) = 0 [pid 8691] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8693] chdir("./363" [pid 8691] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] <... chdir resumed>) = 0 [pid 8691] <... futex resumed>) = 1 [pid 8689] <... futex resumed>) = 0 [pid 8693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8691] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8689] exit_group(0 [pid 8691] <... futex resumed>) = ? [pid 8693] <... prctl resumed>) = 0 [pid 8689] <... exit_group resumed>) = ? [pid 8693] setpgid(0, 0 [pid 8691] +++ exited with 0 +++ [pid 8689] +++ exited with 0 +++ [pid 8693] <... setpgid resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8689, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 320.092565][ T8692] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] <... restart_syscall resumed>) = 0 [pid 8693] <... openat resumed>) = 3 [pid 5060] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8693] write(3, "1000", 4) = 4 [pid 8693] close(3) = 0 [pid 5060] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8693] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... openat resumed>) = 3 [pid 8693] <... symlink resumed>) = 0 [pid 8693] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(3, "", [pid 8693] <... futex resumed>) = 0 [pid 8693] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8693] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5060] newfstatat(AT_FDCWD, "./363/binderfs", [pid 8693] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8693] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] unlink("./363/binderfs" [pid 8693] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8693] <... clone3 resumed> => {parent_tid=[8694]}, 88) = 8694 [pid 8693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 8694 attached [pid 8693] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8694] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8693] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8694] <... rseq resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8694] set_robust_list(0x7f58200ee9a0, 24 [pid 5060] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 5060] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8694] <... set_robust_list resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8694] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] close(3 [pid 8694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 8694] memfd_create("syzkaller", 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] newfstatat(AT_FDCWD, "./363/file0", [pid 8694] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 8696 attached ./strace-static-x86_64: Process 8695 attached [pid 8694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8694] <... mmap resumed>) = 0x7f5817c00000 [pid 8695] set_robust_list(0x5555567436a0, 24 [pid 5060] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8695 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8696] set_robust_list(0x5555567436a0, 24) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 8696] chdir("./358" [pid 8695] <... set_robust_list resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8696 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8696] <... chdir resumed>) = 0 [pid 8695] chdir("./360" [pid 5060] getdents64(4, [pid 8696] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8695] <... chdir resumed>) = 0 [pid 8696] <... prctl resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8695] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8696] setpgid(0, 0 [pid 8695] <... prctl resumed>) = 0 [pid 8696] <... setpgid resumed>) = 0 [pid 5060] getdents64(4, [pid 8695] setpgid(0, 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8695] <... setpgid resumed>) = 0 [pid 8696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] close(4 [pid 8696] <... openat resumed>) = 3 [pid 8695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8696] write(3, "1000", 4 [pid 5060] <... close resumed>) = 0 [pid 8695] <... openat resumed>) = 3 [pid 5060] rmdir("./363/file0" [pid 8696] <... write resumed>) = 4 [pid 8695] write(3, "1000", 4 [pid 8696] close(3 [pid 8695] <... write resumed>) = 4 [pid 5060] <... rmdir resumed>) = 0 [pid 8696] <... close resumed>) = 0 [pid 8695] close(3 [pid 8696] symlink("/dev/binderfs", "./binderfs" [pid 8695] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 8695] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8695] <... symlink resumed>) = 0 [pid 8695] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] <... mount resumed>) = 0 [pid 8695] <... futex resumed>) = 0 [pid 8696] <... symlink resumed>) = 0 [pid 8695] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] close(3 [pid 8696] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8696] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8696] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8695] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8696] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8692] <... openat resumed>) = 3 [pid 5060] rmdir("./363" [pid 8695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8695] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... rmdir resumed>) = 0 [pid 8695] <... mprotect resumed>) = 0 [pid 5060] mkdir("./364", 0777) = 0 [pid 8695] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8692] chdir("./file0" [pid 8696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8695] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8692] <... chdir resumed>) = 0 [pid 8696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8695] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8692] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8697 attached ) = 0x7f58200ce000 [pid 8692] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8695] <... clone3 resumed> => {parent_tid=[8697]}, 88) = 8697 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8697] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8697] set_robust_list(0x7f58200ee9a0, 24 [pid 8696] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8695] rt_sigprocmask(SIG_SETMASK, [], [pid 8692] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8692] <... futex resumed>) = 1 [pid 8690] <... futex resumed>) = 0 [pid 8696] <... mprotect resumed>) = 0 [pid 8697] <... set_robust_list resumed>) = 0 [pid 8695] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8690] exit_group(0 [pid 8692] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8697] rt_sigprocmask(SIG_SETMASK, [], [pid 8690] <... exit_group resumed>) = ? [pid 8697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8695] <... futex resumed>) = 0 [pid 8692] <... futex resumed>) = ? [pid 8697] memfd_create("syzkaller", 0 [pid 8696] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8695] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8694] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8697] <... memfd_create resumed>) = 3 [pid 8697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8696] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8697] <... mmap resumed>) = 0x7f5817c00000 [pid 8696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8692] +++ exited with 0 +++ [pid 8690] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8690, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8696] <... clone3 resumed> => {parent_tid=[8698]}, 88) = 8698 [pid 8696] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8698 attached NULL, 8) = 0 [pid 8698] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8696] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8698] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8698] memfd_create("syzkaller", 0 [pid 8696] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8698] <... memfd_create resumed>) = 3 [pid 8696] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 8698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8698] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8694] <... write resumed>) = 2097152 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./359/binderfs" [pid 8697] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 8694] munmap(0x7f5817c00000, 138412032 [pid 5061] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8694] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./359/file0", [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 8694] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 8694] <... openat resumed>) = 4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8699 attached [pid 8694] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8699 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 8699] set_robust_list(0x5555567436a0, 24 [pid 8698] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8694] <... ioctl resumed>) = 0 [pid 8699] <... set_robust_list resumed>) = 0 [pid 8697] <... write resumed>) = 2097152 [pid 5061] close(4 [pid 8697] munmap(0x7f5817c00000, 138412032 [pid 5061] <... close resumed>) = 0 [pid 8694] close(3) = 0 [pid 8694] close(4) = 0 [pid 8694] mkdir("./file0", 0777 [pid 8697] <... munmap resumed>) = 0 [pid 5061] rmdir("./359/file0" [pid 8699] chdir("./364" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8699] <... chdir resumed>) = 0 [pid 5061] close(3 [pid 8699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... close resumed>) = 0 [pid 8699] <... prctl resumed>) = 0 [pid 8699] setpgid(0, 0 [pid 5061] rmdir("./359" [pid 8699] <... setpgid resumed>) = 0 [pid 8697] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8694] <... mkdir resumed>) = 0 [pid 8699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... rmdir resumed>) = 0 [pid 8697] <... openat resumed>) = 4 [pid 8699] <... openat resumed>) = 3 [ 320.379823][ T8694] loop0: detected capacity change from 0 to 4096 [pid 8694] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5061] mkdir("./360", 0777 [pid 8699] write(3, "1000", 4 [pid 8698] <... write resumed>) = 2097152 [pid 8697] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... mkdir resumed>) = 0 [pid 8699] <... write resumed>) = 4 [pid 8698] munmap(0x7f5817c00000, 138412032 [pid 8697] <... ioctl resumed>) = 0 [pid 8699] close(3) = 0 [pid 8699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8698] <... munmap resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8699] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... openat resumed>) = 3 [pid 8699] <... futex resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8699] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8699] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8699] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8700 attached => {parent_tid=[8700]}, 88) = 8700 [pid 8697] close(3 [pid 8700] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8699] rt_sigprocmask(SIG_SETMASK, [], [pid 8697] <... close resumed>) = 0 [pid 8700] <... rseq resumed>) = 0 [pid 8699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8697] close(4 [pid 8700] set_robust_list(0x7f58200ee9a0, 24 [pid 8699] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8697] <... close resumed>) = 0 [pid 8700] <... set_robust_list resumed>) = 0 [pid 8699] <... futex resumed>) = 0 [pid 8698] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8697] mkdir("./file0", 0777 [pid 8700] rt_sigprocmask(SIG_SETMASK, [], [pid 8699] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8698] <... openat resumed>) = 4 [pid 8697] <... mkdir resumed>) = 0 [pid 8700] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 320.421973][ T8694] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 320.434847][ T8697] loop3: detected capacity change from 0 to 4096 [pid 8698] ioctl(4, LOOP_SET_FD, 3 [pid 8697] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8700] memfd_create("syzkaller", 0 [pid 8694] <... mount resumed>) = 0 [pid 8700] <... memfd_create resumed>) = 3 [pid 8694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8698] <... ioctl resumed>) = 0 [pid 8700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8694] <... openat resumed>) = 3 [pid 8700] <... mmap resumed>) = 0x7f5817c00000 [pid 8694] chdir("./file0" [pid 8698] close(3) = 0 [pid 8698] close(4 [pid 8694] <... chdir resumed>) = 0 [pid 8698] <... close resumed>) = 0 [pid 8694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8694] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8698] mkdir("./file0", 0777 [pid 8694] <... futex resumed>) = 1 [pid 8698] <... mkdir resumed>) = 0 [pid 8694] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8693] <... futex resumed>) = 0 [pid 8693] exit_group(0) = ? [pid 8694] <... futex resumed>) = ? [ 320.471773][ T8698] loop4: detected capacity change from 0 to 4096 [ 320.479485][ T8697] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8698] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8694] +++ exited with 0 +++ [pid 8693] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8693, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] unlink("./363/binderfs") = 0 [pid 5061] close(3 [pid 5059] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8701 attached [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8701 [pid 8701] set_robust_list(0x5555567436a0, 24) = 0 [pid 5059] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8701] chdir("./360") = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8697] <... mount resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./363/file0", [pid 8701] <... prctl resumed>) = 0 [pid 8701] setpgid(0, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8701] <... setpgid resumed>) = 0 [pid 8697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8697] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8701] <... openat resumed>) = 3 [pid 8697] chdir("./file0") = 0 [ 320.515472][ T8698] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5059] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8697] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... openat resumed>) = 4 [pid 8701] write(3, "1000", 4) = 4 [pid 8697] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] newfstatat(4, "", [pid 8701] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8701] <... close resumed>) = 0 [pid 8697] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8701] symlink("/dev/binderfs", "./binderfs" [pid 8697] <... futex resumed>) = 1 [pid 8695] <... futex resumed>) = 0 [pid 5059] getdents64(4, [pid 8697] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8695] exit_group(0 [pid 8701] <... symlink resumed>) = 0 [pid 8697] <... futex resumed>) = ? [pid 8695] <... exit_group resumed>) = ? [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8697] +++ exited with 0 +++ [pid 8695] +++ exited with 0 +++ [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8701] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(4 [pid 8701] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8701] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5059] rmdir("./363/file0" [pid 8701] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8695, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] <... rmdir resumed>) = 0 [pid 8701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] getdents64(3, [pid 8701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8701] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] close(3 [pid 8701] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8700] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] rmdir("./363") = 0 [pid 5062] <... openat resumed>) = 3 [pid 8701] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] newfstatat(3, "", [pid 8701] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] mkdir("./364", 0777 [pid 5062] getdents64(3, ./strace-static-x86_64: Process 8702 attached [pid 8701] <... clone3 resumed> => {parent_tid=[8702]}, 88) = 8702 [pid 5059] <... mkdir resumed>) = 0 [pid 8702] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8701] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8702] <... rseq resumed>) = 0 [pid 8701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8702] set_robust_list(0x7f58200ee9a0, 24 [pid 8701] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8702] <... set_robust_list resumed>) = 0 [pid 8701] <... futex resumed>) = 0 [pid 8702] rt_sigprocmask(SIG_SETMASK, [], [pid 8701] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5062] unlink("./360/binderfs") = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8702] memfd_create("syzkaller", 0) = 3 [pid 8702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./360/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8700] <... write resumed>) = 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8698] <... mount resumed>) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8698] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8698] chdir("./file0") = 0 [pid 8698] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 8698] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./360/file0" [pid 8698] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8696] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8698] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8696] exit_group(0 [pid 8700] munmap(0x7f5817c00000, 138412032 [pid 8698] <... futex resumed>) = ? [pid 8696] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 8698] +++ exited with 0 +++ [pid 8696] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8696, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5062] close(3 [pid 5063] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8700] <... munmap resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8700] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] rmdir("./360" [pid 8702] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8700] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./361", 0777 [pid 8700] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8700] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... mkdir resumed>) = 0 [pid 8700] close(3 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... ioctl resumed>) = 0 [pid 8700] <... close resumed>) = 0 [pid 5063] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8700] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 8700] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./358/binderfs", [pid 8700] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] unlink("./358/binderfs") = 0 [pid 5063] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3) = 0 [pid 8700] <... mkdir resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8700] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./358/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./358/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./358") = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8703 ./strace-static-x86_64: Process 8703 attached [pid 5063] mkdir("./359", 0777 [pid 8703] set_robust_list(0x5555567436a0, 24 [pid 5063] <... mkdir resumed>) = 0 [pid 8703] <... set_robust_list resumed>) = 0 [pid 8703] chdir("./364") = 0 [pid 8703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8703] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8703] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8703] <... openat resumed>) = 3 [pid 8703] write(3, "1000", 4) = 4 [pid 8703] close(3) = 0 [pid 8703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8703] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8703] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8703] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8703] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8704 attached [pid 8704] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8704] set_robust_list(0x7f58200ee9a0, 24 [pid 8703] <... clone3 resumed> => {parent_tid=[8704]}, 88) = 8704 [pid 8704] <... set_robust_list resumed>) = 0 [ 320.718517][ T8700] loop1: detected capacity change from 0 to 4096 [ 320.748148][ T8700] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8703] rt_sigprocmask(SIG_SETMASK, [], [pid 8704] rt_sigprocmask(SIG_SETMASK, [], [pid 8703] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8703] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8702] <... write resumed>) = 2097152 [pid 8703] <... futex resumed>) = 0 [pid 8703] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8702] munmap(0x7f5817c00000, 138412032 [pid 8704] memfd_create("syzkaller", 0 [pid 8702] <... munmap resumed>) = 0 [pid 8704] <... memfd_create resumed>) = 3 [pid 8704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8702] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8702] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 8700] <... mount resumed>) = 0 [pid 8702] <... ioctl resumed>) = 0 [pid 8702] close(3) = 0 [pid 8700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(3 [pid 8702] close(4 [pid 8700] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 8702] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8702] mkdir("./file0", 0777./strace-static-x86_64: Process 8705 attached [pid 8700] chdir("./file0" [pid 8705] set_robust_list(0x5555567436a0, 24 [pid 8700] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8705 [pid 8702] <... mkdir resumed>) = 0 [pid 8705] <... set_robust_list resumed>) = 0 [pid 8700] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8705] chdir("./361" [pid 8704] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8700] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8702] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8700] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8705] <... chdir resumed>) = 0 [pid 8705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8700] <... futex resumed>) = 1 [pid 8705] <... prctl resumed>) = 0 [pid 8700] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 320.825760][ T8702] loop2: detected capacity change from 0 to 4096 [pid 8705] setpgid(0, 0) = 0 [pid 8699] <... futex resumed>) = 0 [pid 8699] exit_group(0 [pid 8700] <... futex resumed>) = ? [pid 8699] <... exit_group resumed>) = ? [pid 8705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8700] +++ exited with 0 +++ [pid 8705] <... openat resumed>) = 3 [pid 8699] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8699, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8705] write(3, "1000", 4 [pid 5060] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(3 [pid 5060] unlink("./364/binderfs" [pid 8705] <... write resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 8705] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8706 attached [pid 8705] <... close resumed>) = 0 [pid 5060] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8706] set_robust_list(0x5555567436a0, 24 [pid 8705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8706] <... set_robust_list resumed>) = 0 [pid 8705] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8706 [pid 8705] <... futex resumed>) = 0 [pid 8706] chdir("./359" [pid 8705] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8705] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8706] <... chdir resumed>) = 0 [pid 8705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [ 320.881620][ T8702] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8706] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8705] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8706] <... prctl resumed>) = 0 [pid 8705] <... mprotect resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./364/file0", [pid 8706] setpgid(0, 0) = 0 [pid 8706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8705] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8706] write(3, "1000", 4 [pid 8705] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8706] <... write resumed>) = 4 [pid 8706] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8706] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8707 attached [pid 8706] symlink("/dev/binderfs", "./binderfs" [pid 8705] <... clone3 resumed> => {parent_tid=[8707]}, 88) = 8707 [pid 5060] <... openat resumed>) = 4 [pid 8707] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8706] <... symlink resumed>) = 0 [pid 8705] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] newfstatat(4, "", [pid 8707] <... rseq resumed>) = 0 [pid 8706] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8707] set_robust_list(0x7f58200ee9a0, 24 [pid 8705] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, [pid 8707] <... set_robust_list resumed>) = 0 [pid 8705] <... futex resumed>) = 0 [pid 8707] rt_sigprocmask(SIG_SETMASK, [], [pid 8705] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8706] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8706] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8704] <... write resumed>) = 2097152 [pid 5060] getdents64(4, [pid 8706] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8704] munmap(0x7f5817c00000, 138412032 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] close(4 [pid 8707] memfd_create("syzkaller", 0 [pid 8706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8704] <... munmap resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8706] <... mmap resumed>) = 0x7f58200ce000 [pid 8704] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] rmdir("./364/file0" [pid 8706] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8704] <... openat resumed>) = 4 [pid 8706] <... mprotect resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8707] <... memfd_create resumed>) = 3 [pid 8706] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8704] ioctl(4, LOOP_SET_FD, 3 [pid 5060] getdents64(3, [pid 8706] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8704] <... ioctl resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8708 attached [pid 8707] <... mmap resumed>) = 0x7f5817c00000 [pid 8704] close(3 [pid 5060] close(3 [pid 8704] <... close resumed>) = 0 [pid 8708] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8704] close(4 [pid 5060] <... close resumed>) = 0 [pid 8708] <... rseq resumed>) = 0 [pid 8706] <... clone3 resumed> => {parent_tid=[8708]}, 88) = 8708 [pid 8704] <... close resumed>) = 0 [pid 5060] rmdir("./364") = 0 [pid 8706] rt_sigprocmask(SIG_SETMASK, [], [pid 8704] mkdir("./file0", 0777 [pid 5060] mkdir("./365", 0777 [pid 8706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8708] set_robust_list(0x7f58200ee9a0, 24 [pid 8706] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8708] <... set_robust_list resumed>) = 0 [pid 8706] <... futex resumed>) = 0 [pid 8704] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8708] rt_sigprocmask(SIG_SETMASK, [], [pid 8706] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8704] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8702] <... mount resumed>) = 0 [pid 8708] memfd_create("syzkaller", 0 [pid 8702] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 8702] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8708] <... memfd_create resumed>) = 3 [pid 8702] chdir("./file0" [pid 8708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8702] <... chdir resumed>) = 0 [pid 8708] <... mmap resumed>) = 0x7f5817c00000 [pid 8702] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8702] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8701] <... futex resumed>) = 0 [pid 8702] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8701] exit_group(0 [pid 8707] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8702] <... futex resumed>) = ? [pid 8701] <... exit_group resumed>) = ? [pid 8702] +++ exited with 0 +++ [pid 8701] +++ exited with 0 +++ [ 320.984961][ T8704] loop0: detected capacity change from 0 to 4096 [ 321.019568][ T8704] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8701, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./360/binderfs") = 0 [pid 5061] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./360/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8707] <... write resumed>) = 2097152 [pid 5061] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8707] munmap(0x7f5817c00000, 138412032 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8708] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8707] <... munmap resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8707] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 5060] <... ioctl resumed>) = 0 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8707] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] close(3 [pid 8707] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] close(4) = 0 [pid 5061] rmdir("./360/file0") = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8709 ./strace-static-x86_64: Process 8709 attached [pid 8709] set_robust_list(0x5555567436a0, 24 [pid 5061] getdents64(3, [pid 8709] <... set_robust_list resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 8709] chdir("./365") = 0 [pid 8709] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8707] <... ioctl resumed>) = 0 [pid 8709] <... prctl resumed>) = 0 [pid 8707] close(3 [pid 8709] setpgid(0, 0 [pid 8707] <... close resumed>) = 0 [pid 8709] <... setpgid resumed>) = 0 [pid 8707] close(4) = 0 [pid 5061] rmdir("./360" [pid 8707] mkdir("./file0", 0777 [pid 8709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8707] <... mkdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8707] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5061] mkdir("./361", 0777) = 0 [pid 8709] write(3, "1000", 4) = 4 [pid 8709] close(3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8709] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8709] symlink("/dev/binderfs", "./binderfs" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8709] <... symlink resumed>) = 0 [pid 8709] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8709] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8709] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8708] <... write resumed>) = 2097152 [pid 8709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8708] munmap(0x7f5817c00000, 138412032 [pid 8709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8709] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8704] <... mount resumed>) = 0 [pid 8709] <... mprotect resumed>) = 0 [pid 8708] <... munmap resumed>) = 0 [pid 8704] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8704] <... openat resumed>) = 3 [pid 8704] chdir("./file0" [pid 8709] <... clone3 resumed> => {parent_tid=[8710]}, 88) = 8710 [pid 8704] <... chdir resumed>) = 0 [pid 8709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8704] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8709] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8708] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8704] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8709] <... futex resumed>) = 0 [pid 8708] <... openat resumed>) = 4 [pid 8704] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8710 attached [pid 8709] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8708] ioctl(4, LOOP_SET_FD, 3 [pid 8704] <... futex resumed>) = 1 [pid 8703] <... futex resumed>) = 0 [ 321.123565][ T8707] loop3: detected capacity change from 0 to 4096 [ 321.148409][ T8707] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8710] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8704] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8703] exit_group(0 [pid 8710] <... rseq resumed>) = 0 [pid 8703] <... exit_group resumed>) = ? [pid 8710] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8710] memfd_create("syzkaller", 0 [pid 8704] <... futex resumed>) = ? [pid 8708] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8704] +++ exited with 0 +++ [pid 8703] +++ exited with 0 +++ [pid 5061] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8703, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8711 attached [pid 8710] <... memfd_create resumed>) = 3 [pid 8708] close(3 [pid 8711] set_robust_list(0x5555567436a0, 24 [pid 8708] <... close resumed>) = 0 [pid 8711] <... set_robust_list resumed>) = 0 [pid 8708] close(4 [pid 8711] chdir("./361" [pid 8708] <... close resumed>) = 0 [pid 8711] <... chdir resumed>) = 0 [pid 8710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8708] mkdir("./file0", 0777 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8711 [pid 5059] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8711] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8710] <... mmap resumed>) = 0x7f5817c00000 [ 321.189380][ T8708] loop4: detected capacity change from 0 to 4096 [pid 8708] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8711] <... prctl resumed>) = 0 [pid 8711] setpgid(0, 0) = 0 [pid 8711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8711] write(3, "1000", 4) = 4 [pid 8711] close(3) = 0 [pid 8711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8711] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8711] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8711] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8711] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8711] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5059] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8711] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8712 attached => {parent_tid=[8712]}, 88) = 8712 [pid 8712] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8711] rt_sigprocmask(SIG_SETMASK, [], [pid 8712] <... rseq resumed>) = 0 [pid 8711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8712] set_robust_list(0x7f58200ee9a0, 24 [pid 8711] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8712] <... set_robust_list resumed>) = 0 [pid 8711] <... futex resumed>) = 0 [pid 8712] rt_sigprocmask(SIG_SETMASK, [], [pid 8711] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8708] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5059] <... openat resumed>) = 3 [pid 8712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8712] memfd_create("syzkaller", 0 [pid 8710] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] newfstatat(3, "", [pid 8712] <... memfd_create resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./364/binderfs") = 0 [pid 5059] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8707] <... mount resumed>) = 0 [pid 8707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] <... umount2 resumed>) = 0 [pid 8707] chdir("./file0") = 0 [ 321.258982][ T8708] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8707] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8710] <... write resumed>) = 2097152 [pid 8707] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8707] <... futex resumed>) = 1 [pid 8712] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8710] munmap(0x7f5817c00000, 138412032 [pid 8708] <... mount resumed>) = 0 [pid 8707] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8705] <... futex resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./364/file0", [pid 8710] <... munmap resumed>) = 0 [pid 8708] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8705] exit_group(0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8707] <... futex resumed>) = ? [pid 8705] <... exit_group resumed>) = ? [pid 8707] +++ exited with 0 +++ [pid 5059] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8708] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 8705] +++ exited with 0 +++ [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8705, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5059] getdents64(4, [pid 8708] chdir("./file0" [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8708] <... chdir resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8708] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8708] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 8708] <... futex resumed>) = 1 [pid 8706] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8710] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8708] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8706] exit_group(0 [pid 5062] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] close(4 [pid 8710] <... openat resumed>) = 4 [pid 8708] <... futex resumed>) = ? [pid 8706] <... exit_group resumed>) = ? [pid 5062] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 8710] ioctl(4, LOOP_SET_FD, 3 [pid 8708] +++ exited with 0 +++ [pid 5062] newfstatat(3, "", [pid 5059] rmdir("./364/file0" [pid 8712] <... write resumed>) = 2097152 [pid 8706] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8712] munmap(0x7f5817c00000, 138412032 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8706, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8710] <... ioctl resumed>) = 0 [pid 5062] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 8710] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 8710] <... close resumed>) = 0 [pid 5063] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./361/binderfs", [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8710] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] close(3 [pid 8710] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] unlink("./361/binderfs" [pid 5059] <... close resumed>) = 0 [pid 8710] mkdir("./file0", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... unlink resumed>) = 0 [pid 5059] rmdir("./364" [pid 8710] <... mkdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] mkdir("./365", 0777 [pid 8712] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8710] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 3 [pid 8712] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./359/binderfs", [pid 5062] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8712] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 321.367641][ T8710] loop1: detected capacity change from 0 to 4096 [ 321.395663][ T8710] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8712] ioctl(4, LOOP_SET_FD, 3 [pid 5063] unlink("./359/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./361/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8712] <... ioctl resumed>) = 0 [pid 5062] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8712] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./359/file0", [pid 8712] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5063] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8712] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(4, "", [pid 8712] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8712] mkdir("./file0", 0777 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(4, "", [pid 5062] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8712] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 8712] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5062] close(4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] close(4 [pid 5062] rmdir("./361/file0" [pid 5063] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] rmdir("./359/file0") = 0 [pid 5063] getdents64(3, [pid 5062] getdents64(3, [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5062] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] rmdir("./359" [pid 5062] rmdir("./361" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] mkdir("./360", 0777 [pid 5062] mkdir("./362", 0777) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... openat resumed>) = 3 [ 321.412283][ T8712] loop2: detected capacity change from 0 to 4096 [ 321.430005][ T8712] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8710] <... mount resumed>) = 0 [pid 8712] <... mount resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8712] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8712] <... openat resumed>) = 3 [pid 8712] chdir("./file0") = 0 [pid 8710] <... openat resumed>) = 3 [pid 8710] chdir("./file0") = 0 [pid 8710] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8712] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8710] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 8712] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8710] <... futex resumed>) = 1 [pid 5059] <... close resumed>) = 0 [pid 8710] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8712] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8709] <... futex resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8712] <... futex resumed>) = 1 [pid 8712] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8711] <... futex resumed>) = 0 [pid 8709] exit_group(0 [pid 8711] exit_group(0 [pid 8712] <... futex resumed>) = ? [pid 8711] <... exit_group resumed>) = ? [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8713 [pid 8712] +++ exited with 0 +++ ./strace-static-x86_64: Process 8713 attached [pid 8710] <... futex resumed>) = ? [pid 8709] <... exit_group resumed>) = ? [pid 8710] +++ exited with 0 +++ [pid 8713] set_robust_list(0x5555567436a0, 24) = 0 [pid 8713] chdir("./365") = 0 [pid 8711] +++ exited with 0 +++ [pid 5063] <... ioctl resumed>) = 0 [pid 8713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8709] +++ exited with 0 +++ [pid 5063] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8711, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8709, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8713] setpgid(0, 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8713] <... setpgid resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 5060] <... openat resumed>) = 3 [pid 8713] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] newfstatat(3, "", [pid 5061] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8713] write(3, "1000", 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8713] <... write resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./361/binderfs", ./strace-static-x86_64: Process 8714 attached [pid 8713] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(3, [pid 8714] set_robust_list(0x5555567436a0, 24 [pid 5061] unlink("./361/binderfs" [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8714] <... set_robust_list resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8714 [pid 5061] <... unlink resumed>) = 0 [pid 5060] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8714] chdir("./360" [pid 8713] <... close resumed>) = 0 [pid 8714] <... chdir resumed>) = 0 [pid 8714] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8713] symlink("/dev/binderfs", "./binderfs" [pid 8714] <... prctl resumed>) = 0 [pid 5061] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8714] setpgid(0, 0) = 0 [pid 5060] newfstatat(AT_FDCWD, "./365/binderfs", [pid 8713] <... symlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8713] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] unlink("./365/binderfs" [pid 8714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8714] <... openat resumed>) = 3 [pid 8713] <... futex resumed>) = 0 [pid 8714] write(3, "1000", 4) = 4 [pid 8714] close(3) = 0 [pid 8714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8714] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8714] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8713] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8714] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] newfstatat(AT_FDCWD, "./361/file0", [pid 5060] newfstatat(AT_FDCWD, "./365/file0", [pid 8714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8714] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8714] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8714] <... mprotect resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8714] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8713] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 8713] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8714] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] newfstatat(4, "", [pid 5060] getdents64(4, [pid 8713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8715 attached [pid 8713] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] getdents64(4, [pid 5060] getdents64(4, [pid 8713] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8713] <... mprotect resumed>) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./365/file0" [pid 8713] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8715] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8713] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8715] <... rseq resumed>) = 0 [pid 8713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8715] set_robust_list(0x7f58200ee9a0, 24 [pid 8714] <... clone3 resumed> => {parent_tid=[8715]}, 88) = 8715 [pid 5061] getdents64(4, [pid 5060] getdents64(3, ./strace-static-x86_64: Process 8716 attached [pid 8715] <... set_robust_list resumed>) = 0 [pid 8715] rt_sigprocmask(SIG_SETMASK, [], [pid 8714] rt_sigprocmask(SIG_SETMASK, [], [pid 8713] <... clone3 resumed> => {parent_tid=[8716]}, 88) = 8716 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] close(4 [pid 5060] close(3 [pid 8715] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8714] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... ioctl resumed>) = 0 [pid 8713] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8716] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8714] <... futex resumed>) = 0 [pid 5061] rmdir("./361/file0" [pid 5060] rmdir("./365" [pid 8716] <... rseq resumed>) = 0 [pid 8714] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8716] set_robust_list(0x7f58200ee9a0, 24 [pid 8715] memfd_create("syzkaller", 0 [pid 8713] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8716] <... set_robust_list resumed>) = 0 [pid 8713] <... futex resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] mkdir("./366", 0777 [pid 8716] rt_sigprocmask(SIG_SETMASK, [], [pid 8715] <... memfd_create resumed>) = 3 [pid 8713] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8716] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] close(3) = 0 [pid 8715] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] rmdir("./361"./strace-static-x86_64: Process 8717 attached [pid 8716] memfd_create("syzkaller", 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8717] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8717 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8717] <... set_robust_list resumed>) = 0 [pid 8717] chdir("./362" [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8716] <... memfd_create resumed>) = 3 [pid 5061] mkdir("./362", 0777 [pid 8717] <... chdir resumed>) = 0 [pid 8716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8717] setpgid(0, 0 [pid 8716] <... mmap resumed>) = 0x7f5817c00000 [pid 8717] <... setpgid resumed>) = 0 [pid 8717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 8717] <... openat resumed>) = 3 [pid 8717] write(3, "1000", 4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8717] <... write resumed>) = 4 [pid 8717] close(3) = 0 [pid 8717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8717] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8717] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8717] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8716] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8717] <... mmap resumed>) = 0x7f58200ce000 [pid 8717] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8715] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8717] <... mprotect resumed>) = 0 [pid 8717] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... ioctl resumed>) = 0 [pid 8717] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] close(3 [pid 8717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8718 attached ./strace-static-x86_64: Process 8719 attached [pid 8718] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8717] <... clone3 resumed> => {parent_tid=[8718]}, 88) = 8718 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8719 [pid 8719] set_robust_list(0x5555567436a0, 24 [pid 8718] <... rseq resumed>) = 0 [pid 8717] rt_sigprocmask(SIG_SETMASK, [], [pid 8719] <... set_robust_list resumed>) = 0 [pid 8717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8719] chdir("./366" [pid 8717] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8715] <... write resumed>) = 2097152 [pid 8717] <... futex resumed>) = 0 [pid 8719] <... chdir resumed>) = 0 [pid 8717] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8718] set_robust_list(0x7f58200ee9a0, 24 [pid 8719] setpgid(0, 0 [pid 8718] <... set_robust_list resumed>) = 0 [pid 8719] <... setpgid resumed>) = 0 [pid 8718] rt_sigprocmask(SIG_SETMASK, [], [pid 8719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8718] memfd_create("syzkaller", 0) = 3 [pid 8718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8719] <... openat resumed>) = 3 [pid 8715] munmap(0x7f5817c00000, 138412032 [pid 8719] write(3, "1000", 4 [pid 8716] <... write resumed>) = 2097152 [pid 8715] <... munmap resumed>) = 0 [pid 8719] <... write resumed>) = 4 [pid 8719] close(3) = 0 [pid 8716] munmap(0x7f5817c00000, 138412032 [pid 8719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8719] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8719] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8719] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8715] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8719] <... mmap resumed>) = 0x7f58200ce000 [pid 8715] ioctl(4, LOOP_SET_FD, 3 [pid 8719] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8716] <... munmap resumed>) = 0 [pid 8716] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8719] <... mprotect resumed>) = 0 [pid 8716] <... openat resumed>) = 4 [pid 8715] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8716] ioctl(4, LOOP_SET_FD, 3 [pid 8715] close(3 [pid 8719] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] close(3 [pid 8719] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8715] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8715] close(4 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8715] <... close resumed>) = 0 [pid 8715] mkdir("./file0", 0777) = 0 [pid 8715] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8721 attached [pid 8718] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8721] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8720 ./strace-static-x86_64: Process 8720 attached [pid 8720] set_robust_list(0x5555567436a0, 24) = 0 [pid 8720] chdir("./362") = 0 [pid 8720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8720] setpgid(0, 0) = 0 [pid 8720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8716] <... ioctl resumed>) = 0 [pid 8716] close(3 [pid 8720] write(3, "1000", 4 [pid 8716] <... close resumed>) = 0 [pid 8720] <... write resumed>) = 4 [pid 8716] close(4 [pid 8720] close(3 [pid 8716] <... close resumed>) = 0 [pid 8720] <... close resumed>) = 0 [pid 8716] mkdir("./file0", 0777 [pid 8720] symlink("/dev/binderfs", "./binderfs" [pid 8716] <... mkdir resumed>) = 0 [pid 8720] <... symlink resumed>) = 0 [pid 8720] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8716] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8720] <... futex resumed>) = 0 [pid 8721] <... rseq resumed>) = 0 [pid 8719] <... clone3 resumed> => {parent_tid=[8721]}, 88) = 8721 [ 321.751448][ T8715] loop4: detected capacity change from 0 to 4096 [ 321.769064][ T8716] loop0: detected capacity change from 0 to 4096 [ 321.781279][ T8715] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8719] rt_sigprocmask(SIG_SETMASK, [], [pid 8720] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8721] set_robust_list(0x7f58200ee9a0, 24 [pid 8719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8721] <... set_robust_list resumed>) = 0 [pid 8721] rt_sigprocmask(SIG_SETMASK, [], [pid 8719] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8721] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8719] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8720] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8720] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8721] memfd_create("syzkaller", 0 [pid 8720] <... mmap resumed>) = 0x7f58200ce000 [pid 8720] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8720] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8721] <... memfd_create resumed>) = 3 [pid 8720] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8720] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8720] <... clone3 resumed> => {parent_tid=[8722]}, 88) = 8722 ./strace-static-x86_64: Process 8722 attached [pid 8720] rt_sigprocmask(SIG_SETMASK, [], [pid 8721] <... mmap resumed>) = 0x7f5817c00000 [pid 8718] <... write resumed>) = 2097152 [pid 8722] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8720] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] <... rseq resumed>) = 0 [pid 8720] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8722] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8722] memfd_create("syzkaller", 0 [pid 8718] munmap(0x7f5817c00000, 138412032 [pid 8715] <... mount resumed>) = 0 [pid 8722] <... memfd_create resumed>) = 3 [pid 8722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8722] <... mmap resumed>) = 0x7f5817c00000 [pid 8715] <... openat resumed>) = 3 [pid 8715] chdir("./file0") = 0 [pid 8715] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8715] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8715] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8714] <... futex resumed>) = 0 [ 321.812770][ T8716] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8714] exit_group(0 [pid 8715] <... futex resumed>) = ? [pid 8714] <... exit_group resumed>) = ? [pid 8718] <... munmap resumed>) = 0 [pid 8715] +++ exited with 0 +++ [pid 8714] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8714, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8718] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8718] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8718] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8718] <... ioctl resumed>) = 0 [pid 8718] close(3) = 0 [pid 8718] close(4 [pid 8722] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8718] <... close resumed>) = 0 [pid 8718] mkdir("./file0", 0777) = 0 [pid 5063] newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./360/binderfs" [pid 8721] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8718] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8716] <... mount resumed>) = 0 [pid 8716] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8716] chdir("./file0") = 0 [pid 8716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8716] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8713] <... futex resumed>) = 0 [pid 8713] exit_group(0) = ? [ 321.885260][ T8718] loop3: detected capacity change from 0 to 4096 [ 321.919110][ T8718] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5063] newfstatat(AT_FDCWD, "./360/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8716] +++ exited with 0 +++ [pid 8713] +++ exited with 0 +++ [pid 5063] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8713, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] <... openat resumed>) = 4 [pid 5059] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] <... write resumed>) = 2097152 [pid 5063] newfstatat(4, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5059] newfstatat(3, "", [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5059] getdents64(3, [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./360/file0" [pid 5059] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5059] newfstatat(AT_FDCWD, "./365/binderfs", [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8721] munmap(0x7f5817c00000, 138412032 [pid 5063] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] unlink("./365/binderfs") = 0 [pid 5059] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] <... munmap resumed>) = 0 [pid 5063] rmdir("./360" [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8718] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] mkdir("./361", 0777 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 8718] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8718] chdir("./file0" [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 8722] <... write resumed>) = 2097152 [pid 8721] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8718] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8722] munmap(0x7f5817c00000, 138412032 [pid 8721] <... openat resumed>) = 4 [pid 8718] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] rmdir("./365/file0" [pid 8722] <... munmap resumed>) = 0 [pid 8721] ioctl(4, LOOP_SET_FD, 3 [pid 8718] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 8718] <... futex resumed>) = 1 [pid 8717] <... futex resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... rmdir resumed>) = 0 [pid 8717] exit_group(0 [pid 5059] getdents64(3, [pid 8717] <... exit_group resumed>) = ? [pid 8722] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8721] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8722] <... openat resumed>) = 4 [pid 8721] close(3 [pid 5059] close(3) = 0 [pid 8721] <... close resumed>) = 0 [pid 5059] rmdir("./365" [pid 8722] ioctl(4, LOOP_SET_FD, 3 [pid 8721] close(4 [pid 8718] +++ exited with 0 +++ [pid 8717] +++ exited with 0 +++ [pid 8722] <... ioctl resumed>) = 0 [pid 8721] <... close resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8717, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] <... rmdir resumed>) = 0 [pid 8722] close(3 [pid 8721] mkdir("./file0", 0777 [pid 8722] <... close resumed>) = 0 [pid 5059] mkdir("./366", 0777 [pid 8722] close(4 [pid 8721] <... mkdir resumed>) = 0 [pid 5062] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 8722] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8722] mkdir("./file0", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 8721] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8722] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8722] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./362/binderfs") = 0 [ 322.030199][ T8721] loop1: detected capacity change from 0 to 4096 [ 322.042192][ T8722] loop2: detected capacity change from 0 to 4096 [ 322.058010][ T8721] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 322.071585][ T8722] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8722] <... mount resumed>) = 0 [pid 5062] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 8722] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8722] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./362/file0", [pid 8722] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8722] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8722] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8723 ./strace-static-x86_64: Process 8723 attached [pid 5062] <... openat resumed>) = 4 [pid 8723] set_robust_list(0x5555567436a0, 24 [pid 5062] newfstatat(4, "", [pid 8722] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8723] <... set_robust_list resumed>) = 0 [pid 8723] chdir("./366" [pid 8722] <... futex resumed>) = 1 [pid 8720] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 8723] <... chdir resumed>) = 0 [pid 8722] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] exit_group(0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8722] <... futex resumed>) = ? [pid 8720] <... exit_group resumed>) = ? [pid 8721] <... mount resumed>) = 0 [pid 5062] getdents64(4, [pid 8723] <... prctl resumed>) = 0 [pid 8722] +++ exited with 0 +++ [pid 8721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8723] setpgid(0, 0 [pid 8721] <... openat resumed>) = 3 [pid 5062] close(4 [pid 8723] <... setpgid resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./362/file0" [pid 8723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... rmdir resumed>) = 0 [pid 8721] chdir("./file0" [pid 5062] getdents64(3, [pid 5063] close(3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] close(3 [pid 8721] <... chdir resumed>) = 0 [pid 8721] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 8723] <... openat resumed>) = 3 [pid 8721] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8721] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8719] <... futex resumed>) = 0 [pid 8723] write(3, "1000", 4 [pid 8719] exit_group(0 [pid 5062] rmdir("./362" [pid 8723] <... write resumed>) = 4 [pid 8719] <... exit_group resumed>) = ? [pid 8723] close(3 [pid 5062] <... rmdir resumed>) = 0 [pid 8723] <... close resumed>) = 0 [pid 8723] symlink("/dev/binderfs", "./binderfs" [pid 8721] +++ exited with 0 +++ [pid 8719] +++ exited with 0 +++ [pid 8723] <... symlink resumed>) = 0 [pid 8720] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8719, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5060] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./363", 0777 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8720, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 8723] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8724 [pid 8723] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8723] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 8723] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8724 attached [pid 8723] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 8724] set_robust_list(0x5555567436a0, 24 [pid 8723] <... mprotect resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(3, "", [pid 8724] <... set_robust_list resumed>) = 0 [pid 8723] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8724] chdir("./361" [pid 8723] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] newfstatat(3, "", [pid 5060] getdents64(3, [pid 8723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(3, [pid 8723] <... clone3 resumed> => {parent_tid=[8725]}, 88) = 8725 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8725 attached [pid 8724] <... chdir resumed>) = 0 [pid 8723] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8725] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8725] <... rseq resumed>) = 0 [pid 8724] <... prctl resumed>) = 0 [pid 8723] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8725] set_robust_list(0x7f58200ee9a0, 24 [pid 8724] setpgid(0, 0 [pid 5061] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5060] newfstatat(AT_FDCWD, "./366/binderfs", [pid 8725] <... set_robust_list resumed>) = 0 [pid 8724] <... setpgid resumed>) = 0 [pid 8723] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8725] rt_sigprocmask(SIG_SETMASK, [], [pid 8724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8723] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] unlink("./362/binderfs" [pid 5060] unlink("./366/binderfs" [pid 8725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8724] <... openat resumed>) = 3 [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 8725] memfd_create("syzkaller", 0 [pid 5061] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8725] <... memfd_create resumed>) = 3 [pid 8724] write(3, "1000", 4 [pid 8725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8724] <... write resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8725] <... mmap resumed>) = 0x7f5817c00000 [pid 8724] close(3) = 0 [pid 5061] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8724] symlink("/dev/binderfs", "./binderfs" [pid 5061] newfstatat(AT_FDCWD, "./362/file0", [pid 8724] <... symlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./366/file0", [pid 5061] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(4, "", [pid 8724] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8724] <... futex resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8724] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8724] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 4 [pid 8724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] getdents64(4, [pid 8724] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(4, "", [pid 5061] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 8724] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] getdents64(4, [pid 8724] <... mprotect resumed>) = 0 [pid 5061] rmdir("./362/file0") = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] getdents64(3, [pid 5060] close(4 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 8724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] close(3 [pid 5060] rmdir("./366/file0" [pid 5061] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8726 attached [pid 8724] <... clone3 resumed> => {parent_tid=[8726]}, 88) = 8726 [pid 5061] rmdir("./362" [pid 5060] getdents64(3, [pid 8726] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8726] <... rseq resumed>) = 0 [pid 5060] close(3) = 0 [pid 8726] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8724] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] rmdir("./366" [pid 8726] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] mkdir("./363", 0777 [pid 5060] <... rmdir resumed>) = 0 [pid 8724] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] mkdir("./367", 0777 [pid 8726] <... futex resumed>) = 0 [pid 8724] <... futex resumed>) = 1 [pid 5060] <... mkdir resumed>) = 0 [pid 8724] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8726] memfd_create("syzkaller", 0 [pid 8725] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 8727 attached [pid 8726] <... memfd_create resumed>) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8727 [pid 8726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8727] set_robust_list(0x5555567436a0, 24 [pid 8726] <... mmap resumed>) = 0x7f5817c00000 [pid 8727] <... set_robust_list resumed>) = 0 [pid 8727] chdir("./363") = 0 [pid 8727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8725] <... write resumed>) = 2097152 [pid 8727] <... prctl resumed>) = 0 [pid 8727] setpgid(0, 0) = 0 [pid 8727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8725] munmap(0x7f5817c00000, 138412032 [pid 8727] write(3, "1000", 4 [pid 8725] <... munmap resumed>) = 0 [pid 8727] <... write resumed>) = 4 [pid 8727] close(3) = 0 [pid 8727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8727] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8727] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8725] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... ioctl resumed>) = 0 [pid 8727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8727] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8728 attached => {parent_tid=[8728]}, 88) = 8728 [pid 8727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8728] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5060] close(3 [pid 8728] <... rseq resumed>) = 0 [pid 8728] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8727] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8725] close(3 [pid 5060] <... close resumed>) = 0 [pid 8728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8727] <... futex resumed>) = 0 [pid 8725] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8727] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8725] close(4./strace-static-x86_64: Process 8729 attached ) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8729 [pid 8725] mkdir("./file0", 0777) = 0 [pid 8725] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8729] set_robust_list(0x5555567436a0, 24 [ 322.333072][ T8725] loop0: detected capacity change from 0 to 4096 [ 322.364251][ T8725] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8728] memfd_create("syzkaller", 0 [pid 8729] <... set_robust_list resumed>) = 0 [pid 8728] <... memfd_create resumed>) = 3 [pid 8726] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 8728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8729] chdir("./367" [pid 5061] close(3 [pid 8729] <... chdir resumed>) = 0 [pid 8729] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8729] <... prctl resumed>) = 0 [pid 8729] setpgid(0, 0./strace-static-x86_64: Process 8730 attached ) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8730 [pid 8730] set_robust_list(0x5555567436a0, 24 [pid 8729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8730] <... set_robust_list resumed>) = 0 [pid 8730] chdir("./363" [pid 8729] <... openat resumed>) = 3 [pid 8730] <... chdir resumed>) = 0 [pid 8730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8730] setpgid(0, 0 [pid 8729] write(3, "1000", 4 [pid 8730] <... setpgid resumed>) = 0 [pid 8729] <... write resumed>) = 4 [pid 8730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8729] close(3 [pid 8730] <... openat resumed>) = 3 [pid 8729] <... close resumed>) = 0 [pid 8730] write(3, "1000", 4) = 4 [pid 8729] symlink("/dev/binderfs", "./binderfs" [pid 8730] close(3 [pid 8729] <... symlink resumed>) = 0 [pid 8730] <... close resumed>) = 0 [pid 8730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8729] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8729] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8730] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8729] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8729] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8730] <... futex resumed>) = 0 [pid 8729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8730] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8729] <... mmap resumed>) = 0x7f58200ce000 [pid 8730] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8730] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8729] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8728] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8726] <... write resumed>) = 2097152 [pid 8730] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8726] munmap(0x7f5817c00000, 138412032 [pid 8730] <... mprotect resumed>) = 0 [pid 8729] <... mprotect resumed>) = 0 [pid 8729] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8730] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8729] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8725] <... mount resumed>) = 0 [pid 8729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 8731 attached [pid 8730] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8729] <... clone3 resumed> => {parent_tid=[8731]}, 88) = 8731 [pid 8725] <... openat resumed>) = 3 [pid 8730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8729] rt_sigprocmask(SIG_SETMASK, [], [pid 8731] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8725] chdir("./file0"./strace-static-x86_64: Process 8732 attached [pid 8731] <... rseq resumed>) = 0 [pid 8730] <... clone3 resumed> => {parent_tid=[8732]}, 88) = 8732 [pid 8729] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8725] <... chdir resumed>) = 0 [pid 8732] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8731] set_robust_list(0x7f58200ee9a0, 24 [pid 8732] <... rseq resumed>) = 0 [pid 8731] <... set_robust_list resumed>) = 0 [pid 8730] rt_sigprocmask(SIG_SETMASK, [], [pid 8729] <... futex resumed>) = 0 [pid 8726] <... munmap resumed>) = 0 [pid 8732] set_robust_list(0x7f58200ee9a0, 24 [pid 8730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8729] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8726] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8732] <... set_robust_list resumed>) = 0 [pid 8731] rt_sigprocmask(SIG_SETMASK, [], [pid 8730] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8725] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8732] rt_sigprocmask(SIG_SETMASK, [], [pid 8731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8730] <... futex resumed>) = 0 [pid 8726] <... openat resumed>) = 4 [pid 8732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8731] memfd_create("syzkaller", 0 [pid 8730] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8726] ioctl(4, LOOP_SET_FD, 3 [pid 8725] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8725] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8731] <... memfd_create resumed>) = 3 [pid 8725] <... futex resumed>) = 1 [pid 8723] <... futex resumed>) = 0 [pid 8731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8725] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8723] exit_group(0 [pid 8725] <... futex resumed>) = ? [pid 8723] <... exit_group resumed>) = ? [pid 8732] memfd_create("syzkaller", 0 [pid 8731] <... mmap resumed>) = 0x7f5817c00000 [pid 8725] +++ exited with 0 +++ [pid 8723] +++ exited with 0 +++ [pid 8732] <... memfd_create resumed>) = 3 [pid 8728] <... write resumed>) = 2097152 [pid 8726] <... ioctl resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8723, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8726] close(3 [pid 5059] newfstatat(AT_FDCWD, "./366/binderfs", [pid 8726] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8726] close(4) = 0 [pid 5059] unlink("./366/binderfs" [pid 8726] mkdir("./file0", 0777) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 8726] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8728] munmap(0x7f5817c00000, 138412032 [pid 5059] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8728] <... munmap resumed>) = 0 [ 322.488870][ T8726] loop4: detected capacity change from 0 to 4096 [ 322.528358][ T8726] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8728] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... umount2 resumed>) = 0 [pid 8728] <... openat resumed>) = 4 [pid 5059] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8728] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./366/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8731] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 8728] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8728] close(3 [pid 8732] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8728] <... close resumed>) = 0 [ 322.545390][ T8728] loop3: detected capacity change from 0 to 4096 [pid 8731] <... write resumed>) = 2097152 [pid 5059] rmdir("./366/file0" [pid 8728] close(4 [pid 5059] <... rmdir resumed>) = 0 [pid 8728] <... close resumed>) = 0 [pid 8728] mkdir("./file0", 0777 [pid 5059] getdents64(3, [pid 8728] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 8728] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] rmdir("./366" [pid 8731] munmap(0x7f5817c00000, 138412032 [pid 8726] <... mount resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8726] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8726] chdir("./file0" [pid 8731] <... munmap resumed>) = 0 [pid 8726] <... chdir resumed>) = 0 [pid 5059] mkdir("./367", 0777 [pid 8726] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5059] <... mkdir resumed>) = 0 [pid 8726] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8726] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8732] <... write resumed>) = 2097152 [pid 8731] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8724] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8724] exit_group(0 [pid 5059] <... openat resumed>) = 3 [pid 8724] <... exit_group resumed>) = ? [pid 8726] <... futex resumed>) = ? [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8726] +++ exited with 0 +++ [pid 8724] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8724, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8732] munmap(0x7f5817c00000, 138412032 [pid 8731] <... openat resumed>) = 4 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8731] ioctl(4, LOOP_SET_FD, 3 [pid 8732] <... munmap resumed>) = 0 [pid 5063] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./361/binderfs") = 0 [pid 5063] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8732] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 322.625014][ T8728] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 322.651579][ T8731] loop1: detected capacity change from 0 to 4096 [pid 8732] ioctl(4, LOOP_SET_FD, 3 [pid 8731] <... ioctl resumed>) = 0 [pid 5063] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8731] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8731] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./361/file0", [pid 8731] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8731] <... close resumed>) = 0 [pid 5063] umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8731] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8731] <... mkdir resumed>) = 0 [pid 8731] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5063] openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./361/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./361") = 0 [pid 5063] mkdir("./362", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 8732] <... ioctl resumed>) = 0 [pid 8728] <... mount resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8732] close(3) = 0 [pid 8732] close(4) = 0 [pid 8732] mkdir("./file0", 0777 [pid 8728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] close(3) = 0 [pid 8732] <... mkdir resumed>) = 0 [ 322.677557][ T8732] loop2: detected capacity change from 0 to 4096 [ 322.701982][ T8731] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8731] <... mount resumed>) = 0 [pid 8728] <... openat resumed>) = 3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8732] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8728] chdir("./file0" [pid 8731] <... openat resumed>) = 3 [pid 8728] <... chdir resumed>) = 0 [pid 8731] chdir("./file0" [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8733 [pid 8728] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8731] <... chdir resumed>) = 0 [pid 8731] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8728] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8731] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8728] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8727] <... futex resumed>) = 0 [pid 8731] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8728] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8731] <... futex resumed>) = 1 [pid 8727] exit_group(0 [pid 8729] <... futex resumed>) = 0 [pid 8731] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8729] exit_group(0 [pid 8728] <... futex resumed>) = ? [pid 8727] <... exit_group resumed>) = ? [pid 8731] <... futex resumed>) = ? [pid 8729] <... exit_group resumed>) = ? [pid 8728] +++ exited with 0 +++ ./strace-static-x86_64: Process 8733 attached [pid 8731] +++ exited with 0 +++ [pid 8733] set_robust_list(0x5555567436a0, 24) = 0 [pid 8733] chdir("./367") = 0 [pid 8733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8733] setpgid(0, 0) = 0 [pid 8733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8733] write(3, "1000", 4) = 4 [pid 8733] close(3) = 0 [pid 8733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8733] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8729] +++ exited with 0 +++ [pid 8727] +++ exited with 0 +++ [pid 8733] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8729, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8733] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8733] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] <... openat resumed>) = 3 [pid 8733] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] newfstatat(3, "", [pid 8733] <... mprotect resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8727, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8733] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 8733] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8733] <... clone3 resumed> => {parent_tid=[8734]}, 88) = 8734 [pid 5062] newfstatat(3, "", [pid 5060] newfstatat(AT_FDCWD, "./367/binderfs", [pid 8733] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] getdents64(3, [pid 5060] unlink("./367/binderfs"./strace-static-x86_64: Process 8734 attached [pid 8733] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... unlink resumed>) = 0 [ 322.741165][ T8732] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8734] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8733] <... futex resumed>) = 0 [pid 5062] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8734] <... rseq resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8733] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8734] set_robust_list(0x7f58200ee9a0, 24 [pid 5062] newfstatat(AT_FDCWD, "./363/binderfs", [pid 8734] <... set_robust_list resumed>) = 0 [pid 8734] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] unlink("./363/binderfs") = 0 [pid 5062] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./367/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5063] close(3 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] close(4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./367/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8735 [pid 8734] memfd_create("syzkaller", 0) = 3 [pid 5060] rmdir("./367" [pid 8734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 8735 attached [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8734] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8735] set_robust_list(0x5555567436a0, 24) = 0 [pid 5060] mkdir("./368", 0777 [pid 8735] chdir("./362" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... mkdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./363/file0", [pid 8735] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8735] setpgid(0, 0) = 0 [pid 8735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8735] write(3, "1000", 4) = 4 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8736 [pid 8735] close(3) = 0 [pid 8735] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 8736 attached [pid 8735] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8736] set_robust_list(0x5555567436a0, 24 [pid 8735] <... futex resumed>) = 0 [pid 5062] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8736] <... set_robust_list resumed>) = 0 [pid 8735] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8736] chdir("./368" [pid 8735] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8736] <... chdir resumed>) = 0 [pid 8735] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8736] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] newfstatat(4, "", [pid 8736] <... prctl resumed>) = 0 [pid 8735] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8736] setpgid(0, 0 [pid 8735] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(4, [pid 8736] <... setpgid resumed>) = 0 [pid 8735] <... mprotect resumed>) = 0 [pid 8736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8735] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8736] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8736] write(3, "1000", 4 [pid 8735] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] getdents64(4, [pid 8736] <... write resumed>) = 4 [pid 8735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8737 attached [pid 8736] close(3 [pid 5062] close(4 [pid 8737] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8736] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8736] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./363/file0" [pid 8737] <... rseq resumed>) = 0 [pid 8736] <... symlink resumed>) = 0 [pid 8735] <... clone3 resumed> => {parent_tid=[8737]}, 88) = 8737 [pid 8737] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8735] rt_sigprocmask(SIG_SETMASK, [], [pid 8737] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8736] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8736] <... futex resumed>) = 0 [pid 8735] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 8737] <... futex resumed>) = 0 [pid 8736] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8735] <... futex resumed>) = 1 [pid 8737] memfd_create("syzkaller", 0 [pid 8736] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8735] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8736] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./363" [pid 8736] <... mmap resumed>) = 0x7f58200ce000 [pid 8736] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... rmdir resumed>) = 0 [pid 8736] <... mprotect resumed>) = 0 [pid 8736] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8737] <... memfd_create resumed>) = 3 [pid 8737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8736] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8737] <... mmap resumed>) = 0x7f5817c00000 [pid 8736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] mkdir("./364", 0777) = 0 [pid 8736] <... clone3 resumed> => {parent_tid=[8738]}, 88) = 8738 ./strace-static-x86_64: Process 8738 attached [pid 8736] rt_sigprocmask(SIG_SETMASK, [], [pid 8738] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8738] <... rseq resumed>) = 0 [pid 8736] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8738] set_robust_list(0x7f58200ee9a0, 24 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8738] <... set_robust_list resumed>) = 0 [pid 8736] <... futex resumed>) = 0 [pid 8738] rt_sigprocmask(SIG_SETMASK, [], [pid 8736] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8738] memfd_create("syzkaller", 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8738] <... memfd_create resumed>) = 3 [pid 8738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8734] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8732] <... mount resumed>) = 0 [pid 8732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8732] chdir("./file0") = 0 [pid 8732] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8732] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8730] <... futex resumed>) = 0 [pid 8732] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8730] exit_group(0 [pid 8732] <... futex resumed>) = ? [pid 8730] <... exit_group resumed>) = ? [pid 8732] +++ exited with 0 +++ [pid 8730] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8730, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8737] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./363/binderfs") = 0 [pid 5061] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8734] <... write resumed>) = 2097152 [pid 8734] munmap(0x7f5817c00000, 138412032 [pid 8738] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8734] <... munmap resumed>) = 0 [pid 8734] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8734] <... openat resumed>) = 4 [pid 5061] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8734] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./363/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8734] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5062] close(3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./363/file0" [pid 5062] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./363") = 0 [pid 5061] mkdir("./364", 0777) = 0 ./strace-static-x86_64: Process 8739 attached [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8739 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8739] set_robust_list(0x5555567436a0, 24 [pid 8734] close(3 [pid 8739] <... set_robust_list resumed>) = 0 [pid 8737] <... write resumed>) = 2097152 [pid 8734] <... close resumed>) = 0 [pid 8734] close(4 [pid 8739] chdir("./364" [pid 8734] <... close resumed>) = 0 [pid 8734] mkdir("./file0", 0777 [pid 8739] <... chdir resumed>) = 0 [pid 8734] <... mkdir resumed>) = 0 [pid 8739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8734] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8739] setpgid(0, 0) = 0 [pid 8739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 323.015194][ T8734] loop0: detected capacity change from 0 to 4096 [pid 8737] munmap(0x7f5817c00000, 138412032 [pid 8739] <... openat resumed>) = 3 [pid 8737] <... munmap resumed>) = 0 [pid 8739] write(3, "1000", 4) = 4 [pid 8739] close(3 [pid 8738] <... write resumed>) = 2097152 [pid 8737] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8739] <... close resumed>) = 0 [pid 8739] symlink("/dev/binderfs", "./binderfs" [pid 8737] <... openat resumed>) = 4 [pid 8737] ioctl(4, LOOP_SET_FD, 3 [pid 8739] <... symlink resumed>) = 0 [pid 8737] <... ioctl resumed>) = 0 [pid 8738] munmap(0x7f5817c00000, 138412032) = 0 [pid 8739] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8737] close(3 [pid 5061] <... ioctl resumed>) = 0 [pid 8738] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8737] <... close resumed>) = 0 [pid 5061] close(3 [pid 8739] <... futex resumed>) = 0 [pid 8737] close(4 [pid 5061] <... close resumed>) = 0 [pid 8739] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8737] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8739] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8737] mkdir("./file0", 0777 [pid 8739] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8738] <... openat resumed>) = 4 [pid 8737] <... mkdir resumed>) = 0 [pid 8739] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 323.059321][ T8734] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 323.075364][ T8737] loop4: detected capacity change from 0 to 4096 [pid 8738] ioctl(4, LOOP_SET_FD, 3 [pid 8737] mount("/dev/loop4", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8740 attached [pid 8739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8738] <... ioctl resumed>) = 0 [pid 8740] set_robust_list(0x5555567436a0, 24 [pid 8739] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8740 [pid 8740] <... set_robust_list resumed>) = 0 [pid 8739] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8740] chdir("./364" [pid 8739] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8740] <... chdir resumed>) = 0 [pid 8739] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8739] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8741]}, 88) = 8741 ./strace-static-x86_64: Process 8741 attached [pid 8739] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8739] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8741] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8739] <... futex resumed>) = 0 [pid 8741] <... rseq resumed>) = 0 [pid 8740] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8739] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8738] close(3 [pid 8741] set_robust_list(0x7f58200ee9a0, 24 [pid 8740] <... prctl resumed>) = 0 [pid 8738] <... close resumed>) = 0 [pid 8740] setpgid(0, 0 [pid 8738] close(4 [pid 8740] <... setpgid resumed>) = 0 [pid 8738] <... close resumed>) = 0 [pid 8741] <... set_robust_list resumed>) = 0 [pid 8740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8738] mkdir("./file0", 0777 [pid 8734] <... mount resumed>) = 0 [pid 8741] rt_sigprocmask(SIG_SETMASK, [], [pid 8740] <... openat resumed>) = 3 [pid 8738] <... mkdir resumed>) = 0 [pid 8740] write(3, "1000", 4) = 4 [pid 8738] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8740] close(3 [pid 8734] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8740] <... close resumed>) = 0 [pid 8734] <... openat resumed>) = 3 [pid 8740] symlink("/dev/binderfs", "./binderfs") = 0 [ 323.105349][ T8738] loop1: detected capacity change from 0 to 4096 [ 323.116117][ T8737] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8741] memfd_create("syzkaller", 0 [pid 8740] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8734] chdir("./file0" [pid 8741] <... memfd_create resumed>) = 3 [pid 8734] <... chdir resumed>) = 0 [pid 8741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8734] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8741] <... mmap resumed>) = 0x7f5817c00000 [pid 8734] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8734] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8740] <... futex resumed>) = 0 [pid 8740] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8740] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8740] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8734] <... futex resumed>) = 1 [pid 8733] <... futex resumed>) = 0 [pid 8740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8734] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8733] exit_group(0 [pid 8734] <... futex resumed>) = ? [pid 8733] <... exit_group resumed>) = ? [pid 8740] <... clone3 resumed> => {parent_tid=[8742]}, 88) = 8742 [pid 8734] +++ exited with 0 +++ [pid 8733] +++ exited with 0 +++ ./strace-static-x86_64: Process 8742 attached [pid 8740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8740] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8733, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8740] <... futex resumed>) = 0 [pid 8740] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8742] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8742] <... rseq resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8742] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] newfstatat(3, "", [pid 8742] <... set_robust_list resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8742] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] getdents64(3, [pid 8742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8742] memfd_create("syzkaller", 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8742] <... memfd_create resumed>) = 3 [ 323.149130][ T8738] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5059] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8742] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./367/binderfs") = 0 [pid 5059] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8737] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8737] chdir("./file0") = 0 [pid 8737] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5059] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8741] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8737] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(AT_FDCWD, "./367/file0", [pid 8737] <... futex resumed>) = 1 [pid 8735] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8737] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8735] exit_group(0 [pid 5059] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8737] <... futex resumed>) = ? [pid 8735] <... exit_group resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8737] +++ exited with 0 +++ [pid 8735] +++ exited with 0 +++ [pid 5059] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8735, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5059] newfstatat(4, "", [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 8738] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8738] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 8738] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5059] rmdir("./367/file0" [pid 5063] newfstatat(3, "", [pid 5059] <... rmdir resumed>) = 0 [pid 8738] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8738] <... chdir resumed>) = 0 [pid 5063] getdents64(3, [pid 8738] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8738] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8738] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8738] <... futex resumed>) = 1 [pid 5063] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5059] getdents64(3, [pid 8738] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8736] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8736] exit_group(0 [pid 5063] unlink("./362/binderfs" [pid 5059] close(3 [pid 8738] <... futex resumed>) = ? [pid 8736] <... exit_group resumed>) = ? [pid 5063] <... unlink resumed>) = 0 [pid 8738] +++ exited with 0 +++ [pid 5063] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 8736] +++ exited with 0 +++ [pid 5059] rmdir("./367" [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8736, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./362/file0", [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] mkdir("./368", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5063] umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 5063] newfstatat(4, "", [pid 5060] newfstatat(3, "", [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5060] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./368/binderfs", [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] unlink("./368/binderfs" [pid 5063] close(4 [pid 5060] <... unlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./362/file0" [pid 8741] <... write resumed>) = 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8742] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8741] munmap(0x7f5817c00000, 138412032 [pid 5063] getdents64(3, [pid 5060] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8741] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8741] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3 [pid 5060] newfstatat(AT_FDCWD, "./368/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8741] <... openat resumed>) = 4 [pid 8741] ioctl(4, LOOP_SET_FD, 3 [pid 8742] <... write resumed>) = 2097152 [pid 5063] rmdir("./362" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8742] munmap(0x7f5817c00000, 138412032 [pid 5060] <... openat resumed>) = 4 [pid 8741] <... ioctl resumed>) = 0 [pid 5063] mkdir("./363", 0777 [pid 8741] close(3 [pid 5060] newfstatat(4, "", [pid 8741] <... close resumed>) = 0 [pid 8741] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 8741] <... close resumed>) = 0 [pid 8741] mkdir("./file0", 0777 [pid 8742] <... munmap resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 8742] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8741] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8741] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8742] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] close(4 [pid 5063] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 8742] ioctl(4, LOOP_SET_FD, 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] rmdir("./368/file0") = 0 [pid 8742] <... ioctl resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] <... ioctl resumed>) = 0 [pid 8742] close(3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5060] close(3 [pid 5059] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] rmdir("./368" [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8743 ./strace-static-x86_64: Process 8743 attached [pid 8742] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8742] close(4 [pid 5060] mkdir("./369", 0777 [pid 8742] <... close resumed>) = 0 [ 323.322540][ T8741] loop3: detected capacity change from 0 to 4096 [ 323.350997][ T8742] loop2: detected capacity change from 0 to 4096 [ 323.362048][ T8741] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8742] mkdir("./file0", 0777 [pid 5060] <... mkdir resumed>) = 0 [pid 8743] set_robust_list(0x5555567436a0, 24 [pid 8742] <... mkdir resumed>) = 0 [pid 8741] <... mount resumed>) = 0 [pid 8743] <... set_robust_list resumed>) = 0 [pid 8743] chdir("./368") = 0 [pid 8743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8743] setpgid(0, 0) = 0 [pid 8743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8743] write(3, "1000", 4) = 4 [pid 8743] close(3) = 0 [pid 8743] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8743] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8742] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8741] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8743] <... futex resumed>) = 0 [pid 8741] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8741] chdir("./file0" [pid 8743] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8741] <... chdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8741] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8743] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8741] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8743] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8741] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8741] <... futex resumed>) = 1 [pid 8741] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8743] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8743] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8739] <... futex resumed>) = 0 [pid 8743] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8739] exit_group(0 [pid 8743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8739] <... exit_group resumed>) = ? [pid 8741] <... futex resumed>) = ? [pid 5063] close(3 [pid 8741] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8743] <... clone3 resumed> => {parent_tid=[8744]}, 88) = 8744 [pid 8739] +++ exited with 0 +++ [pid 8743] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8739, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 8743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8743] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8743] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8745 attached ./strace-static-x86_64: Process 8744 attached [pid 8745] set_robust_list(0x5555567436a0, 24 [pid 8744] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8745 [pid 8745] <... set_robust_list resumed>) = 0 [pid 8744] <... rseq resumed>) = 0 [pid 8745] chdir("./363" [pid 5062] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./364/binderfs") = 0 [ 323.414372][ T8742] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8745] <... chdir resumed>) = 0 [pid 8744] set_robust_list(0x7f58200ee9a0, 24 [pid 8745] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8744] <... set_robust_list resumed>) = 0 [pid 5062] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8745] <... prctl resumed>) = 0 [pid 8744] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... ioctl resumed>) = 0 [pid 8744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8745] setpgid(0, 0) = 0 [pid 5062] newfstatat(AT_FDCWD, "./364/file0", [pid 8745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8745] <... openat resumed>) = 3 [pid 5062] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8745] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8745] <... write resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8745] close(3 [pid 5062] <... openat resumed>) = 4 [pid 8745] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8745] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8744] memfd_create("syzkaller", 0 [pid 8745] <... symlink resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] close(3 [pid 8744] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8745] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 8745] <... futex resumed>) = 0 [pid 8744] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8745] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] close(4 [pid 8745] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 8745] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] rmdir("./364/file0" [pid 8745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] getdents64(3, [pid 8745] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8745] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] close(3 [pid 8745] <... mprotect resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8745] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] rmdir("./364"./strace-static-x86_64: Process 8746 attached [pid 8745] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8746] set_robust_list(0x5555567436a0, 24 [pid 8745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] mkdir("./365", 0777 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8746 ./strace-static-x86_64: Process 8747 attached [pid 8746] <... set_robust_list resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8747] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8746] chdir("./369" [pid 8745] <... clone3 resumed> => {parent_tid=[8747]}, 88) = 8747 [pid 8747] <... rseq resumed>) = 0 [pid 8746] <... chdir resumed>) = 0 [pid 8745] rt_sigprocmask(SIG_SETMASK, [], [pid 8747] set_robust_list(0x7f58200ee9a0, 24 [pid 8742] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8747] <... set_robust_list resumed>) = 0 [pid 8746] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8747] rt_sigprocmask(SIG_SETMASK, [], [pid 8746] <... prctl resumed>) = 0 [pid 8745] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8746] setpgid(0, 0 [pid 8745] <... futex resumed>) = 0 [pid 8742] <... openat resumed>) = 3 [pid 8747] memfd_create("syzkaller", 0 [pid 8746] <... setpgid resumed>) = 0 [pid 8746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8745] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8742] chdir("./file0" [pid 8747] <... memfd_create resumed>) = 3 [pid 8746] <... openat resumed>) = 3 [pid 8742] <... chdir resumed>) = 0 [pid 8747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8746] write(3, "1000", 4 [pid 8742] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8747] <... mmap resumed>) = 0x7f5817c00000 [pid 8746] <... write resumed>) = 4 [pid 8742] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8746] close(3 [pid 8744] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8742] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8746] <... close resumed>) = 0 [pid 8742] <... futex resumed>) = 1 [pid 8740] <... futex resumed>) = 0 [pid 8746] symlink("/dev/binderfs", "./binderfs" [pid 8742] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8740] exit_group(0 [pid 8746] <... symlink resumed>) = 0 [pid 8742] <... futex resumed>) = ? [pid 8740] <... exit_group resumed>) = ? [pid 8742] +++ exited with 0 +++ [pid 8740] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8740, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5061] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8746] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8746] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8747] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8746] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] newfstatat(3, "", [pid 8746] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] getdents64(3, [pid 8746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8746] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8746] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] newfstatat(AT_FDCWD, "./364/binderfs", [pid 8746] <... mprotect resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8746] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] unlink("./364/binderfs" [pid 8746] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8748 attached [pid 8746] <... clone3 resumed> => {parent_tid=[8748]}, 88) = 8748 [pid 8748] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8746] rt_sigprocmask(SIG_SETMASK, [], [pid 8748] <... rseq resumed>) = 0 [pid 8746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8748] set_robust_list(0x7f58200ee9a0, 24 [pid 8746] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8746] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8748] <... set_robust_list resumed>) = 0 [pid 8744] <... write resumed>) = 2097152 [pid 8748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8748] memfd_create("syzkaller", 0 [pid 8744] munmap(0x7f5817c00000, 138412032 [pid 8748] <... memfd_create resumed>) = 3 [pid 5061] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./364/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8744] <... munmap resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8748] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] getdents64(4, [pid 8744] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./364/file0" [pid 8744] <... openat resumed>) = 4 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8747] <... write resumed>) = 2097152 [pid 8744] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./364") = 0 [pid 5061] mkdir("./365", 0777 [pid 8747] munmap(0x7f5817c00000, 138412032 [pid 5061] <... mkdir resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8747] <... munmap resumed>) = 0 [pid 8744] <... ioctl resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8749 ./strace-static-x86_64: Process 8749 attached [pid 8749] set_robust_list(0x5555567436a0, 24) = 0 [pid 8749] chdir("./365" [pid 8744] close(3 [pid 8747] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8744] <... close resumed>) = 0 [pid 8749] <... chdir resumed>) = 0 [pid 8747] <... openat resumed>) = 4 [pid 8744] close(4 [pid 8749] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8747] ioctl(4, LOOP_SET_FD, 3 [pid 8744] <... close resumed>) = 0 [pid 8749] <... prctl resumed>) = 0 [pid 8744] mkdir("./file0", 0777 [pid 8749] setpgid(0, 0) = 0 [pid 8744] <... mkdir resumed>) = 0 [pid 8749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8748] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8744] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [ 323.645380][ T8744] loop0: detected capacity change from 0 to 4096 [ 323.678518][ T8747] loop4: detected capacity change from 0 to 4096 [pid 8749] write(3, "1000", 4) = 4 [pid 8749] close(3) = 0 [pid 8749] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8749] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8749] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8749] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8749] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8749] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8750 attached => {parent_tid=[8750]}, 88) = 8750 [pid 8750] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8749] rt_sigprocmask(SIG_SETMASK, [], [pid 8750] <... rseq resumed>) = 0 [pid 8749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8750] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8749] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] rt_sigprocmask(SIG_SETMASK, [], [pid 8749] <... futex resumed>) = 0 [pid 8750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8749] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8750] memfd_create("syzkaller", 0) = 3 [pid 8750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8747] <... ioctl resumed>) = 0 [pid 8747] close(3) = 0 [pid 8747] close(4) = 0 [pid 8747] mkdir("./file0", 0777) = 0 [pid 8747] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8744] <... mount resumed>) = 0 [ 323.693483][ T8744] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 323.733811][ T8747] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8744] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8744] chdir("./file0") = 0 [pid 5061] close(3 [pid 8744] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8744] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8744] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8744] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8743] <... futex resumed>) = 0 [pid 8743] exit_group(0 [pid 8744] <... futex resumed>) = ? [pid 8743] <... exit_group resumed>) = ? [pid 8744] +++ exited with 0 +++ [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8751 ./strace-static-x86_64: Process 8751 attached [pid 8751] set_robust_list(0x5555567436a0, 24 [pid 8750] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8748] <... write resumed>) = 2097152 [pid 8743] +++ exited with 0 +++ [pid 8751] <... set_robust_list resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8743, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8751] chdir("./365" [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8751] <... chdir resumed>) = 0 [pid 8748] munmap(0x7f5817c00000, 138412032 [pid 8747] <... mount resumed>) = 0 [pid 5059] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8751] setpgid(0, 0 [pid 5059] newfstatat(AT_FDCWD, "./368/binderfs", [pid 8751] <... setpgid resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] unlink("./368/binderfs" [pid 8751] <... openat resumed>) = 3 [pid 8751] write(3, "1000", 4 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8751] <... write resumed>) = 4 [pid 8751] close(3) = 0 [pid 8751] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8748] <... munmap resumed>) = 0 [pid 8751] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8748] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... umount2 resumed>) = 0 [pid 8751] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8751] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8751] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] newfstatat(AT_FDCWD, "./368/file0", [pid 8751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8751] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8751] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8751] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8748] <... openat resumed>) = 4 [pid 8747] <... openat resumed>) = 3 [pid 8751] <... mprotect resumed>) = 0 [pid 8748] ioctl(4, LOOP_SET_FD, 3 [pid 8747] chdir("./file0" [pid 5059] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8751] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... openat resumed>) = 4 [pid 8751] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8751] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 8752 attached 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8752] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8751] <... clone3 resumed> => {parent_tid=[8752]}, 88) = 8752 [pid 8747] <... chdir resumed>) = 0 [pid 8752] <... rseq resumed>) = 0 [pid 8751] rt_sigprocmask(SIG_SETMASK, [], [pid 8748] <... ioctl resumed>) = 0 [pid 8752] set_robust_list(0x7f58200ee9a0, 24 [pid 8751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8748] close(3 [pid 8752] <... set_robust_list resumed>) = 0 [pid 8751] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 8752] rt_sigprocmask(SIG_SETMASK, [], [pid 8751] <... futex resumed>) = 0 [pid 8748] close(4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8751] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] close(4 [pid 8752] memfd_create("syzkaller", 0 [pid 8748] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./368/file0" [pid 8748] mkdir("./file0", 0777 [pid 5059] <... rmdir resumed>) = 0 [pid 8752] <... memfd_create resumed>) = 3 [pid 5059] getdents64(3, [pid 8752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8752] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] close(3 [pid 8748] <... mkdir resumed>) = 0 [pid 8747] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 8747] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8748] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5059] rmdir("./368" [pid 8747] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... rmdir resumed>) = 0 [pid 8747] <... futex resumed>) = 1 [pid 8745] <... futex resumed>) = 0 [pid 5059] mkdir("./369", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8747] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] exit_group(0 [pid 5059] ioctl(3, LOOP_CLR_FD) = 0 [pid 8745] <... exit_group resumed>) = ? [pid 8747] <... futex resumed>) = ? [pid 8747] +++ exited with 0 +++ [pid 5059] close(3 [pid 8745] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8745, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5059] <... close resumed>) = 0 [ 323.844439][ T8748] loop1: detected capacity change from 0 to 4096 [ 323.883109][ T8748] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8753 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8750] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8750] munmap(0x7f5817c00000, 138412032 [pid 5063] getdents64(3, ./strace-static-x86_64: Process 8753 attached [pid 8750] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8753] set_robust_list(0x5555567436a0, 24 [pid 5063] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8753] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./363/binderfs", [pid 8753] chdir("./369" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8753] <... chdir resumed>) = 0 [pid 5063] unlink("./363/binderfs") = 0 [pid 5063] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8753] setpgid(0, 0 [pid 8750] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8750] ioctl(4, LOOP_SET_FD, 3 [pid 8753] <... setpgid resumed>) = 0 [pid 8750] <... ioctl resumed>) = 0 [pid 8753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8752] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8753] <... openat resumed>) = 3 [pid 8750] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8750] <... close resumed>) = 0 [pid 8750] close(4 [pid 8753] write(3, "1000", 4 [pid 8750] <... close resumed>) = 0 [pid 8750] mkdir("./file0", 0777 [pid 8753] <... write resumed>) = 4 [pid 8750] <... mkdir resumed>) = 0 [pid 8753] close(3 [pid 5063] newfstatat(AT_FDCWD, "./363/file0", [pid 8753] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8753] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8753] <... symlink resumed>) = 0 [pid 8750] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [ 323.955006][ T8750] loop3: detected capacity change from 0 to 4096 [pid 5063] newfstatat(4, "", [pid 8753] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8753] <... futex resumed>) = 0 [pid 5063] close(4 [pid 8753] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8748] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 8753] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8748] <... openat resumed>) = 3 [pid 8753] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8748] chdir("./file0" [pid 8753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] rmdir("./363/file0" [pid 8753] <... mmap resumed>) = 0x7f58200ce000 [pid 8748] <... chdir resumed>) = 0 [pid 8753] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8753] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8748] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8753] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] getdents64(3, ./strace-static-x86_64: Process 8754 attached [pid 8754] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8753] <... clone3 resumed> => {parent_tid=[8754]}, 88) = 8754 [pid 8754] <... rseq resumed>) = 0 [pid 8753] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8754] set_robust_list(0x7f58200ee9a0, 24 [pid 8753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8754] <... set_robust_list resumed>) = 0 [pid 8753] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(3 [pid 8754] rt_sigprocmask(SIG_SETMASK, [], [pid 8753] <... futex resumed>) = 0 [pid 8748] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 8754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8753] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8748] <... futex resumed>) = 1 [pid 8746] <... futex resumed>) = 0 [pid 5063] rmdir("./363" [pid 8748] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8746] exit_group(0 [pid 5063] <... rmdir resumed>) = 0 [pid 8754] memfd_create("syzkaller", 0 [pid 8748] <... futex resumed>) = ? [pid 8746] <... exit_group resumed>) = ? [pid 8754] <... memfd_create resumed>) = 3 [pid 8748] +++ exited with 0 +++ [pid 8746] +++ exited with 0 +++ [pid 8754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8746, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 324.002691][ T8750] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8754] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./364", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./369/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] unlink("./369/binderfs") = 0 [pid 5060] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8752] <... write resumed>) = 2097152 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8752] munmap(0x7f5817c00000, 138412032) = 0 [pid 5060] newfstatat(AT_FDCWD, "./369/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8750] <... mount resumed>) = 0 [pid 5060] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8754] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8752] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 8752] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8750] <... openat resumed>) = 3 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 8752] ioctl(4, LOOP_SET_FD, 3 [pid 8750] chdir("./file0" [pid 5060] rmdir("./369/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./369") = 0 [pid 5060] mkdir("./370", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8752] <... ioctl resumed>) = 0 [pid 8750] <... chdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 8750] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8750] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8750] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8749] exit_group(0) = ? [pid 8752] close(3) = 0 [pid 8752] close(4) = 0 [ 324.105068][ T8752] loop2: detected capacity change from 0 to 4096 [pid 8754] <... write resumed>) = 2097152 [pid 8752] mkdir("./file0", 0777 [pid 8750] +++ exited with 0 +++ [pid 8749] +++ exited with 0 +++ [pid 5063] <... ioctl resumed>) = 0 [pid 8754] munmap(0x7f5817c00000, 138412032 [pid 8752] <... mkdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8749, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 8752] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8754] <... munmap resumed>) = 0 [pid 5063] close(3 [pid 5062] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8754] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8755 attached [pid 8754] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8754] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8755] set_robust_list(0x5555567436a0, 24 [pid 5062] newfstatat(3, "", [pid 8755] <... set_robust_list resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8755 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8755] chdir("./364" [pid 8754] close(3 [pid 8752] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8755] <... chdir resumed>) = 0 [pid 8755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8755] <... prctl resumed>) = 0 [pid 8752] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8755] setpgid(0, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8755] <... setpgid resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./365/binderfs", [pid 8754] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8754] close(4 [pid 5062] unlink("./365/binderfs" [pid 8752] <... openat resumed>) = 3 [pid 8755] <... openat resumed>) = 3 [pid 8754] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8754] mkdir("./file0", 0777 [pid 8752] chdir("./file0" [pid 5062] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 8754] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [ 324.175929][ T8752] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 324.194972][ T8754] loop0: detected capacity change from 0 to 4096 [pid 8754] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8755] write(3, "1000", 4 [pid 8752] <... chdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8756 [pid 8755] <... write resumed>) = 4 ./strace-static-x86_64: Process 8756 attached [pid 8756] set_robust_list(0x5555567436a0, 24) = 0 [pid 8756] chdir("./370") = 0 [pid 8755] close(3 [pid 8756] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8756] setpgid(0, 0) = 0 [pid 8756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8756] write(3, "1000", 4) = 4 [pid 8756] close(3) = 0 [pid 8756] symlink("/dev/binderfs", "./binderfs" [pid 8755] <... close resumed>) = 0 [pid 8752] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8756] <... symlink resumed>) = 0 [pid 8756] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8756] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8756] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8755] symlink("/dev/binderfs", "./binderfs" [pid 8752] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8752] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = 0 [pid 8756] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8755] <... symlink resumed>) = 0 [pid 8752] <... futex resumed>) = 1 [pid 8751] <... futex resumed>) = 0 [pid 5062] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8756] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8755] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8752] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8751] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8755] <... futex resumed>) = 0 [pid 8752] <... futex resumed>) = ? [pid 8751] <... exit_group resumed>) = ? [pid 8756] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8755] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8752] +++ exited with 0 +++ [pid 8751] +++ exited with 0 +++ [pid 5062] newfstatat(AT_FDCWD, "./365/file0", [pid 8756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8755] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8755] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8751, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 8756] <... clone3 resumed> => {parent_tid=[8757]}, 88) = 8757 [pid 8755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8756] rt_sigprocmask(SIG_SETMASK, [], [pid 8755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8757 attached [pid 8756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8755] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... restart_syscall resumed>) = 0 [pid 8757] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8756] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8757] <... rseq resumed>) = 0 [pid 8756] <... futex resumed>) = 0 [pid 8755] <... mprotect resumed>) = 0 [ 324.253288][ T8754] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5062] <... openat resumed>) = 4 [pid 8757] set_robust_list(0x7f58200ee9a0, 24 [pid 8756] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8755] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] newfstatat(4, "", [pid 5061] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8757] <... set_robust_list resumed>) = 0 [pid 8755] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8757] rt_sigprocmask(SIG_SETMASK, [], [pid 8755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8758 attached [pid 8757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] getdents64(4, [pid 5061] <... openat resumed>) = 3 [pid 8758] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8757] memfd_create("syzkaller", 0 [pid 8755] <... clone3 resumed> => {parent_tid=[8758]}, 88) = 8758 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8755] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] getdents64(4, [pid 8755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8755] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8755] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./365/binderfs", [pid 8757] <... memfd_create resumed>) = 3 [pid 8755] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] rmdir("./365/file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8758] <... rseq resumed>) = 0 [pid 8757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] unlink("./365/binderfs" [pid 8758] set_robust_list(0x7f58200ee9a0, 24 [pid 8757] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8758] <... set_robust_list resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8758] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] close(3 [pid 5061] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8758] memfd_create("syzkaller", 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./365" [pid 5061] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5062] mkdir("./366", 0777 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./365/file0" [pid 8758] <... memfd_create resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] getdents64(3, [pid 8758] <... mmap resumed>) = 0x7f5817c00000 [pid 8754] <... mount resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8757] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8754] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] rmdir("./365") = 0 [pid 8754] chdir("./file0") = 0 [pid 5061] mkdir("./366", 0777 [pid 8754] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... mkdir resumed>) = 0 [pid 8754] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8758] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8754] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8754] <... futex resumed>) = 1 [pid 8753] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8754] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8753] exit_group(0) = ? [pid 8754] <... futex resumed>) = ? [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8754] +++ exited with 0 +++ [pid 8753] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8753, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8757] <... write resumed>) = 2097152 [pid 8757] munmap(0x7f5817c00000, 138412032 [pid 5059] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8758] <... write resumed>) = 2097152 [pid 5059] newfstatat(3, "", [pid 8758] munmap(0x7f5817c00000, 138412032 [pid 8757] <... munmap resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8758] <... munmap resumed>) = 0 [pid 8757] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] getdents64(3, [pid 8757] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8757] ioctl(4, LOOP_SET_FD, 3 [pid 5059] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./369/binderfs") = 0 [pid 5059] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8758] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8758] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 8758] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8758] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8758] <... close resumed>) = 0 [pid 8758] close(4 [pid 5062] close(3 [pid 8758] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8758] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8758] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8759 ./strace-static-x86_64: Process 8759 attached [pid 8758] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8759] set_robust_list(0x5555567436a0, 24 [pid 5059] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8759] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8760 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8760 attached [pid 8759] chdir("./366" [pid 8757] <... ioctl resumed>) = 0 [pid 8760] set_robust_list(0x5555567436a0, 24 [pid 8759] <... chdir resumed>) = 0 [pid 8757] close(3 [pid 8760] <... set_robust_list resumed>) = 0 [pid 8759] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8757] <... close resumed>) = 0 [pid 8759] <... prctl resumed>) = 0 [pid 8757] close(4 [pid 8760] chdir("./366" [pid 8759] setpgid(0, 0 [pid 8757] <... close resumed>) = 0 [pid 8757] mkdir("./file0", 0777 [pid 5059] newfstatat(AT_FDCWD, "./369/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8757] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8759] <... setpgid resumed>) = 0 [pid 8757] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8760] <... chdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [ 324.459990][ T8757] loop1: detected capacity change from 0 to 4096 [ 324.466210][ T8758] loop4: detected capacity change from 0 to 4096 [ 324.484261][ T8758] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5059] close(4) = 0 [pid 5059] rmdir("./369/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 8760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] rmdir("./369" [pid 8760] <... prctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./370", 0777 [pid 8760] setpgid(0, 0) = 0 [pid 8759] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8759] write(3, "1000", 4 [pid 5059] <... openat resumed>) = 3 [pid 8759] <... write resumed>) = 4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8760] <... openat resumed>) = 3 [pid 8759] close(3 [pid 8760] write(3, "1000", 4 [pid 8759] <... close resumed>) = 0 [pid 8760] <... write resumed>) = 4 [pid 8759] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8760] close(3) = 0 [pid 8759] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8760] symlink("/dev/binderfs", "./binderfs" [pid 8759] <... futex resumed>) = 0 [pid 8760] <... symlink resumed>) = 0 [pid 8759] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8760] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8759] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8760] <... futex resumed>) = 0 [pid 8759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8760] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8760] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8760] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8759] <... mmap resumed>) = 0x7f58200ce000 [pid 8760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8759] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8759] <... mprotect resumed>) = 0 [pid 8759] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8760] <... mmap resumed>) = 0x7f58200ce000 [pid 8759] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8760] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8759] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8760] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 8761 attached [ 324.506264][ T8757] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8760] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8759] <... clone3 resumed> => {parent_tid=[8761]}, 88) = 8761 [pid 8760] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8759] rt_sigprocmask(SIG_SETMASK, [], [pid 8760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8759] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8762 attached [pid 8761] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8759] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8762] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8761] <... rseq resumed>) = 0 [pid 8760] <... clone3 resumed> => {parent_tid=[8762]}, 88) = 8762 [pid 8759] <... futex resumed>) = 0 [pid 8762] <... rseq resumed>) = 0 [pid 8761] set_robust_list(0x7f58200ee9a0, 24 [pid 8760] rt_sigprocmask(SIG_SETMASK, [], [pid 8759] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8761] <... set_robust_list resumed>) = 0 [pid 8762] set_robust_list(0x7f58200ee9a0, 24 [pid 8761] rt_sigprocmask(SIG_SETMASK, [], [pid 8762] <... set_robust_list resumed>) = 0 [pid 8760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8762] rt_sigprocmask(SIG_SETMASK, [], [pid 8761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8760] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8760] <... futex resumed>) = 0 [pid 8760] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8762] memfd_create("syzkaller", 0 [pid 8758] <... mount resumed>) = 0 [pid 8762] <... memfd_create resumed>) = 3 [pid 8761] memfd_create("syzkaller", 0 [pid 8762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8762] <... mmap resumed>) = 0x7f5817c00000 [pid 8758] <... openat resumed>) = 3 [pid 8758] chdir("./file0") = 0 [pid 8758] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8761] <... memfd_create resumed>) = 3 [pid 8758] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8758] <... futex resumed>) = 1 [pid 8755] <... futex resumed>) = 0 [pid 8761] <... mmap resumed>) = 0x7f5817c00000 [pid 8758] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8755] exit_group(0 [pid 8758] <... futex resumed>) = ? [pid 8755] <... exit_group resumed>) = ? [pid 8758] +++ exited with 0 +++ [pid 5059] <... ioctl resumed>) = 0 [pid 8755] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8755, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./364/binderfs") = 0 [pid 8761] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8763 attached [pid 5063] <... umount2 resumed>) = 0 [pid 8763] set_robust_list(0x5555567436a0, 24) = 0 [pid 8762] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8763] chdir("./370" [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8763 [pid 5063] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./364/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8763] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 8763] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] rmdir("./364/file0" [pid 8763] <... prctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./364" [pid 8763] setpgid(0, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8763] <... setpgid resumed>) = 0 [pid 8763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8757] <... mount resumed>) = 0 [pid 8763] <... openat resumed>) = 3 [pid 8763] write(3, "1000", 4) = 4 [pid 8763] close(3 [pid 8757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] mkdir("./365", 0777 [pid 8763] <... close resumed>) = 0 [pid 8757] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 8763] symlink("/dev/binderfs", "./binderfs" [pid 8757] chdir("./file0" [pid 8763] <... symlink resumed>) = 0 [pid 8757] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8763] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8762] <... write resumed>) = 2097152 [pid 8757] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 8763] <... futex resumed>) = 0 [pid 8762] munmap(0x7f5817c00000, 138412032 [pid 8757] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8763] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8757] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8763] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8757] <... futex resumed>) = 1 [pid 8756] <... futex resumed>) = 0 [pid 8763] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8757] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8756] exit_group(0 [pid 8763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8757] <... futex resumed>) = ? [pid 8756] <... exit_group resumed>) = ? [pid 8763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8757] +++ exited with 0 +++ [pid 8756] +++ exited with 0 +++ [pid 8763] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8756, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 8763] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8763] <... mprotect resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 8763] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5060] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", ./strace-static-x86_64: Process 8764 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8764] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8763] <... clone3 resumed> => {parent_tid=[8764]}, 88) = 8764 [pid 5060] getdents64(3, [pid 8764] <... rseq resumed>) = 0 [pid 8763] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8764] set_robust_list(0x7f58200ee9a0, 24 [pid 8763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8764] <... set_robust_list resumed>) = 0 [pid 8763] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8764] rt_sigprocmask(SIG_SETMASK, [], [pid 8763] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./370/binderfs", [pid 8764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8763] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8762] <... munmap resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./370/binderfs" [pid 8764] memfd_create("syzkaller", 0 [pid 8762] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... unlink resumed>) = 0 [pid 8762] <... openat resumed>) = 4 [pid 8762] ioctl(4, LOOP_SET_FD, 3 [pid 5060] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8761] <... write resumed>) = 2097152 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./370/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8764] <... memfd_create resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8764] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] <... openat resumed>) = 4 [pid 8762] <... ioctl resumed>) = 0 [pid 8761] munmap(0x7f5817c00000, 138412032 [pid 5060] newfstatat(4, "", [pid 8761] <... munmap resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8762] close(3 [pid 8761] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] getdents64(4, [pid 8762] <... close resumed>) = 0 [pid 8761] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8762] close(4 [pid 5060] getdents64(4, [pid 8762] <... close resumed>) = 0 [pid 8761] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8762] mkdir("./file0", 0777 [pid 8761] <... ioctl resumed>) = 0 [pid 5060] close(4 [pid 8762] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./370/file0") = 0 [pid 8762] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./370") = 0 [pid 5060] mkdir("./371", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 324.727899][ T8762] loop3: detected capacity change from 0 to 4096 [ 324.753988][ T8761] loop2: detected capacity change from 0 to 4096 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8761] close(3 [pid 8764] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8761] <... close resumed>) = 0 [pid 8761] close(4) = 0 [pid 8761] mkdir("./file0", 0777) = 0 [pid 8761] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8765 attached , child_tidptr=0x555556743690) = 8765 [pid 8765] set_robust_list(0x5555567436a0, 24) = 0 [pid 8765] chdir("./365") = 0 [pid 8765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8765] setpgid(0, 0) = 0 [pid 8765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 324.776370][ T8762] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 324.805048][ T8761] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] <... ioctl resumed>) = 0 [pid 8765] write(3, "1000", 4) = 4 [pid 8765] close(3) = 0 [pid 8765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8765] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8765] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8765] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8764] <... write resumed>) = 2097152 [pid 8762] <... mount resumed>) = 0 [pid 8762] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8764] munmap(0x7f5817c00000, 138412032 [pid 8762] chdir("./file0") = 0 [pid 5060] close(3 [pid 8762] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8765] <... mmap resumed>) = 0x7f58200ce000 [pid 8764] <... munmap resumed>) = 0 [pid 8762] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8765] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8765] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8762] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8765] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8762] <... futex resumed>) = 1 [pid 8760] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 ./strace-static-x86_64: Process 8766 attached [pid 8762] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8760] exit_group(0 [pid 8766] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8765] <... clone3 resumed> => {parent_tid=[8766]}, 88) = 8766 [pid 8760] <... exit_group resumed>) = ? [pid 8762] <... futex resumed>) = ? [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8765] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8765] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8764] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8762] +++ exited with 0 +++ [pid 8760] +++ exited with 0 +++ [pid 8764] ioctl(4, LOOP_SET_FD, 3 [pid 8766] <... rseq resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8760, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8766] set_robust_list(0x7f58200ee9a0, 24 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8767 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8761] <... mount resumed>) = 0 ./strace-static-x86_64: Process 8767 attached [pid 8766] <... set_robust_list resumed>) = 0 [pid 8761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8767] set_robust_list(0x5555567436a0, 24 [pid 8766] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8761] <... openat resumed>) = 3 [pid 8766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8764] <... ioctl resumed>) = 0 [pid 8767] <... set_robust_list resumed>) = 0 [pid 8766] memfd_create("syzkaller", 0 [pid 8761] chdir("./file0" [pid 5062] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8767] chdir("./371" [pid 8766] <... memfd_create resumed>) = 3 [pid 8764] close(3 [pid 8761] <... chdir resumed>) = 0 [pid 8767] <... chdir resumed>) = 0 [pid 8764] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8767] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8764] close(4 [pid 8761] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] newfstatat(3, "", [pid 8767] <... prctl resumed>) = 0 [pid 8766] <... mmap resumed>) = 0x7f5817c00000 [pid 8764] <... close resumed>) = 0 [pid 8761] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8764] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8767] setpgid(0, 0 [pid 8764] <... mkdir resumed>) = 0 [pid 8761] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 8767] <... setpgid resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8759] <... futex resumed>) = 0 [pid 8764] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8759] exit_group(0) = ? [pid 8761] <... futex resumed>) = ? [pid 8767] <... openat resumed>) = 3 [pid 8761] +++ exited with 0 +++ [pid 8759] +++ exited with 0 +++ [pid 5062] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8759, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8767] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./366/binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8767] <... write resumed>) = 4 [pid 5062] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 8767] close(3 [pid 5061] newfstatat(3, "", [pid 8767] <... close resumed>) = 0 [pid 8767] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 8767] <... symlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8767] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8767] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8767] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] newfstatat(AT_FDCWD, "./366/binderfs", [pid 8767] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8767] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5061] unlink("./366/binderfs" [pid 8767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... unlink resumed>) = 0 [pid 8767] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8767] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... umount2 resumed>) = 0 [pid 5062] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./366/file0", [pid 5061] newfstatat(AT_FDCWD, "./366/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8767] <... mprotect resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 324.919036][ T8764] loop0: detected capacity change from 0 to 4096 [ 324.956409][ T8764] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8767] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] newfstatat(4, "", [pid 8767] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] getdents64(4, [pid 5061] newfstatat(4, "", ./strace-static-x86_64: Process 8768 attached [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8768] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8767] <... clone3 resumed> => {parent_tid=[8768]}, 88) = 8768 [pid 5062] getdents64(4, [pid 5061] getdents64(4, [pid 8768] <... rseq resumed>) = 0 [pid 8767] rt_sigprocmask(SIG_SETMASK, [], [pid 8768] set_robust_list(0x7f58200ee9a0, 24 [pid 8767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8768] <... set_robust_list resumed>) = 0 [pid 8767] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8768] rt_sigprocmask(SIG_SETMASK, [], [pid 8767] <... futex resumed>) = 0 [pid 8766] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8767] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] close(4 [pid 5061] getdents64(4, [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./366/file0" [pid 5061] close(4 [pid 8768] memfd_create("syzkaller", 0 [pid 8764] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8768] <... memfd_create resumed>) = 3 [pid 8764] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8764] <... openat resumed>) = 3 [pid 8764] chdir("./file0") = 0 [pid 5061] rmdir("./366/file0" [pid 8764] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] getdents64(3, [pid 5061] <... rmdir resumed>) = 0 [pid 8764] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8764] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(3, [pid 8764] <... futex resumed>) = 1 [pid 8763] <... futex resumed>) = 0 [pid 5062] close(3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8764] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8763] exit_group(0 [pid 5062] <... close resumed>) = 0 [pid 5061] close(3 [pid 8764] <... futex resumed>) = ? [pid 8763] <... exit_group resumed>) = ? [pid 5061] <... close resumed>) = 0 [pid 5062] rmdir("./366" [pid 5061] rmdir("./366" [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5062] mkdir("./367", 0777) = 0 [pid 5061] mkdir("./367", 0777 [pid 8764] +++ exited with 0 +++ [pid 8763] +++ exited with 0 +++ [pid 5061] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8766] <... write resumed>) = 2097152 [pid 5062] <... openat resumed>) = 3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8763, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8766] munmap(0x7f5817c00000, 138412032 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8766] <... munmap resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8766] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8766] <... openat resumed>) = 4 [pid 5059] newfstatat(AT_FDCWD, "./370/binderfs", [pid 8766] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8768] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] unlink("./370/binderfs" [pid 8766] <... ioctl resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8766] close(3) = 0 [pid 8766] close(4) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8766] mkdir("./file0", 0777 [pid 5059] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8766] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8768] <... write resumed>) = 2097152 [pid 8766] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5059] newfstatat(AT_FDCWD, "./370/file0", [pid 8768] munmap(0x7f5817c00000, 138412032 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(3 [pid 5059] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 8769 attached 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8769] set_robust_list(0x5555567436a0, 24 [pid 5059] getdents64(4, [pid 8769] <... set_robust_list resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8769] chdir("./367" [pid 5059] close(4) = 0 [pid 8769] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8769 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] rmdir("./370/file0" [pid 8769] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8768] <... munmap resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8769] <... prctl resumed>) = 0 [pid 8769] setpgid(0, 0 [pid 5061] close(3 [pid 5059] getdents64(3, [pid 8769] <... setpgid resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8769] <... openat resumed>) = 3 [pid 8768] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] close(3 [pid 8768] <... openat resumed>) = 4 [ 325.078599][ T8766] loop4: detected capacity change from 0 to 4096 [ 325.116342][ T8766] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5059] <... close resumed>) = 0 [pid 8769] write(3, "1000", 4 [pid 8768] ioctl(4, LOOP_SET_FD, 3 [pid 8769] <... write resumed>) = 4 [pid 5059] rmdir("./370"./strace-static-x86_64: Process 8770 attached [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8770 [pid 8770] set_robust_list(0x5555567436a0, 24) = 0 [pid 8770] chdir("./367") = 0 [pid 8770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8769] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 8770] setpgid(0, 0 [pid 8769] <... close resumed>) = 0 [pid 5059] mkdir("./371", 0777) = 0 [pid 8770] <... setpgid resumed>) = 0 [pid 8769] symlink("/dev/binderfs", "./binderfs" [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8769] <... symlink resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8769] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8769] <... futex resumed>) = 0 [pid 8769] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8769] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8770] <... openat resumed>) = 3 [pid 8769] <... mmap resumed>) = 0x7f58200ce000 [pid 8769] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8769] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8770] write(3, "1000", 4 [pid 8769] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8768] <... ioctl resumed>) = 0 [pid 8770] <... write resumed>) = 4 [pid 8769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8768] close(3 [pid 8770] close(3 [pid 8768] <... close resumed>) = 0 ./strace-static-x86_64: Process 8771 attached [pid 8770] <... close resumed>) = 0 [pid 8769] <... clone3 resumed> => {parent_tid=[8771]}, 88) = 8771 [pid 8771] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8769] rt_sigprocmask(SIG_SETMASK, [], [pid 8768] close(4 [pid 8771] <... rseq resumed>) = 0 [pid 8770] symlink("/dev/binderfs", "./binderfs" [pid 8769] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8768] <... close resumed>) = 0 [pid 8771] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8769] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8768] mkdir("./file0", 0777 [pid 8771] rt_sigprocmask(SIG_SETMASK, [], [pid 8769] <... futex resumed>) = 0 [pid 8771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8770] <... symlink resumed>) = 0 [pid 8769] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8768] <... mkdir resumed>) = 0 [pid 8771] memfd_create("syzkaller", 0 [ 325.158427][ T8768] loop1: detected capacity change from 0 to 4096 [pid 8768] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8770] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8771] <... memfd_create resumed>) = 3 [pid 8771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8770] <... futex resumed>) = 0 [pid 8770] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8770] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8770] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8770] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8772 attached [pid 8772] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8772] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8772] rt_sigprocmask(SIG_SETMASK, [], [pid 8770] <... clone3 resumed> => {parent_tid=[8772]}, 88) = 8772 [pid 8772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8770] rt_sigprocmask(SIG_SETMASK, [], [pid 8766] <... mount resumed>) = 0 [pid 8772] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8770] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 325.203419][ T8768] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8770] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8772] <... futex resumed>) = 0 [pid 8770] <... futex resumed>) = 1 [pid 8766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8772] memfd_create("syzkaller", 0 [pid 8770] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8766] <... openat resumed>) = 3 [pid 8766] chdir("./file0") = 0 [pid 8772] <... memfd_create resumed>) = 3 [pid 8772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8766] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... ioctl resumed>) = 0 [pid 8766] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8766] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8765] <... futex resumed>) = 0 [pid 5059] close(3 [pid 8765] exit_group(0 [pid 5059] <... close resumed>) = 0 [pid 8765] <... exit_group resumed>) = ? [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8766] +++ exited with 0 +++ [pid 8765] +++ exited with 0 +++ ./strace-static-x86_64: Process 8773 attached [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8765, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8773] set_robust_list(0x5555567436a0, 24 [pid 8771] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8773 [pid 8773] <... set_robust_list resumed>) = 0 [pid 8773] chdir("./371") = 0 [pid 5063] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8773] setpgid(0, 0 [pid 5063] newfstatat(3, "", [pid 8773] <... setpgid resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8773] <... openat resumed>) = 3 [pid 8773] write(3, "1000", 4) = 4 [pid 5063] newfstatat(AT_FDCWD, "./365/binderfs", [pid 8768] <... mount resumed>) = 0 [pid 8773] close(3 [pid 8768] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8773] <... close resumed>) = 0 [pid 8772] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8768] <... openat resumed>) = 3 [pid 5063] unlink("./365/binderfs" [pid 8773] symlink("/dev/binderfs", "./binderfs" [pid 8768] chdir("./file0" [pid 5063] <... unlink resumed>) = 0 [pid 8768] <... chdir resumed>) = 0 [pid 8768] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8773] <... symlink resumed>) = 0 [pid 8768] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8768] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8767] <... futex resumed>) = 0 [pid 8768] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8767] exit_group(0 [pid 8773] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8768] <... futex resumed>) = ? [pid 8767] <... exit_group resumed>) = ? [pid 8768] +++ exited with 0 +++ [pid 5063] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8773] <... futex resumed>) = 0 [pid 8773] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8773] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8773] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8773] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8774 attached [pid 8767] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 8774] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8773] <... clone3 resumed> => {parent_tid=[8774]}, 88) = 8774 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8767, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8774] <... rseq resumed>) = 0 [pid 8774] set_robust_list(0x7f58200ee9a0, 24 [pid 8773] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8774] <... set_robust_list resumed>) = 0 [pid 8773] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8774] rt_sigprocmask(SIG_SETMASK, [], [pid 8773] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8773] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8774] memfd_create("syzkaller", 0 [pid 8773] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] newfstatat(AT_FDCWD, "./365/file0", [pid 5060] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8774] <... memfd_create resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... openat resumed>) = 4 [pid 8774] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] newfstatat(3, "", [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8771] <... write resumed>) = 2097152 [pid 5063] close(4) = 0 [pid 5063] rmdir("./365/file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8771] munmap(0x7f5817c00000, 138412032 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./365" [pid 8771] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5063] mkdir("./366", 0777 [pid 8772] <... write resumed>) = 2097152 [pid 8771] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./371/binderfs", [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] unlink("./371/binderfs" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8774] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8772] munmap(0x7f5817c00000, 138412032 [pid 8771] <... openat resumed>) = 4 [pid 8772] <... munmap resumed>) = 0 [pid 8771] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8772] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... openat resumed>) = 4 [pid 8772] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 8772] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./371/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./371") = 0 [pid 5060] mkdir("./372", 0777) = 0 [pid 8771] <... ioctl resumed>) = 0 [pid 8771] close(3) = 0 [pid 8771] close(4) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8771] mkdir("./file0", 0777 [pid 5060] <... openat resumed>) = 3 [pid 8771] <... mkdir resumed>) = 0 [pid 8774] <... write resumed>) = 2097152 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8771] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8774] munmap(0x7f5817c00000, 138412032 [pid 8772] <... ioctl resumed>) = 0 [pid 8772] close(3) = 0 [pid 8774] <... munmap resumed>) = 0 [pid 8772] close(4) = 0 [pid 8772] mkdir("./file0", 0777 [pid 8774] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 8772] <... mkdir resumed>) = 0 [ 325.429692][ T8771] loop3: detected capacity change from 0 to 4096 [ 325.444008][ T8772] loop2: detected capacity change from 0 to 4096 [ 325.469253][ T8771] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8774] <... openat resumed>) = 4 [pid 5063] close(3) = 0 [pid 8774] ioctl(4, LOOP_SET_FD, 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8772] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8775 ./strace-static-x86_64: Process 8775 attached [pid 8774] <... ioctl resumed>) = 0 [pid 8775] set_robust_list(0x5555567436a0, 24 [pid 8774] close(3) = 0 [pid 8774] close(4) = 0 [pid 8775] <... set_robust_list resumed>) = 0 [pid 8774] mkdir("./file0", 0777 [pid 8775] chdir("./366" [pid 8774] <... mkdir resumed>) = 0 [pid 8775] <... chdir resumed>) = 0 [ 325.497504][ T8774] loop0: detected capacity change from 0 to 4096 [ 325.510146][ T8772] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8774] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8775] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8771] <... mount resumed>) = 0 [pid 8771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8775] <... prctl resumed>) = 0 [pid 8771] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 8775] setpgid(0, 0) = 0 [pid 8771] chdir("./file0" [pid 5060] close(3 [pid 8775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8771] <... chdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8771] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8771] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8775] <... openat resumed>) = 3 [pid 8771] <... futex resumed>) = 1 ./strace-static-x86_64: Process 8776 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8776 [pid 8775] write(3, "1000", 4 [pid 8776] set_robust_list(0x5555567436a0, 24 [pid 8775] <... write resumed>) = 4 [pid 8775] close(3 [pid 8776] <... set_robust_list resumed>) = 0 [pid 8776] chdir("./372" [pid 8775] <... close resumed>) = 0 [pid 8771] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8769] <... futex resumed>) = 0 [pid 8776] <... chdir resumed>) = 0 [pid 8775] symlink("/dev/binderfs", "./binderfs" [pid 8769] exit_group(0 [pid 8776] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8776] setpgid(0, 0 [pid 8775] <... symlink resumed>) = 0 [pid 8771] <... futex resumed>) = ? [pid 8769] <... exit_group resumed>) = ? [pid 8776] <... setpgid resumed>) = 0 [pid 8771] +++ exited with 0 +++ [ 325.547400][ T8774] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8775] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8769] +++ exited with 0 +++ [pid 8775] <... futex resumed>) = 0 [pid 8775] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8769, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8776] write(3, "1000", 4 [pid 8775] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8776] <... write resumed>) = 4 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8776] close(3 [pid 8775] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8776] <... close resumed>) = 0 [pid 8775] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8776] symlink("/dev/binderfs", "./binderfs" [pid 8775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8775] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8776] <... symlink resumed>) = 0 [pid 8775] <... mprotect resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8776] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8775] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 8776] <... futex resumed>) = 0 [pid 8776] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8775] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8776] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] getdents64(3, [pid 8776] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8777 attached [pid 8776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8777] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8775] <... clone3 resumed> => {parent_tid=[8777]}, 88) = 8777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8777] <... rseq resumed>) = 0 [pid 8776] <... mmap resumed>) = 0x7f58200ce000 [pid 8775] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] newfstatat(AT_FDCWD, "./367/binderfs", [pid 8777] set_robust_list(0x7f58200ee9a0, 24 [pid 8776] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8775] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8776] <... mprotect resumed>) = 0 [pid 5062] unlink("./367/binderfs" [pid 8777] <... set_robust_list resumed>) = 0 [pid 8777] rt_sigprocmask(SIG_SETMASK, [], [pid 8776] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8775] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... unlink resumed>) = 0 [pid 8777] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8775] <... futex resumed>) = 0 [pid 8772] <... mount resumed>) = 0 [pid 5062] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8777] memfd_create("syzkaller", 0 [pid 8775] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8772] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8772] chdir("./file0" [pid 5062] <... umount2 resumed>) = 0 [pid 8777] <... memfd_create resumed>) = 3 [pid 8776] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8772] <... chdir resumed>) = 0 [pid 8777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8772] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8778 attached [pid 8777] <... mmap resumed>) = 0x7f5817c00000 [pid 8772] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8778] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8776] <... clone3 resumed> => {parent_tid=[8778]}, 88) = 8778 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8778] <... rseq resumed>) = 0 [pid 8776] rt_sigprocmask(SIG_SETMASK, [], [pid 8772] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(AT_FDCWD, "./367/file0", [pid 8778] set_robust_list(0x7f58200ee9a0, 24 [pid 8776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8774] <... mount resumed>) = 0 [pid 8772] <... futex resumed>) = 1 [pid 8770] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8778] <... set_robust_list resumed>) = 0 [pid 8776] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8774] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8772] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8770] exit_group(0 [pid 5062] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8778] rt_sigprocmask(SIG_SETMASK, [], [pid 8776] <... futex resumed>) = 0 [pid 8772] <... futex resumed>) = ? [pid 8770] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8776] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8772] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8778] memfd_create("syzkaller", 0 [pid 8774] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8778] <... memfd_create resumed>) = 3 [pid 8774] chdir("./file0" [pid 8770] +++ exited with 0 +++ [pid 8778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8774] <... chdir resumed>) = 0 [pid 5062] close(4 [pid 8778] <... mmap resumed>) = 0x7f5817c00000 [pid 8774] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8770, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 8774] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./367/file0" [pid 5061] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8777] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8774] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8773] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8773] exit_group(0 [pid 5061] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8773] <... exit_group resumed>) = ? [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8774] +++ exited with 0 +++ [pid 8773] +++ exited with 0 +++ [pid 5062] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8773, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./367" [pid 5059] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] mkdir("./368", 0777 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./371/binderfs", [pid 5062] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./371/binderfs") = 0 [pid 5059] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./367/binderfs" [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] newfstatat(AT_FDCWD, "./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(AT_FDCWD, "./367/file0", [pid 5059] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5061] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./371/file0" [pid 8777] <... write resumed>) = 2097152 [pid 5061] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... rmdir resumed>) = 0 [pid 8777] munmap(0x7f5817c00000, 138412032 [pid 5061] <... openat resumed>) = 4 [pid 5059] getdents64(3, [pid 8777] <... munmap resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8777] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8778] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8777] <... openat resumed>) = 4 [pid 5061] getdents64(4, [pid 5059] close(3 [pid 8777] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./371" [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5061] close(4) = 0 [pid 5059] mkdir("./372", 0777 [pid 5061] rmdir("./367/file0" [pid 8777] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./367" [pid 5059] <... openat resumed>) = 3 [pid 8777] close(3 [pid 8778] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8778] munmap(0x7f5817c00000, 138412032) = 0 [pid 8777] <... close resumed>) = 0 [pid 8778] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8777] close(4 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] mkdir("./368", 0777 [pid 8778] <... openat resumed>) = 4 [pid 8777] <... close resumed>) = 0 [ 325.739964][ T8777] loop4: detected capacity change from 0 to 4096 [pid 8777] mkdir("./file0", 0777 [pid 8778] ioctl(4, LOOP_SET_FD, 3 [pid 8777] <... mkdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8778] <... ioctl resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8777] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] close(3) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8778] close(3) = 0 ./strace-static-x86_64: Process 8779 attached [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8778] close(4) = 0 [pid 8778] mkdir("./file0", 0777) = 0 [pid 8778] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8779] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8779 [pid 8779] <... set_robust_list resumed>) = 0 [pid 8779] chdir("./368") = 0 [pid 8779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8779] setpgid(0, 0) = 0 [pid 8779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8779] write(3, "1000", 4) = 4 [pid 8779] close(3) = 0 [pid 8779] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8779] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... ioctl resumed>) = 0 [pid 8779] <... futex resumed>) = 0 [pid 5059] close(3 [pid 8779] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5059] <... close resumed>) = 0 [pid 8779] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8780 attached ) = 0x7f58200ce000 [pid 8777] <... mount resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8780 [pid 8779] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 325.794373][ T8778] loop1: detected capacity change from 0 to 4096 [ 325.804609][ T8777] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 325.823705][ T8778] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8779] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8780] set_robust_list(0x5555567436a0, 24 [pid 8779] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8777] <... openat resumed>) = 3 [pid 8777] chdir("./file0") = 0 [pid 8777] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8777] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8780] <... set_robust_list resumed>) = 0 [pid 8775] <... futex resumed>) = 0 [pid 8780] chdir("./372" [pid 8777] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8775] exit_group(0 [pid 8777] <... futex resumed>) = ? [pid 8775] <... exit_group resumed>) = ? [pid 8777] +++ exited with 0 +++ ./strace-static-x86_64: Process 8781 attached [pid 8781] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8781] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8781] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8780] <... chdir resumed>) = 0 [pid 8779] <... clone3 resumed> => {parent_tid=[8781]}, 88) = 8781 [pid 8775] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 8781] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8778] <... mount resumed>) = 0 [pid 8778] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8779] rt_sigprocmask(SIG_SETMASK, [], [pid 8780] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8778] <... openat resumed>) = 3 [pid 5061] close(3 [pid 8780] <... prctl resumed>) = 0 [pid 8779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8778] chdir("./file0" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8775, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] <... close resumed>) = 0 [pid 8779] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8779] <... futex resumed>) = 1 [pid 8781] <... futex resumed>) = 0 [pid 8780] setpgid(0, 0 [pid 8779] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8778] <... chdir resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8781] memfd_create("syzkaller", 0 [pid 8778] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8778] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8778] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8780] <... setpgid resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8776] <... futex resumed>) = 0 [pid 8780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8776] exit_group(0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8782 ./strace-static-x86_64: Process 8782 attached [pid 8781] <... memfd_create resumed>) = 3 [pid 8780] <... openat resumed>) = 3 [pid 8778] <... futex resumed>) = ? [pid 8776] <... exit_group resumed>) = ? [pid 8780] write(3, "1000", 4 [pid 5063] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8780] <... write resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8780] close(3 [pid 5063] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8780] <... close resumed>) = 0 [pid 8782] set_robust_list(0x5555567436a0, 24 [pid 8781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8780] symlink("/dev/binderfs", "./binderfs" [pid 8778] +++ exited with 0 +++ [pid 8776] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 8782] <... set_robust_list resumed>) = 0 [pid 8781] <... mmap resumed>) = 0x7f5817c00000 [pid 8782] chdir("./368" [pid 8780] <... symlink resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8776, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8782] <... chdir resumed>) = 0 [pid 8780] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8782] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8780] <... futex resumed>) = 0 [pid 5060] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8782] <... prctl resumed>) = 0 [pid 8780] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] getdents64(3, [pid 8782] setpgid(0, 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8782] <... setpgid resumed>) = 0 [pid 8780] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8782] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 8782] write(3, "1000", 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8782] <... write resumed>) = 4 [pid 8782] close(3) = 0 [pid 8780] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] newfstatat(AT_FDCWD, "./366/binderfs", [pid 5060] getdents64(3, [pid 8782] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8782] <... symlink resumed>) = 0 [pid 8780] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./366/binderfs" [pid 8780] <... mprotect resumed>) = 0 [pid 8782] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5060] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8782] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8782] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8780] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8780] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8783 attached [pid 8782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8783] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8780] <... clone3 resumed> => {parent_tid=[8783]}, 88) = 8783 [pid 8783] <... rseq resumed>) = 0 [pid 8780] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] newfstatat(AT_FDCWD, "./372/binderfs", [pid 8783] set_robust_list(0x7f58200ee9a0, 24 [pid 8780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8783] <... set_robust_list resumed>) = 0 [pid 8783] rt_sigprocmask(SIG_SETMASK, [], [pid 8782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8781] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8780] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8783] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8782] <... mmap resumed>) = 0x7f58200ce000 [pid 8780] <... futex resumed>) = 0 [pid 8782] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8780] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8782] <... mprotect resumed>) = 0 [pid 8782] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8783] memfd_create("syzkaller", 0 [pid 5060] unlink("./372/binderfs" [pid 8782] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 8782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8784]}, 88) = 8784 ./strace-static-x86_64: Process 8784 attached [pid 8782] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8784] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8783] <... memfd_create resumed>) = 3 [pid 8782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./366/file0", [pid 8783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8784] <... rseq resumed>) = 0 [pid 8783] <... mmap resumed>) = 0x7f5817c00000 [pid 8782] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8784] set_robust_list(0x7f58200ee9a0, 24 [pid 8782] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8784] <... set_robust_list resumed>) = 0 [pid 8782] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8784] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./372/file0", [pid 8784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8784] memfd_create("syzkaller", 0 [pid 5063] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(4, "", [pid 5060] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8784] <... memfd_create resumed>) = 3 [pid 5063] getdents64(4, [pid 8784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8781] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5060] newfstatat(4, "", [pid 8781] munmap(0x7f5817c00000, 138412032 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8784] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... close resumed>) = 0 [pid 5060] getdents64(4, [pid 8781] <... munmap resumed>) = 0 [pid 5063] rmdir("./366/file0" [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8781] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] getdents64(4, [pid 8781] <... openat resumed>) = 4 [pid 8781] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 8783] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8781] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5060] rmdir("./372/file0" [pid 8781] close(3 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./366" [pid 5060] <... rmdir resumed>) = 0 [pid 8781] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 8781] close(4 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8781] <... close resumed>) = 0 [pid 5060] close(3 [pid 8781] mkdir("./file0", 0777 [pid 8784] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8781] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8781] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] mkdir("./367", 0777 [pid 5060] rmdir("./372") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] mkdir("./373", 0777 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8784] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5060] <... mkdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8783] <... write resumed>) = 2097152 [pid 8783] munmap(0x7f5817c00000, 138412032 [ 326.055277][ T8781] loop3: detected capacity change from 0 to 4096 [ 326.091922][ T8781] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8784] munmap(0x7f5817c00000, 138412032 [pid 8783] <... munmap resumed>) = 0 [pid 8781] <... mount resumed>) = 0 [pid 8783] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8781] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8783] <... openat resumed>) = 4 [pid 8784] <... munmap resumed>) = 0 [pid 8783] ioctl(4, LOOP_SET_FD, 3 [pid 8781] <... openat resumed>) = 3 [pid 8781] chdir("./file0") = 0 [pid 8781] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8784] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8781] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8784] <... openat resumed>) = 4 [pid 8784] ioctl(4, LOOP_SET_FD, 3 [pid 8781] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8784] <... ioctl resumed>) = 0 [pid 8783] <... ioctl resumed>) = 0 [pid 8781] <... futex resumed>) = 1 [pid 8779] <... futex resumed>) = 0 [pid 8783] close(3 [pid 8781] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8779] exit_group(0 [pid 5060] <... ioctl resumed>) = 0 [pid 8783] <... close resumed>) = 0 [pid 8779] <... exit_group resumed>) = ? [pid 8784] close(3 [pid 8783] close(4 [pid 8781] <... futex resumed>) = ? [pid 8783] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8783] mkdir("./file0", 0777 [pid 5063] close(3 [pid 8784] <... close resumed>) = 0 [pid 8783] <... mkdir resumed>) = 0 [pid 8781] +++ exited with 0 +++ [pid 8779] +++ exited with 0 +++ [pid 5060] close(3 [pid 8783] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8779, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8784] close(4 [pid 5063] <... close resumed>) = 0 [pid 8784] <... close resumed>) = 0 [ 326.150198][ T8783] loop0: detected capacity change from 0 to 4096 [ 326.184892][ T8784] loop2: detected capacity change from 0 to 4096 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... close resumed>) = 0 [pid 8784] mkdir("./file0", 0777 [pid 5062] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8784] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8785 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8785 attached [pid 5062] newfstatat(AT_FDCWD, "./368/binderfs", [pid 8785] set_robust_list(0x5555567436a0, 24 [pid 8784] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8785] <... set_robust_list resumed>) = 0 [pid 5062] unlink("./368/binderfs" [pid 8785] chdir("./367" [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8786 ./strace-static-x86_64: Process 8786 attached [pid 5062] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8786] set_robust_list(0x5555567436a0, 24 [pid 8785] <... chdir resumed>) = 0 [pid 8785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8785] setpgid(0, 0) = 0 [pid 8785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8786] <... set_robust_list resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8786] chdir("./373" [pid 8785] <... openat resumed>) = 3 [pid 8786] <... chdir resumed>) = 0 [pid 8786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8785] write(3, "1000", 4 [pid 8786] setpgid(0, 0 [pid 8785] <... write resumed>) = 4 [pid 8786] <... setpgid resumed>) = 0 [pid 8785] close(3) = 0 [pid 8785] symlink("/dev/binderfs", "./binderfs" [pid 8786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8785] <... symlink resumed>) = 0 [pid 8786] <... openat resumed>) = 3 [pid 8785] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8785] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8785] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] newfstatat(AT_FDCWD, "./368/file0", [pid 8785] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8785] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8785] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... openat resumed>) = 4 [pid 8785] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] newfstatat(4, "", [pid 8785] <... mprotect resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8786] write(3, "1000", 4 [pid 8785] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] getdents64(4, [pid 8786] <... write resumed>) = 4 [pid 8785] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8786] close(3 [pid 8785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] getdents64(4, ./strace-static-x86_64: Process 8787 attached [pid 8786] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8787] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8786] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(4 [pid 8787] <... rseq resumed>) = 0 [pid 8786] <... symlink resumed>) = 0 [pid 8785] <... clone3 resumed> => {parent_tid=[8787]}, 88) = 8787 [pid 5062] <... close resumed>) = 0 [pid 8787] set_robust_list(0x7f58200ee9a0, 24 [pid 8786] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] rmdir("./368/file0" [pid 8787] <... set_robust_list resumed>) = 0 [pid 8786] <... futex resumed>) = 0 [pid 8785] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... rmdir resumed>) = 0 [pid 8787] rt_sigprocmask(SIG_SETMASK, [], [pid 8786] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] getdents64(3, [pid 8787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8786] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8785] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8785] <... futex resumed>) = 0 [pid 5062] close(3 [pid 8786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8785] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 8787] memfd_create("syzkaller", 0 [pid 8786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5062] rmdir("./368" [pid 8787] <... memfd_create resumed>) = 3 [pid 8786] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... rmdir resumed>) = 0 [pid 8786] <... mprotect resumed>) = 0 [pid 8787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8786] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] mkdir("./369", 0777 [pid 8786] <... rt_sigprocmask resumed>[], 8) = 0 [ 326.226523][ T8783] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 326.244099][ T8784] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8788 attached [pid 8783] <... mount resumed>) = 0 [pid 8788] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8786] <... clone3 resumed> => {parent_tid=[8788]}, 88) = 8788 [pid 8783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8788] <... rseq resumed>) = 0 [pid 8786] rt_sigprocmask(SIG_SETMASK, [], [pid 8788] set_robust_list(0x7f58200ee9a0, 24 [pid 8786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8788] <... set_robust_list resumed>) = 0 [pid 8786] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8788] rt_sigprocmask(SIG_SETMASK, [], [pid 8786] <... futex resumed>) = 0 [pid 8788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8783] <... openat resumed>) = 3 [pid 8786] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8788] memfd_create("syzkaller", 0 [pid 8783] chdir("./file0" [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8783] <... chdir resumed>) = 0 [pid 8788] <... memfd_create resumed>) = 3 [pid 8788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8783] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8787] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8783] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8788] <... mmap resumed>) = 0x7f5817c00000 [pid 8783] <... futex resumed>) = 1 [pid 8783] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8780] <... futex resumed>) = 0 [pid 8780] exit_group(0) = ? [pid 8783] <... futex resumed>) = ? [pid 8783] +++ exited with 0 +++ [pid 8780] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8780, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5059] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./372/binderfs") = 0 [pid 5059] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./372/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./372/file0") = 0 [pid 8784] <... mount resumed>) = 0 [pid 5059] getdents64(3, [pid 8784] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8788] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8784] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5059] close(3 [pid 8784] chdir("./file0" [pid 5059] <... close resumed>) = 0 [pid 8784] <... chdir resumed>) = 0 [pid 5059] rmdir("./372" [pid 8784] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8784] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8789 attached [pid 8784] <... futex resumed>) = 1 [pid 8782] <... futex resumed>) = 0 [pid 5059] mkdir("./373", 0777 [pid 8784] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8789] set_robust_list(0x5555567436a0, 24 [pid 8782] exit_group(0 [pid 8787] <... write resumed>) = 2097152 [pid 8784] <... futex resumed>) = ? [pid 8782] <... exit_group resumed>) = ? [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8789 [pid 8784] +++ exited with 0 +++ [pid 8782] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8782, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8789] <... set_robust_list resumed>) = 0 [pid 5061] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8789] chdir("./369" [pid 5061] <... openat resumed>) = 3 [pid 8789] <... chdir resumed>) = 0 [pid 8789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8789] setpgid(0, 0 [pid 8787] munmap(0x7f5817c00000, 138412032 [pid 5061] newfstatat(3, "", [pid 8789] <... setpgid resumed>) = 0 [pid 8789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8789] write(3, "1000", 4 [pid 8788] <... write resumed>) = 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8789] <... write resumed>) = 4 [pid 8788] munmap(0x7f5817c00000, 138412032 [pid 8789] close(3) = 0 [pid 5061] getdents64(3, [pid 8789] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8789] <... symlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8789] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] newfstatat(AT_FDCWD, "./368/binderfs", [pid 8789] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8789] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] unlink("./368/binderfs" [pid 8789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8787] <... munmap resumed>) = 0 [pid 5061] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8789] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8789] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8787] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8789] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8788] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8790 attached [pid 8788] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8790] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8789] <... clone3 resumed> => {parent_tid=[8790]}, 88) = 8790 [pid 8788] <... openat resumed>) = 4 [pid 8790] <... rseq resumed>) = 0 [pid 8789] rt_sigprocmask(SIG_SETMASK, [], [pid 8788] ioctl(4, LOOP_SET_FD, 3 [pid 8787] <... openat resumed>) = 4 [pid 5061] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8790] set_robust_list(0x7f58200ee9a0, 24 [pid 8789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8787] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8790] <... set_robust_list resumed>) = 0 [pid 8789] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8790] rt_sigprocmask(SIG_SETMASK, [], [pid 8789] <... futex resumed>) = 0 [pid 8790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8789] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] newfstatat(AT_FDCWD, "./368/file0", [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8790] memfd_create("syzkaller", 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8788] <... ioctl resumed>) = 0 [pid 8790] <... memfd_create resumed>) = 3 [pid 8788] close(3 [pid 5061] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8788] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8788] close(4 [pid 5061] newfstatat(4, "", [pid 8790] <... mmap resumed>) = 0x7f5817c00000 [pid 8788] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8788] mkdir("./file0", 0777 [pid 5061] getdents64(4, [pid 8788] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8787] <... ioctl resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./368/file0" [pid 5059] close(3 [pid 8787] close(3 [pid 5059] <... close resumed>) = 0 [pid 8787] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8787] close(4) = 0 [pid 8787] mkdir("./file0", 0777) = 0 [pid 8787] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, ./strace-static-x86_64: Process 8791 attached 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8791 [pid 8791] set_robust_list(0x5555567436a0, 24) = 0 [pid 5061] close(3 [pid 8788] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] <... close resumed>) = 0 [ 326.486547][ T8788] loop1: detected capacity change from 0 to 4096 [ 326.487685][ T8787] loop4: detected capacity change from 0 to 4096 [pid 8791] chdir("./373" [pid 5061] rmdir("./368" [pid 8791] <... chdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8791] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8791] setpgid(0, 0) = 0 [pid 5061] mkdir("./369", 0777 [pid 8791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 8791] write(3, "1000", 4) = 4 [pid 8791] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8791] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... openat resumed>) = 3 [pid 8791] <... symlink resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8791] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8791] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8791] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8788] <... mount resumed>) = 0 [pid 8791] <... mmap resumed>) = 0x7f58200ce000 [pid 8788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8787] <... mount resumed>) = 0 [pid 8791] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8788] <... openat resumed>) = 3 [pid 8787] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8791] <... mprotect resumed>) = 0 [pid 8788] chdir("./file0" [pid 8787] <... openat resumed>) = 3 [pid 8791] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8788] <... chdir resumed>) = 0 [pid 8787] chdir("./file0" [pid 8788] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8787] <... chdir resumed>) = 0 [pid 8788] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 326.533687][ T8788] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 326.536098][ T8787] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8787] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8791] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8788] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8787] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8788] <... futex resumed>) = 1 [pid 8786] <... futex resumed>) = 0 [pid 8791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8788] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8787] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8786] exit_group(0./strace-static-x86_64: Process 8792 attached [pid 8788] <... futex resumed>) = ? [pid 8787] <... futex resumed>) = 1 [pid 8786] <... exit_group resumed>) = ? [pid 8785] <... futex resumed>) = 0 [pid 8792] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8791] <... clone3 resumed> => {parent_tid=[8792]}, 88) = 8792 [pid 8788] +++ exited with 0 +++ [pid 8787] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8785] exit_group(0 [pid 8792] <... rseq resumed>) = 0 [pid 8791] rt_sigprocmask(SIG_SETMASK, [], [pid 8787] <... futex resumed>) = ? [pid 8785] <... exit_group resumed>) = ? [pid 8792] set_robust_list(0x7f58200ee9a0, 24 [pid 8791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8787] +++ exited with 0 +++ [pid 8786] +++ exited with 0 +++ [pid 8785] +++ exited with 0 +++ [pid 8792] <... set_robust_list resumed>) = 0 [pid 8791] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8792] rt_sigprocmask(SIG_SETMASK, [], [pid 8791] <... futex resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8785, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8786, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8791] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8790] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8792] memfd_create("syzkaller", 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5060] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 8792] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 8792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", [pid 8792] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./373/binderfs") = 0 [pid 5063] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./367/binderfs") = 0 [pid 5063] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./367/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5060] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5060] newfstatat(AT_FDCWD, "./373/file0", [pid 5063] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] rmdir("./367/file0") = 0 [pid 5060] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8790] <... write resumed>) = 2097152 [pid 5061] close(3 [pid 5060] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 5060] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5063] rmdir("./367" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8790] munmap(0x7f5817c00000, 138412032 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./373/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5063] mkdir("./368", 0777 [pid 5060] rmdir("./373") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] mkdir("./374", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 8790] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8792] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 8794 attached ./strace-static-x86_64: Process 8793 attached [pid 8790] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8793 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8794 [pid 8794] set_robust_list(0x5555567436a0, 24 [pid 8793] set_robust_list(0x5555567436a0, 24 [pid 8790] <... openat resumed>) = 4 [pid 8794] <... set_robust_list resumed>) = 0 [pid 8793] <... set_robust_list resumed>) = 0 [pid 8790] ioctl(4, LOOP_SET_FD, 3 [pid 8794] chdir("./369" [pid 8793] chdir("./368" [pid 8794] <... chdir resumed>) = 0 [pid 8793] <... chdir resumed>) = 0 [pid 8793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8793] setpgid(0, 0 [pid 8794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8793] <... setpgid resumed>) = 0 [pid 8794] <... prctl resumed>) = 0 [pid 8793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8794] setpgid(0, 0 [pid 8793] <... openat resumed>) = 3 [pid 8794] <... setpgid resumed>) = 0 [pid 8793] write(3, "1000", 4 [pid 8794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8793] <... write resumed>) = 4 [pid 8793] close(3) = 0 [pid 8794] <... openat resumed>) = 3 [pid 8793] symlink("/dev/binderfs", "./binderfs" [pid 8794] write(3, "1000", 4) = 4 [pid 8793] <... symlink resumed>) = 0 [pid 8794] close(3 [pid 8793] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... close resumed>) = 0 [pid 8793] <... futex resumed>) = 0 [pid 8794] symlink("/dev/binderfs", "./binderfs" [pid 8793] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8794] <... symlink resumed>) = 0 [pid 8793] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8794] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8794] <... futex resumed>) = 0 [pid 8793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8794] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8790] <... ioctl resumed>) = 0 [pid 8794] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8793] <... mmap resumed>) = 0x7f58200ce000 [pid 8790] close(3 [pid 8794] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8793] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8790] <... close resumed>) = 0 [pid 8794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8793] <... mprotect resumed>) = 0 [pid 8790] close(4 [pid 8794] <... mmap resumed>) = 0x7f58200ce000 [pid 8793] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8790] <... close resumed>) = 0 [pid 8794] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8790] mkdir("./file0", 0777 [pid 8794] <... mprotect resumed>) = 0 [pid 8790] <... mkdir resumed>) = 0 [pid 8794] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8790] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8794] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8793] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8796 attached [pid 8794] <... clone3 resumed> => {parent_tid=[8796]}, 88) = 8796 [pid 8793] <... clone3 resumed> => {parent_tid=[8795]}, 88) = 8795 [pid 8794] rt_sigprocmask(SIG_SETMASK, [], [ 326.732680][ T8790] loop3: detected capacity change from 0 to 4096 [pid 8793] rt_sigprocmask(SIG_SETMASK, [], [pid 8796] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8794] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8793] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8795 attached [pid 8794] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8793] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... futex resumed>) = 0 [pid 8793] <... futex resumed>) = 0 [pid 8794] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8793] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8795] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8795] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8796] <... rseq resumed>) = 0 [pid 8795] rt_sigprocmask(SIG_SETMASK, [], [pid 8796] set_robust_list(0x7f58200ee9a0, 24 [pid 8795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8796] <... set_robust_list resumed>) = 0 [pid 8796] rt_sigprocmask(SIG_SETMASK, [], [pid 8795] memfd_create("syzkaller", 0 [pid 8796] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8796] memfd_create("syzkaller", 0 [pid 8795] <... memfd_create resumed>) = 3 [pid 8795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8796] <... memfd_create resumed>) = 3 [pid 8795] <... mmap resumed>) = 0x7f5817c00000 [pid 8796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8796] <... mmap resumed>) = 0x7f5817c00000 [pid 8792] <... write resumed>) = 2097152 [pid 8792] munmap(0x7f5817c00000, 138412032 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8797 ./strace-static-x86_64: Process 8797 attached [pid 8797] set_robust_list(0x5555567436a0, 24) = 0 [pid 8797] chdir("./374") = 0 [pid 8797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8792] <... munmap resumed>) = 0 [pid 8797] setpgid(0, 0 [pid 8792] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8797] <... setpgid resumed>) = 0 [ 326.784941][ T8790] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8792] <... openat resumed>) = 4 [pid 8797] <... openat resumed>) = 3 [pid 8792] ioctl(4, LOOP_SET_FD, 3 [pid 8797] write(3, "1000", 4) = 4 [pid 8797] close(3) = 0 [pid 8797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8797] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8797] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8797] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8792] <... ioctl resumed>) = 0 [pid 8797] <... mmap resumed>) = 0x7f58200ce000 [pid 8797] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8792] close(3 [pid 8797] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8795] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8792] <... close resumed>) = 0 [pid 8797] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8798]}, 88) = 8798 [pid 8797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8792] close(4 [pid 8797] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8797] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8792] <... close resumed>) = 0 ./strace-static-x86_64: Process 8798 attached [pid 8798] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8792] mkdir("./file0", 0777 [pid 8798] set_robust_list(0x7f58200ee9a0, 24 [pid 8792] <... mkdir resumed>) = 0 [pid 8798] <... set_robust_list resumed>) = 0 [pid 8798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8792] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8798] memfd_create("syzkaller", 0) = 3 [ 326.836664][ T8792] loop0: detected capacity change from 0 to 4096 [pid 8798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8796] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8798] <... mmap resumed>) = 0x7f5817c00000 [pid 8790] <... mount resumed>) = 0 [pid 8790] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8790] chdir("./file0") = 0 [pid 8790] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8790] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8789] <... futex resumed>) = 0 [pid 8790] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 326.892360][ T8792] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8789] exit_group(0 [pid 8790] <... futex resumed>) = ? [pid 8789] <... exit_group resumed>) = ? [pid 8790] +++ exited with 0 +++ [pid 8789] +++ exited with 0 +++ [pid 8795] <... write resumed>) = 2097152 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8789, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8795] munmap(0x7f5817c00000, 138412032 [pid 8798] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8796] <... write resumed>) = 2097152 [pid 5062] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8796] munmap(0x7f5817c00000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8796] <... munmap resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8795] <... munmap resumed>) = 0 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8795] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8795] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8795] ioctl(4, LOOP_SET_FD, 3 [pid 5062] newfstatat(AT_FDCWD, "./369/binderfs", [pid 8796] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8796] ioctl(4, LOOP_SET_FD, 3 [pid 8795] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./369/binderfs") = 0 [pid 8795] close(3 [pid 5062] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8795] <... close resumed>) = 0 [pid 8795] close(4 [pid 8796] <... ioctl resumed>) = 0 [pid 8792] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8795] <... close resumed>) = 0 [pid 8795] mkdir("./file0", 0777 [pid 8796] close(3 [pid 8795] <... mkdir resumed>) = 0 [pid 8792] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8795] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8792] <... openat resumed>) = 3 [pid 8796] <... close resumed>) = 0 [pid 8792] chdir("./file0" [pid 8798] <... write resumed>) = 2097152 [pid 8796] close(4 [pid 8792] <... chdir resumed>) = 0 [pid 5062] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8796] <... close resumed>) = 0 [pid 8792] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8798] munmap(0x7f5817c00000, 138412032 [pid 8796] mkdir("./file0", 0777 [pid 8792] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] <... munmap resumed>) = 0 [pid 8796] <... mkdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./369/file0", [pid 8792] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8791] <... futex resumed>) = 0 [pid 8792] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8791] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8792] <... futex resumed>) = ? [pid 8791] <... exit_group resumed>) = ? [pid 5062] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8792] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [ 326.997844][ T8795] loop4: detected capacity change from 0 to 4096 [ 327.005984][ T8796] loop2: detected capacity change from 0 to 4096 [ 327.033130][ T8795] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8796] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8791] +++ exited with 0 +++ [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8791, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5059] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] <... openat resumed>) = 4 [pid 5062] rmdir("./369/file0" [pid 8798] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5059] newfstatat(3, "", [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./369" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./370", 0777 [pid 5059] getdents64(3, [pid 5062] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8798] <... ioctl resumed>) = 0 [pid 5059] unlink("./373/binderfs" [pid 8798] close(3) = 0 [pid 8798] close(4 [pid 8795] <... mount resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 8795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8798] <... close resumed>) = 0 [pid 8795] <... openat resumed>) = 3 [pid 5059] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8795] chdir("./file0" [pid 8798] mkdir("./file0", 0777 [pid 8795] <... chdir resumed>) = 0 [pid 8795] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8798] <... mkdir resumed>) = 0 [pid 8795] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8795] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8793] <... futex resumed>) = 0 [ 327.057494][ T8796] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 327.075937][ T8798] loop1: detected capacity change from 0 to 4096 [pid 8795] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8793] exit_group(0 [pid 8795] <... futex resumed>) = ? [pid 8793] <... exit_group resumed>) = ? [pid 8795] +++ exited with 0 +++ [pid 8798] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8793] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8793, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8796] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8796] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8796] <... openat resumed>) = 3 [pid 5063] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./373/file0", [pid 8796] chdir("./file0") = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8796] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8796] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8796] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8796] <... futex resumed>) = 1 [pid 8794] <... futex resumed>) = 0 [pid 8796] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8794] exit_group(0 [pid 5063] newfstatat(AT_FDCWD, "./368/binderfs", [pid 5059] <... openat resumed>) = 4 [pid 8796] <... futex resumed>) = ? [pid 8794] <... exit_group resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./368/binderfs") = 0 [pid 5059] newfstatat(4, "", [pid 5063] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8796] +++ exited with 0 +++ [pid 8794] +++ exited with 0 +++ [pid 5059] getdents64(4, [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8794, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(4 [pid 5063] newfstatat(AT_FDCWD, "./368/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5063] umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(3, "", [pid 5059] rmdir("./373/file0" [pid 5063] openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] close(3 [pid 5061] getdents64(3, [pid 5059] <... rmdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3./strace-static-x86_64: Process 8799 attached [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... close resumed>) = 0 [pid 8799] set_robust_list(0x5555567436a0, 24) = 0 [pid 5059] rmdir("./373" [ 327.141999][ T8798] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8799] chdir("./370" [pid 5063] getdents64(4, [pid 5061] newfstatat(AT_FDCWD, "./369/binderfs", [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8799 [pid 5063] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] unlink("./369/binderfs" [pid 8799] <... chdir resumed>) = 0 [pid 5063] rmdir("./368/file0" [pid 5061] <... unlink resumed>) = 0 [pid 5059] mkdir("./374", 0777 [pid 8799] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... rmdir resumed>) = 0 [pid 8799] <... prctl resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8799] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 8799] <... setpgid resumed>) = 0 [pid 8799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3) = 0 [pid 8799] <... openat resumed>) = 3 [pid 5063] rmdir("./368" [pid 5061] <... umount2 resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8799] write(3, "1000", 4) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8799] close(3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8799] <... close resumed>) = 0 [pid 8799] symlink("/dev/binderfs", "./binderfs" [pid 5063] mkdir("./369", 0777 [pid 8799] <... symlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8799] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8799] <... futex resumed>) = 0 [pid 8799] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./369/file0", [pid 8799] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8798] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8799] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8798] <... openat resumed>) = 3 [pid 8799] <... mmap resumed>) = 0x7f58200ce000 [pid 8798] chdir("./file0" [pid 5061] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8799] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8798] <... chdir resumed>) = 0 [pid 8799] <... mprotect resumed>) = 0 [pid 8798] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8799] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8798] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8799] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8798] <... futex resumed>) = 1 [pid 8797] <... futex resumed>) = 0 [pid 8799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8798] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8797] exit_group(0 [pid 5061] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8800 attached [pid 8798] <... futex resumed>) = ? [pid 8797] <... exit_group resumed>) = ? [pid 5061] newfstatat(4, "", [pid 8800] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8799] <... clone3 resumed> => {parent_tid=[8800]}, 88) = 8800 [pid 8798] +++ exited with 0 +++ [pid 8797] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8800] <... rseq resumed>) = 0 [pid 8799] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] getdents64(4, [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8797, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8800] set_robust_list(0x7f58200ee9a0, 24 [pid 8799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8800] <... set_robust_list resumed>) = 0 [pid 8799] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8800] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] getdents64(4, [pid 8800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8799] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8800] memfd_create("syzkaller", 0 [pid 5060] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 5060] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 8799] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8800] <... memfd_create resumed>) = 3 [pid 5061] rmdir("./369/file0" [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8800] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] getdents64(3, [pid 5060] newfstatat(AT_FDCWD, "./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./374/binderfs" [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5061] close(3) = 0 [pid 5060] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./369") = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... ioctl resumed>) = 0 [pid 5061] mkdir("./370", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./374/file0", [pid 5059] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8801 attached [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8801] set_robust_list(0x5555567436a0, 24 [pid 5060] newfstatat(4, "", [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8801 [pid 8801] <... set_robust_list resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8801] chdir("./374" [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8801] <... chdir resumed>) = 0 [pid 5060] getdents64(4, [pid 8801] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8801] <... prctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8801] setpgid(0, 0 [pid 5060] close(4 [pid 8801] <... setpgid resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] rmdir("./374/file0") = 0 [pid 8801] <... openat resumed>) = 3 [pid 8801] write(3, "1000", 4 [pid 5060] getdents64(3, [pid 8801] <... write resumed>) = 4 [pid 8801] close(3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8801] <... close resumed>) = 0 [pid 8801] symlink("/dev/binderfs", "./binderfs" [pid 5060] close(3 [pid 8801] <... symlink resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8800] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] close(3 [pid 5060] rmdir("./374" [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8802 attached [pid 8801] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... rmdir resumed>) = 0 [pid 8801] <... futex resumed>) = 0 [pid 5060] mkdir("./375", 0777 [pid 8801] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8802] set_robust_list(0x5555567436a0, 24) = 0 [pid 8802] chdir("./369" [pid 8801] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8801] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8802] <... chdir resumed>) = 0 [pid 8801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... openat resumed>) = 3 [pid 8801] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8801] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8802] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8801] <... mprotect resumed>) = 0 [pid 8802] <... prctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8802 [pid 8802] setpgid(0, 0 [pid 8801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8802] <... setpgid resumed>) = 0 [pid 8801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8803 attached [pid 8802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8803] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8801] <... clone3 resumed> => {parent_tid=[8803]}, 88) = 8803 [pid 8803] <... rseq resumed>) = 0 [pid 8801] rt_sigprocmask(SIG_SETMASK, [], [pid 8803] set_robust_list(0x7f58200ee9a0, 24 [pid 8801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8803] <... set_robust_list resumed>) = 0 [pid 8801] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8803] rt_sigprocmask(SIG_SETMASK, [], [pid 8802] <... openat resumed>) = 3 [pid 8803] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8802] write(3, "1000", 4 [pid 8801] <... futex resumed>) = 0 [pid 8802] <... write resumed>) = 4 [pid 8802] close(3) = 0 [pid 8802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8801] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8803] memfd_create("syzkaller", 0) = 3 [pid 8802] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8802] <... futex resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8802] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5061] close(3 [pid 8802] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8802] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8802] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8802] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8804 attached [pid 8804] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8802] <... clone3 resumed> => {parent_tid=[8804]}, 88) = 8804 [pid 5061] <... close resumed>) = 0 [pid 8803] <... mmap resumed>) = 0x7f5817c00000 [pid 8802] rt_sigprocmask(SIG_SETMASK, [], [pid 8804] <... rseq resumed>) = 0 [pid 8802] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8800] <... write resumed>) = 2097152 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8804] set_robust_list(0x7f58200ee9a0, 24 [pid 8802] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8804] <... set_robust_list resumed>) = 0 [pid 8802] <... futex resumed>) = 0 [pid 8804] rt_sigprocmask(SIG_SETMASK, [], [pid 8802] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8804] memfd_create("syzkaller", 0) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8805 [pid 8804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8800] munmap(0x7f5817c00000, 138412032./strace-static-x86_64: Process 8805 attached ) = 0 [pid 8805] set_robust_list(0x5555567436a0, 24) = 0 [pid 8805] chdir("./370") = 0 [pid 8800] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8800] ioctl(4, LOOP_SET_FD, 3 [pid 8805] setpgid(0, 0) = 0 [pid 8805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8805] write(3, "1000", 4) = 4 [pid 8805] close(3) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8805] symlink("/dev/binderfs", "./binderfs" [pid 8800] <... ioctl resumed>) = 0 [pid 8800] close(3) = 0 [pid 8800] close(4) = 0 [pid 8800] mkdir("./file0", 0777 [pid 8805] <... symlink resumed>) = 0 [pid 8800] <... mkdir resumed>) = 0 [pid 8805] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] close(3 [pid 8805] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8804] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8803] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8800] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] <... close resumed>) = 0 [pid 8805] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8805] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8805] <... mprotect resumed>) = 0 [pid 8805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8806 attached => {parent_tid=[8807]}, 88) = 8807 ./strace-static-x86_64: Process 8807 attached [ 327.450175][ T8800] loop3: detected capacity change from 0 to 4096 [pid 8806] set_robust_list(0x5555567436a0, 24 [pid 8805] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8806 [pid 8806] <... set_robust_list resumed>) = 0 [pid 8807] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8807] <... rseq resumed>) = 0 [pid 8805] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] set_robust_list(0x7f58200ee9a0, 24 [pid 8805] <... futex resumed>) = 0 [pid 8807] <... set_robust_list resumed>) = 0 [pid 8805] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8806] chdir("./375" [pid 8807] rt_sigprocmask(SIG_SETMASK, [], [pid 8806] <... chdir resumed>) = 0 [pid 8806] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8806] <... prctl resumed>) = 0 [pid 8807] memfd_create("syzkaller", 0 [pid 8806] setpgid(0, 0) = 0 [pid 8806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8807] <... memfd_create resumed>) = 3 [pid 8807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8806] write(3, "1000", 4 [pid 8807] <... mmap resumed>) = 0x7f5817c00000 [pid 8806] <... write resumed>) = 4 [pid 8806] close(3) = 0 [pid 8806] symlink("/dev/binderfs", "./binderfs" [pid 8804] <... write resumed>) = 2097152 [pid 8803] <... write resumed>) = 2097152 [ 327.499022][ T8800] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8806] <... symlink resumed>) = 0 [pid 8804] munmap(0x7f5817c00000, 138412032 [pid 8806] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8803] munmap(0x7f5817c00000, 138412032) = 0 [pid 8800] <... mount resumed>) = 0 [pid 8806] <... futex resumed>) = 0 [pid 8806] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8804] <... munmap resumed>) = 0 [pid 8806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8806] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8800] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8806] <... mprotect resumed>) = 0 [pid 8806] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8800] <... openat resumed>) = 3 [pid 8806] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8800] chdir("./file0" [pid 8806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8800] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8808 attached [pid 8804] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8800] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8808] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8806] <... clone3 resumed> => {parent_tid=[8808]}, 88) = 8808 [pid 8804] <... openat resumed>) = 4 [pid 8800] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8808] <... rseq resumed>) = 0 [pid 8806] rt_sigprocmask(SIG_SETMASK, [], [pid 8804] ioctl(4, LOOP_SET_FD, 3 [pid 8803] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8800] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8808] set_robust_list(0x7f58200ee9a0, 24 [pid 8806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8807] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8808] <... set_robust_list resumed>) = 0 [pid 8806] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8804] <... ioctl resumed>) = 0 [pid 8803] <... openat resumed>) = 4 [pid 8800] <... futex resumed>) = 1 [pid 8799] <... futex resumed>) = 0 [pid 8806] <... futex resumed>) = 0 [pid 8804] close(3 [pid 8803] ioctl(4, LOOP_SET_FD, 3 [pid 8800] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8799] exit_group(0 [pid 8808] rt_sigprocmask(SIG_SETMASK, [], [pid 8806] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8799] <... exit_group resumed>) = ? [pid 8808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8808] memfd_create("syzkaller", 0 [pid 8800] <... futex resumed>) = ? [pid 8804] <... close resumed>) = 0 [pid 8804] close(4) = 0 [pid 8803] <... ioctl resumed>) = 0 [pid 8800] +++ exited with 0 +++ [pid 8799] +++ exited with 0 +++ [pid 8804] mkdir("./file0", 0777 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8799, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8804] <... mkdir resumed>) = 0 [pid 8808] <... memfd_create resumed>) = 3 [pid 8803] close(3 [pid 5062] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8803] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8803] close(4 [pid 5062] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8803] <... close resumed>) = 0 [pid 8808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8803] mkdir("./file0", 0777 [pid 5062] newfstatat(3, "", [pid 8808] <... mmap resumed>) = 0x7f5817c00000 [pid 8803] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 327.585503][ T8804] loop4: detected capacity change from 0 to 4096 [ 327.594995][ T8803] loop0: detected capacity change from 0 to 4096 [pid 8804] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8803] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./370/binderfs" [pid 8807] <... write resumed>) = 2097152 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8807] munmap(0x7f5817c00000, 138412032 [pid 5062] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./370/file0", [pid 8807] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 327.630311][ T8803] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 327.639567][ T8804] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8807] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5062] <... openat resumed>) = 4 [pid 8807] ioctl(4, LOOP_SET_FD, 3 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./370/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./370") = 0 [pid 5062] mkdir("./371", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8807] <... ioctl resumed>) = 0 [pid 8807] close(3) = 0 [pid 8807] close(4) = 0 [pid 8807] mkdir("./file0", 0777) = 0 [pid 8808] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8807] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8803] <... mount resumed>) = 0 [ 327.673838][ T8807] loop2: detected capacity change from 0 to 4096 [pid 8803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8803] chdir("./file0") = 0 [pid 8803] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8803] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8803] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8801] <... futex resumed>) = 0 [pid 8801] exit_group(0 [pid 8803] <... futex resumed>) = ? [pid 8801] <... exit_group resumed>) = ? [pid 8803] +++ exited with 0 +++ [pid 8801] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8801, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./374/binderfs", [pid 8804] <... mount resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./374/binderfs") = 0 [ 327.717830][ T8807] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5059] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8804] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8804] chdir("./file0") = 0 [pid 5059] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8804] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./374/file0", [pid 8804] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8804] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8804] <... futex resumed>) = 1 [pid 8802] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8809 attached [pid 8808] <... write resumed>) = 2097152 [pid 8804] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8802] exit_group(0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8809 [pid 8809] set_robust_list(0x5555567436a0, 24 [pid 8802] <... exit_group resumed>) = ? [pid 5059] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8809] <... set_robust_list resumed>) = 0 [pid 8804] <... futex resumed>) = ? [pid 8809] chdir("./371" [pid 8808] munmap(0x7f5817c00000, 138412032 [pid 5059] <... openat resumed>) = 4 [pid 8809] <... chdir resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 8809] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8809] <... prctl resumed>) = 0 [pid 8807] <... mount resumed>) = 0 [pid 5059] getdents64(4, [pid 8809] setpgid(0, 0) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8804] +++ exited with 0 +++ [pid 8802] +++ exited with 0 +++ [pid 8809] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8802, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] getdents64(4, [pid 8809] write(3, "1000", 4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8809] <... write resumed>) = 4 [pid 8807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] close(4 [pid 8809] close(3 [pid 8807] <... openat resumed>) = 3 [pid 5063] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 8809] <... close resumed>) = 0 [pid 8808] <... munmap resumed>) = 0 [pid 8807] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./374/file0" [pid 8809] symlink("/dev/binderfs", "./binderfs" [pid 8808] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8807] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... rmdir resumed>) = 0 [pid 8809] <... symlink resumed>) = 0 [pid 8807] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 8807] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8809] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(3 [pid 8809] <... futex resumed>) = 0 [pid 8807] <... futex resumed>) = 1 [pid 8805] <... futex resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 8809] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8807] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8805] exit_group(0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] rmdir("./374" [pid 8809] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8808] <... openat resumed>) = 4 [pid 8807] <... futex resumed>) = ? [pid 8805] <... exit_group resumed>) = ? [pid 5063] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 8809] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8808] ioctl(4, LOOP_SET_FD, 3 [pid 8807] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./375", 0777 [pid 8809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(AT_FDCWD, "./369/binderfs", [pid 5059] <... mkdir resumed>) = 0 [pid 8809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./369/binderfs" [pid 8809] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... unlink resumed>) = 0 [pid 8809] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8809] <... mprotect resumed>) = 0 [pid 8809] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8810]}, 88) = 8810 [pid 8809] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8810 attached NULL, 8) = 0 [pid 8810] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8809] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8810] <... rseq resumed>) = 0 [pid 8809] <... futex resumed>) = 0 [pid 8810] set_robust_list(0x7f58200ee9a0, 24 [pid 8809] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8810] <... set_robust_list resumed>) = 0 [pid 8810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8810] memfd_create("syzkaller", 0) = 3 [pid 8810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8808] <... ioctl resumed>) = 0 [pid 8805] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8805, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8808] close(3 [pid 5063] newfstatat(AT_FDCWD, "./369/file0", [pid 8808] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8808] close(4 [pid 5063] umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8808] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8808] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8808] <... mkdir resumed>) = 0 [pid 5061] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8808] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [ 327.840096][ T8808] loop1: detected capacity change from 0 to 4096 [pid 5061] newfstatat(3, "", [pid 5063] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./369/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./369") = 0 [pid 5061] getdents64(3, [pid 5063] mkdir("./370", 0777 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5061] unlink("./370/binderfs" [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5061] <... unlink resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] close(3 [pid 5061] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 327.892426][ T8808] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8810] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 8811 attached [pid 8811] set_robust_list(0x5555567436a0, 24) = 0 [pid 8811] chdir("./375" [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8811 [pid 8811] <... chdir resumed>) = 0 [pid 5061] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8811] setpgid(0, 0) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] newfstatat(AT_FDCWD, "./370/file0", [pid 8811] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 8811] write(3, "1000", 4) = 4 [pid 8811] close(3) = 0 [pid 8811] symlink("/dev/binderfs", "./binderfs" [pid 8810] <... write resumed>) = 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8811] <... symlink resumed>) = 0 [pid 5061] getdents64(4, [pid 8811] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8811] <... futex resumed>) = 0 [pid 8811] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8810] munmap(0x7f5817c00000, 138412032 [pid 5061] getdents64(4, [pid 8811] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8811] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5061] close(4 [pid 8811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... close resumed>) = 0 [pid 8811] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] rmdir("./370/file0" [pid 8811] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8811] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... rmdir resumed>) = 0 [pid 8811] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] getdents64(3, [pid 8811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8812]}, 88) = 8812 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8812 attached [pid 8811] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] close(3 [pid 8811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 8812] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8811] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8810] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] rmdir("./370" [pid 8812] <... rseq resumed>) = 0 [pid 8811] <... futex resumed>) = 0 [pid 8810] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3 [pid 8812] set_robust_list(0x7f58200ee9a0, 24 [pid 8811] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... rmdir resumed>) = 0 [pid 8812] <... set_robust_list resumed>) = 0 [pid 8812] rt_sigprocmask(SIG_SETMASK, [], [pid 8810] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 8812] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8810] ioctl(4, LOOP_SET_FD, 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] mkdir("./371", 0777./strace-static-x86_64: Process 8813 attached ) = 0 [pid 8813] set_robust_list(0x5555567436a0, 24 [pid 8812] memfd_create("syzkaller", 0 [pid 8808] <... mount resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8813 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8813] <... set_robust_list resumed>) = 0 [pid 8812] <... memfd_create resumed>) = 3 [pid 8808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 8813] chdir("./370" [pid 8812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8810] <... ioctl resumed>) = 0 [pid 8808] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8813] <... chdir resumed>) = 0 [pid 8812] <... mmap resumed>) = 0x7f5817c00000 [pid 8810] close(3 [pid 8808] chdir("./file0" [pid 8813] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8810] <... close resumed>) = 0 [pid 8808] <... chdir resumed>) = 0 [pid 8813] <... prctl resumed>) = 0 [pid 8810] close(4 [pid 8808] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8813] setpgid(0, 0 [pid 8810] <... close resumed>) = 0 [pid 8808] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8813] <... setpgid resumed>) = 0 [pid 8810] mkdir("./file0", 0777 [pid 8808] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8810] <... mkdir resumed>) = 0 [pid 8808] <... futex resumed>) = 1 [pid 8806] <... futex resumed>) = 0 [pid 8808] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8806] exit_group(0) = ? [ 328.056663][ T8810] loop3: detected capacity change from 0 to 4096 [pid 8813] <... openat resumed>) = 3 [pid 8808] <... futex resumed>) = ? [pid 8813] write(3, "1000", 4 [pid 8810] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8808] +++ exited with 0 +++ [pid 8806] +++ exited with 0 +++ [pid 8813] <... write resumed>) = 4 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8806, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5060] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8813] <... close resumed>) = 0 [pid 8813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] getdents64(3, [pid 8813] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8813] <... futex resumed>) = 0 [pid 5060] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./375/binderfs" [pid 8813] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8813] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... unlink resumed>) = 0 [pid 8813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8813] <... mmap resumed>) = 0x7f58200ce000 [pid 8812] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8813] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = 0 [pid 8813] <... mprotect resumed>) = 0 [ 328.122772][ T8810] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5060] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8814 attached [pid 8813] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8814] set_robust_list(0x5555567436a0, 24 [pid 8813] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8814 [pid 5060] newfstatat(AT_FDCWD, "./375/file0", [pid 8814] <... set_robust_list resumed>) = 0 [pid 8813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 8815 attached [pid 8814] chdir("./371") = 0 [pid 5060] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8814] setpgid(0, 0) = 0 [pid 8814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8815] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8813] <... clone3 resumed> => {parent_tid=[8815]}, 88) = 8815 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8815] <... rseq resumed>) = 0 [pid 8813] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8815] set_robust_list(0x7f58200ee9a0, 24 [pid 8813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8815] <... set_robust_list resumed>) = 0 [pid 8814] <... openat resumed>) = 3 [pid 8813] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... openat resumed>) = 4 [pid 8815] rt_sigprocmask(SIG_SETMASK, [], [pid 8813] <... futex resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 8814] write(3, "1000", 4) = 4 [pid 8815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8814] close(3 [pid 8813] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8810] <... mount resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8814] <... close resumed>) = 0 [pid 8814] symlink("/dev/binderfs", "./binderfs" [pid 8815] memfd_create("syzkaller", 0 [pid 8814] <... symlink resumed>) = 0 [pid 8810] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] getdents64(4, [pid 8814] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] <... write resumed>) = 2097152 [pid 8810] <... openat resumed>) = 3 [pid 8814] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8810] chdir("./file0" [pid 5060] getdents64(4, [pid 8814] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8810] <... chdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8815] <... memfd_create resumed>) = 3 [pid 8814] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8810] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] close(4 [pid 8815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8810] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... close resumed>) = 0 [pid 8815] <... mmap resumed>) = 0x7f5817c00000 [pid 8814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8810] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./375/file0" [pid 8814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8812] munmap(0x7f5817c00000, 138412032 [pid 8814] <... mmap resumed>) = 0x7f58200ce000 [pid 8814] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8810] <... futex resumed>) = 1 [pid 8809] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8814] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8810] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8809] exit_group(0 [pid 5060] getdents64(3, [pid 8814] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8810] <... futex resumed>) = ? [pid 8809] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8810] +++ exited with 0 +++ [pid 5060] close(3) = 0 [pid 8814] <... clone3 resumed> => {parent_tid=[8816]}, 88) = 8816 [pid 5060] rmdir("./375"./strace-static-x86_64: Process 8816 attached [pid 8814] rt_sigprocmask(SIG_SETMASK, [], [pid 8812] <... munmap resumed>) = 0 [pid 8809] +++ exited with 0 +++ [pid 8814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8816] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8809, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5060] <... rmdir resumed>) = 0 [pid 8816] <... rseq resumed>) = 0 [pid 8814] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5060] mkdir("./376", 0777 [pid 8816] set_robust_list(0x7f58200ee9a0, 24 [pid 8814] <... futex resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8816] <... set_robust_list resumed>) = 0 [pid 8814] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8812] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... mkdir resumed>) = 0 [pid 8816] rt_sigprocmask(SIG_SETMASK, [], [pid 8812] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8812] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 8816] memfd_create("syzkaller", 0 [pid 5062] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./371/binderfs") = 0 [pid 5062] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8816] <... memfd_create resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8812] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8812] close(3) = 0 [pid 5062] newfstatat(4, "", [pid 8812] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8812] <... close resumed>) = 0 [pid 8812] mkdir("./file0", 0777) = 0 [pid 5062] getdents64(4, [pid 8815] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8812] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [ 328.264210][ T8812] loop0: detected capacity change from 0 to 4096 [pid 5062] close(4) = 0 [pid 5062] rmdir("./371/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./371") = 0 [pid 5062] mkdir("./372", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [ 328.311800][ T8812] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8816] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8815] <... write resumed>) = 2097152 [pid 8815] munmap(0x7f5817c00000, 138412032 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8817 ./strace-static-x86_64: Process 8817 attached [pid 8815] <... munmap resumed>) = 0 [pid 8817] set_robust_list(0x5555567436a0, 24 [pid 8815] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8817] <... set_robust_list resumed>) = 0 [pid 8815] <... openat resumed>) = 4 [pid 5062] <... ioctl resumed>) = 0 [pid 8817] chdir("./376" [pid 8815] ioctl(4, LOOP_SET_FD, 3 [pid 8817] <... chdir resumed>) = 0 [pid 8817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8815] <... ioctl resumed>) = 0 [pid 8815] close(3 [pid 8817] setpgid(0, 0 [pid 8815] <... close resumed>) = 0 [pid 5062] close(3 [pid 8817] <... setpgid resumed>) = 0 [pid 8815] close(4 [pid 8817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... close resumed>) = 0 [pid 8815] <... close resumed>) = 0 [pid 8817] <... openat resumed>) = 3 [pid 8816] <... write resumed>) = 2097152 [pid 8815] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8817] write(3, "1000", 4) = 4 [pid 8815] <... mkdir resumed>) = 0 [pid 8817] close(3 [pid 8815] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8817] <... close resumed>) = 0 [pid 8817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8818 [ 328.441563][ T8815] loop4: detected capacity change from 0 to 4096 [pid 8816] munmap(0x7f5817c00000, 138412032./strace-static-x86_64: Process 8818 attached [pid 8817] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8818] set_robust_list(0x5555567436a0, 24 [pid 8817] <... futex resumed>) = 0 [pid 8812] <... mount resumed>) = 0 [pid 8818] <... set_robust_list resumed>) = 0 [pid 8817] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8812] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8818] chdir("./372" [pid 8817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8812] <... openat resumed>) = 3 [pid 8817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8818] <... chdir resumed>) = 0 [pid 8817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8817] <... mmap resumed>) = 0x7f58200ce000 [pid 8812] chdir("./file0" [pid 8818] setpgid(0, 0 [pid 8817] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8812] <... chdir resumed>) = 0 [pid 8812] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8818] <... setpgid resumed>) = 0 [pid 8817] <... mprotect resumed>) = 0 [pid 8812] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8817] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8812] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8818] <... openat resumed>) = 3 [pid 8817] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8812] <... futex resumed>) = 1 [pid 8818] write(3, "1000", 4 [pid 8817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8816] <... munmap resumed>) = 0 [pid 8812] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] <... write resumed>) = 4 [pid 8816] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 8819 attached [pid 8818] close(3 [pid 8817] <... clone3 resumed> => {parent_tid=[8819]}, 88) = 8819 [pid 8816] <... openat resumed>) = 4 [pid 8819] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8818] <... close resumed>) = 0 [pid 8817] rt_sigprocmask(SIG_SETMASK, [], [pid 8816] ioctl(4, LOOP_SET_FD, 3 [pid 8819] <... rseq resumed>) = 0 [pid 8818] symlink("/dev/binderfs", "./binderfs" [pid 8817] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 328.486889][ T8815] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8819] set_robust_list(0x7f58200ee9a0, 24 [pid 8818] <... symlink resumed>) = 0 [pid 8817] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8815] <... mount resumed>) = 0 [pid 8811] <... futex resumed>) = 0 [pid 8819] <... set_robust_list resumed>) = 0 [pid 8818] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8817] <... futex resumed>) = 0 [pid 8811] exit_group(0 [pid 8819] rt_sigprocmask(SIG_SETMASK, [], [pid 8818] <... futex resumed>) = 0 [pid 8817] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8811] <... exit_group resumed>) = ? [pid 8819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8818] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8812] <... futex resumed>) = ? [pid 8819] memfd_create("syzkaller", 0 [pid 8818] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8815] <... openat resumed>) = 3 [pid 8812] +++ exited with 0 +++ [pid 8811] +++ exited with 0 +++ [pid 8819] <... memfd_create resumed>) = 3 [pid 8818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8815] chdir("./file0" [pid 8819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8815] <... chdir resumed>) = 0 [pid 8815] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8811, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8819] <... mmap resumed>) = 0x7f5817c00000 [pid 8818] <... mmap resumed>) = 0x7f58200ce000 [pid 8815] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8816] <... ioctl resumed>) = 0 [pid 8818] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8815] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8818] <... mprotect resumed>) = 0 [pid 8816] close(3 [pid 8815] <... futex resumed>) = 1 [pid 8813] <... futex resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8815] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8816] <... close resumed>) = 0 [pid 8813] exit_group(0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8818] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8816] close(4 [pid 8815] <... futex resumed>) = ? [pid 8813] <... exit_group resumed>) = ? [pid 5059] getdents64(3, [pid 8818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8816] <... close resumed>) = 0 [pid 8816] mkdir("./file0", 0777 [pid 8815] +++ exited with 0 +++ [pid 8816] <... mkdir resumed>) = 0 [pid 8818] <... clone3 resumed> => {parent_tid=[8820]}, 88) = 8820 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8818] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8820 attached NULL, 8) = 0 [ 328.527891][ T8816] loop2: detected capacity change from 0 to 4096 [pid 8820] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8818] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8816] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8820] <... rseq resumed>) = 0 [pid 8818] <... futex resumed>) = 0 [pid 8813] +++ exited with 0 +++ [pid 5059] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8813, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8818] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] newfstatat(AT_FDCWD, "./375/binderfs", [pid 8820] set_robust_list(0x7f58200ee9a0, 24 [pid 5063] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8820] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./375/binderfs" [pid 8820] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... unlink resumed>) = 0 [pid 8820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8820] memfd_create("syzkaller", 0) = 3 [pid 8820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8819] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./370/binderfs", [ 328.579551][ T8816] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5059] newfstatat(AT_FDCWD, "./375/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./370/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8820] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(4, "", [pid 5063] newfstatat(AT_FDCWD, "./370/file0", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, [pid 5063] umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] getdents64(4, [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5059] close(4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] close(4 [pid 5059] rmdir("./375/file0" [pid 5063] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] rmdir("./370/file0") = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./370" [pid 8816] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5063] mkdir("./371", 0777 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8816] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8816] chdir("./file0") = 0 [pid 8816] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8816] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8816] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8814] <... futex resumed>) = 0 [pid 8814] exit_group(0 [pid 8816] <... futex resumed>) = ? [pid 8814] <... exit_group resumed>) = ? [pid 8819] <... write resumed>) = 2097152 [pid 8816] +++ exited with 0 +++ [pid 8814] +++ exited with 0 +++ [pid 5059] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8814, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8819] munmap(0x7f5817c00000, 138412032 [pid 5063] <... openat resumed>) = 3 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... restart_syscall resumed>) = 0 [pid 5059] rmdir("./375") = 0 [pid 5059] mkdir("./376", 0777 [pid 5061] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8820] <... write resumed>) = 2097152 [pid 5061] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8819] <... munmap resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5059] <... openat resumed>) = 3 [pid 8819] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(3, [pid 8819] <... openat resumed>) = 4 [pid 8819] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8820] munmap(0x7f5817c00000, 138412032 [pid 5061] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8820] <... munmap resumed>) = 0 [pid 5061] unlink("./371/binderfs" [pid 8820] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... unlink resumed>) = 0 [pid 8819] <... ioctl resumed>) = 0 [pid 8820] <... openat resumed>) = 4 [pid 8819] close(3 [pid 5061] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8819] <... close resumed>) = 0 [pid 8820] ioctl(4, LOOP_SET_FD, 3 [pid 8819] close(4) = 0 [pid 8820] <... ioctl resumed>) = 0 [pid 8819] mkdir("./file0", 0777 [pid 5061] <... umount2 resumed>) = 0 [pid 8819] <... mkdir resumed>) = 0 [pid 8820] close(3 [ 328.725404][ T8819] loop1: detected capacity change from 0 to 4096 [ 328.750514][ T8820] loop3: detected capacity change from 0 to 4096 [pid 8819] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8820] <... close resumed>) = 0 [pid 5061] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8820] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... ioctl resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8820] <... close resumed>) = 0 [pid 5061] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8820] mkdir("./file0", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 8820] <... mkdir resumed>) = 0 [pid 8820] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5061] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [ 328.771058][ T8819] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(4, "", ./strace-static-x86_64: Process 8821 attached [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8821 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8821] set_robust_list(0x5555567436a0, 24 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8821] <... set_robust_list resumed>) = 0 [pid 8821] chdir("./376" [pid 5061] getdents64(4, [pid 8821] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 8821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] rmdir("./371/file0" [pid 8821] <... prctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8821] setpgid(0, 0 [pid 5063] close(3 [pid 5061] getdents64(3, [pid 8821] <... setpgid resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] close(3./strace-static-x86_64: Process 8822 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8822 [pid 5061] <... close resumed>) = 0 [pid 8822] set_robust_list(0x5555567436a0, 24 [pid 8821] <... openat resumed>) = 3 [pid 5061] rmdir("./371" [pid 8822] <... set_robust_list resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8822] chdir("./371") = 0 [pid 8821] write(3, "1000", 4 [pid 8822] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8821] <... write resumed>) = 4 [pid 8822] <... prctl resumed>) = 0 [pid 8821] close(3 [pid 8822] setpgid(0, 0 [pid 8821] <... close resumed>) = 0 [pid 5061] mkdir("./372", 0777 [pid 8821] symlink("/dev/binderfs", "./binderfs") = 0 [ 328.812720][ T8820] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5061] <... mkdir resumed>) = 0 [pid 8822] <... setpgid resumed>) = 0 [pid 8821] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8819] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8821] <... futex resumed>) = 0 [pid 8819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8822] <... openat resumed>) = 3 [pid 8821] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8819] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8822] write(3, "1000", 4 [pid 8821] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8819] chdir("./file0" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8822] <... write resumed>) = 4 [pid 8821] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8819] <... chdir resumed>) = 0 [pid 8821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8819] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8822] close(3 [pid 8821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8819] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8822] <... close resumed>) = 0 [pid 8821] <... mmap resumed>) = 0x7f58200ce000 [pid 8819] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8822] symlink("/dev/binderfs", "./binderfs" [pid 8821] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8819] <... futex resumed>) = 1 [pid 8817] <... futex resumed>) = 0 [pid 8822] <... symlink resumed>) = 0 [pid 8821] <... mprotect resumed>) = 0 [pid 8822] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8821] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8819] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8817] exit_group(0 [pid 8822] <... futex resumed>) = 0 [pid 8821] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8819] <... futex resumed>) = ? [pid 8817] <... exit_group resumed>) = ? [pid 8822] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8821] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8820] <... mount resumed>) = 0 [pid 8819] +++ exited with 0 +++ [pid 8817] +++ exited with 0 +++ [pid 8822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8817, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5060] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8822] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8822] <... mprotect resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8822] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... openat resumed>) = 3 [pid 8822] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] newfstatat(3, "", [pid 8822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8823 attached [pid 5060] getdents64(3, [pid 8823] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8822] <... clone3 resumed> => {parent_tid=[8823]}, 88) = 8823 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8823] <... rseq resumed>) = 0 [pid 8822] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8823] set_robust_list(0x7f58200ee9a0, 24 [pid 8822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8823] <... set_robust_list resumed>) = 0 [pid 8822] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./376/binderfs", ./strace-static-x86_64: Process 8824 attached [pid 8823] rt_sigprocmask(SIG_SETMASK, [], [pid 8822] <... futex resumed>) = 0 [pid 8821] <... clone3 resumed> => {parent_tid=[8824]}, 88) = 8824 [pid 8820] <... openat resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8820] chdir("./file0" [pid 8822] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8820] <... chdir resumed>) = 0 [pid 8820] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] unlink("./376/binderfs" [pid 8820] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8824] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8823] memfd_create("syzkaller", 0 [pid 8821] rt_sigprocmask(SIG_SETMASK, [], [pid 8820] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(3 [pid 5060] <... unlink resumed>) = 0 [pid 8821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8820] <... futex resumed>) = 1 [pid 8818] <... futex resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8821] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] exit_group(0 [pid 8821] <... futex resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8821] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8820] <... futex resumed>) = ? [pid 8818] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8825 attached [pid 8824] <... rseq resumed>) = 0 [pid 8823] <... memfd_create resumed>) = 3 [pid 8820] +++ exited with 0 +++ [pid 5060] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8824] set_robust_list(0x7f58200ee9a0, 24 [pid 8823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8824] <... set_robust_list resumed>) = 0 [pid 8823] <... mmap resumed>) = 0x7f5817c00000 [pid 8824] rt_sigprocmask(SIG_SETMASK, [], [pid 8818] +++ exited with 0 +++ [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8825 [pid 8825] set_robust_list(0x5555567436a0, 24 [pid 8824] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8818, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8825] <... set_robust_list resumed>) = 0 [pid 8824] memfd_create("syzkaller", 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8825] chdir("./372" [pid 8824] <... memfd_create resumed>) = 3 [pid 8825] <... chdir resumed>) = 0 [pid 8824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8824] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] <... prctl resumed>) = 0 [pid 8825] setpgid(0, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8825] <... setpgid resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./376/file0", [pid 5062] newfstatat(3, "", [pid 8825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(3, [pid 8825] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] write(3, "1000", 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8825] <... write resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8825] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 4 [pid 8825] <... close resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 8825] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8825] <... symlink resumed>) = 0 [pid 8823] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(4, [pid 8825] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] unlink("./372/binderfs" [pid 8825] <... futex resumed>) = 0 [pid 8825] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 8825] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8825] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] close(4 [pid 8825] <... mprotect resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8825] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] rmdir("./376/file0" [pid 8825] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5062] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./376" [pid 8825] <... clone3 resumed> => {parent_tid=[8826]}, 88) = 8826 [pid 5062] newfstatat(AT_FDCWD, "./372/file0", [pid 5060] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8826 attached [pid 8825] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] mkdir("./377", 0777 [pid 8826] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8826] <... rseq resumed>) = 0 [pid 8825] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] <... futex resumed>) = 0 [pid 8825] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8826] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8826] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] newfstatat(4, "", [pid 8826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8826] memfd_create("syzkaller", 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8826] <... memfd_create resumed>) = 3 [pid 8826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5062] getdents64(4, [pid 8824] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 8823] <... write resumed>) = 2097152 [pid 5062] rmdir("./372/file0" [pid 8823] munmap(0x7f5817c00000, 138412032 [pid 5062] <... rmdir resumed>) = 0 [pid 8823] <... munmap resumed>) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./372") = 0 [pid 8826] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8824] <... write resumed>) = 2097152 [pid 8823] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] mkdir("./373", 0777 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 8824] munmap(0x7f5817c00000, 138412032 [pid 8823] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8823] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8827 ./strace-static-x86_64: Process 8827 attached [pid 8827] set_robust_list(0x5555567436a0, 24) = 0 [pid 8827] chdir("./377" [pid 8824] <... munmap resumed>) = 0 [pid 8823] <... ioctl resumed>) = 0 [pid 8827] <... chdir resumed>) = 0 [pid 8827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8827] setpgid(0, 0) = 0 [pid 8827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8823] close(3) = 0 [pid 8827] <... openat resumed>) = 3 [pid 8823] close(4 [pid 8827] write(3, "1000", 4 [pid 8826] <... write resumed>) = 2097152 [pid 8823] <... close resumed>) = 0 [pid 8827] <... write resumed>) = 4 [pid 8823] mkdir("./file0", 0777) = 0 [pid 8823] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8827] close(3 [pid 8826] munmap(0x7f5817c00000, 138412032 [ 329.135507][ T8823] loop4: detected capacity change from 0 to 4096 [pid 8824] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8827] <... close resumed>) = 0 [pid 8827] symlink("/dev/binderfs", "./binderfs" [pid 8826] <... munmap resumed>) = 0 [pid 8824] <... openat resumed>) = 4 [pid 5062] <... ioctl resumed>) = 0 [pid 8827] <... symlink resumed>) = 0 [pid 8824] ioctl(4, LOOP_SET_FD, 3 [pid 8826] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(3 [pid 8827] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] <... close resumed>) = 0 [pid 8827] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8826] <... openat resumed>) = 4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8827] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8828 ./strace-static-x86_64: Process 8828 attached [pid 8827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8826] ioctl(4, LOOP_SET_FD, 3 [pid 8828] set_robust_list(0x5555567436a0, 24 [pid 8827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8828] <... set_robust_list resumed>) = 0 [pid 8828] chdir("./373") = 0 [pid 8828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8824] <... ioctl resumed>) = 0 [pid 8828] <... prctl resumed>) = 0 [pid 8828] setpgid(0, 0) = 0 [pid 8828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8827] <... clone3 resumed> => {parent_tid=[8829]}, 88) = 8829 [pid 8824] close(3 [pid 8828] write(3, "1000", 4 [pid 8827] rt_sigprocmask(SIG_SETMASK, [], [pid 8824] <... close resumed>) = 0 ./strace-static-x86_64: Process 8829 attached [pid 8828] <... write resumed>) = 4 [pid 8827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8826] <... ioctl resumed>) = 0 [pid 8824] close(4 [pid 8827] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8826] close(3 [pid 8824] <... close resumed>) = 0 [pid 8826] <... close resumed>) = 0 [pid 8826] close(4 [pid 8829] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8828] close(3) = 0 [pid 8829] set_robust_list(0x7f58200ee9a0, 24 [pid 8828] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8829] <... set_robust_list resumed>) = 0 [pid 8829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8829] memfd_create("syzkaller", 0 [pid 8827] <... futex resumed>) = 0 [pid 8826] <... close resumed>) = 0 [pid 8824] mkdir("./file0", 0777 [pid 8827] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8826] mkdir("./file0", 0777 [pid 8829] <... memfd_create resumed>) = 3 [pid 8828] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8826] <... mkdir resumed>) = 0 [pid 8829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8828] <... futex resumed>) = 0 [pid 8829] <... mmap resumed>) = 0x7f5817c00000 [pid 8828] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8824] <... mkdir resumed>) = 0 [pid 8826] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8828] <... rt_sigaction resumed>NULL, 8) = 0 [ 329.180666][ T8823] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 329.191783][ T8824] loop0: detected capacity change from 0 to 4096 [ 329.206820][ T8826] loop2: detected capacity change from 0 to 4096 [pid 8828] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8828] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8828] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8830]}, 88) = 8830 ./strace-static-x86_64: Process 8830 attached [pid 8828] rt_sigprocmask(SIG_SETMASK, [], [pid 8824] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8830] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8830] <... rseq resumed>) = 0 [pid 8828] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8830] set_robust_list(0x7f58200ee9a0, 24 [pid 8828] <... futex resumed>) = 0 [pid 8828] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8830] <... set_robust_list resumed>) = 0 [pid 8830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8830] memfd_create("syzkaller", 0) = 3 [pid 8830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8823] <... mount resumed>) = 0 [ 329.254719][ T8826] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 329.281202][ T8824] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8823] chdir("./file0") = 0 [pid 8823] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8823] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8824] <... mount resumed>) = 0 [pid 8823] <... futex resumed>) = 1 [pid 8822] <... futex resumed>) = 0 [pid 8822] exit_group(0) = ? [pid 8824] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8826] <... mount resumed>) = 0 [pid 8824] <... openat resumed>) = 3 [pid 8823] +++ exited with 0 +++ [pid 8822] +++ exited with 0 +++ [pid 8826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8824] chdir("./file0" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8822, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8830] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8826] <... openat resumed>) = 3 [pid 8824] <... chdir resumed>) = 0 [pid 5063] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./371/binderfs") = 0 [pid 5063] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] chdir("./file0" [pid 8824] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 8826] <... chdir resumed>) = 0 [pid 8824] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8826] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8824] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8824] <... futex resumed>) = 1 [pid 8821] <... futex resumed>) = 0 [pid 8824] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8821] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8821] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./371/file0", [pid 8829] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8826] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8824] <... futex resumed>) = ? [pid 8826] <... futex resumed>) = 1 [pid 8826] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8825] <... futex resumed>) = 0 [pid 8824] +++ exited with 0 +++ [pid 8821] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8821, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] exit_group(0 [pid 5063] openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 8826] <... futex resumed>) = ? [pid 8825] <... exit_group resumed>) = ? [pid 5063] newfstatat(4, "", [pid 5059] newfstatat(3, "", [pid 8826] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(3, [pid 5063] getdents64(4, [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./371/file0" [pid 5059] newfstatat(AT_FDCWD, "./376/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8825] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] unlink("./376/binderfs" [pid 5063] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8825, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./371") = 0 [pid 5061] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./372", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8830] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8830] munmap(0x7f5817c00000, 138412032 [pid 5059] <... umount2 resumed>) = 0 [pid 5061] unlink("./372/binderfs" [pid 5059] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./376/file0", [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./372/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 4 [pid 8830] <... munmap resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 8830] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8830] <... openat resumed>) = 4 [pid 5061] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8830] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8830] <... ioctl resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5059] getdents64(4, [pid 8830] close(3 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8830] <... close resumed>) = 0 [pid 5059] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 8830] close(4 [pid 5059] rmdir("./376/file0" [pid 5061] close(4) = 0 [pid 5061] rmdir("./372/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./372") = 0 [pid 5061] mkdir("./373", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... rmdir resumed>) = 0 [pid 8830] <... close resumed>) = 0 [pid 8830] mkdir("./file0", 0777 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./376" [pid 8830] <... mkdir resumed>) = 0 [pid 8829] <... write resumed>) = 2097152 [pid 8830] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8829] munmap(0x7f5817c00000, 138412032) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8829] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] mkdir("./377", 0777 [pid 8829] <... openat resumed>) = 4 [pid 8829] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... mkdir resumed>) = 0 [ 329.442513][ T8830] loop3: detected capacity change from 0 to 4096 [ 329.479931][ T8830] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5063] <... ioctl resumed>) = 0 [pid 8829] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8829] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8829] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8829] close(4) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8831 [pid 5061] close(3 [pid 8829] mkdir("./file0", 0777./strace-static-x86_64: Process 8831 attached [pid 8831] set_robust_list(0x5555567436a0, 24) = 0 [pid 8831] chdir("./372" [pid 8829] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8832 attached [pid 8831] <... chdir resumed>) = 0 [pid 8829] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8832 [pid 8832] set_robust_list(0x5555567436a0, 24) = 0 [pid 8831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8831] setpgid(0, 0) = 0 [ 329.494569][ T8829] loop1: detected capacity change from 0 to 4096 [pid 8832] chdir("./373" [pid 8831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8831] write(3, "1000", 4) = 4 [pid 8831] close(3) = 0 [pid 8831] symlink("/dev/binderfs", "./binderfs" [pid 8832] <... chdir resumed>) = 0 [pid 8832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8831] <... symlink resumed>) = 0 [pid 8832] <... prctl resumed>) = 0 [pid 8832] setpgid(0, 0 [pid 8831] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8832] <... setpgid resumed>) = 0 [pid 8831] <... futex resumed>) = 0 [pid 8831] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8831] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8832] <... openat resumed>) = 3 [pid 8831] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8832] write(3, "1000", 4) = 4 [pid 8832] close(3) = 0 [pid 8831] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8832] symlink("/dev/binderfs", "./binderfs" [pid 8831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8833 attached [pid 8832] <... symlink resumed>) = 0 [pid 8832] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8833] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8832] <... futex resumed>) = 0 [pid 8831] <... clone3 resumed> => {parent_tid=[8833]}, 88) = 8833 [pid 8833] <... rseq resumed>) = 0 [pid 8832] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8831] rt_sigprocmask(SIG_SETMASK, [], [pid 8833] set_robust_list(0x7f58200ee9a0, 24 [pid 8832] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8833] <... set_robust_list resumed>) = 0 [pid 8831] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8832] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 329.551509][ T8829] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8833] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8831] <... futex resumed>) = 0 [pid 8833] memfd_create("syzkaller", 0 [pid 8832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8831] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8830] <... mount resumed>) = 0 [pid 8829] <... mount resumed>) = 0 [pid 8832] <... mmap resumed>) = 0x7f58200ce000 [pid 8830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8832] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8830] <... openat resumed>) = 3 [pid 8829] <... openat resumed>) = 3 [pid 8830] chdir("./file0" [pid 8832] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8830] <... chdir resumed>) = 0 [pid 8829] chdir("./file0" [pid 8833] <... memfd_create resumed>) = 3 [pid 8832] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8830] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8829] <... chdir resumed>) = 0 [pid 8833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8832] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8830] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8833] <... mmap resumed>) = 0x7f5817c00000 [pid 8830] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 8834 attached [pid 8834] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8832] <... clone3 resumed> => {parent_tid=[8834]}, 88) = 8834 [pid 8829] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8834] <... rseq resumed>) = 0 [pid 8832] rt_sigprocmask(SIG_SETMASK, [], [pid 8829] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8834] set_robust_list(0x7f58200ee9a0, 24 [pid 8832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8834] <... set_robust_list resumed>) = 0 [pid 8832] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] <... futex resumed>) = 1 [pid 8827] <... futex resumed>) = 0 [pid 8834] rt_sigprocmask(SIG_SETMASK, [], [pid 8832] <... futex resumed>) = 0 [pid 8829] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8827] exit_group(0 [pid 8832] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8827] <... exit_group resumed>) = ? [pid 8829] <... futex resumed>) = ? [pid 8834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8830] <... futex resumed>) = 1 [pid 8829] +++ exited with 0 +++ [pid 8828] <... futex resumed>) = 0 [pid 8830] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8828] exit_group(0 [pid 8830] <... futex resumed>) = ? [pid 8828] <... exit_group resumed>) = ? [pid 8830] +++ exited with 0 +++ [pid 8828] +++ exited with 0 +++ [pid 8827] +++ exited with 0 +++ [pid 5059] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8828, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8834] memfd_create("syzkaller", 0 [pid 5059] close(3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8827, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8834] <... memfd_create resumed>) = 3 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... close resumed>) = 0 [pid 8834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8835 attached [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8835 [pid 8834] <... mmap resumed>) = 0x7f5817c00000 [pid 8835] set_robust_list(0x5555567436a0, 24 [pid 5062] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8835] <... set_robust_list resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8835] chdir("./377" [pid 5062] newfstatat(3, "", [pid 5060] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", [pid 5062] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8835] <... chdir resumed>) = 0 [pid 8833] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] getdents64(3, [pid 8835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8834] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8835] <... prctl resumed>) = 0 [pid 5062] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8835] setpgid(0, 0 [pid 5060] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5062] newfstatat(AT_FDCWD, "./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./377/binderfs" [pid 8835] <... setpgid resumed>) = 0 [pid 8835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./373/binderfs") = 0 [pid 8835] <... openat resumed>) = 3 [pid 5062] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8835] write(3, "1000", 4) = 4 [pid 8835] close(3 [pid 8833] <... write resumed>) = 2097152 [pid 5060] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8833] munmap(0x7f5817c00000, 138412032 [pid 8835] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8835] symlink("/dev/binderfs", "./binderfs" [pid 8834] <... write resumed>) = 2097152 [pid 8833] <... munmap resumed>) = 0 [pid 5062] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./377/file0", [pid 8833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8835] <... symlink resumed>) = 0 [pid 8834] munmap(0x7f5817c00000, 138412032 [pid 8833] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8835] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8833] ioctl(4, LOOP_SET_FD, 3 [pid 5062] newfstatat(AT_FDCWD, "./373/file0", [pid 8835] <... futex resumed>) = 0 [pid 8834] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8835] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8835] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8833] <... ioctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8833] close(3 [pid 5062] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8833] <... close resumed>) = 0 [pid 8835] <... mprotect resumed>) = 0 [pid 8834] <... openat resumed>) = 4 [pid 8833] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 4 [pid 8834] ioctl(4, LOOP_SET_FD, 3 [pid 8833] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(4, "", [pid 8835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, ./strace-static-x86_64: Process 8836 attached [pid 8835] <... clone3 resumed> => {parent_tid=[8836]}, 88) = 8836 [pid 8836] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8835] rt_sigprocmask(SIG_SETMASK, [], [pid 8833] mkdir("./file0", 0777 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8836] <... rseq resumed>) = 0 [pid 8835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8834] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8836] set_robust_list(0x7f58200ee9a0, 24 [pid 8835] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, [pid 8836] <... set_robust_list resumed>) = 0 [pid 8835] <... futex resumed>) = 0 [pid 8834] close(3 [pid 8833] <... mkdir resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8836] rt_sigprocmask(SIG_SETMASK, [], [pid 8835] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8834] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8834] close(4 [pid 5062] getdents64(4, [pid 5060] close(4 [pid 8833] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... close resumed>) = 0 [pid 8836] memfd_create("syzkaller", 0 [pid 8834] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] rmdir("./377/file0" [pid 8836] <... memfd_create resumed>) = 3 [pid 8834] mkdir("./file0", 0777 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5062] close(4 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./373/file0" [pid 5060] close(3) = 0 [pid 8836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5060] rmdir("./377" [pid 8834] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] mkdir("./378", 0777 [pid 8834] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 329.737792][ T8833] loop4: detected capacity change from 0 to 4096 [ 329.747974][ T8834] loop2: detected capacity change from 0 to 4096 [ 329.764412][ T8833] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./373") = 0 [pid 5062] mkdir("./374", 0777 [pid 8836] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8833] <... mount resumed>) = 0 [pid 8833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 329.809415][ T8834] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8836] <... write resumed>) = 2097152 [pid 8836] munmap(0x7f5817c00000, 138412032 [pid 8833] chdir("./file0") = 0 [pid 8833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8833] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8833] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8831] <... futex resumed>) = 0 [pid 8836] <... munmap resumed>) = 0 [pid 8831] exit_group(0) = ? [pid 8833] <... futex resumed>) = ? [pid 8833] +++ exited with 0 +++ [pid 8831] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8831, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8836] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 8836] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8836] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5060] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./372/binderfs") = 0 [pid 5063] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8837 attached [pid 8837] set_robust_list(0x5555567436a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8837 [pid 8837] <... set_robust_list resumed>) = 0 [pid 8837] chdir("./378") = 0 [pid 8837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8837] setpgid(0, 0) = 0 [pid 8837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8837] write(3, "1000", 4 [pid 5062] <... ioctl resumed>) = 0 [pid 8837] <... write resumed>) = 4 [pid 8837] close(3 [pid 5062] close(3 [pid 8837] <... close resumed>) = 0 [pid 8836] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8836] close(3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8836] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8836] close(4) = 0 [pid 8837] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8838 attached [pid 8836] mkdir("./file0", 0777 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8838 [pid 8838] set_robust_list(0x5555567436a0, 24 [pid 8837] <... symlink resumed>) = 0 [pid 5063] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8838] <... set_robust_list resumed>) = 0 [pid 8838] chdir("./374" [pid 8837] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8836] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8838] <... chdir resumed>) = 0 [pid 8837] <... futex resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./372/file0", [pid 8838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8837] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8836] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8834] <... mount resumed>) = 0 [pid 8838] <... prctl resumed>) = 0 [pid 8837] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 329.919855][ T8836] loop0: detected capacity change from 0 to 4096 [pid 8838] setpgid(0, 0 [pid 8837] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8838] <... setpgid resumed>) = 0 [pid 8837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8837] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... openat resumed>) = 4 [pid 8838] <... openat resumed>) = 3 [pid 8837] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] newfstatat(4, "", [pid 8838] write(3, "1000", 4 [pid 8837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8838] <... write resumed>) = 4 [pid 5063] getdents64(4, [pid 8838] close(3 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8838] <... close resumed>) = 0 [pid 8837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8838] symlink("/dev/binderfs", "./binderfs" [pid 8837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] getdents64(4, [pid 8838] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8839 attached [pid 8839] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8837] <... clone3 resumed> => {parent_tid=[8839]}, 88) = 8839 [pid 5063] close(4 [pid 8839] <... rseq resumed>) = 0 [pid 8838] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8837] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... close resumed>) = 0 [pid 8839] set_robust_list(0x7f58200ee9a0, 24 [pid 8838] <... futex resumed>) = 0 [pid 8837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./372/file0" [pid 8839] <... set_robust_list resumed>) = 0 [pid 8838] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8837] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 8834] <... openat resumed>) = 3 [pid 8839] rt_sigprocmask(SIG_SETMASK, [], [pid 8838] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8837] <... futex resumed>) = 0 [pid 8834] chdir("./file0" [pid 8839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8839] memfd_create("syzkaller", 0 [pid 8838] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8837] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8834] <... chdir resumed>) = 0 [pid 5063] getdents64(3, [pid 8834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8834] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8834] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8838] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8838] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] close(3 [pid 8838] <... mprotect resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8838] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] rmdir("./372" [pid 8839] <... memfd_create resumed>) = 3 [pid 8838] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8834] <... futex resumed>) = 1 [pid 8832] <... futex resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8834] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8832] exit_group(0 [pid 5063] mkdir("./373", 0777./strace-static-x86_64: Process 8840 attached [pid 8839] <... mmap resumed>) = 0x7f5817c00000 [pid 8834] <... futex resumed>) = ? [pid 8832] <... exit_group resumed>) = ? [pid 8840] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8838] <... clone3 resumed> => {parent_tid=[8840]}, 88) = 8840 [pid 8840] set_robust_list(0x7f58200ee9a0, 24 [pid 8838] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8840] <... set_robust_list resumed>) = 0 [pid 8838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8834] +++ exited with 0 +++ [pid 8832] +++ exited with 0 +++ [pid 8840] rt_sigprocmask(SIG_SETMASK, [], [pid 8838] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 8840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8832, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8840] memfd_create("syzkaller", 0 [pid 8838] <... futex resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8838] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8840] <... memfd_create resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] newfstatat(3, "", [pid 8840] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 329.975193][ T8836] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8839] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8836] <... mount resumed>) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./373/binderfs", [pid 8836] chdir("./file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8836] <... chdir resumed>) = 0 [pid 8836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] unlink("./373/binderfs") = 0 [pid 5061] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8836] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8835] <... futex resumed>) = 0 [pid 8835] exit_group(0 [pid 8836] ???() = ? [pid 8835] <... exit_group resumed>) = ? [pid 8836] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 8835] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8835, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5059] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8840] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] newfstatat(AT_FDCWD, "./373/file0", [pid 5059] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(3, "", [pid 5061] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(3, [pid 5061] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(4, "", [pid 5059] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5059] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./377/binderfs" [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8839] <... write resumed>) = 2097152 [pid 5061] close(4 [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./373/file0" [pid 8839] munmap(0x7f5817c00000, 138412032 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5059] newfstatat(AT_FDCWD, "./377/file0", [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./373") = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] mkdir("./374", 0777) = 0 [pid 5059] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 8840] <... write resumed>) = 2097152 [pid 8839] <... munmap resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8840] munmap(0x7f5817c00000, 138412032 [pid 8839] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] close(3 [pid 5059] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8839] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8839] ioctl(4, LOOP_SET_FD, 3 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./377/file0" [pid 8840] <... munmap resumed>) = 0 [pid 8839] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8841 attached [pid 8840] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 8840] <... openat resumed>) = 4 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./377" [pid 8840] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./378", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8839] close(3) = 0 [pid 8839] close(4) = 0 [pid 8839] mkdir("./file0", 0777) = 0 [pid 8839] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8841] set_robust_list(0x5555567436a0, 24) = 0 [pid 8841] chdir("./373" [pid 8840] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8841 [pid 5061] <... ioctl resumed>) = 0 [pid 8841] <... chdir resumed>) = 0 [pid 8840] close(3 [pid 8841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8840] <... close resumed>) = 0 [pid 5061] close(3 [pid 8840] close(4 [pid 8841] <... prctl resumed>) = 0 [pid 8841] setpgid(0, 0 [pid 8840] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8841] <... setpgid resumed>) = 0 [pid 8840] mkdir("./file0", 0777 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8840] <... mkdir resumed>) = 0 [pid 8841] <... openat resumed>) = 3 [pid 8840] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8842 ./strace-static-x86_64: Process 8842 attached [pid 8842] set_robust_list(0x5555567436a0, 24 [pid 8841] write(3, "1000", 4) = 4 [ 330.154523][ T8839] loop1: detected capacity change from 0 to 4096 [ 330.166759][ T8840] loop3: detected capacity change from 0 to 4096 [ 330.172671][ T8839] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8841] close(3 [pid 8842] <... set_robust_list resumed>) = 0 [pid 8842] chdir("./374") = 0 [pid 8842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8842] setpgid(0, 0) = 0 [pid 8842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8841] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8842] <... openat resumed>) = 3 [pid 8842] write(3, "1000", 4) = 4 [pid 8842] close(3 [pid 8839] <... mount resumed>) = 0 [pid 8842] <... close resumed>) = 0 [pid 8841] symlink("/dev/binderfs", "./binderfs" [pid 8839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8842] symlink("/dev/binderfs", "./binderfs" [pid 8841] <... symlink resumed>) = 0 [pid 8839] <... openat resumed>) = 3 [pid 8839] chdir("./file0") = 0 [pid 8842] <... symlink resumed>) = 0 [pid 8841] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8839] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8841] <... futex resumed>) = 0 [pid 8841] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8842] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8841] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8839] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8842] <... futex resumed>) = 0 [pid 8841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8839] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 8842] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8839] <... futex resumed>) = 1 [pid 8837] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8842] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8839] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8837] exit_group(0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 8843 attached NULL, 8) = 0 [pid 8841] <... mmap resumed>) = 0x7f58200ce000 [pid 8839] <... futex resumed>) = ? [pid 8837] <... exit_group resumed>) = ? [pid 8843] set_robust_list(0x5555567436a0, 24 [pid 8842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8839] +++ exited with 0 +++ [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8843 [pid 8843] <... set_robust_list resumed>) = 0 [pid 8842] <... mmap resumed>) = 0x7f58200ce000 [pid 8841] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8837] +++ exited with 0 +++ [pid 8843] chdir("./378" [pid 8842] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8843] <... chdir resumed>) = 0 [pid 8842] <... mprotect resumed>) = 0 [pid 8841] <... mprotect resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8837, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8840] <... mount resumed>) = 0 [pid 8843] <... prctl resumed>) = 0 [ 330.222253][ T8840] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8842] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8841] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8843] setpgid(0, 0 [pid 8842] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8843] <... setpgid resumed>) = 0 [pid 8842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8841] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8840] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 8844 attached [pid 8843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8841] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8840] <... openat resumed>) = 3 [pid 5060] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8844] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8843] <... openat resumed>) = 3 [pid 8842] <... clone3 resumed> => {parent_tid=[8844]}, 88) = 8844 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8845 attached [pid 8844] <... rseq resumed>) = 0 [pid 8843] write(3, "1000", 4 [pid 8842] rt_sigprocmask(SIG_SETMASK, [], [pid 8840] chdir("./file0" [pid 5060] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8845] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8844] set_robust_list(0x7f58200ee9a0, 24 [pid 8843] <... write resumed>) = 4 [pid 8842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8841] <... clone3 resumed> => {parent_tid=[8845]}, 88) = 8845 [pid 8840] <... chdir resumed>) = 0 [pid 8845] <... rseq resumed>) = 0 [pid 8844] <... set_robust_list resumed>) = 0 [pid 8843] close(3 [pid 8842] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8841] rt_sigprocmask(SIG_SETMASK, [], [pid 8840] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 8845] set_robust_list(0x7f58200ee9a0, 24 [pid 8844] rt_sigprocmask(SIG_SETMASK, [], [pid 8843] <... close resumed>) = 0 [pid 8842] <... futex resumed>) = 0 [pid 8840] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(3, "", [pid 8845] <... set_robust_list resumed>) = 0 [pid 8844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8843] symlink("/dev/binderfs", "./binderfs" [pid 8842] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8845] rt_sigprocmask(SIG_SETMASK, [], [pid 8844] memfd_create("syzkaller", 0 [pid 8843] <... symlink resumed>) = 0 [pid 8841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8840] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] getdents64(3, [pid 8845] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8840] <... futex resumed>) = 1 [pid 8840] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8843] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8844] <... memfd_create resumed>) = 3 [pid 8843] <... futex resumed>) = 0 [pid 8843] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8843] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8838] <... futex resumed>) = 0 [pid 8844] <... mmap resumed>) = 0x7f5817c00000 [pid 8843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8841] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8845] <... futex resumed>) = 0 [pid 8843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8841] <... futex resumed>) = 1 [pid 8841] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8838] exit_group(0 [pid 8845] memfd_create("syzkaller", 0 [pid 5060] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./378/binderfs", [pid 8843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8843] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8843] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] unlink("./378/binderfs" [pid 8843] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... unlink resumed>) = 0 [pid 8845] <... memfd_create resumed>) = 3 [pid 8845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8843] <... clone3 resumed> => {parent_tid=[8846]}, 88) = 8846 ./strace-static-x86_64: Process 8846 attached [pid 8845] <... mmap resumed>) = 0x7f5817c00000 [pid 8843] rt_sigprocmask(SIG_SETMASK, [], [pid 8846] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8838] <... exit_group resumed>) = ? [pid 5060] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8840] <... futex resumed>) = ? [pid 5060] <... umount2 resumed>) = 0 [pid 8840] +++ exited with 0 +++ [pid 8838] +++ exited with 0 +++ [pid 5060] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8846] <... rseq resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8838, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./378/file0", [pid 8846] set_robust_list(0x7f58200ee9a0, 24 [pid 8843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8846] <... set_robust_list resumed>) = 0 [pid 8843] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8846] rt_sigprocmask(SIG_SETMASK, [], [pid 8843] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8846] memfd_create("syzkaller", 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8846] <... memfd_create resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 8846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 4 [pid 8846] <... mmap resumed>) = 0x7f5817c00000 [pid 8845] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8844] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] getdents64(3, [pid 5060] newfstatat(4, "", [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(4, [pid 5062] unlink("./374/binderfs") = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./378/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./378") = 0 [pid 5060] mkdir("./379", 0777 [pid 5062] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 8846] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] newfstatat(AT_FDCWD, "./374/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8845] <... write resumed>) = 2097152 [pid 5062] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8845] munmap(0x7f5817c00000, 138412032 [pid 5062] newfstatat(4, "", [pid 8845] <... munmap resumed>) = 0 [pid 8844] <... write resumed>) = 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8844] munmap(0x7f5817c00000, 138412032 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./374/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./374" [pid 8845] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8846] <... write resumed>) = 2097152 [pid 8844] <... munmap resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8846] munmap(0x7f5817c00000, 138412032 [pid 8845] <... openat resumed>) = 4 [pid 8844] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] mkdir("./375", 0777 [pid 8844] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8844] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... openat resumed>) = 3 [pid 8845] ioctl(4, LOOP_SET_FD, 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8844] <... ioctl resumed>) = 0 [pid 8846] <... munmap resumed>) = 0 [pid 8844] close(3 [pid 8846] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8844] <... close resumed>) = 0 [pid 8846] <... openat resumed>) = 4 [pid 8845] <... ioctl resumed>) = 0 [pid 8844] close(4 [pid 5060] <... ioctl resumed>) = 0 [pid 8846] ioctl(4, LOOP_SET_FD, 3 [pid 8845] close(3 [pid 8844] <... close resumed>) = 0 [pid 5060] close(3 [pid 8845] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8844] mkdir("./file0", 0777 [pid 8845] close(4 [pid 8844] <... mkdir resumed>) = 0 [pid 8844] mount("/dev/loop2", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8847 attached [pid 8845] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8847 [pid 8847] set_robust_list(0x5555567436a0, 24 [pid 8845] mkdir("./file0", 0777 [pid 8847] <... set_robust_list resumed>) = 0 [pid 8845] <... mkdir resumed>) = 0 [ 330.441752][ T8844] loop2: detected capacity change from 0 to 4096 [ 330.453806][ T8845] loop4: detected capacity change from 0 to 4096 [ 330.474386][ T8846] loop0: detected capacity change from 0 to 4096 [pid 8845] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8846] <... ioctl resumed>) = 0 [pid 8847] chdir("./379" [pid 5062] <... ioctl resumed>) = 0 [pid 8847] <... chdir resumed>) = 0 [pid 5062] close(3 [pid 8847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... close resumed>) = 0 [pid 8847] <... prctl resumed>) = 0 [pid 8847] setpgid(0, 0) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8848 attached [pid 8847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8848] set_robust_list(0x5555567436a0, 24 [pid 8847] <... openat resumed>) = 3 [pid 8846] close(3 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8848 [pid 8848] <... set_robust_list resumed>) = 0 [pid 8847] write(3, "1000", 4 [pid 8846] <... close resumed>) = 0 [pid 8848] chdir("./375" [pid 8847] <... write resumed>) = 4 [pid 8848] <... chdir resumed>) = 0 [pid 8847] close(3 [pid 8848] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8847] <... close resumed>) = 0 [pid 8848] <... prctl resumed>) = 0 [pid 8848] setpgid(0, 0 [pid 8847] symlink("/dev/binderfs", "./binderfs" [pid 8846] close(4 [pid 8848] <... setpgid resumed>) = 0 [pid 8847] <... symlink resumed>) = 0 [pid 8846] <... close resumed>) = 0 [pid 8846] mkdir("./file0", 0777 [pid 8848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8847] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8846] <... mkdir resumed>) = 0 [pid 8848] <... openat resumed>) = 3 [pid 8847] <... futex resumed>) = 0 [pid 8848] write(3, "1000", 4 [pid 8847] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8846] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8844] <... mount resumed>) = 0 [pid 8848] <... write resumed>) = 4 [pid 8847] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8845] <... mount resumed>) = 0 [pid 8848] close(3 [pid 8847] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8848] <... close resumed>) = 0 [pid 8847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8848] symlink("/dev/binderfs", "./binderfs" [pid 8847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8848] <... symlink resumed>) = 0 [pid 8847] <... mmap resumed>) = 0x7f58200ce000 [pid 8848] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8844] <... openat resumed>) = 3 [pid 8848] <... futex resumed>) = 0 [ 330.486985][ T8844] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 330.502487][ T8845] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8847] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8848] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8847] <... mprotect resumed>) = 0 [pid 8845] <... openat resumed>) = 3 [pid 8844] chdir("./file0" [pid 8847] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8845] chdir("./file0" [pid 8844] <... chdir resumed>) = 0 [pid 8844] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8847] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8845] <... chdir resumed>) = 0 [pid 8844] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8847] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8845] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8844] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8847] <... clone3 resumed> => {parent_tid=[8849]}, 88) = 8849 [pid 8845] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8844] <... futex resumed>) = 1 ./strace-static-x86_64: Process 8849 attached [pid 8848] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8847] rt_sigprocmask(SIG_SETMASK, [], [pid 8845] <... futex resumed>) = 1 [pid 8844] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8842] <... futex resumed>) = 0 [pid 8841] <... futex resumed>) = 0 [pid 8849] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8848] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8845] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8842] exit_group(0 [pid 8841] exit_group(0 [pid 8849] <... rseq resumed>) = 0 [pid 8848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8847] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8845] <... futex resumed>) = ? [pid 8844] <... futex resumed>) = ? [pid 8842] <... exit_group resumed>) = ? [pid 8841] <... exit_group resumed>) = ? [pid 8849] set_robust_list(0x7f58200ee9a0, 24 [pid 8848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8847] <... futex resumed>) = 0 [pid 8845] +++ exited with 0 +++ [pid 8844] +++ exited with 0 +++ [pid 8842] +++ exited with 0 +++ [pid 8841] +++ exited with 0 +++ [ 330.550134][ T8846] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8849] <... set_robust_list resumed>) = 0 [pid 8848] <... mmap resumed>) = 0x7f58200ce000 [pid 8847] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8841, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8849] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8842, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8849] memfd_create("syzkaller", 0) = 3 [pid 8849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8848] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8848] <... mprotect resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8848] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 8848] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(3, "", [pid 8846] <... mount resumed>) = 0 [pid 5063] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, ./strace-static-x86_64: Process 8850 attached [pid 8848] <... clone3 resumed> => {parent_tid=[8850]}, 88) = 8850 [pid 8846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8850] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8848] rt_sigprocmask(SIG_SETMASK, [], [pid 8846] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8850] set_robust_list(0x7f58200ee9a0, 24 [pid 8848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8846] chdir("./file0" [pid 5063] unlink("./373/binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8850] <... set_robust_list resumed>) = 0 [pid 8848] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8846] <... chdir resumed>) = 0 [pid 8850] rt_sigprocmask(SIG_SETMASK, [], [pid 8848] <... futex resumed>) = 0 [pid 8846] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./374/binderfs", [pid 8850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8848] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8846] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8846] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] unlink("./374/binderfs" [pid 8846] <... futex resumed>) = 1 [pid 8843] <... futex resumed>) = 0 [pid 8846] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8843] exit_group(0) = ? [pid 5061] <... unlink resumed>) = 0 [pid 8850] memfd_create("syzkaller", 0 [pid 8846] <... futex resumed>) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5061] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8850] <... memfd_create resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 8846] +++ exited with 0 +++ [pid 8843] +++ exited with 0 +++ [pid 8850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8843, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8850] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./373/file0", [pid 5061] newfstatat(AT_FDCWD, "./374/file0", [pid 5059] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(3, "", [pid 5063] <... openat resumed>) = 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(4, "", [pid 5061] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5059] getdents64(3, [pid 5061] newfstatat(4, "", [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] newfstatat(AT_FDCWD, "./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./378/binderfs") = 0 [pid 5059] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./378/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5061] getdents64(4, [pid 5059] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./374/file0" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5061] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8849] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] close(4 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(4, [pid 5061] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] rmdir("./373/file0" [pid 5061] rmdir("./374") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5061] mkdir("./375", 0777 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5061] <... mkdir resumed>) = 0 [pid 5059] close(4 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./373" [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./378/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 5063] mkdir("./374", 0777 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./378" [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] mkdir("./379", 0777 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... mkdir resumed>) = 0 [pid 8850] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8849] <... write resumed>) = 2097152 [pid 8849] munmap(0x7f5817c00000, 138412032) = 0 [pid 8850] <... write resumed>) = 2097152 [pid 8850] munmap(0x7f5817c00000, 138412032 [pid 8849] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 8849] <... openat resumed>) = 4 [pid 8849] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8851 ./strace-static-x86_64: Process 8851 attached [pid 8851] set_robust_list(0x5555567436a0, 24) = 0 [pid 8851] chdir("./375") = 0 [pid 8851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8850] <... munmap resumed>) = 0 [pid 8851] <... prctl resumed>) = 0 [pid 8851] setpgid(0, 0) = 0 [pid 8851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8851] write(3, "1000", 4) = 4 [pid 8851] close(3) = 0 [pid 8850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8851] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8850] <... openat resumed>) = 4 [pid 8851] <... futex resumed>) = 0 [pid 8850] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = 0 [pid 8851] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8851] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8851] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8851] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8849] <... ioctl resumed>) = 0 [pid 8849] close(3 [pid 8851] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8849] <... close resumed>) = 0 [pid 8849] close(4 [pid 8851] <... clone3 resumed> => {parent_tid=[8852]}, 88) = 8852 [pid 8849] <... close resumed>) = 0 [pid 8851] rt_sigprocmask(SIG_SETMASK, [], [pid 8849] mkdir("./file0", 0777./strace-static-x86_64: Process 8852 attached [pid 8851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8851] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8849] <... mkdir resumed>) = 0 [pid 8851] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8852] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8850] <... ioctl resumed>) = 0 [pid 8849] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8852] set_robust_list(0x7f58200ee9a0, 24) = 0 [ 330.781620][ T8849] loop1: detected capacity change from 0 to 4096 [ 330.819755][ T8850] loop3: detected capacity change from 0 to 4096 [pid 8852] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] close(3 [pid 8852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8850] close(3 [pid 8852] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8852] <... memfd_create resumed>) = 3 [pid 8852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8853 ./strace-static-x86_64: Process 8853 attached [pid 8853] set_robust_list(0x5555567436a0, 24) = 0 [pid 8850] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8850] close(4 [pid 8853] chdir("./374" [pid 8850] <... close resumed>) = 0 [pid 5059] close(3 [pid 8850] mkdir("./file0", 0777 [pid 5059] <... close resumed>) = 0 [pid 8853] <... chdir resumed>) = 0 [pid 8850] <... mkdir resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8853] setpgid(0, 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8854 ./strace-static-x86_64: Process 8854 attached [pid 8853] <... setpgid resumed>) = 0 [pid 8853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8853] write(3, "1000", 4) = 4 [pid 8853] close(3 [pid 8854] set_robust_list(0x5555567436a0, 24 [pid 8853] <... close resumed>) = 0 [pid 8854] <... set_robust_list resumed>) = 0 [ 330.841456][ T8849] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8853] symlink("/dev/binderfs", "./binderfs" [pid 8854] chdir("./379" [pid 8853] <... symlink resumed>) = 0 [pid 8850] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8854] <... chdir resumed>) = 0 [pid 8854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8853] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... prctl resumed>) = 0 [pid 8853] <... futex resumed>) = 0 [pid 8854] setpgid(0, 0 [pid 8853] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8854] <... setpgid resumed>) = 0 [pid 8853] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8853] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8854] <... openat resumed>) = 3 [pid 8853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8853] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8854] write(3, "1000", 4) = 4 [pid 8854] close(3./strace-static-x86_64: Process 8855 attached ) = 0 [pid 8853] <... clone3 resumed> => {parent_tid=[8855]}, 88) = 8855 [pid 8855] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8854] symlink("/dev/binderfs", "./binderfs" [pid 8853] rt_sigprocmask(SIG_SETMASK, [], [pid 8855] <... rseq resumed>) = 0 [pid 8853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8854] <... symlink resumed>) = 0 [pid 8853] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] set_robust_list(0x7f58200ee9a0, 24 [pid 8854] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8853] <... futex resumed>) = 0 [pid 8855] <... set_robust_list resumed>) = 0 [pid 8854] <... futex resumed>) = 0 [pid 8853] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8855] rt_sigprocmask(SIG_SETMASK, [], [pid 8854] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8855] memfd_create("syzkaller", 0 [pid 8854] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8855] <... memfd_create resumed>) = 3 [pid 8854] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8855] <... mmap resumed>) = 0x7f5817c00000 [pid 8854] <... mmap resumed>) = 0x7f58200ce000 [pid 8852] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8854] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8856 attached [pid 8856] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8854] <... clone3 resumed> => {parent_tid=[8856]}, 88) = 8856 [pid 8856] <... rseq resumed>) = 0 [pid 8854] rt_sigprocmask(SIG_SETMASK, [], [pid 8856] set_robust_list(0x7f58200ee9a0, 24 [pid 8854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8856] <... set_robust_list resumed>) = 0 [pid 8854] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] rt_sigprocmask(SIG_SETMASK, [], [pid 8854] <... futex resumed>) = 0 [pid 8856] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 330.896138][ T8850] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8854] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8856] memfd_create("syzkaller", 0) = 3 [pid 8856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8849] <... mount resumed>) = 0 [pid 8849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8849] chdir("./file0") = 0 [pid 8849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8849] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8849] <... futex resumed>) = 1 [pid 8847] <... futex resumed>) = 0 [pid 8847] exit_group(0) = ? [pid 8849] +++ exited with 0 +++ [pid 8847] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8847, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./379/binderfs") = 0 [pid 5060] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./379/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8852] <... write resumed>) = 2097152 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8852] munmap(0x7f5817c00000, 138412032 [pid 5060] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8852] <... munmap resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8856] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] getdents64(4, [pid 8855] <... write resumed>) = 2097152 [pid 8852] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8850] <... mount resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8855] munmap(0x7f5817c00000, 138412032 [pid 8852] <... openat resumed>) = 4 [pid 8850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] close(4 [pid 8852] ioctl(4, LOOP_SET_FD, 3 [pid 8850] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./379/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8856] <... write resumed>) = 2097152 [pid 8855] <... munmap resumed>) = 0 [pid 8852] <... ioctl resumed>) = 0 [pid 8850] chdir("./file0" [pid 5060] close(3 [pid 8856] munmap(0x7f5817c00000, 138412032 [pid 8855] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8852] close(3 [pid 8850] <... chdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8855] <... openat resumed>) = 4 [pid 8852] <... close resumed>) = 0 [pid 8850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] rmdir("./379" [pid 8856] <... munmap resumed>) = 0 [pid 8855] ioctl(4, LOOP_SET_FD, 3 [pid 8852] close(4 [pid 8850] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... rmdir resumed>) = 0 [pid 8852] <... close resumed>) = 0 [pid 8856] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8856] ioctl(4, LOOP_SET_FD, 3 [pid 8852] mkdir("./file0", 0777 [pid 8856] <... ioctl resumed>) = 0 [pid 8850] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] mkdir("./380", 0777 [pid 8856] close(3 [pid 8855] <... ioctl resumed>) = 0 [pid 8852] <... mkdir resumed>) = 0 [pid 8850] <... futex resumed>) = 1 [pid 8848] <... futex resumed>) = 0 [pid 8856] <... close resumed>) = 0 [pid 8855] close(3 [pid 8852] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8850] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 331.066268][ T8852] loop2: detected capacity change from 0 to 4096 [ 331.098434][ T8855] loop4: detected capacity change from 0 to 4096 [ 331.099945][ T8856] loop0: detected capacity change from 0 to 4096 [pid 8848] exit_group(0 [pid 5060] <... mkdir resumed>) = 0 [pid 8856] close(4 [pid 8855] <... close resumed>) = 0 [pid 8850] <... futex resumed>) = ? [pid 8848] <... exit_group resumed>) = ? [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8856] <... close resumed>) = 0 [pid 8855] close(4 [pid 8850] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 3 [pid 8855] <... close resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8855] mkdir("./file0", 0777) = 0 [pid 8856] mkdir("./file0", 0777 [pid 8848] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8848, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8856] <... mkdir resumed>) = 0 [pid 8856] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8855] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [ 331.121286][ T8852] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./375/binderfs") = 0 [pid 5062] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8852] <... mount resumed>) = 0 [pid 8852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8852] chdir("./file0" [pid 5062] <... umount2 resumed>) = 0 [pid 8852] <... chdir resumed>) = 0 [pid 8852] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8852] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8852] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8851] <... futex resumed>) = 0 [pid 8851] exit_group(0 [pid 5062] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8852] <... futex resumed>) = ? [pid 8851] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8852] +++ exited with 0 +++ [pid 5062] newfstatat(AT_FDCWD, "./375/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8851] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8851, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] newfstatat(4, "", [pid 5061] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 331.166876][ T8855] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 331.176235][ T8856] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5061] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(4 [pid 5061] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./375/file0" [pid 5061] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8856] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] getdents64(3, [pid 5061] newfstatat(AT_FDCWD, "./375/binderfs", [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3 [pid 5061] unlink("./375/binderfs" [pid 5062] <... close resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5062] rmdir("./375" [pid 5061] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./376", 0777 [pid 8856] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 8856] chdir("./file0" [pid 8855] <... mount resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] close(3 [pid 8856] <... chdir resumed>) = 0 [pid 8856] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8856] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 8856] <... futex resumed>) = 1 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8856] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = 0 [pid 8855] <... openat resumed>) = 3 [pid 8855] chdir("./file0") = 0 [pid 8854] <... futex resumed>) = 0 [pid 8855] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 8857 attached ) = -1 EBUSY (Device or resource busy) [pid 8854] exit_group(0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8855] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8857 [pid 8853] <... futex resumed>) = 0 [pid 8857] set_robust_list(0x5555567436a0, 24 [pid 8856] <... futex resumed>) = ? [pid 8855] <... futex resumed>) = 1 [pid 8854] <... exit_group resumed>) = ? [pid 8853] exit_group(0 [pid 5062] <... openat resumed>) = 3 [pid 8857] <... set_robust_list resumed>) = 0 [pid 8856] +++ exited with 0 +++ [pid 8853] <... exit_group resumed>) = ? [pid 5061] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8857] chdir("./380" [pid 8855] +++ exited with 0 +++ [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8857] <... chdir resumed>) = 0 [pid 8857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8857] setpgid(0, 0) = 0 [pid 8857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8854] +++ exited with 0 +++ [pid 8853] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8857] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8853, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] newfstatat(AT_FDCWD, "./375/file0", [pid 8857] write(3, "1000", 4 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8854, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8857] <... write resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8857] close(3 [pid 5063] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8857] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8857] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8857] <... symlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 4 [pid 5059] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 8857] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(3, "", [pid 5059] <... openat resumed>) = 3 [pid 8857] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(3, "", [pid 8857] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8857] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] getdents64(3, [pid 8857] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5059] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8857] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(4, [pid 5059] newfstatat(AT_FDCWD, "./379/binderfs", [pid 8857] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] unlink("./374/binderfs" [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8857] <... mprotect resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5059] unlink("./379/binderfs" [pid 8857] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4 [pid 5059] <... unlink resumed>) = 0 [pid 8857] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./375/file0"./strace-static-x86_64: Process 8858 attached [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 8857] <... clone3 resumed> => {parent_tid=[8858]}, 88) = 8858 [pid 5059] <... umount2 resumed>) = 0 [pid 8857] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] newfstatat(AT_FDCWD, "./374/file0", [pid 8858] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 8858] <... rseq resumed>) = 0 [pid 8857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8858] set_robust_list(0x7f58200ee9a0, 24 [pid 8857] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5061] close(3 [pid 5059] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8858] <... set_robust_list resumed>) = 0 [pid 8857] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8858] rt_sigprocmask(SIG_SETMASK, [], [pid 8857] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] rmdir("./375" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8858] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./379/file0", [pid 5063] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] mkdir("./376", 0777 [pid 5059] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8858] memfd_create("syzkaller", 0 [pid 5063] getdents64(4, [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8859 attached [pid 8858] <... memfd_create resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8859 [pid 8859] set_robust_list(0x5555567436a0, 24 [pid 8858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8859] <... set_robust_list resumed>) = 0 [pid 8858] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] getdents64(4, [pid 8859] chdir("./376" [pid 5059] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8859] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... openat resumed>) = 4 [pid 8859] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] close(4 [pid 5061] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5063] rmdir("./374/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(4, [pid 8859] <... prctl resumed>) = 0 [pid 8859] setpgid(0, 0 [pid 5063] close(3 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8859] <... setpgid resumed>) = 0 [pid 8859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5059] close(4 [pid 5063] rmdir("./374" [pid 8859] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] rmdir("./379/file0" [pid 8859] write(3, "1000", 4 [pid 5059] <... rmdir resumed>) = 0 [pid 8859] <... write resumed>) = 4 [pid 5063] mkdir("./375", 0777) = 0 [pid 8859] close(3 [pid 5059] getdents64(3, [pid 8859] <... close resumed>) = 0 [pid 8859] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] close(3) = 0 [pid 5059] rmdir("./379" [pid 5063] <... openat resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] mkdir("./380", 0777 [pid 8859] <... symlink resumed>) = 0 [pid 8859] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8859] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8858] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8859] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8859] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8859] <... mmap resumed>) = 0x7f58200ce000 [pid 8859] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] close(3) = 0 [pid 8859] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8859] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8860 ./strace-static-x86_64: Process 8860 attached [pid 8859] <... clone3 resumed> => {parent_tid=[8861]}, 88) = 8861 ./strace-static-x86_64: Process 8861 attached [pid 8860] set_robust_list(0x5555567436a0, 24 [pid 8859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8860] <... set_robust_list resumed>) = 0 [pid 8861] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8861] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8861] rt_sigprocmask(SIG_SETMASK, [], [pid 8860] chdir("./376" [pid 8859] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8860] <... chdir resumed>) = 0 [pid 8859] <... futex resumed>) = 0 [pid 8861] memfd_create("syzkaller", 0 [pid 8858] <... write resumed>) = 2097152 [pid 8859] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8858] munmap(0x7f5817c00000, 138412032 [pid 8860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8861] <... memfd_create resumed>) = 3 [pid 8860] setpgid(0, 0) = 0 [pid 8861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8858] <... munmap resumed>) = 0 [pid 8861] <... mmap resumed>) = 0x7f5817c00000 [pid 8860] <... openat resumed>) = 3 [pid 8858] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8858] ioctl(4, LOOP_SET_FD, 3 [pid 8860] write(3, "1000", 4) = 4 [pid 8860] close(3) = 0 [pid 8858] <... ioctl resumed>) = 0 [pid 8858] close(3) = 0 [pid 8858] close(4 [pid 8860] symlink("/dev/binderfs", "./binderfs" [pid 8858] <... close resumed>) = 0 [pid 8860] <... symlink resumed>) = 0 [pid 8858] mkdir("./file0", 0777 [pid 5063] <... ioctl resumed>) = 0 [pid 8860] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8860] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8860] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8858] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 8860] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... close resumed>) = 0 [pid 8860] <... mprotect resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8860] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8862 [pid 8858] mount("/dev/loop1", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8862 attached [pid 8860] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8862] set_robust_list(0x5555567436a0, 24 [pid 8860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8863 attached [ 331.453274][ T8858] loop1: detected capacity change from 0 to 4096 [pid 8863] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8862] <... set_robust_list resumed>) = 0 [pid 8860] <... clone3 resumed> => {parent_tid=[8863]}, 88) = 8863 [pid 8862] chdir("./375") = 0 [pid 8862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8861] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8862] setpgid(0, 0) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8860] rt_sigprocmask(SIG_SETMASK, [], [pid 8863] <... rseq resumed>) = 0 [pid 8862] <... openat resumed>) = 3 [pid 8862] write(3, "1000", 4) = 4 [pid 8862] close(3) = 0 [pid 8862] symlink("/dev/binderfs", "./binderfs" [pid 8863] set_robust_list(0x7f58200ee9a0, 24 [pid 8862] <... symlink resumed>) = 0 [pid 8860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8862] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8860] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8863] <... set_robust_list resumed>) = 0 [pid 8862] <... futex resumed>) = 0 [pid 8863] rt_sigprocmask(SIG_SETMASK, [], [pid 8862] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8860] <... futex resumed>) = 0 [pid 8863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8862] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8862] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8862] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8863] memfd_create("syzkaller", 0 [pid 8862] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8860] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8863] <... memfd_create resumed>) = 3 [pid 8862] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8863] <... mmap resumed>) = 0x7f5817c00000 ./strace-static-x86_64: Process 8864 attached [pid 8862] <... clone3 resumed> => {parent_tid=[8864]}, 88) = 8864 [pid 8864] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8862] rt_sigprocmask(SIG_SETMASK, [], [pid 8864] <... rseq resumed>) = 0 [pid 8862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8864] set_robust_list(0x7f58200ee9a0, 24 [pid 8862] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8864] <... set_robust_list resumed>) = 0 [pid 8862] <... futex resumed>) = 0 [pid 8864] rt_sigprocmask(SIG_SETMASK, [], [pid 8862] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8864] memfd_create("syzkaller", 0 [pid 5059] close(3 [pid 8864] <... memfd_create resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 8864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8864] <... mmap resumed>) = 0x7f5817c00000 [ 331.500997][ T8858] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). ./strace-static-x86_64: Process 8865 attached [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8865 [pid 8865] set_robust_list(0x5555567436a0, 24) = 0 [pid 8865] chdir("./380") = 0 [pid 8861] <... write resumed>) = 2097152 [pid 8865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8865] setpgid(0, 0) = 0 [pid 8865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8865] write(3, "1000", 4 [pid 8863] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8861] munmap(0x7f5817c00000, 138412032 [pid 8865] <... write resumed>) = 4 [pid 8858] <... mount resumed>) = 0 [pid 8858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8865] close(3 [pid 8858] <... openat resumed>) = 3 [pid 8865] <... close resumed>) = 0 [pid 8858] chdir("./file0" [pid 8865] symlink("/dev/binderfs", "./binderfs" [pid 8858] <... chdir resumed>) = 0 [pid 8865] <... symlink resumed>) = 0 [pid 8858] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8858] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8857] <... futex resumed>) = 0 [pid 8858] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8857] exit_group(0 [pid 8864] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8865] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8861] <... munmap resumed>) = 0 [pid 8858] <... futex resumed>) = ? [pid 8857] <... exit_group resumed>) = ? [pid 8865] <... futex resumed>) = 0 [pid 8865] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8865] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8865] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8861] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8865] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8861] <... openat resumed>) = 4 [pid 8865] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8861] ioctl(4, LOOP_SET_FD, 3 [pid 8865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8866]}, 88) = 8866 ./strace-static-x86_64: Process 8866 attached [pid 8858] +++ exited with 0 +++ [pid 8857] +++ exited with 0 +++ [pid 8866] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8861] <... ioctl resumed>) = 0 [pid 8866] <... rseq resumed>) = 0 [pid 8861] close(3 [pid 8866] set_robust_list(0x7f58200ee9a0, 24 [pid 8861] <... close resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8857, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8866] <... set_robust_list resumed>) = 0 [pid 8865] rt_sigprocmask(SIG_SETMASK, [], [pid 8866] rt_sigprocmask(SIG_SETMASK, [], [pid 8865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8861] close(4 [pid 8866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8865] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8865] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8866] memfd_create("syzkaller", 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8861] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", [pid 8866] <... memfd_create resumed>) = 3 [pid 8864] <... write resumed>) = 2097152 [pid 8863] <... write resumed>) = 2097152 [pid 8861] mkdir("./file0", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./380/binderfs") = 0 [pid 5060] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8864] munmap(0x7f5817c00000, 138412032 [pid 8863] munmap(0x7f5817c00000, 138412032 [pid 8861] <... mkdir resumed>) = 0 [ 331.625425][ T8861] loop3: detected capacity change from 0 to 4096 [pid 5060] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8866] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8864] <... munmap resumed>) = 0 [pid 8861] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./380/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8863] <... munmap resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 8863] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] rmdir("./380/file0" [pid 8863] <... openat resumed>) = 4 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 8863] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8866] <... write resumed>) = 2097152 [pid 8864] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] close(3) = 0 [pid 5060] rmdir("./380") = 0 [pid 5060] mkdir("./381", 0777) = 0 [pid 8864] <... openat resumed>) = 4 [pid 8864] ioctl(4, LOOP_SET_FD, 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8863] <... ioctl resumed>) = 0 [pid 8866] munmap(0x7f5817c00000, 138412032 [pid 8864] <... ioctl resumed>) = 0 [pid 8863] close(3 [pid 8864] close(3 [pid 8866] <... munmap resumed>) = 0 [pid 8863] <... close resumed>) = 0 [pid 8861] <... mount resumed>) = 0 [pid 8866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8864] <... close resumed>) = 0 [pid 8863] close(4 [pid 8861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8864] close(4 [pid 8863] <... close resumed>) = 0 [pid 8864] <... close resumed>) = 0 [pid 8864] mkdir("./file0", 0777 [pid 8863] mkdir("./file0", 0777 [pid 8861] <... openat resumed>) = 3 [pid 8866] <... openat resumed>) = 4 [ 331.696066][ T8861] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 331.718808][ T8863] loop2: detected capacity change from 0 to 4096 [ 331.734504][ T8864] loop4: detected capacity change from 0 to 4096 [pid 8866] ioctl(4, LOOP_SET_FD, 3 [pid 8864] <... mkdir resumed>) = 0 [pid 8861] chdir("./file0") = 0 [pid 8864] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [ 331.763724][ T8866] loop0: detected capacity change from 0 to 4096 [ 331.765940][ T8864] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8861] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8866] <... ioctl resumed>) = 0 [pid 8863] <... mkdir resumed>) = 0 [pid 8861] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8861] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8866] close(3 [pid 8863] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8866] <... close resumed>) = 0 [pid 8861] <... futex resumed>) = 1 [pid 8859] <... futex resumed>) = 0 [pid 8866] close(4 [pid 8859] exit_group(0 [pid 8866] <... close resumed>) = 0 [pid 8859] <... exit_group resumed>) = ? [pid 8866] mkdir("./file0", 0777) = 0 [pid 8861] +++ exited with 0 +++ [pid 8859] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8859, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 8866] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./376/binderfs") = 0 [pid 5062] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8864] <... mount resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./376/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8864] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... ioctl resumed>) = 0 [pid 8864] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8864] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(4, "", [pid 8864] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8864] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(3 [pid 8864] <... futex resumed>) = 1 [pid 8862] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 8864] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 331.807357][ T8863] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 331.820487][ T8866] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8862] exit_group(0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8864] <... futex resumed>) = ? [pid 8862] <... exit_group resumed>) = ? [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8864] +++ exited with 0 +++ [pid 8862] +++ exited with 0 +++ [pid 5062] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8862, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8867 attached [pid 5062] close(4) = 0 [pid 5063] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./376/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8867] set_robust_list(0x5555567436a0, 24 [pid 5063] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8867] <... set_robust_list resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 8867] chdir("./381" [pid 5063] newfstatat(3, "", [pid 5062] getdents64(3, [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8867 [pid 8867] <... chdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(3, [pid 5062] close(3 [pid 8867] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 5063] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./376" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./377", 0777 [pid 8867] setpgid(0, 0 [pid 5063] unlink("./375/binderfs" [pid 8867] <... setpgid resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8867] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 8867] write(3, "1000", 4 [pid 5063] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8867] <... write resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8867] close(3 [pid 5063] newfstatat(AT_FDCWD, "./375/file0", [pid 8867] <... close resumed>) = 0 [pid 8867] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8867] <... symlink resumed>) = 0 [pid 5063] umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8867] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8867] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8867] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... openat resumed>) = 4 [pid 8867] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 8867] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(4, [pid 8867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8867] <... mmap resumed>) = 0x7f58200ce000 [pid 8867] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] getdents64(4, [pid 8867] <... mprotect resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8867] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8863] <... mount resumed>) = 0 [pid 5063] close(4 [pid 5062] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8867] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8863] <... openat resumed>) = 3 [pid 5063] rmdir("./375/file0" [pid 8867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] <... rmdir resumed>) = 0 [pid 8867] <... clone3 resumed> => {parent_tid=[8868]}, 88) = 8868 ./strace-static-x86_64: Process 8868 attached [pid 8867] rt_sigprocmask(SIG_SETMASK, [], [pid 8868] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8868] <... rseq resumed>) = 0 [pid 8867] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 8868] set_robust_list(0x7f58200ee9a0, 24 [pid 8867] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8868] <... set_robust_list resumed>) = 0 [pid 8867] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8863] chdir("./file0" [pid 5063] close(3 [pid 8868] rt_sigprocmask(SIG_SETMASK, [], [pid 8866] <... mount resumed>) = 0 [pid 8863] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./375" [pid 8868] memfd_create("syzkaller", 0 [pid 8866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8863] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 8866] <... openat resumed>) = 3 [pid 8863] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8866] chdir("./file0" [pid 8863] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8866] <... chdir resumed>) = 0 [pid 8863] <... futex resumed>) = 1 [pid 8860] <... futex resumed>) = 0 [pid 8866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8863] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8860] exit_group(0 [pid 8866] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8863] <... futex resumed>) = ? [pid 8860] <... exit_group resumed>) = ? [pid 5063] mkdir("./376", 0777 [pid 8868] <... memfd_create resumed>) = 3 [pid 8863] +++ exited with 0 +++ [pid 5063] <... mkdir resumed>) = 0 [pid 8868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8860] +++ exited with 0 +++ [pid 8868] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8860, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8866] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8865] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8865] exit_group(0 [pid 8866] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8866] <... futex resumed>) = ? [pid 8865] <... exit_group resumed>) = ? [pid 5061] newfstatat(AT_FDCWD, "./376/binderfs", [pid 8866] +++ exited with 0 +++ [pid 8865] +++ exited with 0 +++ [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] unlink("./376/binderfs" [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8865, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 8869 attached [pid 5061] <... unlink resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8869 [pid 8869] set_robust_list(0x5555567436a0, 24 [pid 5061] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8869] <... set_robust_list resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8869] chdir("./376" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8869] <... chdir resumed>) = 0 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 8869] <... prctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8869] setpgid(0, 0 [pid 5059] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./376/file0", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(AT_FDCWD, "./380/binderfs", [pid 8869] <... setpgid resumed>) = 0 [pid 5061] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./380/binderfs") = 0 [pid 5061] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5059] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... umount2 resumed>) = 0 [pid 8869] <... openat resumed>) = 3 [pid 5061] close(4 [pid 5059] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./376/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8869] write(3, "1000", 4 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./380/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 5061] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(4, [pid 8869] <... write resumed>) = 4 [pid 5062] close(3 [pid 8869] close(3 [pid 5062] <... close resumed>) = 0 [pid 5061] close(3 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 5061] rmdir("./376" [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] close(4 [pid 5061] mkdir("./377", 0777 [pid 5059] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] rmdir("./380/file0") = 0 [pid 5059] getdents64(3, [pid 8869] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] rmdir("./380") = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] mkdir("./381", 0777) = 0 [pid 8869] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8870 ./strace-static-x86_64: Process 8870 attached [pid 8870] set_robust_list(0x5555567436a0, 24 [pid 8869] <... symlink resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8870] <... set_robust_list resumed>) = 0 [pid 8870] chdir("./377" [pid 5059] <... openat resumed>) = 3 [pid 8870] <... chdir resumed>) = 0 [pid 8869] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8869] <... futex resumed>) = 0 [pid 8868] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8870] <... prctl resumed>) = 0 [pid 8870] setpgid(0, 0 [pid 8869] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8870] <... setpgid resumed>) = 0 [pid 8869] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8869] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... ioctl resumed>) = 0 [pid 8869] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] close(3 [pid 8869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... close resumed>) = 0 [pid 8869] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8869] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8870] <... openat resumed>) = 3 [pid 8869] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 8871 attached [pid 8871] set_robust_list(0x5555567436a0, 24) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8871 [pid 8871] chdir("./381" [pid 8870] write(3, "1000", 4 [pid 8871] <... chdir resumed>) = 0 [pid 8870] <... write resumed>) = 4 [pid 8869] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8870] close(3 [pid 8871] <... prctl resumed>) = 0 [pid 8870] <... close resumed>) = 0 [pid 8871] setpgid(0, 0 [pid 8870] symlink("/dev/binderfs", "./binderfs" [pid 8871] <... setpgid resumed>) = 0 [pid 8871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8870] <... symlink resumed>) = 0 [pid 8871] <... openat resumed>) = 3 [pid 8870] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8869] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8871] write(3, "1000", 4) = 4 [pid 8870] <... futex resumed>) = 0 [pid 8869] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8871] close(3) = 0 [pid 8871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8871] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8871] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8871] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8870] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, ./strace-static-x86_64: Process 8872 attached [pid 8871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8870] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8869] <... clone3 resumed> => {parent_tid=[8872]}, 88) = 8872 [pid 8872] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8871] <... mmap resumed>) = 0x7f58200ce000 [pid 8872] <... rseq resumed>) = 0 [pid 8871] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8872] set_robust_list(0x7f58200ee9a0, 24 [pid 8871] <... mprotect resumed>) = 0 [pid 8872] <... set_robust_list resumed>) = 0 [pid 8871] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8872] rt_sigprocmask(SIG_SETMASK, [], [pid 8871] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8868] <... write resumed>) = 2097152 [pid 8872] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8873]}, 88) = 8873 [pid 8869] rt_sigprocmask(SIG_SETMASK, [], [pid 8870] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8869] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8871] rt_sigprocmask(SIG_SETMASK, [], [pid 8870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8869] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8873 attached [pid 8872] <... futex resumed>) = 0 [pid 8871] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8869] <... futex resumed>) = 1 [pid 8873] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8872] memfd_create("syzkaller", 0 [pid 8871] <... futex resumed>) = 0 [pid 8870] <... mmap resumed>) = 0x7f58200ce000 [pid 8869] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8868] munmap(0x7f5817c00000, 138412032 [pid 8873] <... rseq resumed>) = 0 [pid 8872] <... memfd_create resumed>) = 3 [pid 8871] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8870] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8873] set_robust_list(0x7f58200ee9a0, 24 [pid 8872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8873] <... set_robust_list resumed>) = 0 [pid 8872] <... mmap resumed>) = 0x7f5817c00000 [pid 8870] <... mprotect resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8873] rt_sigprocmask(SIG_SETMASK, [], [pid 8870] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] close(3 [pid 8870] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8868] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 ./strace-static-x86_64: Process 8874 attached [pid 8873] memfd_create("syzkaller", 0 [pid 8870] <... clone3 resumed> => {parent_tid=[8874]}, 88) = 8874 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8874] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8870] rt_sigprocmask(SIG_SETMASK, [], [pid 8874] <... rseq resumed>) = 0 [pid 8870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8874] set_robust_list(0x7f58200ee9a0, 24 [pid 8870] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8874] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8875 attached [pid 8874] rt_sigprocmask(SIG_SETMASK, [], [pid 8873] <... memfd_create resumed>) = 3 [pid 8870] <... futex resumed>) = 0 [pid 8875] set_robust_list(0x5555567436a0, 24 [pid 8874] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8870] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8875 [pid 8875] <... set_robust_list resumed>) = 0 [pid 8868] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8875] chdir("./377" [pid 8868] <... openat resumed>) = 4 [pid 8873] <... mmap resumed>) = 0x7f5817c00000 [pid 8868] ioctl(4, LOOP_SET_FD, 3 [pid 8875] <... chdir resumed>) = 0 [pid 8875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8874] memfd_create("syzkaller", 0 [pid 8875] <... prctl resumed>) = 0 [pid 8875] setpgid(0, 0 [pid 8874] <... memfd_create resumed>) = 3 [pid 8875] <... setpgid resumed>) = 0 [pid 8874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8874] <... mmap resumed>) = 0x7f5817c00000 [pid 8875] write(3, "1000", 4) = 4 [pid 8875] close(3) = 0 [pid 8875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8875] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8875] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8875] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8868] <... ioctl resumed>) = 0 [pid 8875] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8868] close(3 [pid 8875] <... mprotect resumed>) = 0 [pid 8868] <... close resumed>) = 0 [pid 8875] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8872] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8868] close(4 [pid 8875] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8868] <... close resumed>) = 0 [pid 8875] <... clone3 resumed> => {parent_tid=[8876]}, 88) = 8876 [pid 8868] mkdir("./file0", 0777 [pid 8875] rt_sigprocmask(SIG_SETMASK, [], [pid 8868] <... mkdir resumed>) = 0 [pid 8875] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8876 attached [pid 8875] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8876] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8875] <... futex resumed>) = 0 [pid 8876] <... rseq resumed>) = 0 [pid 8875] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8876] set_robust_list(0x7f58200ee9a0, 24 [pid 8868] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8876] <... set_robust_list resumed>) = 0 [pid 8876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 332.156952][ T8868] loop1: detected capacity change from 0 to 4096 [pid 8876] memfd_create("syzkaller", 0) = 3 [pid 8876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8873] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8872] <... write resumed>) = 2097152 [ 332.222290][ T8868] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8874] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8872] munmap(0x7f5817c00000, 138412032) = 0 [pid 8873] <... write resumed>) = 2097152 [pid 8873] munmap(0x7f5817c00000, 138412032 [pid 8876] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8874] <... write resumed>) = 2097152 [pid 8872] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8868] <... mount resumed>) = 0 [pid 8868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8874] munmap(0x7f5817c00000, 138412032 [pid 8873] <... munmap resumed>) = 0 [pid 8872] <... openat resumed>) = 4 [pid 8868] <... openat resumed>) = 3 [pid 8868] chdir("./file0") = 0 [pid 8868] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8872] ioctl(4, LOOP_SET_FD, 3 [pid 8873] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8868] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8867] <... futex resumed>) = 0 [pid 8868] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8867] exit_group(0 [pid 8868] <... futex resumed>) = ? [pid 8876] <... write resumed>) = 2097152 [pid 8874] <... munmap resumed>) = 0 [pid 8873] <... openat resumed>) = 4 [pid 8872] <... ioctl resumed>) = 0 [pid 8868] +++ exited with 0 +++ [pid 8867] <... exit_group resumed>) = ? [pid 8876] munmap(0x7f5817c00000, 138412032 [pid 8874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8873] ioctl(4, LOOP_SET_FD, 3 [pid 8872] close(3 [pid 8876] <... munmap resumed>) = 0 [pid 8874] <... openat resumed>) = 4 [pid 8873] <... ioctl resumed>) = 0 [pid 8872] <... close resumed>) = 0 [pid 8867] +++ exited with 0 +++ [pid 8874] ioctl(4, LOOP_SET_FD, 3 [pid 8873] close(3 [pid 8872] close(4 [pid 8876] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8867, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 8876] <... openat resumed>) = 4 [pid 8876] ioctl(4, LOOP_SET_FD, 3 [pid 5060] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 8873] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8874] <... ioctl resumed>) = 0 [pid 8873] close(4 [pid 8872] <... close resumed>) = 0 [pid 5060] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8873] <... close resumed>) = 0 [pid 8872] mkdir("./file0", 0777 [pid 8873] mkdir("./file0", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./381/binderfs") = 0 [pid 5060] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8873] <... mkdir resumed>) = 0 [pid 8876] <... ioctl resumed>) = 0 [pid 8873] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8874] close(3 [pid 8872] <... mkdir resumed>) = 0 [pid 8876] close(3) = 0 [pid 8876] close(4 [pid 8874] <... close resumed>) = 0 [pid 8876] <... close resumed>) = 0 [pid 8874] close(4 [pid 8876] mkdir("./file0", 0777 [pid 8874] <... close resumed>) = 0 [ 332.341313][ T8872] loop4: detected capacity change from 0 to 4096 [ 332.356267][ T8873] loop0: detected capacity change from 0 to 4096 [ 332.364538][ T8874] loop3: detected capacity change from 0 to 4096 [ 332.371494][ T8876] loop2: detected capacity change from 0 to 4096 [pid 8872] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8876] <... mkdir resumed>) = 0 [pid 8874] mkdir("./file0", 0777 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./381/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8874] <... mkdir resumed>) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8876] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8874] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] close(4) = 0 [pid 5060] rmdir("./381/file0") = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./381") = 0 [pid 5060] mkdir("./382", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8872] <... mount resumed>) = 0 [pid 8872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8876] <... mount resumed>) = 0 [pid 8872] chdir("./file0" [pid 8876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8872] <... chdir resumed>) = 0 [ 332.387027][ T8873] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 332.392119][ T8872] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 332.417389][ T8876] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 332.426111][ T8874] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8872] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8876] <... openat resumed>) = 3 [pid 8872] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8876] chdir("./file0" [pid 8872] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8872] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8869] <... futex resumed>) = 0 [pid 8876] <... chdir resumed>) = 0 [pid 8869] exit_group(0 [pid 8876] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8869] <... exit_group resumed>) = ? [pid 8876] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8872] <... futex resumed>) = ? [pid 8876] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8872] +++ exited with 0 +++ [pid 8869] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8869, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8876] <... futex resumed>) = 1 [pid 8875] <... futex resumed>) = 0 [pid 8876] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8875] exit_group(0 [pid 5063] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8876] <... futex resumed>) = ? [pid 8875] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8876] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8875] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8875, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5061] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8873] <... mount resumed>) = 0 [pid 5063] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./376/binderfs", [pid 5061] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 8873] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./377/binderfs", [pid 8873] chdir("./file0" [pid 5063] unlink("./376/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8873] <... chdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] unlink("./377/binderfs" [pid 8873] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 8873] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8873] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8871] <... futex resumed>) = 0 [pid 8871] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 8874] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8874] <... openat resumed>) = 3 [pid 8873] +++ exited with 0 +++ [pid 8871] +++ exited with 0 +++ [pid 5063] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8871, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./376/file0", [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8874] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./377/file0", [pid 8874] <... chdir resumed>) = 0 [pid 5063] umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8877 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 5059] newfstatat(3, "", [pid 8874] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8877 attached [pid 8874] <... futex resumed>) = 1 [pid 8870] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] getdents64(4, [pid 5059] getdents64(3, [pid 8870] exit_group(0) = ? [pid 5063] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8877] set_robust_list(0x5555567436a0, 24 [pid 5059] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8877] <... set_robust_list resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8877] chdir("./382" [pid 8874] +++ exited with 0 +++ [pid 8870] +++ exited with 0 +++ [pid 5063] getdents64(4, [pid 5061] getdents64(4, [pid 5059] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8877] <... chdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8870, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8877] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] unlink("./381/binderfs" [pid 8877] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] close(4 [pid 5059] <... unlink resumed>) = 0 [pid 8877] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8877] <... setpgid resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./377/file0" [pid 8877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(4 [pid 5062] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8877] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 5059] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8877] write(3, "1000", 4 [pid 5063] rmdir("./376/file0" [pid 5062] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8877] <... write resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8877] close(3 [pid 5063] getdents64(3, [pid 5061] close(3 [pid 5059] newfstatat(AT_FDCWD, "./381/file0", [pid 8877] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8877] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(3 [pid 5061] rmdir("./377" [pid 5059] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8877] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... rmdir resumed>) = 0 [pid 8877] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] rmdir("./376" [pid 5062] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./378", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8877] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8877] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5059] <... openat resumed>) = 4 [pid 8877] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 8877] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] unlink("./377/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] getdents64(4, [pid 8877] <... mmap resumed>) = 0x7f58200ce000 [pid 8877] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] mkdir("./377", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8877] <... mprotect resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(4, [pid 8877] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... openat resumed>) = 3 [pid 8877] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] close(4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./381/file0"./strace-static-x86_64: Process 8878 attached ) = 0 [pid 8878] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] getdents64(3, [pid 8878] <... rseq resumed>) = 0 [pid 8877] <... clone3 resumed> => {parent_tid=[8878]}, 88) = 8878 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8878] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] close(3 [pid 8877] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... close resumed>) = 0 [pid 8878] <... set_robust_list resumed>) = 0 [pid 8877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] rmdir("./381" [pid 8878] rt_sigprocmask(SIG_SETMASK, [], [pid 8877] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = 0 [pid 8878] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8877] <... futex resumed>) = 0 [pid 5062] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8877] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./377/file0", [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./382", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8878] memfd_create("syzkaller", 0 [pid 5062] <... openat resumed>) = 4 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8878] <... memfd_create resumed>) = 3 [pid 5062] newfstatat(4, "", [pid 5059] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./377/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./377") = 0 [pid 5062] mkdir("./378", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8878] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8879 [pid 5061] <... close resumed>) = 0 ./strace-static-x86_64: Process 8879 attached [pid 8879] set_robust_list(0x5555567436a0, 24) = 0 [pid 8879] chdir("./377") = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8879] setpgid(0, 0) = 0 [pid 8879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8880 attached ) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8880 [pid 8880] set_robust_list(0x5555567436a0, 24 [pid 8879] write(3, "1000", 4) = 4 [pid 8879] close(3) = 0 [pid 8880] <... set_robust_list resumed>) = 0 [pid 8879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8880] chdir("./378" [pid 8879] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8879] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8879] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8880] <... chdir resumed>) = 0 [pid 8879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8879] <... mmap resumed>) = 0x7f58200ce000 [pid 8879] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8880] <... prctl resumed>) = 0 [pid 8879] <... mprotect resumed>) = 0 [pid 8879] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8880] setpgid(0, 0 [pid 8879] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8878] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 8880] <... setpgid resumed>) = 0 [pid 8880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] close(3./strace-static-x86_64: Process 8881 attached [pid 8879] <... clone3 resumed> => {parent_tid=[8881]}, 88) = 8881 [pid 8881] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8879] rt_sigprocmask(SIG_SETMASK, [], [pid 8881] <... rseq resumed>) = 0 [pid 8879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8881] set_robust_list(0x7f58200ee9a0, 24 [pid 8879] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8881] <... set_robust_list resumed>) = 0 [pid 8879] <... futex resumed>) = 0 [pid 8881] rt_sigprocmask(SIG_SETMASK, [], [pid 8879] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8881] memfd_create("syzkaller", 0) = 3 [pid 8881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8880] <... openat resumed>) = 3 [pid 8880] write(3, "1000", 4 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8882 [pid 8880] <... write resumed>) = 4 ./strace-static-x86_64: Process 8882 attached [pid 8880] close(3) = 0 [pid 8880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8878] <... write resumed>) = 2097152 [pid 8880] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8882] set_robust_list(0x5555567436a0, 24) = 0 [pid 8882] chdir("./382") = 0 [pid 8882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8882] setpgid(0, 0) = 0 [pid 8882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8880] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8878] munmap(0x7f5817c00000, 138412032 [pid 8880] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8882] <... openat resumed>) = 3 [pid 8880] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] close(3 [pid 8882] write(3, "1000", 4 [pid 8880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 8882] <... write resumed>) = 4 [pid 8880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8882] close(3 [pid 8880] <... mmap resumed>) = 0x7f58200ce000 [pid 8880] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8882] <... close resumed>) = 0 [pid 8880] <... mprotect resumed>) = 0 [pid 8882] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8883 ./strace-static-x86_64: Process 8883 attached [pid 8882] <... symlink resumed>) = 0 [pid 8880] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8878] <... munmap resumed>) = 0 [pid 8883] set_robust_list(0x5555567436a0, 24 [pid 8882] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8880] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8882] <... futex resumed>) = 0 [pid 8883] <... set_robust_list resumed>) = 0 [pid 8882] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8880] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8878] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8883] chdir("./378" [pid 8882] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8878] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8884 attached [pid 8883] <... chdir resumed>) = 0 [pid 8882] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8878] ioctl(4, LOOP_SET_FD, 3 [pid 8884] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8884] <... rseq resumed>) = 0 [pid 8882] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8880] <... clone3 resumed> => {parent_tid=[8884]}, 88) = 8884 [pid 8884] set_robust_list(0x7f58200ee9a0, 24 [pid 8882] <... mmap resumed>) = 0x7f58200ce000 [pid 8880] rt_sigprocmask(SIG_SETMASK, [], [pid 8884] <... set_robust_list resumed>) = 0 [pid 8882] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8884] rt_sigprocmask(SIG_SETMASK, [], [pid 8882] <... mprotect resumed>) = 0 [pid 8884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8882] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8884] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8882] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8882] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8885 attached [pid 8883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8880] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8885] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8883] <... prctl resumed>) = 0 [pid 8882] <... clone3 resumed> => {parent_tid=[8885]}, 88) = 8885 [pid 8881] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8880] <... futex resumed>) = 1 [pid 8878] <... ioctl resumed>) = 0 [pid 8883] setpgid(0, 0 [pid 8880] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8878] close(3 [pid 8883] <... setpgid resumed>) = 0 [pid 8878] <... close resumed>) = 0 [pid 8883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8878] close(4) = 0 [pid 8883] <... openat resumed>) = 3 [pid 8878] mkdir("./file0", 0777 [pid 8883] write(3, "1000", 4) = 4 [pid 8885] <... rseq resumed>) = 0 [pid 8882] rt_sigprocmask(SIG_SETMASK, [], [pid 8885] set_robust_list(0x7f58200ee9a0, 24 [pid 8882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8878] <... mkdir resumed>) = 0 [pid 8883] close(3 [pid 8878] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8883] <... close resumed>) = 0 [pid 8885] <... set_robust_list resumed>) = 0 [pid 8884] <... futex resumed>) = 0 [pid 8883] symlink("/dev/binderfs", "./binderfs" [pid 8882] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8885] rt_sigprocmask(SIG_SETMASK, [], [pid 8884] memfd_create("syzkaller", 0 [pid 8883] <... symlink resumed>) = 0 [pid 8882] <... futex resumed>) = 0 [pid 8883] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8884] <... memfd_create resumed>) = 3 [pid 8882] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8885] memfd_create("syzkaller", 0 [pid 8884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8883] <... futex resumed>) = 0 [ 332.824044][ T8878] loop1: detected capacity change from 0 to 4096 [pid 8884] <... mmap resumed>) = 0x7f5817c00000 [pid 8883] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8885] <... memfd_create resumed>) = 3 [pid 8883] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8883] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8883] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8881] <... write resumed>) = 2097152 [pid 8883] <... mprotect resumed>) = 0 [pid 8881] munmap(0x7f5817c00000, 138412032 [pid 8883] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8883] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8886 attached [pid 8881] <... munmap resumed>) = 0 [pid 8886] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8883] <... clone3 resumed> => {parent_tid=[8886]}, 88) = 8886 [pid 8886] <... rseq resumed>) = 0 [pid 8883] rt_sigprocmask(SIG_SETMASK, [], [pid 8886] set_robust_list(0x7f58200ee9a0, 24 [pid 8883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8881] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8878] <... mount resumed>) = 0 [pid 8886] <... set_robust_list resumed>) = 0 [pid 8883] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8886] rt_sigprocmask(SIG_SETMASK, [], [pid 8881] <... openat resumed>) = 4 [pid 8886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8883] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8881] ioctl(4, LOOP_SET_FD, 3 [ 332.871541][ T8878] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8885] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8886] memfd_create("syzkaller", 0 [pid 8878] <... openat resumed>) = 3 [pid 8886] <... memfd_create resumed>) = 3 [pid 8884] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8878] chdir("./file0" [pid 8886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8878] <... chdir resumed>) = 0 [pid 8878] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8886] <... mmap resumed>) = 0x7f5817c00000 [pid 8878] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8878] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8881] <... ioctl resumed>) = 0 [pid 8878] <... futex resumed>) = 1 [pid 8878] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8881] close(3) = 0 [pid 8881] close(4 [pid 8877] <... futex resumed>) = 0 [pid 8881] <... close resumed>) = 0 [pid 8877] exit_group(0 [pid 8878] <... futex resumed>) = ? [pid 8877] <... exit_group resumed>) = ? [pid 8881] mkdir("./file0", 0777 [pid 8878] +++ exited with 0 +++ [pid 8877] +++ exited with 0 +++ [pid 8881] <... mkdir resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8877, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 332.931787][ T8881] loop4: detected capacity change from 0 to 4096 [pid 8881] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5060] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8886] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./382/binderfs") = 0 [pid 5060] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 8885] <... write resumed>) = 2097152 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8884] <... write resumed>) = 2097152 [pid 5060] close(4) = 0 [pid 5060] rmdir("./382/file0") = 0 [pid 8884] munmap(0x7f5817c00000, 138412032 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8885] munmap(0x7f5817c00000, 138412032 [ 332.983529][ T8881] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5060] close(3 [pid 8884] <... munmap resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./382") = 0 [pid 5060] mkdir("./383", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8885] <... munmap resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8885] ioctl(4, LOOP_SET_FD, 3 [pid 8884] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8884] ioctl(4, LOOP_SET_FD, 3 [pid 8885] <... ioctl resumed>) = 0 [pid 8886] <... write resumed>) = 2097152 [pid 8885] close(3 [pid 8884] <... ioctl resumed>) = 0 [pid 8881] <... mount resumed>) = 0 [pid 8886] munmap(0x7f5817c00000, 138412032 [pid 8885] <... close resumed>) = 0 [pid 8884] close(3 [pid 8881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8885] close(4 [pid 8884] <... close resumed>) = 0 [pid 8881] <... openat resumed>) = 3 [pid 8885] <... close resumed>) = 0 [pid 8884] close(4 [pid 8885] mkdir("./file0", 0777 [pid 8884] <... close resumed>) = 0 [pid 8881] chdir("./file0" [pid 8885] <... mkdir resumed>) = 0 [pid 8884] mkdir("./file0", 0777 [pid 8881] <... chdir resumed>) = 0 [pid 8885] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8884] <... mkdir resumed>) = 0 [pid 8881] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8881] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8886] <... munmap resumed>) = 0 [ 333.059118][ T8885] loop0: detected capacity change from 0 to 4096 [ 333.068645][ T8884] loop2: detected capacity change from 0 to 4096 [pid 8881] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8886] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8879] <... futex resumed>) = 0 [pid 8879] exit_group(0 [pid 8886] <... openat resumed>) = 4 [pid 8879] <... exit_group resumed>) = ? [pid 8881] <... futex resumed>) = ? [pid 8881] +++ exited with 0 +++ [pid 8886] ioctl(4, LOOP_SET_FD, 3 [pid 8884] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8879] +++ exited with 0 +++ [pid 5060] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8879, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8886] <... ioctl resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 8886] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8886] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 8886] close(4) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8886] mkdir("./file0", 0777 [pid 5063] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8886] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(3 [pid 5063] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./377/binderfs") = 0 ./strace-static-x86_64: Process 8887 attached [pid 8886] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5063] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8887] set_robust_list(0x5555567436a0, 24) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8887 [pid 8887] chdir("./383") = 0 [pid 8887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... umount2 resumed>) = 0 [pid 8887] <... prctl resumed>) = 0 [pid 5063] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8887] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8887] <... setpgid resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./377/file0", [pid 8887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8887] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 333.106716][ T8885] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 333.122864][ T8886] loop3: detected capacity change from 0 to 4096 [ 333.129691][ T8884] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8887] write(3, "1000", 4 [pid 5063] getdents64(4, [pid 8887] <... write resumed>) = 4 [pid 8887] close(3 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8887] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 8887] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8887] <... symlink resumed>) = 0 [pid 5063] close(4 [pid 8887] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 8887] <... futex resumed>) = 0 [pid 8887] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] rmdir("./377/file0" [pid 8887] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8885] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8887] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] getdents64(3, [pid 8887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] close(3 [pid 8887] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... close resumed>) = 0 [pid 8887] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] rmdir("./377" [pid 8887] <... mprotect resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8887] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] mkdir("./378", 0777 [pid 8887] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8885] chdir("./file0" [pid 5063] <... mkdir resumed>) = 0 [pid 8885] <... chdir resumed>) = 0 [pid 8885] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 8888 attached ) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8888] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8887] <... clone3 resumed> => {parent_tid=[8888]}, 88) = 8888 [pid 8885] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 8888] <... rseq resumed>) = 0 [pid 8887] rt_sigprocmask(SIG_SETMASK, [], [pid 8885] <... futex resumed>) = 1 [pid 8882] <... futex resumed>) = 0 [pid 8888] set_robust_list(0x7f58200ee9a0, 24 [pid 8887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8885] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8882] exit_group(0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8888] <... set_robust_list resumed>) = 0 [pid 8887] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8885] <... futex resumed>) = ? [pid 8882] <... exit_group resumed>) = ? [ 333.186799][ T8886] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8888] rt_sigprocmask(SIG_SETMASK, [], [pid 8887] <... futex resumed>) = 0 [pid 8885] +++ exited with 0 +++ [pid 8884] <... mount resumed>) = 0 [pid 8882] +++ exited with 0 +++ [pid 8888] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8887] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8882, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8886] <... mount resumed>) = 0 [pid 8884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8888] memfd_create("syzkaller", 0 [pid 8884] <... openat resumed>) = 3 [pid 8888] <... memfd_create resumed>) = 3 [pid 8886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8884] chdir("./file0" [pid 8888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8886] <... openat resumed>) = 3 [pid 8884] <... chdir resumed>) = 0 [pid 8888] <... mmap resumed>) = 0x7f5817c00000 [pid 8886] chdir("./file0" [pid 8884] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8886] <... chdir resumed>) = 0 [pid 8884] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8886] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8884] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8886] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8884] <... futex resumed>) = 1 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8886] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8884] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8880] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8886] <... futex resumed>) = 1 [pid 8883] <... futex resumed>) = 0 [pid 8886] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8883] exit_group(0 [pid 8880] exit_group(0 [pid 5059] <... openat resumed>) = 3 [pid 8884] <... futex resumed>) = ? [pid 8883] <... exit_group resumed>) = ? [pid 8880] <... exit_group resumed>) = ? [pid 5059] newfstatat(3, "", [pid 8886] <... futex resumed>) = ? [pid 8884] +++ exited with 0 +++ [pid 8886] +++ exited with 0 +++ [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8883] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8883, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] getdents64(3, [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8880] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 3 [pid 5059] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8880, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(3, "", [pid 5061] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5061] newfstatat(AT_FDCWD, "./378/binderfs", [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./382/binderfs" [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8888] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] unlink("./378/binderfs") = 0 [pid 5062] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./378/binderfs") = 0 [pid 5062] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5059] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./378/file0", [pid 5059] newfstatat(4, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 5062] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(4./strace-static-x86_64: Process 8889 attached [pid 5062] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8889 [pid 5059] rmdir("./382/file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./378/file0", [pid 5062] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 8889] set_robust_list(0x5555567436a0, 24 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 8889] <... set_robust_list resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8889] chdir("./378" [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8889] <... chdir resumed>) = 0 [pid 5062] close(4 [pid 5059] close(3 [pid 8889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8889] <... prctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8889] setpgid(0, 0 [pid 5062] rmdir("./378/file0" [pid 5061] newfstatat(4, "", [pid 5059] rmdir("./382" [pid 8889] <... setpgid resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] getdents64(3, [pid 5059] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5062] close(3 [pid 8889] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 8889] write(3, "1000", 4 [pid 5059] mkdir("./383", 0777 [pid 5062] rmdir("./378") = 0 [pid 5062] mkdir("./379", 0777 [pid 5059] <... mkdir resumed>) = 0 [pid 8889] <... write resumed>) = 4 [pid 8889] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... openat resumed>) = 3 [pid 8889] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8889] symlink("/dev/binderfs", "./binderfs" [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8889] <... symlink resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] close(4) = 0 [pid 5061] rmdir("./378/file0") = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 8889] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] close(3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] close(3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./378"./strace-static-x86_64: Process 8890 attached ) = 0 [pid 8890] set_robust_list(0x5555567436a0, 24) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8890 [pid 8890] chdir("./379" [pid 5061] mkdir("./379", 0777 [pid 8890] <... chdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8890] setpgid(0, 0) = 0 [pid 8890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8890] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8890] write(3, "1000", 4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8890] <... write resumed>) = 4 [pid 8890] close(3 [pid 8889] <... futex resumed>) = 0 [pid 8888] <... write resumed>) = 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 8889] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8888] munmap(0x7f5817c00000, 138412032 [pid 8889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8890] <... close resumed>) = 0 [pid 8889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8890] symlink("/dev/binderfs", "./binderfs" [pid 8889] <... mmap resumed>) = 0x7f58200ce000 [pid 8889] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8890] <... symlink resumed>) = 0 [pid 8889] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8890] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8889] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8891 attached [pid 8890] <... futex resumed>) = 0 [pid 5059] close(3 [pid 8890] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8889] <... clone3 resumed> => {parent_tid=[8891]}, 88) = 8891 [pid 8891] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8890] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8889] rt_sigprocmask(SIG_SETMASK, [], [pid 8891] <... rseq resumed>) = 0 [pid 8890] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8889] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8888] <... munmap resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8891] set_robust_list(0x7f58200ee9a0, 24 [pid 8890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8890] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8891] <... set_robust_list resumed>) = 0 [pid 8890] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8890] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8893]}, 88) = 8893 [pid 8890] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8893 attached [pid 8891] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8888] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 8892 attached [pid 8893] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8892] set_robust_list(0x5555567436a0, 24 [pid 8893] <... rseq resumed>) = 0 [pid 8890] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8888] <... openat resumed>) = 4 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8892 [pid 8890] <... futex resumed>) = 0 [pid 8890] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8893] set_robust_list(0x7f58200ee9a0, 24 [pid 8892] <... set_robust_list resumed>) = 0 [pid 8893] <... set_robust_list resumed>) = 0 [pid 8888] ioctl(4, LOOP_SET_FD, 3 [pid 8889] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8889] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8891] <... futex resumed>) = 0 [pid 8893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8891] memfd_create("syzkaller", 0 [pid 8892] chdir("./383" [pid 8891] <... memfd_create resumed>) = 3 [pid 8892] <... chdir resumed>) = 0 [pid 8892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8893] memfd_create("syzkaller", 0 [pid 8891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8888] <... ioctl resumed>) = 0 [pid 8892] <... prctl resumed>) = 0 [pid 8893] <... memfd_create resumed>) = 3 [pid 8891] <... mmap resumed>) = 0x7f5817c00000 [pid 8888] close(3 [pid 5061] <... ioctl resumed>) = 0 [pid 8892] setpgid(0, 0 [pid 8893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8892] <... setpgid resumed>) = 0 [pid 8893] <... mmap resumed>) = 0x7f5817c00000 [pid 8892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8892] write(3, "1000", 4) = 4 [pid 8892] close(3) = 0 [pid 8892] symlink("/dev/binderfs", "./binderfs") = 0 [ 333.463557][ T8888] loop1: detected capacity change from 0 to 4096 [pid 8888] <... close resumed>) = 0 [pid 5061] close(3 [pid 8892] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8888] close(4 [pid 5061] <... close resumed>) = 0 [pid 8892] <... futex resumed>) = 0 [pid 8888] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8892] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8888] mkdir("./file0", 0777 [pid 8892] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8888] <... mkdir resumed>) = 0 [pid 8892] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8888] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8894 [pid 8892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8892] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8892] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 8894 attached [pid 8894] set_robust_list(0x5555567436a0, 24 [pid 8892] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8894] <... set_robust_list resumed>) = 0 [pid 8892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8894] chdir("./379") = 0 [pid 8892] <... clone3 resumed> => {parent_tid=[8895]}, 88) = 8895 [pid 8894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8892] rt_sigprocmask(SIG_SETMASK, [], [pid 8894] <... prctl resumed>) = 0 [pid 8892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8894] setpgid(0, 0 [pid 8892] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8895 attached [pid 8894] <... setpgid resumed>) = 0 [pid 8892] <... futex resumed>) = 0 [pid 8895] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8892] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8895] <... rseq resumed>) = 0 [pid 8894] <... openat resumed>) = 3 [pid 8895] set_robust_list(0x7f58200ee9a0, 24 [pid 8894] write(3, "1000", 4) = 4 [pid 8894] close(3 [pid 8895] <... set_robust_list resumed>) = 0 [pid 8895] rt_sigprocmask(SIG_SETMASK, [], [pid 8894] <... close resumed>) = 0 [pid 8895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8894] symlink("/dev/binderfs", "./binderfs" [pid 8893] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8894] <... symlink resumed>) = 0 [pid 8894] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8894] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8894] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8895] memfd_create("syzkaller", 0 [pid 8894] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8894] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8894] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8896 attached [pid 8896] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8895] <... memfd_create resumed>) = 3 [pid 8894] <... clone3 resumed> => {parent_tid=[8896]}, 88) = 8896 [pid 8896] <... rseq resumed>) = 0 [pid 8895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8894] rt_sigprocmask(SIG_SETMASK, [], [pid 8891] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8896] set_robust_list(0x7f58200ee9a0, 24 [pid 8894] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8895] <... mmap resumed>) = 0x7f5817c00000 [pid 8896] <... set_robust_list resumed>) = 0 [pid 8894] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 333.521314][ T8888] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8896] rt_sigprocmask(SIG_SETMASK, [], [pid 8894] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8896] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8896] memfd_create("syzkaller", 0) = 3 [pid 8896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8895] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8893] <... write resumed>) = 2097152 [pid 8888] <... mount resumed>) = 0 [pid 8893] munmap(0x7f5817c00000, 138412032 [pid 8891] <... write resumed>) = 2097152 [pid 8891] munmap(0x7f5817c00000, 138412032 [pid 8888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8888] chdir("./file0") = 0 [pid 8888] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8888] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8887] <... futex resumed>) = 0 [pid 8888] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8887] exit_group(0 [pid 8888] <... futex resumed>) = ? [pid 8887] <... exit_group resumed>) = ? [pid 8891] <... munmap resumed>) = 0 [pid 8888] +++ exited with 0 +++ [pid 8887] +++ exited with 0 +++ [pid 8893] <... munmap resumed>) = 0 [pid 8893] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8887, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8893] <... openat resumed>) = 4 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8896] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8893] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5060] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8891] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8891] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 8891] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./383/binderfs") = 0 [pid 5060] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8893] <... ioctl resumed>) = 0 [pid 8895] <... write resumed>) = 2097152 [pid 8891] <... ioctl resumed>) = 0 [pid 8891] close(3 [pid 8895] munmap(0x7f5817c00000, 138412032 [pid 8893] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 8893] <... close resumed>) = 0 [pid 8891] <... close resumed>) = 0 [pid 5060] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8893] close(4 [pid 8891] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8893] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./383/file0", [pid 8893] mkdir("./file0", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8893] <... mkdir resumed>) = 0 [pid 5060] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 8893] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8896] <... write resumed>) = 2097152 [pid 8895] <... munmap resumed>) = 0 [pid 8891] <... close resumed>) = 0 [ 333.665913][ T8893] loop3: detected capacity change from 0 to 4096 [ 333.684392][ T8891] loop4: detected capacity change from 0 to 4096 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8896] munmap(0x7f5817c00000, 138412032 [pid 8895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8891] mkdir("./file0", 0777 [pid 8895] <... openat resumed>) = 4 [pid 8891] <... mkdir resumed>) = 0 [pid 8896] <... munmap resumed>) = 0 [pid 8891] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8896] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8895] ioctl(4, LOOP_SET_FD, 3 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8896] <... openat resumed>) = 4 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [ 333.720492][ T8893] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 333.739519][ T8891] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 333.751373][ T8895] loop0: detected capacity change from 0 to 4096 [pid 8896] ioctl(4, LOOP_SET_FD, 3 [pid 5060] close(4) = 0 [pid 5060] rmdir("./383/file0" [pid 8893] <... mount resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./383" [pid 8893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 8893] <... openat resumed>) = 3 [pid 5060] mkdir("./384", 0777) = 0 [pid 8895] <... ioctl resumed>) = 0 [pid 8893] chdir("./file0" [pid 8895] close(3 [pid 8893] <... chdir resumed>) = 0 [pid 8895] <... close resumed>) = 0 [pid 8895] close(4 [pid 8893] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8895] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8895] mkdir("./file0", 0777 [pid 8893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... openat resumed>) = 3 [pid 8896] <... ioctl resumed>) = 0 [pid 8895] <... mkdir resumed>) = 0 [pid 8893] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8896] close(3 [pid 8893] <... futex resumed>) = 1 [pid 8890] <... futex resumed>) = 0 [pid 8896] <... close resumed>) = 0 [pid 8895] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8893] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8890] exit_group(0 [pid 8896] close(4 [pid 8893] <... futex resumed>) = ? [pid 8890] <... exit_group resumed>) = ? [pid 8896] <... close resumed>) = 0 [pid 8896] mkdir("./file0", 0777) = 0 [ 333.773898][ T8896] loop2: detected capacity change from 0 to 4096 [ 333.809890][ T8895] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8896] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8893] +++ exited with 0 +++ [pid 8891] <... mount resumed>) = 0 [pid 8890] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8890, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 8891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8891] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8891] chdir("./file0" [pid 5062] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8891] <... chdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8891] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(3, "", [pid 8891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8891] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./379/binderfs") = 0 [pid 5062] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8891] <... futex resumed>) = 1 [pid 8891] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8889] <... futex resumed>) = 0 [pid 8889] exit_group(0 [pid 8891] <... futex resumed>) = ? [pid 8889] <... exit_group resumed>) = ? [pid 8891] +++ exited with 0 +++ [pid 8889] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8889, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5060] <... ioctl resumed>) = 0 [ 333.826342][ T8896] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5063] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 8895] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 8895] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 5062] newfstatat(AT_FDCWD, "./379/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8897 attached [pid 5063] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8897] set_robust_list(0x5555567436a0, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8897] <... set_robust_list resumed>) = 0 [pid 8895] chdir("./file0" [pid 5063] newfstatat(AT_FDCWD, "./378/binderfs", [pid 5062] <... openat resumed>) = 4 [pid 8897] chdir("./384" [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8897 [pid 5062] newfstatat(4, "", [pid 8897] <... chdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] getdents64(4, [pid 8895] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8897] <... prctl resumed>) = 0 [pid 8895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] getdents64(4, [pid 8897] setpgid(0, 0 [pid 8895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8897] <... setpgid resumed>) = 0 [pid 8895] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] unlink("./378/binderfs" [pid 5062] close(4 [pid 8897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8895] <... futex resumed>) = 1 [pid 8892] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8897] <... openat resumed>) = 3 [pid 8895] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8892] exit_group(0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] rmdir("./379/file0" [pid 8897] write(3, "1000", 4 [pid 8895] <... futex resumed>) = ? [pid 8892] <... exit_group resumed>) = ? [pid 8897] <... write resumed>) = 4 [pid 8895] +++ exited with 0 +++ [pid 8892] +++ exited with 0 +++ [pid 5063] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 8897] close(3 [pid 5062] getdents64(3, [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8892, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8897] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 8897] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 8897] <... symlink resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./378/file0", [pid 5062] rmdir("./379" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8897] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./380", 0777 [pid 8897] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 8897] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8897] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 8897] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 8897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8897] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] getdents64(4, [pid 8897] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8897] <... mprotect resumed>) = 0 [pid 8897] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8897] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8896] <... mount resumed>) = 0 [pid 5063] close(4 [pid 5059] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8897] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 8896] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8897] <... clone3 resumed> => {parent_tid=[8898]}, 88) = 8898 [pid 5063] rmdir("./378/file0" [pid 5059] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8898 attached [pid 8897] rt_sigprocmask(SIG_SETMASK, [], [pid 8896] chdir("./file0" [pid 5063] <... rmdir resumed>) = 0 [pid 8898] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8896] <... chdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8898] <... rseq resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8898] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8898] <... set_robust_list resumed>) = 0 [pid 8898] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] getdents64(3, [pid 8898] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8898] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8897] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8896] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] getdents64(3, [pid 8898] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8897] <... futex resumed>) = 0 [pid 8896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8897] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8896] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 8896] <... futex resumed>) = 1 [pid 5063] <... close resumed>) = 0 [pid 8896] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] rmdir("./378") = 0 [pid 5063] mkdir("./379", 0777 [pid 8898] memfd_create("syzkaller", 0 [pid 8894] <... futex resumed>) = 0 [pid 8894] exit_group(0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8896] <... futex resumed>) = ? [pid 8894] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8896] +++ exited with 0 +++ [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8898] <... memfd_create resumed>) = 3 [pid 8898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8894] +++ exited with 0 +++ [pid 5059] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8894, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./383/binderfs") = 0 [pid 5061] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8898] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./383/file0", [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./379/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] unlink("./379/binderfs" [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 8898] <... write resumed>) = 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 5059] rmdir("./383/file0" [pid 5061] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] getdents64(3, [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8898] munmap(0x7f5817c00000, 138412032 [pid 5061] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3) = 0 [pid 5059] rmdir("./383" [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./384", 0777./strace-static-x86_64: Process 8899 attached [pid 8899] set_robust_list(0x5555567436a0, 24 [pid 8898] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... mkdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8899 [pid 5061] newfstatat(AT_FDCWD, "./379/file0", [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8899] <... set_robust_list resumed>) = 0 [pid 8899] chdir("./380") = 0 [pid 8899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8898] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8899] <... prctl resumed>) = 0 [pid 8899] setpgid(0, 0 [pid 5059] <... openat resumed>) = 3 [pid 8899] <... setpgid resumed>) = 0 [pid 8899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8898] <... openat resumed>) = 4 [pid 5061] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8898] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... ioctl resumed>) = 0 [pid 8899] write(3, "1000", 4) = 4 [pid 8899] close(3) = 0 [pid 8899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8899] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8899] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5061] newfstatat(4, "", [pid 8898] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8899] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8898] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8900 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8900 [pid 5061] getdents64(4, [pid 8900] set_robust_list(0x5555567436a0, 24 [pid 8899] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8898] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8900] <... set_robust_list resumed>) = 0 [pid 8898] close(4 [pid 5061] close(4 [pid 8898] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./379/file0" [pid 8899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5061] <... rmdir resumed>) = 0 [pid 8900] chdir("./379" [pid 8899] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8898] mkdir("./file0", 0777 [pid 8900] <... chdir resumed>) = 0 [pid 8899] <... mprotect resumed>) = 0 [pid 5061] getdents64(3, [pid 8900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8899] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8900] <... prctl resumed>) = 0 [pid 8899] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8898] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8900] setpgid(0, 0 [pid 8899] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8898] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] close(3./strace-static-x86_64: Process 8901 attached [pid 8900] <... setpgid resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8899] <... clone3 resumed> => {parent_tid=[8901]}, 88) = 8901 [pid 8900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8899] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] rmdir("./379" [pid 8899] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8899] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8899] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... rmdir resumed>) = 0 [pid 8900] <... openat resumed>) = 3 [pid 5061] mkdir("./380", 0777) = 0 [pid 8900] write(3, "1000", 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8900] <... write resumed>) = 4 [ 334.064896][ T8898] loop1: detected capacity change from 0 to 4096 [pid 8901] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 8901] <... rseq resumed>) = 0 [pid 8900] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... close resumed>) = 0 [pid 8901] set_robust_list(0x7f58200ee9a0, 24 [pid 8900] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8901] <... set_robust_list resumed>) = 0 [pid 8900] symlink("/dev/binderfs", "./binderfs" [pid 8901] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8902 [pid 8901] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8902 attached [pid 8902] set_robust_list(0x5555567436a0, 24) = 0 [pid 8902] chdir("./384" [pid 8901] memfd_create("syzkaller", 0 [pid 8902] <... chdir resumed>) = 0 [pid 8902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8900] <... symlink resumed>) = 0 [pid 8902] <... prctl resumed>) = 0 [pid 8902] setpgid(0, 0) = 0 [pid 8902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8900] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8902] write(3, "1000", 4) = 4 [pid 8902] close(3) = 0 [pid 8902] symlink("/dev/binderfs", "./binderfs" [pid 8900] <... futex resumed>) = 0 [pid 8902] <... symlink resumed>) = 0 [pid 8901] <... memfd_create resumed>) = 3 [pid 8900] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8902] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8900] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8902] <... futex resumed>) = 0 [pid 8901] <... mmap resumed>) = 0x7f5817c00000 [pid 8900] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8902] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8900] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8902] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8902] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8900] <... mmap resumed>) = 0x7f58200ce000 [pid 8902] <... mmap resumed>) = 0x7f58200ce000 [pid 8900] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8902] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8902] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8900] <... mprotect resumed>) = 0 [pid 8902] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8900] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8903 attached [pid 8900] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8903] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8902] <... clone3 resumed> => {parent_tid=[8903]}, 88) = 8903 [pid 8900] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8903] <... rseq resumed>) = 0 [ 334.121954][ T8898] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8902] rt_sigprocmask(SIG_SETMASK, [], [pid 8898] <... mount resumed>) = 0 [pid 8903] set_robust_list(0x7f58200ee9a0, 24 [pid 8902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8903] <... set_robust_list resumed>) = 0 [pid 8902] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8903] rt_sigprocmask(SIG_SETMASK, [], [pid 8902] <... futex resumed>) = 0 [pid 8902] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8903] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8903] memfd_create("syzkaller", 0./strace-static-x86_64: Process 8904 attached [pid 8900] <... clone3 resumed> => {parent_tid=[8904]}, 88) = 8904 [pid 8898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... ioctl resumed>) = 0 [pid 8904] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8900] rt_sigprocmask(SIG_SETMASK, [], [pid 8904] <... rseq resumed>) = 0 [pid 8898] <... openat resumed>) = 3 [pid 8904] set_robust_list(0x7f58200ee9a0, 24 [pid 8900] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8898] chdir("./file0" [pid 8904] <... set_robust_list resumed>) = 0 [pid 8904] rt_sigprocmask(SIG_SETMASK, [], [pid 8898] <... chdir resumed>) = 0 [pid 8904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8904] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8900] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8904] <... futex resumed>) = 0 [pid 8900] <... futex resumed>) = 1 [pid 8904] memfd_create("syzkaller", 0 [pid 8900] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8898] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8903] <... memfd_create resumed>) = 3 [pid 8898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8898] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(3 [pid 8904] <... memfd_create resumed>) = 3 [pid 8903] <... mmap resumed>) = 0x7f5817c00000 [pid 8898] <... futex resumed>) = 1 [pid 8898] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... close resumed>) = 0 [pid 8904] <... mmap resumed>) = 0x7f5817c00000 [pid 8897] <... futex resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8901] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8897] exit_group(0) = ? [pid 8898] <... futex resumed>) = ? [pid 8898] +++ exited with 0 +++ [pid 8897] +++ exited with 0 +++ ./strace-static-x86_64: Process 8905 attached [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8897, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8905] set_robust_list(0x5555567436a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8905 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8905] <... set_robust_list resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 8905] chdir("./380") = 0 [pid 8904] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8905] <... prctl resumed>) = 0 [pid 8905] setpgid(0, 0 [pid 5060] <... openat resumed>) = 3 [pid 8905] <... setpgid resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 8905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 8905] <... openat resumed>) = 3 [pid 8903] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] write(3, "1000", 4) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8905] close(3 [pid 5060] newfstatat(AT_FDCWD, "./384/binderfs", [pid 8905] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8905] symlink("/dev/binderfs", "./binderfs" [pid 8901] <... write resumed>) = 2097152 [pid 5060] unlink("./384/binderfs" [pid 8905] <... symlink resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8905] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8901] munmap(0x7f5817c00000, 138412032 [pid 8905] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8905] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8905] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = 0 [pid 8905] <... mprotect resumed>) = 0 [pid 8905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5060] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./384/file0", ./strace-static-x86_64: Process 8906 attached [pid 8905] <... clone3 resumed> => {parent_tid=[8906]}, 88) = 8906 [pid 8901] <... munmap resumed>) = 0 [pid 8905] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8906] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8906] <... rseq resumed>) = 0 [pid 8905] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8901] <... openat resumed>) = 4 [pid 8906] set_robust_list(0x7f58200ee9a0, 24 [pid 8905] <... futex resumed>) = 0 [pid 8904] <... write resumed>) = 2097152 [pid 8901] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8906] <... set_robust_list resumed>) = 0 [pid 8905] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8903] <... write resumed>) = 2097152 [pid 8903] munmap(0x7f5817c00000, 138412032 [pid 8906] rt_sigprocmask(SIG_SETMASK, [], [pid 8904] munmap(0x7f5817c00000, 138412032 [pid 5060] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8901] <... ioctl resumed>) = 0 [pid 8906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8906] memfd_create("syzkaller", 0 [pid 5060] <... openat resumed>) = 4 [pid 8906] <... memfd_create resumed>) = 3 [pid 5060] newfstatat(4, "", [pid 8906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8906] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 8904] <... munmap resumed>) = 0 [pid 8903] <... munmap resumed>) = 0 [pid 8901] close(3 [pid 5060] rmdir("./384/file0" [pid 8904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8903] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8901] <... close resumed>) = 0 [pid 8904] <... openat resumed>) = 4 [pid 8903] <... openat resumed>) = 4 [pid 8901] close(4 [pid 5060] <... rmdir resumed>) = 0 [pid 8906] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8904] ioctl(4, LOOP_SET_FD, 3 [pid 8903] ioctl(4, LOOP_SET_FD, 3 [pid 5060] getdents64(3, [pid 8901] <... close resumed>) = 0 [ 334.331235][ T8901] loop3: detected capacity change from 0 to 4096 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8901] mkdir("./file0", 0777 [pid 5060] close(3 [pid 8901] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8904] <... ioctl resumed>) = 0 [pid 8903] <... ioctl resumed>) = 0 [pid 8901] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5060] rmdir("./384" [pid 8904] close(3 [pid 8903] close(3 [pid 5060] <... rmdir resumed>) = 0 [pid 8904] <... close resumed>) = 0 [pid 8903] <... close resumed>) = 0 [pid 5060] mkdir("./385", 0777 [pid 8904] close(4 [pid 8903] close(4 [pid 8904] <... close resumed>) = 0 [pid 8903] <... close resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8903] mkdir("./file0", 0777 [pid 8904] mkdir("./file0", 0777 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8904] <... mkdir resumed>) = 0 [pid 8903] <... mkdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8906] <... write resumed>) = 2097152 [pid 8903] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [ 334.377883][ T8904] loop4: detected capacity change from 0 to 4096 [ 334.387130][ T8903] loop0: detected capacity change from 0 to 4096 [ 334.399351][ T8901] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8904] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8906] munmap(0x7f5817c00000, 138412032) = 0 [pid 8906] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8906] close(3) = 0 [pid 8906] close(4 [pid 5060] close(3 [pid 8906] <... close resumed>) = 0 [pid 8906] mkdir("./file0", 0777 [pid 5060] <... close resumed>) = 0 [pid 8906] <... mkdir resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 334.433966][ T8904] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 334.445512][ T8903] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 334.466352][ T8906] loop2: detected capacity change from 0 to 4096 [pid 8906] mount("/dev/loop2", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8907 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8907 [pid 8907] set_robust_list(0x5555567436a0, 24) = 0 [ 334.516386][ T8906] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8907] chdir("./385") = 0 [pid 8901] <... mount resumed>) = 0 [pid 8901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8901] chdir("./file0") = 0 [pid 8901] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8901] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8901] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8899] <... futex resumed>) = 0 [pid 8907] <... prctl resumed>) = 0 [pid 8899] exit_group(0 [pid 8907] setpgid(0, 0 [pid 8904] <... mount resumed>) = 0 [pid 8903] <... mount resumed>) = 0 [pid 8899] <... exit_group resumed>) = ? [pid 8907] <... setpgid resumed>) = 0 [pid 8904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8901] <... futex resumed>) = ? [pid 8907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8904] <... openat resumed>) = 3 [pid 8903] <... openat resumed>) = 3 [pid 8901] +++ exited with 0 +++ [pid 8899] +++ exited with 0 +++ [pid 8904] chdir("./file0" [pid 8903] chdir("./file0" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8899, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8907] <... openat resumed>) = 3 [pid 8904] <... chdir resumed>) = 0 [pid 8903] <... chdir resumed>) = 0 [pid 8907] write(3, "1000", 4 [pid 8904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8903] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8907] <... write resumed>) = 4 [pid 8904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8907] close(3 [pid 8903] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8904] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8903] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] <... close resumed>) = 0 [pid 8904] <... futex resumed>) = 1 [pid 8902] <... futex resumed>) = 0 [pid 8900] <... futex resumed>) = 0 [pid 8907] symlink("/dev/binderfs", "./binderfs" [pid 8904] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8902] exit_group(0 [pid 8900] exit_group(0 [pid 5062] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8904] <... futex resumed>) = ? [pid 8900] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8907] <... symlink resumed>) = 0 [pid 8904] +++ exited with 0 +++ [pid 8903] <... futex resumed>) = ? [pid 8902] <... exit_group resumed>) = ? [pid 8900] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8903] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8900, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8906] <... mount resumed>) = 0 [pid 5062] getdents64(3, [pid 8907] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8907] <... futex resumed>) = 0 [pid 8906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8907] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8902] +++ exited with 0 +++ [pid 5062] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8907] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8906] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8902, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 8907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8906] chdir("./file0" [pid 5063] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./380/binderfs", [pid 8907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8906] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] newfstatat(3, "", [pid 5062] unlink("./380/binderfs" [pid 5059] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8907] <... mmap resumed>) = 0x7f58200ce000 [pid 8906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5062] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8907] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8906] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] <... openat resumed>) = 3 [pid 8907] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8906] <... futex resumed>) = 1 [pid 8905] <... futex resumed>) = 0 [pid 5063] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8907] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8906] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8906] <... futex resumed>) = ? [pid 8905] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./379/binderfs", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 8906] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(AT_FDCWD, "./380/file0", [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] unlink("./379/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./384/binderfs", ./strace-static-x86_64: Process 8908 attached [pid 8905] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8908] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8907] <... clone3 resumed> => {parent_tid=[8908]}, 88) = 8908 [pid 5063] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8905, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] unlink("./384/binderfs" [pid 8908] <... rseq resumed>) = 0 [pid 8907] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(4, "", [pid 5059] <... unlink resumed>) = 0 [pid 8908] set_robust_list(0x7f58200ee9a0, 24 [pid 8907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(AT_FDCWD, "./379/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8908] <... set_robust_list resumed>) = 0 [pid 8907] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(4, [pid 8908] rt_sigprocmask(SIG_SETMASK, [], [pid 8907] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 8908] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8907] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5062] close(4 [pid 5059] newfstatat(AT_FDCWD, "./384/file0", [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5063] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] rmdir("./380/file0" [pid 5061] getdents64(3, [pid 8908] memfd_create("syzkaller", 0 [pid 5063] getdents64(4, [pid 5062] <... rmdir resumed>) = 0 [pid 5059] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8908] <... memfd_create resumed>) = 3 [pid 5061] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5062] getdents64(3, [pid 5059] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8908] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./380/binderfs", [pid 5059] <... openat resumed>) = 4 [pid 5063] rmdir("./379/file0" [pid 5062] close(3 [pid 5059] newfstatat(4, "", [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5062] rmdir("./380" [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] unlink("./380/binderfs" [pid 5059] getdents64(4, [pid 5063] close(3 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5062] mkdir("./381", 0777 [pid 5061] <... unlink resumed>) = 0 [pid 5059] getdents64(4, [pid 5061] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 8908] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] rmdir("./379" [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] rmdir("./384/file0" [pid 5063] mkdir("./380", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... rmdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] newfstatat(AT_FDCWD, "./380/file0", [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 8908] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8908] munmap(0x7f5817c00000, 138412032 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] rmdir("./384" [pid 5061] <... openat resumed>) = 4 [pid 8908] <... munmap resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8908] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8908] <... openat resumed>) = 4 [pid 5059] mkdir("./385", 0777 [pid 5061] getdents64(4, [pid 8908] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./380/file0") = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] getdents64(3, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8908] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8908] close(3) = 0 [pid 8908] close(4 [pid 5061] rmdir("./380" [pid 8908] <... close resumed>) = 0 [pid 8908] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8908] <... mkdir resumed>) = 0 [pid 5061] mkdir("./381", 0777) = 0 [pid 5062] close(3 [pid 8908] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [ 334.727581][ T8908] loop1: detected capacity change from 0 to 4096 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8909 attached [pid 8909] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8909 [pid 8909] <... set_robust_list resumed>) = 0 [pid 8909] chdir("./381" [pid 5061] <... openat resumed>) = 3 [pid 8909] <... chdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8909] setpgid(0, 0) = 0 [pid 8909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8909] write(3, "1000", 4) = 4 [pid 8909] close(3) = 0 [pid 8909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8909] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8909] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8909] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5063] close(3 [pid 8909] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... close resumed>) = 0 [pid 8909] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8909] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8909] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8911 attached => {parent_tid=[8910]}, 88) = 8910 [pid 5059] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8910 attached [pid 8911] set_robust_list(0x5555567436a0, 24 [ 334.786560][ T8908] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8909] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8911 [pid 8911] <... set_robust_list resumed>) = 0 [pid 8910] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8909] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] close(3 [pid 8910] <... rseq resumed>) = 0 [pid 8910] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8909] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8909] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8910] memfd_create("syzkaller", 0 [pid 8909] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8911] chdir("./380") = 0 [pid 8911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8911] setpgid(0, 0 [pid 8910] <... memfd_create resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8912 attached [pid 8911] <... setpgid resumed>) = 0 [pid 5061] close(3 [pid 8910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8912 [pid 8911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... close resumed>) = 0 [pid 8910] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8912] set_robust_list(0x5555567436a0, 24) = 0 [pid 8911] <... openat resumed>) = 3 [pid 8912] chdir("./385" [pid 8911] write(3, "1000", 4) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8913 [pid 8911] close(3) = 0 ./strace-static-x86_64: Process 8913 attached [pid 8911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8912] <... chdir resumed>) = 0 [pid 8913] set_robust_list(0x5555567436a0, 24) = 0 [pid 8912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8913] chdir("./381" [pid 8912] <... prctl resumed>) = 0 [pid 8911] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8913] <... chdir resumed>) = 0 [pid 8912] setpgid(0, 0 [pid 8911] <... futex resumed>) = 0 [pid 8913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8912] <... setpgid resumed>) = 0 [pid 8911] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8913] <... prctl resumed>) = 0 [pid 8911] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8913] setpgid(0, 0 [pid 8912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8913] <... setpgid resumed>) = 0 [pid 8911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8912] <... openat resumed>) = 3 [pid 8911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8910] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8911] <... mmap resumed>) = 0x7f58200ce000 [pid 8913] <... openat resumed>) = 3 [pid 8911] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8913] write(3, "1000", 4) = 4 [pid 8913] close(3 [pid 8912] write(3, "1000", 4 [pid 8913] <... close resumed>) = 0 [pid 8912] <... write resumed>) = 4 [pid 8911] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8912] close(3 [pid 8913] symlink("/dev/binderfs", "./binderfs" [pid 8912] <... close resumed>) = 0 [pid 8912] symlink("/dev/binderfs", "./binderfs" [pid 8911] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8913] <... symlink resumed>) = 0 [pid 8912] <... symlink resumed>) = 0 [pid 8908] <... mount resumed>) = 0 [pid 8912] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8913] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8914 attached [pid 8912] <... futex resumed>) = 0 [pid 8910] <... write resumed>) = 2097152 [pid 8908] <... openat resumed>) = 3 [pid 8914] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8913] <... futex resumed>) = 0 [pid 8912] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8910] munmap(0x7f5817c00000, 138412032 [pid 8908] chdir("./file0" [pid 8914] <... rseq resumed>) = 0 [pid 8913] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8912] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8911] <... clone3 resumed> => {parent_tid=[8914]}, 88) = 8914 [pid 8908] <... chdir resumed>) = 0 [pid 8914] set_robust_list(0x7f58200ee9a0, 24 [pid 8913] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8912] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8911] rt_sigprocmask(SIG_SETMASK, [], [pid 8908] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8914] <... set_robust_list resumed>) = 0 [pid 8913] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8914] rt_sigprocmask(SIG_SETMASK, [], [pid 8913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8911] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] <... munmap resumed>) = 0 [pid 8908] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8912] <... mmap resumed>) = 0x7f58200ce000 [pid 8911] <... futex resumed>) = 0 [pid 8910] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 8911] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8910] <... openat resumed>) = 4 [pid 8908] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8910] ioctl(4, LOOP_SET_FD, 3 [pid 8914] memfd_create("syzkaller", 0 [pid 8913] <... mmap resumed>) = 0x7f58200ce000 [pid 8912] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8907] exit_group(0 [pid 8914] <... memfd_create resumed>) = 3 [pid 8913] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8912] <... mprotect resumed>) = 0 [pid 8907] <... exit_group resumed>) = ? [pid 8913] <... mprotect resumed>) = 0 [pid 8912] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8913] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8914] <... mmap resumed>) = 0x7f5817c00000 [pid 8912] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8913] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8910] <... ioctl resumed>) = 0 [pid 8908] <... futex resumed>) = ? ./strace-static-x86_64: Process 8915 attached [pid 8915] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8912] <... clone3 resumed> => {parent_tid=[8915]}, 88) = 8915 [pid 8915] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8912] rt_sigprocmask(SIG_SETMASK, [], [pid 8908] +++ exited with 0 +++ [pid 8907] +++ exited with 0 +++ [pid 8915] rt_sigprocmask(SIG_SETMASK, [], [pid 8913] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8910] close(3./strace-static-x86_64: Process 8916 attached [pid 8915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8912] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] <... close resumed>) = 0 [pid 8916] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8915] memfd_create("syzkaller", 0 [pid 8913] <... clone3 resumed> => {parent_tid=[8916]}, 88) = 8916 [pid 8912] <... futex resumed>) = 0 [pid 8910] close(4 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8907, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8916] <... rseq resumed>) = 0 [pid 8913] rt_sigprocmask(SIG_SETMASK, [], [pid 8910] <... close resumed>) = 0 [pid 8916] set_robust_list(0x7f58200ee9a0, 24 [pid 8912] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 8913] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] mkdir("./file0", 0777 [pid 5060] <... restart_syscall resumed>) = 0 [pid 8916] <... set_robust_list resumed>) = 0 [pid 8916] rt_sigprocmask(SIG_SETMASK, [], [pid 8913] <... futex resumed>) = 0 [pid 8916] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8915] <... memfd_create resumed>) = 3 [pid 8913] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8910] <... mkdir resumed>) = 0 [pid 8916] memfd_create("syzkaller", 0 [pid 8915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8910] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8915] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8916] <... memfd_create resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... openat resumed>) = 3 [pid 8916] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./385/binderfs") = 0 [pid 5060] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8914] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./385/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 334.982440][ T8910] loop3: detected capacity change from 0 to 4096 [ 335.013373][ T8910] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 5060] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 8914] <... write resumed>) = 2097152 [pid 5060] rmdir("./385/file0" [pid 8916] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8915] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8914] munmap(0x7f5817c00000, 138412032) = 0 [pid 8910] <... mount resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 8914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] rmdir("./385" [pid 8914] <... openat resumed>) = 4 [pid 8910] <... openat resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 8914] ioctl(4, LOOP_SET_FD, 3 [pid 8910] chdir("./file0" [pid 5060] mkdir("./386", 0777 [pid 8910] <... chdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8910] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8910] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8909] <... futex resumed>) = 0 [pid 8910] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] exit_group(0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8910] <... futex resumed>) = ? [pid 8909] <... exit_group resumed>) = ? [pid 8910] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 3 [pid 8909] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8909, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8914] <... ioctl resumed>) = 0 [pid 8914] close(3 [pid 5062] getdents64(3, [pid 8914] <... close resumed>) = 0 [pid 8914] close(4 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8916] <... write resumed>) = 2097152 [pid 8915] <... write resumed>) = 2097152 [pid 8914] <... close resumed>) = 0 [pid 8916] munmap(0x7f5817c00000, 138412032 [pid 8915] munmap(0x7f5817c00000, 138412032 [pid 8914] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8916] <... munmap resumed>) = 0 [pid 8914] <... mkdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./381/binderfs") = 0 [ 335.110686][ T8914] loop4: detected capacity change from 0 to 4096 [pid 5062] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8916] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8915] <... munmap resumed>) = 0 [pid 8914] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8916] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./381/file0", [pid 5060] <... ioctl resumed>) = 0 [pid 8916] ioctl(4, LOOP_SET_FD, 3 [pid 8915] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8915] <... openat resumed>) = 4 [pid 8915] ioctl(4, LOOP_SET_FD, 3 [pid 8916] <... ioctl resumed>) = 0 [pid 5062] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 8916] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8916] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8916] close(4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8916] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8916] mkdir("./file0", 0777 [pid 8915] <... ioctl resumed>) = 0 [pid 8915] close(3) = 0 [pid 8915] close(4) = 0 [pid 8915] mkdir("./file0", 0777) = 0 [pid 8916] <... mkdir resumed>) = 0 [pid 8915] mount("/dev/loop0", "./file0", "ntfs3", 0, ""./strace-static-x86_64: Process 8917 attached [pid 8916] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] newfstatat(4, "", [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8917 [ 335.188244][ T8914] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 335.198804][ T8916] loop2: detected capacity change from 0 to 4096 [ 335.201772][ T8915] loop0: detected capacity change from 0 to 4096 [ 335.225481][ T8915] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8917] set_robust_list(0x5555567436a0, 24 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8917] <... set_robust_list resumed>) = 0 [pid 5062] close(4) = 0 [pid 8917] chdir("./386" [pid 5062] rmdir("./381/file0" [pid 8917] <... chdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] getdents64(3, [pid 8917] <... prctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8917] setpgid(0, 0 [pid 5062] close(3 [pid 8917] <... setpgid resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] rmdir("./381" [pid 8917] <... openat resumed>) = 3 [pid 8917] write(3, "1000", 4 [pid 5062] <... rmdir resumed>) = 0 [pid 8917] <... write resumed>) = 4 [pid 5062] mkdir("./382", 0777 [pid 8917] close(3 [pid 5062] <... mkdir resumed>) = 0 [pid 8917] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8917] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... openat resumed>) = 3 [pid 8917] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8917] <... futex resumed>) = 0 [pid 8916] <... mount resumed>) = 0 [pid 8917] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8917] <... rt_sigaction resumed>NULL, 8) = 0 [ 335.236897][ T8916] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8917] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8916] <... openat resumed>) = 3 [pid 8917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8916] chdir("./file0" [pid 8917] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8916] <... chdir resumed>) = 0 [pid 8917] <... mmap resumed>) = 0x7f58200ce000 [pid 8916] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8917] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8917] <... mprotect resumed>) = 0 [pid 8916] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8915] <... mount resumed>) = 0 [pid 8916] <... futex resumed>) = 1 [pid 8917] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8916] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8914] <... mount resumed>) = 0 [pid 8913] <... futex resumed>) = 0 [pid 8917] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8915] <... openat resumed>) = 3 [pid 8914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8913] exit_group(0 [pid 8917] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8916] <... futex resumed>) = ? [pid 8915] chdir("./file0" [pid 8913] <... exit_group resumed>) = ? [pid 8915] <... chdir resumed>) = 0 [pid 8914] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8918 attached [pid 8918] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8917] <... clone3 resumed> => {parent_tid=[8918]}, 88) = 8918 [pid 8915] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8914] chdir("./file0" [pid 8918] set_robust_list(0x7f58200ee9a0, 24 [pid 8917] rt_sigprocmask(SIG_SETMASK, [], [pid 8915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8914] <... chdir resumed>) = 0 [pid 8918] <... set_robust_list resumed>) = 0 [pid 8917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8916] +++ exited with 0 +++ [pid 8913] +++ exited with 0 +++ [pid 8918] rt_sigprocmask(SIG_SETMASK, [], [pid 8914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8915] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8913, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8918] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8915] <... futex resumed>) = 1 [pid 8915] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8917] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8914] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8917] <... futex resumed>) = 1 [pid 8914] <... futex resumed>) = 1 [pid 8917] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8914] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8918] <... futex resumed>) = 0 [pid 8912] <... futex resumed>) = 0 [pid 8911] <... futex resumed>) = 0 [pid 8918] memfd_create("syzkaller", 0 [pid 8912] exit_group(0 [pid 8911] exit_group(0 [pid 5061] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8914] <... futex resumed>) = ? [pid 8911] <... exit_group resumed>) = ? [pid 8914] +++ exited with 0 +++ [pid 8912] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8915] <... futex resumed>) = ? [pid 5061] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8918] <... memfd_create resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8918] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] getdents64(3, [pid 8915] +++ exited with 0 +++ [pid 8912] +++ exited with 0 +++ [pid 8911] +++ exited with 0 +++ [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8911, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8912, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5059] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5061] unlink("./381/binderfs" [pid 5059] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8919 attached [pid 5063] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 8919] set_robust_list(0x5555567436a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8919 [pid 8919] <... set_robust_list resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8919] chdir("./382" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 8919] <... chdir resumed>) = 0 [pid 8919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(3, [pid 5061] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8919] <... prctl resumed>) = 0 [pid 5059] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8919] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8919] <... setpgid resumed>) = 0 [pid 5063] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./381/file0", [pid 5059] newfstatat(AT_FDCWD, "./385/binderfs", [pid 8919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./380/binderfs", [pid 5061] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8919] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./385/binderfs" [pid 8919] write(3, "1000", 4 [pid 5063] unlink("./380/binderfs" [pid 5061] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8919] <... write resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5059] <... unlink resumed>) = 0 [pid 8919] close(3 [pid 5063] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 5059] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8919] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8919] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8919] <... symlink resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 8919] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8919] <... futex resumed>) = 0 [pid 8918] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] newfstatat(AT_FDCWD, "./380/file0", [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8919] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 5063] umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8919] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./381/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8919] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./385/file0", [pid 8919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8919] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5059] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8919] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] rmdir("./381" [pid 8919] <... mprotect resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8919] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] mkdir("./382", 0777 [pid 5059] <... openat resumed>) = 4 [pid 8919] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] close(4 [pid 5061] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5063] rmdir("./380/file0" [pid 8919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8919] <... clone3 resumed> => {parent_tid=[8920]}, 88) = 8920 [pid 8919] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8920 attached NULL, 8) = 0 [pid 5063] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 8920] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8919] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8920] <... rseq resumed>) = 0 [pid 8919] <... futex resumed>) = 0 [pid 5063] close(3 [pid 8920] set_robust_list(0x7f58200ee9a0, 24 [pid 8919] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] getdents64(4, [pid 8920] <... set_robust_list resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8920] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] rmdir("./380" [pid 5059] close(4 [pid 8920] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8920] memfd_create("syzkaller", 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./385/file0") = 0 [pid 8920] <... memfd_create resumed>) = 3 [pid 8918] <... write resumed>) = 2097152 [pid 5063] mkdir("./381", 0777 [pid 5059] getdents64(3, [pid 8920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8918] munmap(0x7f5817c00000, 138412032 [pid 8920] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./385" [pid 8918] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 8918] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 8918] <... openat resumed>) = 4 [pid 8918] ioctl(4, LOOP_SET_FD, 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] mkdir("./386", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8920] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8918] <... ioctl resumed>) = 0 [pid 8918] close(3 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8918] <... close resumed>) = 0 [pid 8920] <... write resumed>) = 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8918] close(4) = 0 [pid 8918] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8921 attached [pid 8920] munmap(0x7f5817c00000, 138412032 [pid 8918] <... mkdir resumed>) = 0 [pid 8921] set_robust_list(0x5555567436a0, 24 [ 335.479810][ T8918] loop1: detected capacity change from 0 to 4096 [pid 8918] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8921 [pid 8921] <... set_robust_list resumed>) = 0 [pid 8921] chdir("./382") = 0 [pid 8921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8920] <... munmap resumed>) = 0 [pid 8921] setpgid(0, 0 [pid 8920] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8920] ioctl(4, LOOP_SET_FD, 3 [pid 8921] <... setpgid resumed>) = 0 [pid 8921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] <... ioctl resumed>) = 0 [pid 8921] write(3, "1000", 4) = 4 [pid 8920] <... ioctl resumed>) = 0 [pid 8921] close(3 [pid 8920] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 8921] <... close resumed>) = 0 [pid 8920] <... close resumed>) = 0 [pid 5063] close(3 [pid 8921] symlink("/dev/binderfs", "./binderfs" [pid 8920] close(4 [pid 5063] <... close resumed>) = 0 [pid 8920] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] close(3./strace-static-x86_64: Process 8922 attached [pid 8921] <... symlink resumed>) = 0 [pid 8920] mkdir("./file0", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8922 [pid 8922] set_robust_list(0x5555567436a0, 24 [pid 8921] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... close resumed>) = 0 [pid 8922] <... set_robust_list resumed>) = 0 [pid 8921] <... futex resumed>) = 0 [pid 8920] <... mkdir resumed>) = 0 [pid 8922] chdir("./381" [pid 8921] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [ 335.547207][ T8918] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 335.564091][ T8920] loop3: detected capacity change from 0 to 4096 [pid 8920] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8922] <... chdir resumed>) = 0 [pid 8921] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 8923 attached [pid 8922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8923] set_robust_list(0x5555567436a0, 24) = 0 [pid 8923] chdir("./386" [pid 8922] <... prctl resumed>) = 0 [pid 8922] setpgid(0, 0 [pid 8923] <... chdir resumed>) = 0 [pid 8923] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8922] <... setpgid resumed>) = 0 [pid 8923] <... prctl resumed>) = 0 [pid 8922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8923] setpgid(0, 0) = 0 [pid 8923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8923 [pid 8922] <... openat resumed>) = 3 [pid 8923] <... openat resumed>) = 3 [pid 8922] write(3, "1000", 4 [pid 8921] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8922] <... write resumed>) = 4 [pid 8921] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8922] close(3 [pid 8921] <... mmap resumed>) = 0x7f58200ce000 [pid 8923] write(3, "1000", 4) = 4 [pid 8922] <... close resumed>) = 0 [pid 8921] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8923] close(3 [pid 8922] symlink("/dev/binderfs", "./binderfs" [pid 8921] <... mprotect resumed>) = 0 [pid 8923] <... close resumed>) = 0 [pid 8921] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8923] symlink("/dev/binderfs", "./binderfs" [pid 8922] <... symlink resumed>) = 0 [pid 8923] <... symlink resumed>) = 0 [pid 8922] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8923] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8922] <... futex resumed>) = 0 [pid 8921] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8923] <... futex resumed>) = 0 [pid 8921] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8924 attached [pid 8924] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8921] <... clone3 resumed> => {parent_tid=[8924]}, 88) = 8924 [pid 8924] <... rseq resumed>) = 0 [pid 8923] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8922] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8924] set_robust_list(0x7f58200ee9a0, 24 [pid 8923] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8922] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8921] rt_sigprocmask(SIG_SETMASK, [], [pid 8924] <... set_robust_list resumed>) = 0 [pid 8923] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8922] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8921] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8924] rt_sigprocmask(SIG_SETMASK, [], [pid 8923] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8922] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8921] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8921] <... futex resumed>) = 0 [pid 8921] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8924] memfd_create("syzkaller", 0 [pid 8923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8923] <... mmap resumed>) = 0x7f58200ce000 [pid 8922] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8923] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8922] <... mprotect resumed>) = 0 [pid 8918] <... mount resumed>) = 0 [pid 8923] <... mprotect resumed>) = 0 [pid 8924] <... memfd_create resumed>) = 3 [pid 8923] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8918] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8923] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8922] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8918] <... openat resumed>) = 3 [pid 8924] <... mmap resumed>) = 0x7f5817c00000 [pid 8923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8922] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 8925 attached [pid 8922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8918] chdir("./file0" [pid 8925] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8925] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8918] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8926 attached [pid 8925] rt_sigprocmask(SIG_SETMASK, [], [pid 8923] <... clone3 resumed> => {parent_tid=[8925]}, 88) = 8925 [pid 8926] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8925] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8923] rt_sigprocmask(SIG_SETMASK, [], [pid 8925] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8926] <... rseq resumed>) = 0 [pid 8923] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8926] set_robust_list(0x7f58200ee9a0, 24 [pid 8923] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8922] <... clone3 resumed> => {parent_tid=[8926]}, 88) = 8926 [pid 8926] <... set_robust_list resumed>) = 0 [ 335.612008][ T8920] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8926] rt_sigprocmask(SIG_SETMASK, [], [pid 8925] <... futex resumed>) = 0 [pid 8923] <... futex resumed>) = 1 [pid 8922] rt_sigprocmask(SIG_SETMASK, [], [pid 8918] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8923] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8918] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8926] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8922] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8926] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8925] memfd_create("syzkaller", 0 [pid 8922] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8918] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8926] <... futex resumed>) = 0 [pid 8922] <... futex resumed>) = 1 [pid 8918] <... futex resumed>) = 1 [pid 8917] <... futex resumed>) = 0 [pid 8918] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8917] exit_group(0 [pid 8926] memfd_create("syzkaller", 0 [pid 8925] <... memfd_create resumed>) = 3 [pid 8924] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8922] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8918] <... futex resumed>) = ? [pid 8917] <... exit_group resumed>) = ? [pid 8925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8920] <... mount resumed>) = 0 [pid 8918] +++ exited with 0 +++ [pid 8917] +++ exited with 0 +++ [pid 8926] <... memfd_create resumed>) = 3 [pid 8920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8917, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 8926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8925] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8926] <... mmap resumed>) = 0x7f5817c00000 [pid 8920] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8920] chdir("./file0" [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./386/binderfs") = 0 [pid 5060] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8920] <... chdir resumed>) = 0 [pid 8920] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8920] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(AT_FDCWD, "./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8920] <... futex resumed>) = 1 [pid 8920] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8919] <... futex resumed>) = 0 [pid 8919] exit_group(0) = ? [pid 8920] <... futex resumed>) = ? [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./386/file0" [pid 8920] +++ exited with 0 +++ [pid 8919] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8919, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5062] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(3, "", [pid 5060] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] rmdir("./386" [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./387", 0777 [pid 5062] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5060] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./382/binderfs" [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8925] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5062] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8926] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8924] <... write resumed>) = 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8924] munmap(0x7f5817c00000, 138412032 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./382/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 8925] <... write resumed>) = 2097152 [pid 8924] <... munmap resumed>) = 0 [pid 5062] rmdir("./382" [pid 8925] munmap(0x7f5817c00000, 138412032 [pid 5062] <... rmdir resumed>) = 0 [pid 8924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8925] <... munmap resumed>) = 0 [pid 8924] <... openat resumed>) = 4 [pid 5062] mkdir("./383", 0777 [pid 8926] <... write resumed>) = 2097152 [pid 8924] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8926] munmap(0x7f5817c00000, 138412032 [pid 8924] <... ioctl resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8925] ioctl(4, LOOP_SET_FD, 3 [pid 8924] close(3 [pid 5060] close(3 [pid 8926] <... munmap resumed>) = 0 [pid 8924] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 8926] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8924] close(4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8926] <... openat resumed>) = 4 [pid 8924] <... close resumed>) = 0 [pid 8924] mkdir("./file0", 0777 [pid 8926] ioctl(4, LOOP_SET_FD, 3 [pid 8924] <... mkdir resumed>) = 0 [pid 8925] <... ioctl resumed>) = 0 [ 335.843348][ T8924] loop2: detected capacity change from 0 to 4096 [ 335.861249][ T8925] loop0: detected capacity change from 0 to 4096 [ 335.874493][ T8926] loop4: detected capacity change from 0 to 4096 [pid 8925] close(3 [pid 8924] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8927 ./strace-static-x86_64: Process 8927 attached [pid 8925] <... close resumed>) = 0 [pid 8925] close(4 [pid 8927] set_robust_list(0x5555567436a0, 24) = 0 [pid 8925] <... close resumed>) = 0 [pid 8926] <... ioctl resumed>) = 0 [pid 8927] chdir("./387" [pid 8926] close(3 [pid 8927] <... chdir resumed>) = 0 [pid 8926] <... close resumed>) = 0 [pid 8925] mkdir("./file0", 0777 [pid 8926] close(4) = 0 [pid 8926] mkdir("./file0", 0777 [pid 8925] <... mkdir resumed>) = 0 [pid 8927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8925] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8927] setpgid(0, 0) = 0 [pid 8927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8926] <... mkdir resumed>) = 0 [pid 8926] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 8927] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 8927] write(3, "1000", 4) = 4 [pid 8927] close(3) = 0 [pid 8927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8927] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8927] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8927] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8927] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8928 [pid 8927] <... mprotect resumed>) = 0 [pid 8927] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 8928 attached [pid 8928] set_robust_list(0x5555567436a0, 24 [pid 8927] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8928] <... set_robust_list resumed>) = 0 [pid 8927] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8925] <... mount resumed>) = 0 [pid 8928] chdir("./383" [pid 8925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 8929 attached [pid 8927] <... clone3 resumed> => {parent_tid=[8929]}, 88) = 8929 [pid 8925] <... openat resumed>) = 3 [pid 8929] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8928] <... chdir resumed>) = 0 [pid 8927] rt_sigprocmask(SIG_SETMASK, [], [pid 8925] chdir("./file0" [pid 8929] <... rseq resumed>) = 0 [pid 8928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8927] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8925] <... chdir resumed>) = 0 [ 335.888622][ T8924] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 335.905184][ T8925] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 335.917887][ T8926] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8929] set_robust_list(0x7f58200ee9a0, 24 [pid 8928] <... prctl resumed>) = 0 [pid 8927] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8925] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8929] <... set_robust_list resumed>) = 0 [pid 8928] setpgid(0, 0 [pid 8927] <... futex resumed>) = 0 [pid 8925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8924] <... mount resumed>) = 0 [pid 8929] rt_sigprocmask(SIG_SETMASK, [], [pid 8928] <... setpgid resumed>) = 0 [pid 8927] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8925] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8929] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8925] <... futex resumed>) = 1 [pid 8924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8923] <... futex resumed>) = 0 [pid 8929] memfd_create("syzkaller", 0 [pid 8928] <... openat resumed>) = 3 [pid 8925] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8924] <... openat resumed>) = 3 [pid 8923] exit_group(0) = ? [pid 8924] chdir("./file0") = 0 [pid 8924] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8929] <... memfd_create resumed>) = 3 [pid 8924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8928] write(3, "1000", 4 [pid 8925] <... futex resumed>) = ? [pid 8929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8924] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8929] <... mmap resumed>) = 0x7f5817c00000 [pid 8928] <... write resumed>) = 4 [pid 8924] <... futex resumed>) = 1 [pid 8921] <... futex resumed>) = 0 [pid 8928] close(3 [pid 8924] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8921] exit_group(0 [pid 8928] <... close resumed>) = 0 [pid 8925] +++ exited with 0 +++ [pid 8924] <... futex resumed>) = ? [pid 8923] +++ exited with 0 +++ [pid 8921] <... exit_group resumed>) = ? [pid 8928] symlink("/dev/binderfs", "./binderfs" [pid 8924] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8923, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8921] +++ exited with 0 +++ [pid 5059] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8928] <... symlink resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8928] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8921, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8928] <... futex resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5059] newfstatat(3, "", [pid 8928] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] <... restart_syscall resumed>) = 0 [pid 8928] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8926] <... mount resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 8928] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8928] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8928] <... mprotect resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8928] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] newfstatat(3, "", [pid 5059] newfstatat(AT_FDCWD, "./386/binderfs", [pid 8928] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8926] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(3, [pid 5059] unlink("./386/binderfs" [pid 8928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8926] chdir("./file0" [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] <... unlink resumed>) = 0 [pid 8926] <... chdir resumed>) = 0 [pid 8928] <... clone3 resumed> => {parent_tid=[8930]}, 88) = 8930 [pid 8926] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8930 attached [pid 8928] rt_sigprocmask(SIG_SETMASK, [], [pid 8926] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8926] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8926] <... futex resumed>) = 1 [pid 8926] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8930] <... rseq resumed>) = 0 [pid 8928] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8922] <... futex resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5059] <... umount2 resumed>) = 0 [pid 8930] set_robust_list(0x7f58200ee9a0, 24 [pid 8928] <... futex resumed>) = 0 [pid 8930] <... set_robust_list resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8930] rt_sigprocmask(SIG_SETMASK, [], [pid 8928] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8930] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] unlink("./382/binderfs" [pid 8930] memfd_create("syzkaller", 0 [pid 8922] exit_group(0 [pid 5061] <... unlink resumed>) = 0 [pid 8930] <... memfd_create resumed>) = 3 [pid 8926] <... futex resumed>) = ? [pid 8922] <... exit_group resumed>) = ? [pid 5061] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8926] +++ exited with 0 +++ [pid 8922] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./386/file0", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8922, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 4 [pid 5063] newfstatat(3, "", [pid 5061] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 5063] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./386/file0" [pid 5063] unlink("./381/binderfs" [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(3, [pid 5063] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./386") = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8929] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] mkdir("./387", 0777 [pid 5061] close(4) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5061] rmdir("./382/file0") = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5061] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] rmdir("./382" [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 5063] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5061] mkdir("./383", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./381/file0", [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8931 [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8931 attached [pid 8931] set_robust_list(0x5555567436a0, 24 [pid 5063] umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8931] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8931] chdir("./387" [pid 8930] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... openat resumed>) = 4 [pid 8931] <... chdir resumed>) = 0 [pid 8931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(4, "", [pid 8931] <... prctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8931] setpgid(0, 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8931] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 8931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8931] <... openat resumed>) = 3 [pid 5063] close(4) = 0 [pid 8931] write(3, "1000", 4 [pid 5063] rmdir("./381/file0") = 0 [pid 5063] getdents64(3, [pid 8931] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8931] close(3 [pid 5063] close(3 [pid 8931] <... close resumed>) = 0 [pid 8931] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8931] <... symlink resumed>) = 0 [pid 5063] rmdir("./381" [pid 8931] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 8931] <... futex resumed>) = 0 [pid 8931] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5063] mkdir("./382", 0777 [pid 8931] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... mkdir resumed>) = 0 [pid 8931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8931] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... openat resumed>) = 3 [pid 8931] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8931] <... mprotect resumed>) = 0 [pid 8931] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8929] <... write resumed>) = 2097152 [pid 8931] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8930] <... write resumed>) = 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 8931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8930] munmap(0x7f5817c00000, 138412032 [pid 5061] close(3 [pid 8929] munmap(0x7f5817c00000, 138412032./strace-static-x86_64: Process 8932 attached [pid 8930] <... munmap resumed>) = 0 [pid 8929] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8932] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8931] <... clone3 resumed> => {parent_tid=[8932]}, 88) = 8932 [pid 8930] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8932] <... rseq resumed>) = 0 [pid 8931] rt_sigprocmask(SIG_SETMASK, [], [pid 8929] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8930] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8933 attached [pid 8933] set_robust_list(0x5555567436a0, 24) = 0 [pid 8933] chdir("./383") = 0 [pid 8933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8933] setpgid(0, 0) = 0 [pid 8932] set_robust_list(0x7f58200ee9a0, 24 [pid 8931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8930] ioctl(4, LOOP_SET_FD, 3 [pid 8929] <... openat resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8933 [pid 8932] <... set_robust_list resumed>) = 0 [pid 8931] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8930] <... ioctl resumed>) = 0 [pid 8929] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 8933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8932] rt_sigprocmask(SIG_SETMASK, [], [pid 8931] <... futex resumed>) = 0 [pid 8933] <... openat resumed>) = 3 [pid 8932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8931] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8933] write(3, "1000", 4 [pid 8932] memfd_create("syzkaller", 0 [pid 8933] <... write resumed>) = 4 [pid 8933] close(3) = 0 [pid 8933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8932] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 8933] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8932] <... mmap resumed>) = 0x7f5817c00000 [pid 8933] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, ./strace-static-x86_64: Process 8934 attached NULL, 8) = 0 [pid 8930] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8934 [pid 8934] set_robust_list(0x5555567436a0, 24 [pid 8933] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8930] <... close resumed>) = 0 [pid 8929] <... ioctl resumed>) = 0 [pid 8934] <... set_robust_list resumed>) = 0 [pid 8933] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8930] close(4 [pid 8929] close(3 [pid 8934] chdir("./382" [pid 8933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8930] <... close resumed>) = 0 [pid 8933] <... mmap resumed>) = 0x7f58200ce000 [pid 8930] mkdir("./file0", 0777 [pid 8933] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8929] <... close resumed>) = 0 [pid 8934] <... chdir resumed>) = 0 [pid 8933] <... mprotect resumed>) = 0 [pid 8934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8933] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8930] <... mkdir resumed>) = 0 [pid 8929] close(4) = 0 [pid 8929] mkdir("./file0", 0777 [pid 8934] <... prctl resumed>) = 0 [pid 8934] setpgid(0, 0 [pid 8930] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8934] <... setpgid resumed>) = 0 [ 336.252290][ T8930] loop3: detected capacity change from 0 to 4096 [ 336.267088][ T8929] loop1: detected capacity change from 0 to 4096 [pid 8934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8933] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8929] <... mkdir resumed>) = 0 [pid 8934] <... openat resumed>) = 3 [pid 8934] write(3, "1000", 4) = 4 [pid 8934] close(3) = 0 [pid 8934] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8933] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8934] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8929] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8934] <... futex resumed>) = 0 [pid 8934] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8934] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8934] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8933] <... clone3 resumed> => {parent_tid=[8935]}, 88) = 8935 ./strace-static-x86_64: Process 8935 attached [pid 8934] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8935] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8934] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8935] <... rseq resumed>) = 0 [pid 8934] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8935] set_robust_list(0x7f58200ee9a0, 24./strace-static-x86_64: Process 8936 attached ) = 0 [pid 8934] <... clone3 resumed> => {parent_tid=[8936]}, 88) = 8936 [pid 8936] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8935] rt_sigprocmask(SIG_SETMASK, [], [pid 8934] rt_sigprocmask(SIG_SETMASK, [], [pid 8936] <... rseq resumed>) = 0 [pid 8935] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8933] rt_sigprocmask(SIG_SETMASK, [], [pid 8935] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8936] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8934] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8936] rt_sigprocmask(SIG_SETMASK, [], [pid 8934] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8936] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8934] <... futex resumed>) = 0 [pid 8936] memfd_create("syzkaller", 0 [pid 8934] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8933] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8932] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8936] <... memfd_create resumed>) = 3 [pid 8933] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] <... futex resumed>) = 0 [pid 8933] <... futex resumed>) = 1 [pid 8933] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8935] memfd_create("syzkaller", 0 [pid 8936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8935] <... memfd_create resumed>) = 3 [pid 8936] <... mmap resumed>) = 0x7f5817c00000 [pid 8935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [ 336.310207][ T8930] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 336.328284][ T8929] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8930] <... mount resumed>) = 0 [pid 8930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8930] chdir("./file0") = 0 [pid 8930] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8930] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8928] <... futex resumed>) = 0 [pid 8930] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8928] exit_group(0 [pid 8930] <... futex resumed>) = ? [pid 8928] <... exit_group resumed>) = ? [pid 8930] +++ exited with 0 +++ [pid 8928] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8928, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5062] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8935] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8936] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8932] <... write resumed>) = 2097152 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8932] munmap(0x7f5817c00000, 138412032 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8932] <... munmap resumed>) = 0 [pid 5062] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./383/binderfs", [pid 8932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8936] <... write resumed>) = 2097152 [pid 8929] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8932] <... openat resumed>) = 4 [pid 5062] unlink("./383/binderfs" [pid 8932] ioctl(4, LOOP_SET_FD, 3 [pid 8936] munmap(0x7f5817c00000, 138412032 [pid 8935] <... write resumed>) = 2097152 [pid 8929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... unlink resumed>) = 0 [pid 8935] munmap(0x7f5817c00000, 138412032 [pid 8936] <... munmap resumed>) = 0 [pid 8932] <... ioctl resumed>) = 0 [pid 8932] close(3 [pid 8936] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8932] <... close resumed>) = 0 [pid 5062] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8936] <... openat resumed>) = 4 [pid 8932] close(4 [pid 8929] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 8929] chdir("./file0" [pid 8936] ioctl(4, LOOP_SET_FD, 3 [pid 8929] <... chdir resumed>) = 0 [pid 8932] <... close resumed>) = 0 [pid 8929] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8936] <... ioctl resumed>) = 0 [pid 8935] <... munmap resumed>) = 0 [pid 8932] mkdir("./file0", 0777 [pid 8929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8936] close(3 [pid 8935] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8932] <... mkdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./383/file0", [pid 8929] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8936] <... close resumed>) = 0 [pid 8935] <... openat resumed>) = 4 [pid 8932] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8929] <... futex resumed>) = 1 [pid 8927] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8936] close(4 [pid 8935] ioctl(4, LOOP_SET_FD, 3 [pid 8929] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8927] exit_group(0 [pid 5062] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8929] <... futex resumed>) = ? [pid 8927] <... exit_group resumed>) = ? [pid 8936] <... close resumed>) = 0 [pid 8929] +++ exited with 0 +++ [pid 8927] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8936] mkdir("./file0", 0777) = 0 [pid 5062] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8927, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5062] <... openat resumed>) = 4 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5062] newfstatat(4, "", [pid 8936] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [ 336.476775][ T8932] loop0: detected capacity change from 0 to 4096 [ 336.490090][ T8936] loop4: detected capacity change from 0 to 4096 [ 336.507602][ T8932] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 336.518233][ T8935] loop2: detected capacity change from 0 to 4096 [pid 5062] getdents64(4, [pid 5060] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5060] getdents64(3, [pid 8935] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8935] close(3 [pid 5062] close(4) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8935] <... close resumed>) = 0 [pid 5062] rmdir("./383/file0" [pid 8935] close(4 [pid 5060] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8935] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8935] mkdir("./file0", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8935] <... mkdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./387/binderfs", [pid 8935] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./387/binderfs") = 0 [pid 5060] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5060] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./383" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] mkdir("./384", 0777 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./387/file0") = 0 [pid 8932] <... mount resumed>) = 0 [pid 8932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... mkdir resumed>) = 0 [pid 5060] getdents64(3, [pid 8932] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [ 336.532869][ T8936] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 336.553508][ T8935] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8932] chdir("./file0" [pid 5062] <... openat resumed>) = 3 [pid 8932] <... chdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] close(3 [pid 8932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... close resumed>) = 0 [pid 8936] <... mount resumed>) = 0 [pid 8932] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./387" [pid 8936] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8932] <... futex resumed>) = 1 [pid 8931] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 8936] <... openat resumed>) = 3 [pid 8932] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8931] exit_group(0 [pid 5060] mkdir("./388", 0777 [pid 8936] chdir("./file0" [pid 8932] <... futex resumed>) = ? [pid 8931] <... exit_group resumed>) = ? [pid 5060] <... mkdir resumed>) = 0 [pid 8932] +++ exited with 0 +++ [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8931] +++ exited with 0 +++ [pid 8936] <... chdir resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8931, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8936] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 8936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8936] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8936] <... futex resumed>) = 1 [pid 8934] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 8934] exit_group(0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./387/binderfs" [pid 8934] <... exit_group resumed>) = ? [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8936] +++ exited with 0 +++ [pid 8934] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8934, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5063] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./387/file0", [pid 8935] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", [pid 5059] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5059] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(4, "", [pid 5062] close(3) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 8935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8937 attached [pid 8935] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5059] getdents64(4, [pid 8937] set_robust_list(0x5555567436a0, 24 [pid 8935] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8937] <... set_robust_list resumed>) = 0 [pid 8935] <... chdir resumed>) = 0 [pid 5063] unlink("./382/binderfs" [pid 5059] close(4) = 0 [pid 8937] chdir("./384" [pid 8935] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8937 [pid 5059] rmdir("./387/file0" [pid 8935] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... rmdir resumed>) = 0 [pid 8935] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... chdir resumed>) = 0 [pid 8935] <... futex resumed>) = 1 [pid 8933] <... futex resumed>) = 0 [pid 8937] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8935] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8933] exit_group(0 [pid 8937] <... prctl resumed>) = 0 [pid 8935] <... futex resumed>) = ? [pid 8933] <... exit_group resumed>) = ? [pid 8935] +++ exited with 0 +++ [pid 8933] +++ exited with 0 +++ [pid 5063] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8933, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] getdents64(3, [pid 8937] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8937] <... setpgid resumed>) = 0 [pid 8937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8937] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./382/file0", [pid 8937] write(3, "1000", 4 [pid 5061] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./387" [pid 8937] <... write resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... rmdir resumed>) = 0 [pid 8937] close(3 [pid 5063] umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] mkdir("./388", 0777 [pid 8937] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 8937] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(3, "", [pid 8937] <... symlink resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8937] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8937] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 8937] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] close(3 [pid 8937] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8937] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8937] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./383/binderfs", [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 8938 attached [pid 8937] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... close resumed>) = 0 [pid 5061] unlink("./383/binderfs" [pid 8937] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] rmdir("./382/file0" [pid 8937] <... mprotect resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 8937] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8938 [pid 5061] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 8938] set_robust_list(0x5555567436a0, 24 [pid 8937] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8937] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./382" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8937] <... clone3 resumed> => {parent_tid=[8939]}, 88) = 8939 [pid 5061] newfstatat(AT_FDCWD, "./383/file0", ./strace-static-x86_64: Process 8939 attached [pid 8938] <... set_robust_list resumed>) = 0 [pid 8937] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8939] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8938] chdir("./388" [pid 8937] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8939] <... rseq resumed>) = 0 [pid 8937] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8939] set_robust_list(0x7f58200ee9a0, 24 [pid 8938] <... chdir resumed>) = 0 [pid 8937] <... futex resumed>) = 0 [pid 5063] mkdir("./383", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8939] <... set_robust_list resumed>) = 0 [pid 8938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8937] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8938] <... prctl resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8938] setpgid(0, 0 [pid 5061] newfstatat(4, "", [pid 8939] rt_sigprocmask(SIG_SETMASK, [], [pid 8938] <... setpgid resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8939] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] getdents64(4, [pid 8938] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8939] memfd_create("syzkaller", 0 [pid 8938] write(3, "1000", 4 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] getdents64(4, [pid 5059] <... ioctl resumed>) = 0 [pid 8938] <... write resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8938] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5061] close(4 [pid 8938] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 8938] symlink("/dev/binderfs", "./binderfs" [pid 5061] rmdir("./383/file0" [pid 8938] <... symlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8939] <... memfd_create resumed>) = 3 [pid 5059] close(3 [pid 8939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8938] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(3, [pid 8939] <... mmap resumed>) = 0x7f5817c00000 [pid 8938] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8938] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5061] close(3 [pid 8938] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] rmdir("./383" [pid 8938] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./384", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 8940 attached [pid 8939] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8938] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8940] set_robust_list(0x5555567436a0, 24 [pid 8938] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8940 [pid 8938] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8940] <... set_robust_list resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8940] chdir("./388" [pid 8938] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8940] <... chdir resumed>) = 0 [pid 8938] <... clone3 resumed> => {parent_tid=[8941]}, 88) = 8941 [pid 8940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8940] <... prctl resumed>) = 0 [pid 8938] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8940] setpgid(0, 0 [pid 8938] <... futex resumed>) = 0 [pid 8940] <... setpgid resumed>) = 0 [pid 8938] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 8941 attached [pid 8940] write(3, "1000", 4 [pid 8941] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8940] <... write resumed>) = 4 [pid 8940] close(3 [pid 8941] <... rseq resumed>) = 0 [pid 8940] <... close resumed>) = 0 [pid 8941] set_robust_list(0x7f58200ee9a0, 24 [pid 8940] symlink("/dev/binderfs", "./binderfs" [pid 8941] <... set_robust_list resumed>) = 0 [pid 8940] <... symlink resumed>) = 0 [pid 8941] rt_sigprocmask(SIG_SETMASK, [], [pid 8940] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8940] <... futex resumed>) = 0 [pid 8941] memfd_create("syzkaller", 0 [pid 8940] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8941] <... memfd_create resumed>) = 3 [pid 8940] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8940] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8941] <... mmap resumed>) = 0x7f5817c00000 [pid 8940] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8939] <... write resumed>) = 2097152 [pid 8940] <... mmap resumed>) = 0x7f58200ce000 [pid 8940] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8939] munmap(0x7f5817c00000, 138412032 [pid 8940] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... ioctl resumed>) = 0 [pid 8940] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8942]}, 88) = 8942 ./strace-static-x86_64: Process 8942 attached [pid 8940] rt_sigprocmask(SIG_SETMASK, [], [pid 8942] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8940] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8940] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8940] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] close(3 [pid 8939] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8942] set_robust_list(0x7f58200ee9a0, 24 [pid 8939] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8942] <... set_robust_list resumed>) = 0 [pid 8942] rt_sigprocmask(SIG_SETMASK, [], [pid 8939] <... openat resumed>) = 4 [pid 8942] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8942] memfd_create("syzkaller", 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8943 [pid 8939] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8943 attached [pid 8943] set_robust_list(0x5555567436a0, 24) = 0 [pid 8943] chdir("./383") = 0 [pid 8943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8943] setpgid(0, 0) = 0 [pid 8942] <... memfd_create resumed>) = 3 [pid 8943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8943] write(3, "1000", 4) = 4 [pid 8943] close(3) = 0 [pid 8943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8939] <... ioctl resumed>) = 0 [pid 8939] close(3) = 0 [pid 8943] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8943] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8943] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8939] close(4 [pid 8943] <... mmap resumed>) = 0x7f58200ce000 [pid 8939] <... close resumed>) = 0 [pid 8943] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8939] mkdir("./file0", 0777 [pid 8943] <... mprotect resumed>) = 0 [pid 8943] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8941] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8939] <... mkdir resumed>) = 0 [pid 8943] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8943] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [ 336.897986][ T8939] loop3: detected capacity change from 0 to 4096 [pid 8939] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8943] <... clone3 resumed> => {parent_tid=[8944]}, 88) = 8944 [pid 5061] <... ioctl resumed>) = 0 [pid 8943] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 8944 attached [pid 8943] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(3 [pid 8944] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8943] <... futex resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8944] <... rseq resumed>) = 0 [pid 8943] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8944] set_robust_list(0x7f58200ee9a0, 24 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8944] <... set_robust_list resumed>) = 0 [pid 8944] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8944] memfd_create("syzkaller", 0./strace-static-x86_64: Process 8945 attached [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8945 [pid 8944] <... memfd_create resumed>) = 3 [pid 8945] set_robust_list(0x5555567436a0, 24) = 0 [pid 8944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8945] chdir("./384" [pid 8944] <... mmap resumed>) = 0x7f5817c00000 [pid 8945] <... chdir resumed>) = 0 [pid 8945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8945] setpgid(0, 0) = 0 [pid 8941] <... write resumed>) = 2097152 [pid 8945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8945] write(3, "1000", 4) = 4 [pid 8945] close(3) = 0 [pid 8945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8945] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8945] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8941] munmap(0x7f5817c00000, 138412032 [pid 8945] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8945] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [ 336.945804][ T8939] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8942] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8945] <... mprotect resumed>) = 0 [pid 8941] <... munmap resumed>) = 0 [pid 8945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8946]}, 88) = 8946 ./strace-static-x86_64: Process 8946 attached [pid 8945] rt_sigprocmask(SIG_SETMASK, [], [pid 8946] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8946] <... rseq resumed>) = 0 [pid 8945] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8946] set_robust_list(0x7f58200ee9a0, 24 [pid 8945] <... futex resumed>) = 0 [pid 8946] <... set_robust_list resumed>) = 0 [pid 8945] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8946] rt_sigprocmask(SIG_SETMASK, [], [pid 8941] <... openat resumed>) = 4 [pid 8946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8941] ioctl(4, LOOP_SET_FD, 3 [pid 8946] memfd_create("syzkaller", 0) = 3 [pid 8946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8942] <... write resumed>) = 2097152 [pid 8942] munmap(0x7f5817c00000, 138412032 [pid 8944] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8941] <... ioctl resumed>) = 0 [pid 8941] close(3) = 0 [pid 8941] close(4) = 0 [pid 8941] mkdir("./file0", 0777) = 0 [pid 8941] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8942] <... munmap resumed>) = 0 [pid 8942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 337.027170][ T8941] loop1: detected capacity change from 0 to 4096 [ 337.066559][ T8941] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8942] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8942] close(3) = 0 [pid 8942] close(4) = 0 [pid 8942] mkdir("./file0", 0777) = 0 [pid 8942] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8939] <... mount resumed>) = 0 [pid 8944] <... write resumed>) = 2097152 [pid 8939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8946] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8944] munmap(0x7f5817c00000, 138412032 [ 337.084751][ T8942] loop0: detected capacity change from 0 to 4096 [ 337.121930][ T8942] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 8939] chdir("./file0") = 0 [pid 8944] <... munmap resumed>) = 0 [pid 8941] <... mount resumed>) = 0 [pid 8939] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8939] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8944] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8939] <... futex resumed>) = 1 [pid 8937] <... futex resumed>) = 0 [pid 8937] exit_group(0) = ? [pid 8939] +++ exited with 0 +++ [pid 8937] +++ exited with 0 +++ [pid 8944] <... openat resumed>) = 4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8937, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8944] ioctl(4, LOOP_SET_FD, 3 [pid 8941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8941] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8941] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 8941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] newfstatat(3, "", [pid 8941] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8941] <... futex resumed>) = 1 [pid 8938] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 8938] exit_group(0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8946] <... write resumed>) = 2097152 [pid 8944] <... ioctl resumed>) = 0 [pid 8938] <... exit_group resumed>) = ? [pid 5062] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8946] munmap(0x7f5817c00000, 138412032 [pid 8944] close(3 [pid 8942] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8944] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./384/binderfs", [pid 8944] close(4 [pid 8942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8944] <... close resumed>) = 0 [pid 8942] <... openat resumed>) = 3 [pid 8941] +++ exited with 0 +++ [pid 8938] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8946] <... munmap resumed>) = 0 [pid 8944] mkdir("./file0", 0777 [pid 8942] chdir("./file0" [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8938, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8946] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8942] <... chdir resumed>) = 0 [pid 8942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8946] <... openat resumed>) = 4 [pid 8944] <... mkdir resumed>) = 0 [pid 8942] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8946] ioctl(4, LOOP_SET_FD, 3 [pid 8942] <... futex resumed>) = 1 [ 337.183792][ T8944] loop4: detected capacity change from 0 to 4096 [pid 8942] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] <... futex resumed>) = 0 [pid 5062] unlink("./384/binderfs" [pid 8940] exit_group(0 [pid 5062] <... unlink resumed>) = 0 [pid 8940] <... exit_group resumed>) = ? [pid 5062] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8944] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8946] <... ioctl resumed>) = 0 [pid 8942] <... futex resumed>) = ? [pid 5060] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8946] close(3) = 0 [pid 8942] +++ exited with 0 +++ [pid 8940] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8946] close(4 [pid 5062] newfstatat(AT_FDCWD, "./384/file0", [pid 5060] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8946] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8946] mkdir("./file0", 0777 [pid 5060] <... openat resumed>) = 3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8940, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8946] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5060] newfstatat(3, "", [pid 5059] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8946] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 337.225104][ T8946] loop2: detected capacity change from 0 to 4096 [ 337.238596][ T8944] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5060] getdents64(3, [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./384/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] close(3 [pid 5060] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(3, "", [pid 5062] rmdir("./384" [pid 5060] newfstatat(AT_FDCWD, "./388/binderfs", [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8944] <... mount resumed>) = 0 [pid 5062] mkdir("./385", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(3, [pid 5060] unlink("./388/binderfs" [pid 8944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8944] <... openat resumed>) = 3 [pid 5060] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8944] chdir("./file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./388/binderfs", [pid 8944] <... chdir resumed>) = 0 [pid 8944] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] unlink("./388/binderfs" [pid 8944] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 8944] <... futex resumed>) = 1 [pid 8943] <... futex resumed>) = 0 [pid 5060] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 8944] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8943] exit_group(0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8944] <... futex resumed>) = ? [pid 8943] <... exit_group resumed>) = ? [pid 5060] newfstatat(AT_FDCWD, "./388/file0", [pid 8944] +++ exited with 0 +++ [pid 8943] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8943, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8946] <... mount resumed>) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8946] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 8946] chdir("./file0" [pid 5060] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8946] <... chdir resumed>) = 0 [pid 8946] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... openat resumed>) = 4 [pid 5059] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8946] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(AT_FDCWD, "./388/file0", [pid 8946] <... futex resumed>) = 1 [pid 8945] <... futex resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./383/binderfs", [pid 5060] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8946] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8945] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8946] <... futex resumed>) = ? [pid 8945] <... exit_group resumed>) = ? [pid 5063] unlink("./383/binderfs" [pid 5060] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8946] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] close(4 [pid 5059] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5060] rmdir("./388/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] getdents64(4, [pid 5060] getdents64(3, [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(4, [pid 5063] <... unlink resumed>) = 0 [pid 5060] close(3 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5059] close(4 [pid 5060] rmdir("./388" [pid 5059] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] rmdir("./388/file0" [ 337.278012][ T8946] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] mkdir("./389", 0777) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8945] +++ exited with 0 +++ [pid 5059] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8945, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 5061] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./383/file0", [pid 5061] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] rmdir("./388" [pid 5061] newfstatat(3, "", [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./389", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5063] umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 4 [pid 5061] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./384/binderfs", [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5061] unlink("./384/binderfs" [pid 5063] newfstatat(4, "", [pid 5061] <... unlink resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./383/file0") = 0 [pid 5063] getdents64(3, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3./strace-static-x86_64: Process 8947 attached [pid 8947] set_robust_list(0x5555567436a0, 24) = 0 [pid 8947] chdir("./385") = 0 [pid 8947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8947] setpgid(0, 0) = 0 [pid 8947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 8947] <... openat resumed>) = 3 [pid 5063] rmdir("./383") = 0 [pid 8947] write(3, "1000", 4) = 4 [pid 8947] close(3) = 0 [pid 8947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] mkdir("./384", 0777) = 0 [pid 8947] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8947] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... openat resumed>) = 3 [pid 8947] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8947] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8947] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8947] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8947] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8948 attached [pid 8948] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8947] <... clone3 resumed> => {parent_tid=[8948]}, 88) = 8948 [pid 8948] <... rseq resumed>) = 0 [pid 8947] rt_sigprocmask(SIG_SETMASK, [], [pid 8948] set_robust_list(0x7f58200ee9a0, 24 [pid 8947] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8948] <... set_robust_list resumed>) = 0 [pid 8947] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = 0 [pid 8948] rt_sigprocmask(SIG_SETMASK, [], [pid 8947] <... futex resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8947 [pid 8948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8947] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8948] memfd_create("syzkaller", 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8948] <... memfd_create resumed>) = 3 [pid 5061] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8949 attached [pid 8948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8948] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] newfstatat(AT_FDCWD, "./384/file0", [pid 8949] set_robust_list(0x5555567436a0, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8949] <... set_robust_list resumed>) = 0 [pid 5061] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8949 [pid 5061] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8949] chdir("./389" [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8949] <... chdir resumed>) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] getdents64(4, [pid 8949] <... prctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8949] setpgid(0, 0 [pid 5061] rmdir("./384/file0" [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8949] <... setpgid resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./384" [pid 8949] <... openat resumed>) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8949] write(3, "1000", 4 [pid 5061] mkdir("./385", 0777 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8950 ./strace-static-x86_64: Process 8950 attached [pid 8950] set_robust_list(0x5555567436a0, 24) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8950] chdir("./389" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8949] <... write resumed>) = 4 [pid 8950] <... chdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8949] close(3 [pid 8950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8949] <... close resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8950] <... prctl resumed>) = 0 [pid 8950] setpgid(0, 0 [pid 8949] symlink("/dev/binderfs", "./binderfs" [pid 8950] <... setpgid resumed>) = 0 [pid 8950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3 [pid 8950] <... openat resumed>) = 3 [pid 8949] <... symlink resumed>) = 0 [pid 8949] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8949] <... futex resumed>) = 0 [pid 8950] write(3, "1000", 4 [pid 8949] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8950] <... write resumed>) = 4 [pid 8949] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8948] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 8951 attached [pid 8950] close(3) = 0 [pid 8949] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8951] set_robust_list(0x5555567436a0, 24 [pid 8950] symlink("/dev/binderfs", "./binderfs" [pid 8948] <... write resumed>) = 2097152 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8951 [pid 8951] <... set_robust_list resumed>) = 0 [pid 8950] <... symlink resumed>) = 0 [pid 8951] chdir("./384" [pid 8950] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8951] <... chdir resumed>) = 0 [pid 8950] <... futex resumed>) = 0 [pid 8951] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8950] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8951] <... prctl resumed>) = 0 [pid 8950] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8951] setpgid(0, 0 [pid 8950] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8951] <... setpgid resumed>) = 0 [pid 8951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8950] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8951] <... openat resumed>) = 3 [pid 8950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8950] <... mmap resumed>) = 0x7f58200ce000 [pid 8950] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8949] <... mmap resumed>) = 0x7f58200ce000 [pid 8950] <... mprotect resumed>) = 0 [pid 8949] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8950] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8949] <... mprotect resumed>) = 0 [pid 8951] write(3, "1000", 4 [pid 8950] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8951] <... write resumed>) = 4 [pid 8950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8951] close(3 [pid 8949] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8951] <... close resumed>) = 0 [pid 8950] <... clone3 resumed> => {parent_tid=[8952]}, 88) = 8952 [pid 8951] symlink("/dev/binderfs", "./binderfs" [pid 8950] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8952 attached [pid 8951] <... symlink resumed>) = 0 [pid 8950] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8952] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8951] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8950] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8952] <... rseq resumed>) = 0 [pid 8951] <... futex resumed>) = 0 [pid 8950] <... futex resumed>) = 0 [pid 8949] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8952] set_robust_list(0x7f58200ee9a0, 24 [pid 8951] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8950] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8948] munmap(0x7f5817c00000, 138412032./strace-static-x86_64: Process 8953 attached [pid 8952] <... set_robust_list resumed>) = 0 [pid 8951] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8952] rt_sigprocmask(SIG_SETMASK, [], [pid 8951] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8953] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8951] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8949] <... clone3 resumed> => {parent_tid=[8953]}, 88) = 8953 [pid 8953] <... rseq resumed>) = 0 [pid 8949] rt_sigprocmask(SIG_SETMASK, [], [pid 8953] set_robust_list(0x7f58200ee9a0, 24 [pid 8949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8953] <... set_robust_list resumed>) = 0 [pid 8951] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8949] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8953] rt_sigprocmask(SIG_SETMASK, [], [pid 8952] memfd_create("syzkaller", 0 [pid 8951] <... mmap resumed>) = 0x7f58200ce000 [pid 8949] <... futex resumed>) = 0 [pid 8953] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8951] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8949] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8952] <... memfd_create resumed>) = 3 [pid 8951] <... mprotect resumed>) = 0 [pid 8948] <... munmap resumed>) = 0 [pid 8952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8951] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8952] <... mmap resumed>) = 0x7f5817c00000 [pid 8951] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8948] <... openat resumed>) = 4 [pid 8951] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8954]}, 88) = 8954 ./strace-static-x86_64: Process 8954 attached [pid 8951] rt_sigprocmask(SIG_SETMASK, [], [pid 8948] ioctl(4, LOOP_SET_FD, 3 [pid 8951] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8951] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8954] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8953] memfd_create("syzkaller", 0 [pid 8951] <... futex resumed>) = 0 [pid 8954] <... rseq resumed>) = 0 [pid 8951] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8954] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8954] rt_sigprocmask(SIG_SETMASK, [], [pid 8953] <... memfd_create resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8954] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8954] memfd_create("syzkaller", 0 [pid 8953] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] close(3 [pid 8954] <... memfd_create resumed>) = 3 [pid 8948] <... ioctl resumed>) = 0 [pid 8954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8948] close(3 [pid 8954] <... mmap resumed>) = 0x7f5817c00000 [pid 8948] <... close resumed>) = 0 [pid 8948] close(4 [pid 5061] <... close resumed>) = 0 [pid 8948] <... close resumed>) = 0 [pid 8948] mkdir("./file0", 0777 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8948] <... mkdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8955 ./strace-static-x86_64: Process 8955 attached [pid 8948] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8955] set_robust_list(0x5555567436a0, 24) = 0 [pid 8952] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8955] chdir("./385" [pid 8954] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8955] <... chdir resumed>) = 0 [ 337.555432][ T8948] loop3: detected capacity change from 0 to 4096 [ 337.593146][ T8948] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8955] setpgid(0, 0) = 0 [pid 8955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8955] write(3, "1000", 4) = 4 [pid 8953] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8955] close(3) = 0 [pid 8955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8955] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8955] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8955] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8955] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8955] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8955] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8956 attached => {parent_tid=[8956]}, 88) = 8956 [pid 8956] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8955] rt_sigprocmask(SIG_SETMASK, [], [pid 8956] <... rseq resumed>) = 0 [pid 8955] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8956] set_robust_list(0x7f58200ee9a0, 24 [pid 8955] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8956] <... set_robust_list resumed>) = 0 [pid 8955] <... futex resumed>) = 0 [pid 8956] rt_sigprocmask(SIG_SETMASK, [], [pid 8955] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8956] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8956] memfd_create("syzkaller", 0) = 3 [pid 8956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8952] <... write resumed>) = 2097152 [pid 8952] munmap(0x7f5817c00000, 138412032 [pid 8954] <... write resumed>) = 2097152 [pid 8953] <... write resumed>) = 2097152 [pid 8948] <... mount resumed>) = 0 [pid 8954] munmap(0x7f5817c00000, 138412032 [pid 8953] munmap(0x7f5817c00000, 138412032 [pid 8948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8954] <... munmap resumed>) = 0 [pid 8952] <... munmap resumed>) = 0 [pid 8948] chdir("./file0") = 0 [pid 8952] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8952] <... openat resumed>) = 4 [pid 8948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8948] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8947] <... futex resumed>) = 0 [pid 8947] exit_group(0 [pid 8952] ioctl(4, LOOP_SET_FD, 3 [pid 8947] <... exit_group resumed>) = ? [pid 8953] <... munmap resumed>) = 0 [pid 8953] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8956] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8954] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8953] ioctl(4, LOOP_SET_FD, 3 [pid 8952] <... ioctl resumed>) = 0 [pid 8948] +++ exited with 0 +++ [pid 8947] +++ exited with 0 +++ [pid 8954] <... openat resumed>) = 4 [pid 8953] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8947, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 8952] close(3) = 0 [pid 8954] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8956] <... write resumed>) = 2097152 [pid 8954] <... ioctl resumed>) = 0 [pid 8953] close(3 [pid 8952] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8956] munmap(0x7f5817c00000, 138412032 [pid 8954] close(3 [pid 8953] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8956] <... munmap resumed>) = 0 [pid 8953] close(4 [pid 8952] <... close resumed>) = 0 [pid 8952] mkdir("./file0", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 8954] <... close resumed>) = 0 [pid 8953] <... close resumed>) = 0 [pid 8952] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8954] close(4 [pid 5062] getdents64(3, [pid 8953] mkdir("./file0", 0777 [pid 8954] <... close resumed>) = 0 [pid 8953] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8954] mkdir("./file0", 0777 [pid 8953] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [ 337.735704][ T8952] loop0: detected capacity change from 0 to 4096 [ 337.753084][ T8953] loop1: detected capacity change from 0 to 4096 [ 337.763399][ T8954] loop4: detected capacity change from 0 to 4096 [pid 8952] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8954] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8954] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] newfstatat(AT_FDCWD, "./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./385/binderfs" [pid 8956] <... openat resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 8956] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8956] close(3) = 0 [pid 8956] close(4) = 0 [pid 8956] mkdir("./file0", 0777) = 0 [pid 8956] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./385/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 337.785599][ T8953] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 337.795406][ T8952] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 337.806809][ T8956] loop2: detected capacity change from 0 to 4096 [ 337.806913][ T8954] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5062] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./385/file0") = 0 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./385") = 0 [pid 5062] mkdir("./386", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8954] <... mount resumed>) = 0 [pid 8954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 337.849723][ T8956] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8952] <... mount resumed>) = 0 [pid 8954] chdir("./file0") = 0 [pid 8953] <... mount resumed>) = 0 [pid 8952] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8954] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8954] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8951] <... futex resumed>) = 0 [pid 8952] <... openat resumed>) = 3 [pid 8951] exit_group(0 [pid 8952] chdir("./file0" [pid 8951] <... exit_group resumed>) = ? [pid 8953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8952] <... chdir resumed>) = 0 [pid 8953] <... openat resumed>) = 3 [pid 8953] chdir("./file0" [pid 8952] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8953] <... chdir resumed>) = 0 [pid 8952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8953] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8952] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8952] <... futex resumed>) = 1 [pid 8950] <... futex resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8954] +++ exited with 0 +++ [pid 8953] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8951] +++ exited with 0 +++ [pid 8950] exit_group(0 [pid 8953] <... futex resumed>) = 1 [pid 8950] <... exit_group resumed>) = ? [pid 8949] <... futex resumed>) = 0 [pid 8953] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8949] exit_group(0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8951, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8953] <... futex resumed>) = ? [pid 8949] <... exit_group resumed>) = ? [pid 8953] +++ exited with 0 +++ [pid 8949] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8949, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 8952] +++ exited with 0 +++ [pid 8950] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8950, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8956] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8956] <... openat resumed>) = 3 [pid 5063] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8956] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8956] <... chdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./384/binderfs", [pid 5059] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] unlink("./384/binderfs" [pid 5059] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8956] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8956] <... futex resumed>) = 1 [pid 8955] <... futex resumed>) = 0 [pid 5063] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(3, "", [pid 8956] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8955] exit_group(0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8956] <... futex resumed>) = ? [pid 8955] <... exit_group resumed>) = ? [pid 5060] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 8956] +++ exited with 0 +++ [pid 8955] +++ exited with 0 +++ [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8957 [pid 5060] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8955, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8957 attached [pid 5060] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8957] set_robust_list(0x5555567436a0, 24 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(AT_FDCWD, "./389/binderfs", [pid 8957] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8957] chdir("./386" [pid 5063] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./389/binderfs" [pid 8957] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./389/binderfs", [pid 5059] <... unlink resumed>) = 0 [pid 5061] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./384/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] unlink("./389/binderfs" [pid 5059] <... umount2 resumed>) = 0 [pid 8957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 8957] <... prctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 8957] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8957] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] newfstatat(4, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8957] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5060] <... umount2 resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./389/file0", [pid 8957] write(3, "1000", 4 [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8957] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8957] close(3 [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./389/file0", [pid 8957] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8957] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(4 [pid 5061] newfstatat(AT_FDCWD, "./385/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8957] <... symlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] unlink("./385/binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8957] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 4 [pid 8957] <... futex resumed>) = 0 [pid 5063] rmdir("./384/file0" [pid 5060] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 8957] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] <... unlink resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8957] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, [pid 5059] getdents64(4, [pid 8957] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8957] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(3, [pid 5060] getdents64(4, [pid 5059] getdents64(4, [pid 8957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8957] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(4 [pid 8957] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 5059] close(4 [pid 5061] newfstatat(AT_FDCWD, "./385/file0", [pid 5060] rmdir("./389/file0" [pid 8957] <... mprotect resumed>) = 0 [pid 5063] close(3 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(3, [pid 5061] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(3 [pid 8957] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 5059] rmdir("./389/file0" [pid 8957] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] rmdir("./384" [pid 5060] rmdir("./389" [pid 8957] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8958 attached [pid 5061] newfstatat(4, "", [pid 5060] <... rmdir resumed>) = 0 [pid 8958] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8957] <... clone3 resumed> => {parent_tid=[8958]}, 88) = 8958 [pid 5063] mkdir("./385", 0777 [pid 5060] mkdir("./390", 0777 [pid 5059] getdents64(3, [pid 8958] <... rseq resumed>) = 0 [pid 8957] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8958] set_robust_list(0x7f58200ee9a0, 24 [pid 8957] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] getdents64(4, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8958] <... set_robust_list resumed>) = 0 [pid 8957] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 8958] rt_sigprocmask(SIG_SETMASK, [], [pid 8957] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 8958] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8957] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... openat resumed>) = 3 [pid 5061] getdents64(4, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] rmdir("./389") = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5059] mkdir("./390", 0777 [pid 8958] memfd_create("syzkaller", 0 [pid 5061] rmdir("./385/file0" [pid 8958] <... memfd_create resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 8958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] getdents64(3, [pid 8958] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./385" [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./386", 0777) = 0 [pid 8958] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8958] <... write resumed>) = 2097152 [pid 8958] munmap(0x7f5817c00000, 138412032) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 8958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5063] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 8958] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8958] <... ioctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8959 ./strace-static-x86_64: Process 8959 attached [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8960 ./strace-static-x86_64: Process 8961 attached ./strace-static-x86_64: Process 8960 attached [pid 8961] set_robust_list(0x5555567436a0, 24 [pid 8960] set_robust_list(0x5555567436a0, 24 [pid 8958] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8961 [pid 8961] <... set_robust_list resumed>) = 0 [pid 8960] <... set_robust_list resumed>) = 0 [pid 8958] <... close resumed>) = 0 [pid 8961] chdir("./385" [pid 8960] chdir("./390" [pid 8959] set_robust_list(0x5555567436a0, 24 [pid 8958] close(4 [pid 5061] <... ioctl resumed>) = 0 [pid 8961] <... chdir resumed>) = 0 [pid 8960] <... chdir resumed>) = 0 [pid 8959] <... set_robust_list resumed>) = 0 [pid 8958] <... close resumed>) = 0 [pid 8960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8959] chdir("./390" [pid 8960] <... prctl resumed>) = 0 [ 338.144698][ T8958] loop3: detected capacity change from 0 to 4096 [pid 8961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8960] setpgid(0, 0 [pid 8959] <... chdir resumed>) = 0 [pid 8958] mkdir("./file0", 0777 [pid 5061] close(3 [pid 8961] <... prctl resumed>) = 0 [pid 8959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8958] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8961] setpgid(0, 0 [pid 8959] <... prctl resumed>) = 0 [pid 8961] <... setpgid resumed>) = 0 [pid 8959] setpgid(0, 0 [pid 8961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8959] <... setpgid resumed>) = 0 [pid 8961] <... openat resumed>) = 3 [pid 8961] write(3, "1000", 4 [pid 8959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8961] <... write resumed>) = 4 [pid 8959] <... openat resumed>) = 3 [pid 8961] close(3 [pid 8959] write(3, "1000", 4 [pid 8961] <... close resumed>) = 0 [pid 8959] <... write resumed>) = 4 [pid 8961] symlink("/dev/binderfs", "./binderfs" [pid 8960] <... setpgid resumed>) = 0 [pid 8959] close(3 [pid 8958] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8961] <... symlink resumed>) = 0 [pid 8960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8959] <... close resumed>) = 0 [pid 8961] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8962 [pid 8959] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8960] <... openat resumed>) = 3 [pid 8961] <... futex resumed>) = 0 [pid 8960] write(3, "1000", 4 [pid 8959] <... futex resumed>) = 0 [pid 8961] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8960] <... write resumed>) = 4 [pid 8959] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8961] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8961] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8959] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8961] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8959] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8961] <... mmap resumed>) = 0x7f58200ce000 [pid 8959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8962 attached [pid 8961] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8959] <... mmap resumed>) = 0x7f58200ce000 [pid 8961] <... mprotect resumed>) = 0 [pid 8959] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8961] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8959] <... mprotect resumed>) = 0 [pid 8961] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8959] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8962] set_robust_list(0x5555567436a0, 24 [pid 8961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8959] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 8963 attached [pid 8962] <... set_robust_list resumed>) = 0 [pid 8960] close(3 [pid 8959] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8963] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8962] chdir("./386" [pid 8961] <... clone3 resumed> => {parent_tid=[8963]}, 88) = 8963 [pid 8960] <... close resumed>) = 0 [pid 8963] <... rseq resumed>) = 0 [pid 8962] <... chdir resumed>) = 0 [pid 8961] rt_sigprocmask(SIG_SETMASK, [], [pid 8960] symlink("/dev/binderfs", "./binderfs" [pid 8959] <... clone3 resumed> => {parent_tid=[8964]}, 88) = 8964 [pid 8963] set_robust_list(0x7f58200ee9a0, 24 [pid 8962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8961] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8959] rt_sigprocmask(SIG_SETMASK, [], [pid 8963] <... set_robust_list resumed>) = 0 [pid 8962] <... prctl resumed>) = 0 [pid 8961] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8960] <... symlink resumed>) = 0 [pid 8959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8963] rt_sigprocmask(SIG_SETMASK, [], [pid 8962] setpgid(0, 0 [pid 8961] <... futex resumed>) = 0 [pid 8960] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8959] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8963] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8962] <... setpgid resumed>) = 0 [pid 8961] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8960] <... futex resumed>) = 0 [pid 8959] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8964 attached [pid 8963] memfd_create("syzkaller", 0 [pid 8962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8960] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8959] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8964] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8960] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8964] <... rseq resumed>) = 0 [pid 8960] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8964] set_robust_list(0x7f58200ee9a0, 24 [pid 8962] <... openat resumed>) = 3 [pid 8960] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8964] <... set_robust_list resumed>) = 0 [pid 8962] write(3, "1000", 4 [pid 8960] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8964] rt_sigprocmask(SIG_SETMASK, [], [pid 8963] <... memfd_create resumed>) = 3 [pid 8962] <... write resumed>) = 4 [pid 8960] <... mmap resumed>) = 0x7f58200ce000 [pid 8964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8962] close(3 [pid 8960] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8963] <... mmap resumed>) = 0x7f5817c00000 [pid 8962] <... close resumed>) = 0 [pid 8962] symlink("/dev/binderfs", "./binderfs" [pid 8964] memfd_create("syzkaller", 0 [pid 8962] <... symlink resumed>) = 0 [pid 8960] <... mprotect resumed>) = 0 [pid 8964] <... memfd_create resumed>) = 3 [pid 8960] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8962] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8962] <... futex resumed>) = 0 [pid 8962] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8960] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8962] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8960] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8962] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8962] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 8965 attached [pid 8962] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8960] <... clone3 resumed> => {parent_tid=[8965]}, 88) = 8965 [pid 8962] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8960] rt_sigprocmask(SIG_SETMASK, [], [pid 8965] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8966 attached [pid 8965] <... rseq resumed>) = 0 [pid 8960] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8966] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8965] set_robust_list(0x7f58200ee9a0, 24 [pid 8962] <... clone3 resumed> => {parent_tid=[8966]}, 88) = 8966 [ 338.227079][ T8958] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8960] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] <... rseq resumed>) = 0 [pid 8965] <... set_robust_list resumed>) = 0 [pid 8962] rt_sigprocmask(SIG_SETMASK, [], [pid 8960] <... futex resumed>) = 0 [pid 8966] set_robust_list(0x7f58200ee9a0, 24 [pid 8965] rt_sigprocmask(SIG_SETMASK, [], [pid 8962] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8966] <... set_robust_list resumed>) = 0 [pid 8965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8966] rt_sigprocmask(SIG_SETMASK, [], [pid 8962] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8960] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8962] <... futex resumed>) = 0 [pid 8966] memfd_create("syzkaller", 0 [pid 8965] memfd_create("syzkaller", 0 [pid 8962] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8965] <... memfd_create resumed>) = 3 [pid 8965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8966] <... memfd_create resumed>) = 3 [pid 8966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8965] <... mmap resumed>) = 0x7f5817c00000 [pid 8966] <... mmap resumed>) = 0x7f5817c00000 [pid 8964] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8963] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8965] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8958] <... mount resumed>) = 0 [pid 8958] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8958] chdir("./file0") = 0 [pid 8958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8958] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8957] <... futex resumed>) = 0 [pid 8958] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8957] exit_group(0 [pid 8958] <... futex resumed>) = ? [pid 8957] <... exit_group resumed>) = ? [pid 8958] +++ exited with 0 +++ [pid 8957] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8957, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./386/binderfs", [pid 8966] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8964] <... write resumed>) = 2097152 [pid 5062] unlink("./386/binderfs") = 0 [pid 8965] <... write resumed>) = 2097152 [pid 8964] munmap(0x7f5817c00000, 138412032 [pid 8965] munmap(0x7f5817c00000, 138412032 [pid 5062] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8965] <... munmap resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8965] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8964] <... munmap resumed>) = 0 [pid 8963] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8965] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8966] <... write resumed>) = 2097152 [pid 8965] ioctl(4, LOOP_SET_FD, 3 [pid 8964] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8963] munmap(0x7f5817c00000, 138412032 [pid 5062] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8966] munmap(0x7f5817c00000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8966] <... munmap resumed>) = 0 [pid 8965] <... ioctl resumed>) = 0 [pid 8964] <... openat resumed>) = 4 [pid 8963] <... munmap resumed>) = 0 [pid 8966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8965] close(3 [pid 8964] ioctl(4, LOOP_SET_FD, 3 [pid 8963] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8965] <... close resumed>) = 0 [pid 8966] <... openat resumed>) = 4 [pid 8964] <... ioctl resumed>) = 0 [pid 8963] <... openat resumed>) = 4 [pid 5062] getdents64(4, [pid 8964] close(3) = 0 [pid 8966] ioctl(4, LOOP_SET_FD, 3 [pid 8965] close(4 [pid 8964] close(4 [pid 8963] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8964] <... close resumed>) = 0 [pid 8964] mkdir("./file0", 0777) = 0 [ 338.435760][ T8965] loop0: detected capacity change from 0 to 4096 [ 338.451577][ T8964] loop1: detected capacity change from 0 to 4096 [ 338.463114][ T8966] loop2: detected capacity change from 0 to 4096 [ 338.469895][ T8964] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 338.472303][ T8963] loop4: detected capacity change from 0 to 4096 [pid 8964] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8965] <... close resumed>) = 0 [pid 8965] mkdir("./file0", 0777) = 0 [pid 8965] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8966] <... ioctl resumed>) = 0 [pid 5062] getdents64(4, [pid 8966] close(3 [pid 8963] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8966] <... close resumed>) = 0 [pid 8963] close(3 [pid 5062] close(4 [pid 8966] close(4 [pid 8963] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8966] <... close resumed>) = 0 [pid 8963] close(4 [pid 5062] rmdir("./386/file0" [pid 8966] mkdir("./file0", 0777 [pid 8963] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8966] <... mkdir resumed>) = 0 [pid 8963] mkdir("./file0", 0777 [pid 5062] getdents64(3, [pid 8966] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8964] <... mount resumed>) = 0 [pid 8963] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 8964] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8964] chdir("./file0") = 0 [pid 8964] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 8964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8963] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] rmdir("./386" [pid 8964] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8959] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8964] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8959] exit_group(0 [pid 8964] <... futex resumed>) = ? [pid 8959] <... exit_group resumed>) = ? [pid 8964] +++ exited with 0 +++ [ 338.485171][ T8965] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 338.515186][ T8966] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5062] mkdir("./387", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8959] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8959, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 338.529600][ T8963] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5060] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8966] <... mount resumed>) = 0 [pid 8965] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8966] <... openat resumed>) = 3 [pid 8965] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 8965] chdir("./file0") = 0 [pid 8965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8965] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] chdir("./file0" [pid 5060] newfstatat(3, "", [pid 8965] <... futex resumed>) = 1 [pid 8960] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8960] exit_group(0 [pid 8966] <... chdir resumed>) = 0 [pid 8960] <... exit_group resumed>) = ? [pid 8963] <... mount resumed>) = 0 [pid 5060] getdents64(3, [pid 8966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8965] +++ exited with 0 +++ [pid 8963] <... openat resumed>) = 3 [pid 8960] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8966] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8963] chdir("./file0" [pid 5060] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8966] <... futex resumed>) = 1 [pid 8963] <... chdir resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8960, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8966] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] <... futex resumed>) = 0 [pid 5059] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8962] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8962] <... exit_group resumed>) = ? [pid 5059] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./390/binderfs") = 0 [pid 5059] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8966] <... futex resumed>) = ? [pid 8963] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] newfstatat(AT_FDCWD, "./390/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] newfstatat(AT_FDCWD, "./390/file0", [pid 8963] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8961] <... futex resumed>) = 0 [pid 8961] exit_group(0 [pid 8963] <... futex resumed>) = ? [pid 8961] <... exit_group resumed>) = ? [pid 8966] +++ exited with 0 +++ [pid 8962] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8962, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5060] unlink("./390/binderfs" [pid 5059] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./390/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 8963] +++ exited with 0 +++ [pid 8961] +++ exited with 0 +++ [pid 5062] <... ioctl resumed>) = 0 [pid 5060] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8961, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5063] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./390" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] mkdir("./391", 0777 [pid 5061] newfstatat(3, "", [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] newfstatat(AT_FDCWD, "./390/file0", [pid 5061] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./386/binderfs", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] getdents64(3, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] unlink("./386/binderfs" [pid 5060] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... unlink resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5061] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5060] getdents64(4, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 5061] newfstatat(AT_FDCWD, "./386/file0", [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8967 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] close(4./strace-static-x86_64: Process 8967 attached [pid 5063] newfstatat(AT_FDCWD, "./385/binderfs", [pid 5061] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 8967] set_robust_list(0x5555567436a0, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./390/file0" [pid 8967] <... set_robust_list resumed>) = 0 [pid 5063] unlink("./385/binderfs" [pid 5061] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5060] getdents64(3, [pid 5063] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(3 [pid 5061] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] rmdir("./390" [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] mkdir("./391", 0777 [pid 8967] chdir("./387" [pid 5063] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 8967] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 8967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(AT_FDCWD, "./385/file0", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8967] <... prctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8967] setpgid(0, 0 [pid 5063] umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 8967] <... setpgid resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] rmdir("./386/file0" [pid 8967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8967] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 8967] write(3, "1000", 4 [pid 5063] newfstatat(4, "", [pid 8967] <... write resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8967] close(3 [pid 5063] getdents64(4, [pid 5061] getdents64(3, [pid 8967] <... close resumed>) = 0 [pid 8967] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8967] <... symlink resumed>) = 0 [pid 5063] getdents64(4, [pid 8967] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... close resumed>) = 0 [pid 8967] <... futex resumed>) = 0 [pid 5063] close(4 [pid 5061] rmdir("./386" [pid 8967] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... close resumed>) = 0 [pid 8967] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] rmdir("./385/file0" [pid 5061] <... rmdir resumed>) = 0 [pid 8967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... rmdir resumed>) = 0 [pid 8967] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(3, [pid 8967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8967] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] close(3) = 0 [pid 5063] rmdir("./385" [pid 8967] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... rmdir resumed>) = 0 [pid 8967] <... mprotect resumed>) = 0 [pid 5063] mkdir("./386", 0777) = 0 [pid 8967] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] mkdir("./387", 0777 [pid 5059] <... ioctl resumed>) = 0 [pid 8967] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] close(3 [pid 8967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8968 attached [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8968] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8968] set_robust_list(0x7f58200ee9a0, 24 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8967] <... clone3 resumed> => {parent_tid=[8968]}, 88) = 8968 [pid 8967] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] close(3 [pid 8968] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8969 attached [pid 8968] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8969 [pid 8969] set_robust_list(0x5555567436a0, 24 [pid 8968] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8969] <... set_robust_list resumed>) = 0 [pid 8967] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 8968] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8968] <... futex resumed>) = 0 [pid 8967] <... futex resumed>) = 1 [pid 8967] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8970 attached [pid 8968] memfd_create("syzkaller", 0 [pid 8970] set_robust_list(0x5555567436a0, 24 [pid 8969] chdir("./391" [pid 8968] <... memfd_create resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8970 [pid 8970] <... set_robust_list resumed>) = 0 [pid 8969] <... chdir resumed>) = 0 [pid 8968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8970] chdir("./391" [pid 8969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8968] <... mmap resumed>) = 0x7f5817c00000 [pid 8970] <... chdir resumed>) = 0 [pid 8969] <... prctl resumed>) = 0 [pid 8969] setpgid(0, 0) = 0 [pid 8969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8970] setpgid(0, 0) = 0 [pid 8969] <... openat resumed>) = 3 [pid 8970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8969] write(3, "1000", 4) = 4 [pid 8969] close(3) = 0 [pid 8970] write(3, "1000", 4 [pid 8969] symlink("/dev/binderfs", "./binderfs" [pid 8970] <... write resumed>) = 4 [pid 8969] <... symlink resumed>) = 0 [pid 8970] close(3) = 0 [pid 8969] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8970] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8969] <... futex resumed>) = 0 [pid 8970] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8969] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8970] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8969] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8970] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8969] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8969] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8970] <... mmap resumed>) = 0x7f58200ce000 [pid 8969] <... mmap resumed>) = 0x7f58200ce000 [pid 8970] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8969] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8970] <... mprotect resumed>) = 0 [pid 8970] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8969] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8969] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8969] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8970] <... clone3 resumed> => {parent_tid=[8971]}, 88) = 8971 ./strace-static-x86_64: Process 8971 attached [pid 8970] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8972 attached [pid 8971] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8969] <... clone3 resumed> => {parent_tid=[8972]}, 88) = 8972 [pid 8968] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8969] rt_sigprocmask(SIG_SETMASK, [], [pid 8971] <... rseq resumed>) = 0 [pid 8970] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8969] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8971] set_robust_list(0x7f58200ee9a0, 24 [pid 8970] <... futex resumed>) = 0 [pid 8969] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8971] <... set_robust_list resumed>) = 0 [pid 8970] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8969] <... futex resumed>) = 0 [pid 8971] rt_sigprocmask(SIG_SETMASK, [], [pid 8969] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8972] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8971] memfd_create("syzkaller", 0 [pid 8972] <... rseq resumed>) = 0 [pid 8972] set_robust_list(0x7f58200ee9a0, 24 [pid 8971] <... memfd_create resumed>) = 3 [pid 8972] <... set_robust_list resumed>) = 0 [pid 8971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8972] rt_sigprocmask(SIG_SETMASK, [], [pid 8971] <... mmap resumed>) = 0x7f5817c00000 [pid 8972] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8972] memfd_create("syzkaller", 0) = 3 [pid 5061] close(3) = 0 [pid 8972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8972] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8973 [pid 5063] close(3./strace-static-x86_64: Process 8973 attached [pid 8973] set_robust_list(0x5555567436a0, 24 [pid 5063] <... close resumed>) = 0 [pid 8973] <... set_robust_list resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8973] chdir("./387") = 0 [pid 8973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8973] setpgid(0, 0) = 0 [pid 8973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8973] write(3, "1000", 4) = 4 [pid 8973] close(3) = 0 [pid 8973] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8974 [pid 8973] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 8974 attached [pid 8974] set_robust_list(0x5555567436a0, 24) = 0 [pid 8974] chdir("./386") = 0 [pid 8974] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8974] setpgid(0, 0) = 0 [pid 8974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8974] write(3, "1000", 4 [pid 8973] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8974] <... write resumed>) = 4 [pid 8973] <... futex resumed>) = 0 [pid 8974] close(3 [pid 8973] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8974] <... close resumed>) = 0 [pid 8973] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8974] symlink("/dev/binderfs", "./binderfs" [pid 8973] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8974] <... symlink resumed>) = 0 [pid 8973] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8974] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8973] <... mmap resumed>) = 0x7f58200ce000 [pid 8974] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8973] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8974] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8973] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8974] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8973] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8974] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8974] <... mmap resumed>) = 0x7f58200ce000 [pid 8974] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8973] <... clone3 resumed> => {parent_tid=[8975]}, 88) = 8975 [pid 8974] <... mprotect resumed>) = 0 [pid 8973] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 8975 attached [pid 8974] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8973] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8975] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8974] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8973] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8975] <... rseq resumed>) = 0 [pid 8975] set_robust_list(0x7f58200ee9a0, 24 [pid 8974] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8973] <... futex resumed>) = 0 [pid 8975] <... set_robust_list resumed>) = 0 [pid 8975] rt_sigprocmask(SIG_SETMASK, [], [pid 8973] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8975] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8974] <... clone3 resumed> => {parent_tid=[8976]}, 88) = 8976 ./strace-static-x86_64: Process 8976 attached [pid 8975] memfd_create("syzkaller", 0 [pid 8974] rt_sigprocmask(SIG_SETMASK, [], [pid 8976] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8974] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8976] <... rseq resumed>) = 0 [pid 8974] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8976] set_robust_list(0x7f58200ee9a0, 24 [pid 8975] <... memfd_create resumed>) = 3 [pid 8974] <... futex resumed>) = 0 [pid 8975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8974] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8975] <... mmap resumed>) = 0x7f5817c00000 [pid 8976] <... set_robust_list resumed>) = 0 [pid 8972] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8976] rt_sigprocmask(SIG_SETMASK, [], [pid 8971] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8976] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8968] <... write resumed>) = 2097152 [pid 8968] munmap(0x7f5817c00000, 138412032 [pid 8976] memfd_create("syzkaller", 0 [pid 8968] <... munmap resumed>) = 0 [pid 8976] <... memfd_create resumed>) = 3 [pid 8976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8968] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8975] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8968] ioctl(4, LOOP_SET_FD, 3 [pid 8972] <... write resumed>) = 2097152 [pid 8972] munmap(0x7f5817c00000, 138412032) = 0 [pid 8972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8968] <... ioctl resumed>) = 0 [pid 8972] ioctl(4, LOOP_SET_FD, 3 [pid 8968] close(3) = 0 [pid 8968] close(4) = 0 [pid 8968] mkdir("./file0", 0777) = 0 [pid 8968] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8976] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8971] <... write resumed>) = 2097152 [pid 8972] <... ioctl resumed>) = 0 [pid 8972] close(3) = 0 [pid 8972] close(4) = 0 [pid 8972] mkdir("./file0", 0777) = 0 [pid 8971] munmap(0x7f5817c00000, 138412032 [ 338.987011][ T8968] loop3: detected capacity change from 0 to 4096 [ 339.011198][ T8972] loop0: detected capacity change from 0 to 4096 [ 339.022241][ T8968] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 8972] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8975] <... write resumed>) = 2097152 [pid 8975] munmap(0x7f5817c00000, 138412032 [pid 8971] <... munmap resumed>) = 0 [pid 8971] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8971] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8975] <... munmap resumed>) = 0 [pid 8975] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 339.049756][ T8972] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 339.082001][ T8971] loop1: detected capacity change from 0 to 4096 [pid 8975] ioctl(4, LOOP_SET_FD, 3 [pid 8971] close(3) = 0 [pid 8971] close(4) = 0 [pid 8971] mkdir("./file0", 0777) = 0 [pid 8971] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8975] <... ioctl resumed>) = 0 [pid 8975] close(3) = 0 [pid 8972] <... mount resumed>) = 0 [pid 8968] <... mount resumed>) = 0 [pid 8975] close(4) = 0 [pid 8975] mkdir("./file0", 0777 [pid 8972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8975] <... mkdir resumed>) = 0 [pid 8972] <... openat resumed>) = 3 [pid 8968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8972] chdir("./file0") = 0 [pid 8972] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8968] <... openat resumed>) = 3 [pid 8968] chdir("./file0" [pid 8976] <... write resumed>) = 2097152 [ 339.101474][ T8975] loop2: detected capacity change from 0 to 4096 [ 339.116525][ T8971] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8975] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8968] <... chdir resumed>) = 0 [pid 8976] munmap(0x7f5817c00000, 138412032 [pid 8968] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8972] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8969] <... futex resumed>) = 0 [pid 8969] exit_group(0) = ? [pid 8968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8972] +++ exited with 0 +++ [pid 8969] +++ exited with 0 +++ [pid 8968] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8967] <... futex resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8969, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 8968] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] exit_group(0 [pid 5059] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8968] <... futex resumed>) = ? [pid 8967] <... exit_group resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8968] +++ exited with 0 +++ [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./391/binderfs") = 0 [pid 5059] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8976] <... munmap resumed>) = 0 [pid 8967] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./391/file0", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8967, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5059] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 339.147947][ T8975] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5059] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... restart_syscall resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./391/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 8976] <... openat resumed>) = 4 [pid 8976] ioctl(4, LOOP_SET_FD, 3 [pid 5059] rmdir("./391") = 0 [pid 8975] <... mount resumed>) = 0 [pid 5059] mkdir("./392", 0777 [pid 8975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8975] chdir("./file0" [pid 8976] <... ioctl resumed>) = 0 [pid 8975] <... chdir resumed>) = 0 [pid 5062] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 8975] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8975] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 3 [pid 8973] <... futex resumed>) = 0 [pid 8973] exit_group(0) = ? [pid 5062] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 8975] <... futex resumed>) = ? [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, [pid 5059] close(3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8976] close(3 [pid 8975] +++ exited with 0 +++ [pid 8973] +++ exited with 0 +++ [pid 5062] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8973, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] newfstatat(AT_FDCWD, "./387/binderfs", [pid 8976] <... close resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./387/binderfs" [pid 5061] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8976] close(4 [pid 5062] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8976] <... close resumed>) = 0 [pid 5062] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./387/binderfs" [pid 8976] mkdir("./file0", 0777 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 8976] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 339.213841][ T8976] loop4: detected capacity change from 0 to 4096 [pid 8976] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./387/file0", [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./387/file0"./strace-static-x86_64: Process 8977 attached ) = 0 [pid 8977] set_robust_list(0x5555567436a0, 24 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8977] <... set_robust_list resumed>) = 0 [pid 8971] <... mount resumed>) = 0 [pid 5062] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 8977] chdir("./392" [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8977 [pid 8977] <... chdir resumed>) = 0 [pid 5061] close(3 [pid 8977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 8977] <... prctl resumed>) = 0 [pid 8971] <... openat resumed>) = 3 [pid 5061] rmdir("./387" [pid 8977] setpgid(0, 0 [pid 8971] chdir("./file0" [pid 5061] <... rmdir resumed>) = 0 [pid 8977] <... setpgid resumed>) = 0 [pid 8971] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8971] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8971] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8970] <... futex resumed>) = 0 [pid 8977] <... openat resumed>) = 3 [pid 8971] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8970] exit_group(0 [pid 5062] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] mkdir("./388", 0777 [pid 8977] write(3, "1000", 4 [pid 8971] <... futex resumed>) = ? [pid 8970] <... exit_group resumed>) = ? [pid 8977] <... write resumed>) = 4 [pid 5061] <... mkdir resumed>) = 0 [pid 8977] close(3) = 0 [pid 8977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8977] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8971] +++ exited with 0 +++ [pid 8970] +++ exited with 0 +++ [pid 5062] newfstatat(4, "", [pid 8977] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8970, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8977] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8977] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8977] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] close(3 [pid 8977] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... close resumed>) = 0 [pid 8977] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8977] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(4, [pid 8977] <... mprotect resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8977] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] getdents64(4, [pid 5060] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8977] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] close(4 [pid 8977] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 ./strace-static-x86_64: Process 8978 attached ./strace-static-x86_64: Process 8979 attached [pid 5062] rmdir("./387/file0" [pid 5060] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8978] set_robust_list(0x5555567436a0, 24 [pid 8979] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8977] <... clone3 resumed> => {parent_tid=[8979]}, 88) = 8979 [pid 5060] <... openat resumed>) = 3 [pid 8978] <... set_robust_list resumed>) = 0 [pid 8979] <... rseq resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8978 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./387" [pid 8978] chdir("./388" [pid 8979] set_robust_list(0x7f58200ee9a0, 24 [pid 5060] newfstatat(3, "", [pid 5062] <... rmdir resumed>) = 0 [pid 8978] <... chdir resumed>) = 0 [pid 8979] <... set_robust_list resumed>) = 0 [pid 8977] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] mkdir("./388", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8979] rt_sigprocmask(SIG_SETMASK, [], [pid 8977] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8978] <... prctl resumed>) = 0 [pid 8979] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8977] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(3, [pid 8978] setpgid(0, 0 [pid 8979] memfd_create("syzkaller", 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8978] <... setpgid resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [ 339.275395][ T8976] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8977] <... futex resumed>) = 0 [pid 5060] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8978] <... openat resumed>) = 3 [pid 8977] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./391/binderfs", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8978] write(3, "1000", 4 [pid 5060] unlink("./391/binderfs" [pid 8978] <... write resumed>) = 4 [pid 8979] <... memfd_create resumed>) = 3 [pid 8978] close(3 [pid 8979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... unlink resumed>) = 0 [pid 8978] <... close resumed>) = 0 [pid 8978] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8979] <... mmap resumed>) = 0x7f5817c00000 [pid 5060] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 8978] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8976] <... mount resumed>) = 0 [pid 8978] <... futex resumed>) = 0 [pid 8978] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8978] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8978] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8976] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8978] <... mmap resumed>) = 0x7f58200ce000 [pid 5060] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8978] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8978] <... mprotect resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./391/file0", [pid 8978] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8978] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8978] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8978] <... clone3 resumed> => {parent_tid=[8980]}, 88) = 8980 [pid 8976] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 4 [pid 8978] rt_sigprocmask(SIG_SETMASK, [], [pid 8976] chdir("./file0" [pid 5060] newfstatat(4, "", ./strace-static-x86_64: Process 8980 attached [pid 8978] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8976] <... chdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8980] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8980] <... rseq resumed>) = 0 [pid 5060] getdents64(4, [pid 8976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8980] set_robust_list(0x7f58200ee9a0, 24 [pid 8976] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8980] <... set_robust_list resumed>) = 0 [pid 8976] <... futex resumed>) = 1 [pid 8980] rt_sigprocmask(SIG_SETMASK, [], [pid 8976] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8980] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8980] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8978] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8974] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8978] <... futex resumed>) = 0 [pid 8974] exit_group(0 [pid 8978] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8974] <... exit_group resumed>) = ? [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./391/file0" [pid 8980] memfd_create("syzkaller", 0 [pid 8976] <... futex resumed>) = ? [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./391" [pid 8980] <... memfd_create resumed>) = 3 [pid 8976] +++ exited with 0 +++ [pid 8974] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8974, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./392", 0777 [pid 5063] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] getdents64(3, [pid 8980] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./386/binderfs", [pid 8979] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./386/binderfs") = 0 [pid 5063] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 5063] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8981 attached ) = 4 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8981 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8981] set_robust_list(0x5555567436a0, 24 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8981] <... set_robust_list resumed>) = 0 [pid 8980] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8981] chdir("./388" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./386/file0" [pid 8981] <... chdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8981] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8981] setpgid(0, 0) = 0 [pid 8981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8981] write(3, "1000", 4 [pid 5063] getdents64(3, [pid 8981] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./386" [pid 8981] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 8981] <... close resumed>) = 0 [pid 5063] mkdir("./387", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8981] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8981] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8981] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8981] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8981] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8981] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8981] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8981] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8982 attached [pid 8982] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8981] <... clone3 resumed> => {parent_tid=[8982]}, 88) = 8982 [pid 8980] <... write resumed>) = 2097152 [pid 8982] <... rseq resumed>) = 0 [pid 8981] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8981] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8981] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8982] set_robust_list(0x7f58200ee9a0, 24 [pid 8981] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8983 attached [pid 8979] <... write resumed>) = 2097152 [pid 8983] set_robust_list(0x5555567436a0, 24) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8983 [pid 8983] chdir("./392") = 0 [pid 8983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8983] setpgid(0, 0) = 0 [pid 8983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8982] <... set_robust_list resumed>) = 0 [pid 8981] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8979] munmap(0x7f5817c00000, 138412032 [pid 8982] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8983] write(3, "1000", 4 [pid 8982] memfd_create("syzkaller", 0 [pid 8980] munmap(0x7f5817c00000, 138412032 [pid 8983] <... write resumed>) = 4 [pid 8982] <... memfd_create resumed>) = 3 [pid 8983] close(3 [pid 8982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8983] <... close resumed>) = 0 [pid 8982] <... mmap resumed>) = 0x7f5817c00000 [pid 8983] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8979] <... munmap resumed>) = 0 [pid 8983] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8983] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8979] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8983] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8979] <... openat resumed>) = 4 [pid 8983] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8979] ioctl(4, LOOP_SET_FD, 3 [pid 8983] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... ioctl resumed>) = 0 [pid 8983] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] close(3 [pid 8983] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8984 [pid 8983] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8983] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8980] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 8984 attached [pid 8980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8984] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8985 attached ) = 0 [pid 8983] <... clone3 resumed> => {parent_tid=[8985]}, 88) = 8985 [pid 8980] <... openat resumed>) = 4 [pid 8985] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8984] chdir("./387" [pid 8983] rt_sigprocmask(SIG_SETMASK, [], [pid 8980] ioctl(4, LOOP_SET_FD, 3 [pid 8985] <... rseq resumed>) = 0 [pid 8984] <... chdir resumed>) = 0 [pid 8983] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8979] <... ioctl resumed>) = 0 [pid 8985] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8985] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8983] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8979] close(3) = 0 [pid 8979] close(4) = 0 [pid 8985] <... futex resumed>) = 0 [pid 8983] <... futex resumed>) = 1 [pid 8979] mkdir("./file0", 0777 [pid 8985] memfd_create("syzkaller", 0 [pid 8984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8985] <... memfd_create resumed>) = 3 [pid 8984] <... prctl resumed>) = 0 [pid 8983] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8979] <... mkdir resumed>) = 0 [pid 8985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8984] setpgid(0, 0 [pid 8979] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8985] <... mmap resumed>) = 0x7f5817c00000 [pid 8984] <... setpgid resumed>) = 0 [ 339.580103][ T8979] loop0: detected capacity change from 0 to 4096 [ 339.597485][ T8980] loop2: detected capacity change from 0 to 4096 [pid 8984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8980] <... ioctl resumed>) = 0 [pid 8980] close(3) = 0 [pid 8980] close(4) = 0 [pid 8980] mkdir("./file0", 0777 [pid 8984] write(3, "1000", 4) = 4 [pid 8984] close(3) = 0 [pid 8984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8980] <... mkdir resumed>) = 0 [pid 8984] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8984] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8984] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 8984] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8980] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8984] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8984] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 8986 attached => {parent_tid=[8986]}, 88) = 8986 [pid 8986] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8984] rt_sigprocmask(SIG_SETMASK, [], [pid 8986] <... rseq resumed>) = 0 [pid 8984] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8986] set_robust_list(0x7f58200ee9a0, 24 [pid 8984] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8986] <... set_robust_list resumed>) = 0 [pid 8986] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8982] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8986] memfd_create("syzkaller", 0 [pid 8984] <... futex resumed>) = 0 [pid 8984] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8986] <... memfd_create resumed>) = 3 [pid 8986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [ 339.623496][ T8979] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 339.657081][ T8980] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8985] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8980] <... mount resumed>) = 0 [pid 8980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8980] chdir("./file0") = 0 [pid 8980] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8980] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8978] <... futex resumed>) = 0 [pid 8980] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8978] exit_group(0 [pid 8980] <... futex resumed>) = ? [pid 8978] <... exit_group resumed>) = ? [pid 8980] +++ exited with 0 +++ [pid 8978] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8978, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8979] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8986] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8982] <... write resumed>) = 2097152 [pid 5061] newfstatat(3, "", [pid 8979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8979] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 8979] chdir("./file0" [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8979] <... chdir resumed>) = 0 [pid 5061] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8979] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(AT_FDCWD, "./388/binderfs", [pid 8979] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8979] <... futex resumed>) = 1 [pid 5061] unlink("./388/binderfs" [pid 8979] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8977] <... futex resumed>) = 0 [pid 8977] exit_group(0 [pid 8979] <... futex resumed>) = ? [pid 8977] <... exit_group resumed>) = ? [pid 8982] munmap(0x7f5817c00000, 138412032 [pid 8979] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./388/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8985] <... write resumed>) = 2097152 [pid 8982] <... munmap resumed>) = 0 [pid 8977] +++ exited with 0 +++ [pid 5061] newfstatat(4, "", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8977, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5059] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 5059] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] newfstatat(3, "", [pid 5061] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5061] close(4 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./388/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(3, [pid 5059] unlink("./392/binderfs" [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5061] close(3 [pid 5059] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 8982] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] rmdir("./388" [pid 8982] <... openat resumed>) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 8982] ioctl(4, LOOP_SET_FD, 3 [pid 5061] mkdir("./389", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD) = 0 [pid 8982] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8982] close(3) = 0 [pid 5061] <... close resumed>) = 0 [pid 8982] close(4) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8982] mkdir("./file0", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8987 attached [pid 8985] munmap(0x7f5817c00000, 138412032 [pid 5059] newfstatat(AT_FDCWD, "./392/file0", [pid 8987] set_robust_list(0x5555567436a0, 24 [pid 8985] <... munmap resumed>) = 0 [pid 8982] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8987] <... set_robust_list resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 8987 [pid 5059] <... openat resumed>) = 4 [pid 8987] chdir("./389" [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 8987] <... chdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] close(4 [pid 8987] <... prctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 8987] setpgid(0, 0 [pid 5059] rmdir("./392/file0") = 0 [pid 8987] <... setpgid resumed>) = 0 [pid 5059] getdents64(3, [pid 8987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 8987] <... openat resumed>) = 3 [pid 8986] <... write resumed>) = 2097152 [pid 8985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8982] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] close(3 [pid 8987] write(3, "1000", 4 [pid 5059] <... close resumed>) = 0 [ 339.803893][ T8982] loop3: detected capacity change from 0 to 4096 [pid 5059] rmdir("./392") = 0 [pid 5059] mkdir("./393", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8987] <... write resumed>) = 4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8987] close(3) = 0 [pid 8987] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8987] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8985] <... openat resumed>) = 4 [pid 8987] <... futex resumed>) = 0 [pid 8985] ioctl(4, LOOP_SET_FD, 3 [pid 8987] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 8985] <... ioctl resumed>) = 0 [pid 8985] close(3 [pid 8987] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8985] <... close resumed>) = 0 [pid 8987] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8985] close(4 [pid 8987] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8985] <... close resumed>) = 0 [pid 8987] <... mmap resumed>) = 0x7f58200ce000 [pid 8985] mkdir("./file0", 0777 [pid 8987] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8985] <... mkdir resumed>) = 0 [pid 8987] <... mprotect resumed>) = 0 [pid 8985] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8987] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8987] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[8988]}, 88) = 8988 [pid 8987] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8987] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8987] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8988 attached [pid 8988] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 8988] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 8988] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8988] memfd_create("syzkaller", 0 [pid 8986] munmap(0x7f5817c00000, 138412032 [pid 8988] <... memfd_create resumed>) = 3 [pid 8986] <... munmap resumed>) = 0 [pid 8988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 8986] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 339.845639][ T8982] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 339.853991][ T8985] loop1: detected capacity change from 0 to 4096 [ 339.872846][ T8985] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 8986] ioctl(4, LOOP_SET_FD, 3 [pid 8982] <... mount resumed>) = 0 [pid 8982] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... ioctl resumed>) = 0 [pid 8982] <... openat resumed>) = 3 [pid 8986] <... ioctl resumed>) = 0 [pid 8986] close(3) = 0 [pid 8986] close(4 [pid 8982] chdir("./file0" [pid 8986] <... close resumed>) = 0 [pid 8982] <... chdir resumed>) = 0 [pid 8982] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8986] mkdir("./file0", 0777) = 0 [pid 5059] close(3 [pid 8986] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8982] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8981] <... futex resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8989 ./strace-static-x86_64: Process 8989 attached [pid 8988] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8982] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8981] exit_group(0 [pid 8989] set_robust_list(0x5555567436a0, 24) = 0 [pid 8989] chdir("./393" [pid 8982] <... futex resumed>) = ? [pid 8981] <... exit_group resumed>) = ? [pid 8989] <... chdir resumed>) = 0 [pid 8982] +++ exited with 0 +++ [pid 8989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8989] setpgid(0, 0 [pid 8981] +++ exited with 0 +++ [pid 8989] <... setpgid resumed>) = 0 [pid 8989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8981, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [ 339.916097][ T8986] loop4: detected capacity change from 0 to 4096 [ 339.953427][ T8986] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 8989] write(3, "1000", 4 [pid 5062] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8989] <... write resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8989] close(3) = 0 [pid 8989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8989] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 8989] <... futex resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8989] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8989] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] getdents64(3, [pid 8989] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8989] <... mmap resumed>) = 0x7f58200ce000 [pid 5062] newfstatat(AT_FDCWD, "./388/binderfs", [pid 8985] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./388/binderfs" [pid 8989] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8985] <... openat resumed>) = 3 [pid 8989] <... mprotect resumed>) = 0 [pid 8985] chdir("./file0" [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8989] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8985] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./388/file0", [pid 8989] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8985] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8985] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8990 attached [pid 8985] <... futex resumed>) = 1 [pid 5062] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8990] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8989] <... clone3 resumed> => {parent_tid=[8990]}, 88) = 8990 [pid 8985] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8983] <... futex resumed>) = 0 [pid 8990] <... rseq resumed>) = 0 [pid 8989] rt_sigprocmask(SIG_SETMASK, [], [pid 8983] exit_group(0 [pid 5062] <... openat resumed>) = 4 [pid 8990] set_robust_list(0x7f58200ee9a0, 24 [pid 8989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8985] <... futex resumed>) = ? [pid 8983] <... exit_group resumed>) = ? [pid 5062] newfstatat(4, "", [pid 8990] <... set_robust_list resumed>) = 0 [pid 8989] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8985] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8983] +++ exited with 0 +++ [pid 8989] <... futex resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8983, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8989] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8990] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8990] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8986] <... mount resumed>) = 0 [pid 5062] getdents64(4, [pid 8986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8986] <... openat resumed>) = 3 [pid 8986] chdir("./file0" [pid 5060] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8986] <... chdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 8990] memfd_create("syzkaller", 0 [pid 8986] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(3, "", [pid 8990] <... memfd_create resumed>) = 3 [pid 8986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8986] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8990] <... mmap resumed>) = 0x7f5817c00000 [pid 8986] <... futex resumed>) = 1 [pid 5062] <... close resumed>) = 0 [pid 8988] <... write resumed>) = 2097152 [pid 8984] <... futex resumed>) = 0 [pid 5060] getdents64(3, [pid 8984] exit_group(0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./388/file0" [pid 8984] <... exit_group resumed>) = ? [pid 5060] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8986] +++ exited with 0 +++ [pid 8984] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8984, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./392/binderfs", [pid 5062] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./388" [pid 5060] unlink("./392/binderfs" [pid 8988] munmap(0x7f5817c00000, 138412032 [pid 5063] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 8988] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] mkdir("./389", 0777 [pid 5060] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./387/binderfs") = 0 [pid 5063] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8988] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8990] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8988] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 8988] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./392/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5063] newfstatat(AT_FDCWD, "./387/file0", [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(4, [pid 5063] umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] rmdir("./392/file0" [pid 5063] <... openat resumed>) = 4 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5060] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./392") = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5060] mkdir("./393", 0777 [pid 8990] <... write resumed>) = 2097152 [pid 8988] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 8990] munmap(0x7f5817c00000, 138412032 [pid 8988] close(3 [pid 5063] getdents64(4, [pid 5060] <... mkdir resumed>) = 0 [pid 8988] <... close resumed>) = 0 [pid 8988] close(4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./387/file0") = 0 [pid 8988] <... close resumed>) = 0 [pid 8988] mkdir("./file0", 0777 [pid 5063] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] rmdir("./387") = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 8988] <... mkdir resumed>) = 0 [pid 5063] mkdir("./388", 0777 [pid 8990] <... munmap resumed>) = 0 [pid 8988] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 8990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 8990] <... openat resumed>) = 4 [ 340.126072][ T8988] loop2: detected capacity change from 0 to 4096 [pid 8990] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 8990] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8990] close(3) = 0 [pid 8990] close(4./strace-static-x86_64: Process 8991 attached [pid 8991] set_robust_list(0x5555567436a0, 24 [pid 8990] <... close resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 8991 [pid 8990] mkdir("./file0", 0777) = 0 [pid 8991] <... set_robust_list resumed>) = 0 [pid 8991] chdir("./389") = 0 [pid 8991] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8990] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 8991] <... prctl resumed>) = 0 [ 340.176551][ T8990] loop0: detected capacity change from 0 to 4096 [ 340.182497][ T8988] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 8991] setpgid(0, 0) = 0 [pid 8991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8991] write(3, "1000", 4) = 4 [pid 8991] close(3) = 0 [pid 8991] symlink("/dev/binderfs", "./binderfs" [pid 8988] <... mount resumed>) = 0 [pid 8991] <... symlink resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 8991] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8988] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] close(3 [pid 8991] <... futex resumed>) = 0 [pid 8991] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8988] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 8991] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8988] chdir("./file0" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8991] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 ./strace-static-x86_64: Process 8992 attached [pid 8991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 8992 [pid 8988] <... chdir resumed>) = 0 [pid 8991] <... mmap resumed>) = 0x7f58200ce000 [pid 8991] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8988] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8991] <... mprotect resumed>) = 0 [pid 8991] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8992] set_robust_list(0x5555567436a0, 24 [pid 8991] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8992] <... set_robust_list resumed>) = 0 [pid 8991] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8988] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8992] chdir("./393") = 0 [pid 8988] <... futex resumed>) = 1 [pid 8992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8991] <... clone3 resumed> => {parent_tid=[8993]}, 88) = 8993 [pid 8988] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8987] <... futex resumed>) = 0 [ 340.225112][ T8990] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). ./strace-static-x86_64: Process 8993 attached [pid 8992] <... prctl resumed>) = 0 [pid 8991] rt_sigprocmask(SIG_SETMASK, [], [pid 8987] exit_group(0 [pid 5063] <... ioctl resumed>) = 0 [pid 8992] setpgid(0, 0 [pid 8991] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8988] <... futex resumed>) = ? [pid 8987] <... exit_group resumed>) = ? [pid 8993] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8992] <... setpgid resumed>) = 0 [pid 8991] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8988] +++ exited with 0 +++ [pid 8987] +++ exited with 0 +++ [pid 5063] close(3 [pid 8993] <... rseq resumed>) = 0 [pid 8992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8991] <... futex resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8987, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 8993] set_robust_list(0x7f58200ee9a0, 24 [pid 8992] <... openat resumed>) = 3 [pid 8991] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8992] write(3, "1000", 4 [pid 8993] <... set_robust_list resumed>) = 0 [pid 8993] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8994 attached [pid 8993] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8992] <... write resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8992] close(3 [pid 8994] set_robust_list(0x5555567436a0, 24 [pid 8992] <... close resumed>) = 0 [pid 8994] <... set_robust_list resumed>) = 0 [pid 8992] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 8994 [pid 8994] chdir("./388" [pid 8993] memfd_create("syzkaller", 0 [pid 8992] <... symlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8994] <... chdir resumed>) = 0 [pid 8992] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... openat resumed>) = 3 [pid 8994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8992] <... futex resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 8994] <... prctl resumed>) = 0 [pid 8992] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8990] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8994] setpgid(0, 0 [pid 8993] <... memfd_create resumed>) = 3 [pid 8992] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(3, [pid 8994] <... setpgid resumed>) = 0 [pid 8993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8992] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8990] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8993] <... mmap resumed>) = 0x7f5817c00000 [pid 8992] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8990] chdir("./file0" [pid 5061] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8994] <... openat resumed>) = 3 [pid 8992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8990] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8994] write(3, "1000", 4 [pid 8992] <... mmap resumed>) = 0x7f58200ce000 [pid 8990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./389/binderfs", [pid 8994] <... write resumed>) = 4 [pid 8992] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8994] close(3 [pid 8992] <... mprotect resumed>) = 0 [pid 8990] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8994] <... close resumed>) = 0 [pid 8990] <... futex resumed>) = 1 [pid 8989] <... futex resumed>) = 0 [pid 5061] unlink("./389/binderfs" [pid 8994] symlink("/dev/binderfs", "./binderfs" [pid 8992] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8990] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8989] exit_group(0 [pid 5061] <... unlink resumed>) = 0 [pid 8994] <... symlink resumed>) = 0 [pid 8992] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8990] <... futex resumed>) = ? [pid 8989] <... exit_group resumed>) = ? [pid 5061] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8994] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8992] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8990] +++ exited with 0 +++ ./strace-static-x86_64: Process 8995 attached [pid 8994] <... futex resumed>) = 0 [pid 8989] +++ exited with 0 +++ [pid 8995] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8994] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8992] <... clone3 resumed> => {parent_tid=[8995]}, 88) = 8995 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8989, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8995] <... rseq resumed>) = 0 [pid 8994] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8992] rt_sigprocmask(SIG_SETMASK, [], [pid 8995] set_robust_list(0x7f58200ee9a0, 24 [pid 8994] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8992] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8995] <... set_robust_list resumed>) = 0 [pid 8994] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8992] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8995] rt_sigprocmask(SIG_SETMASK, [], [pid 8994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8992] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8994] <... mmap resumed>) = 0x7f58200ce000 [pid 8992] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8995] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8994] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8994] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8994] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8995] memfd_create("syzkaller", 0) = 3 [pid 5059] <... openat resumed>) = 3 [pid 8995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] newfstatat(3, "", ./strace-static-x86_64: Process 8996 attached [pid 8995] <... mmap resumed>) = 0x7f5817c00000 [pid 8994] <... clone3 resumed> => {parent_tid=[8996]}, 88) = 8996 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8996] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8994] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] getdents64(3, [pid 8994] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8994] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5061] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./393/binderfs" [pid 5061] newfstatat(AT_FDCWD, "./389/file0", [pid 5059] <... unlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8996] <... rseq resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8996] set_robust_list(0x7f58200ee9a0, 24 [pid 5061] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8996] <... set_robust_list resumed>) = 0 [pid 8996] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... openat resumed>) = 4 [pid 8996] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] newfstatat(4, "", [pid 8996] memfd_create("syzkaller", 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./393/file0", [pid 5061] close(4 [pid 8993] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8996] <... memfd_create resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5061] rmdir("./389/file0" [pid 5059] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5059] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5061] close(3 [pid 5059] newfstatat(4, "", [pid 5061] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8993] <... write resumed>) = 2097152 [pid 5061] rmdir("./389" [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 8993] munmap(0x7f5817c00000, 138412032 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./393/file0") = 0 [pid 5059] getdents64(3, [pid 5061] mkdir("./390", 0777 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./393") = 0 [pid 5059] mkdir("./394", 0777 [pid 5061] <... mkdir resumed>) = 0 [pid 8995] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... mkdir resumed>) = 0 [pid 8993] <... munmap resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 8993] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8993] ioctl(4, LOOP_SET_FD, 3 [pid 8996] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 8993] <... ioctl resumed>) = 0 [pid 8993] close(3) = 0 [pid 8993] close(4) = 0 [pid 8993] mkdir("./file0", 0777 [pid 8995] <... write resumed>) = 2097152 [pid 8993] <... mkdir resumed>) = 0 [pid 8995] munmap(0x7f5817c00000, 138412032 [ 340.443052][ T8993] loop3: detected capacity change from 0 to 4096 [pid 8993] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 8995] <... munmap resumed>) = 0 [pid 8995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 8995] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... ioctl resumed>) = 0 [pid 8995] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556743690) = 8997 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8997 attached [pid 8997] set_robust_list(0x5555567436a0, 24./strace-static-x86_64: Process 8998 attached ) = 0 [pid 8996] <... write resumed>) = 2097152 [pid 8995] close(3 [pid 8998] set_robust_list(0x5555567436a0, 24 [pid 8997] chdir("./390" [pid 8996] munmap(0x7f5817c00000, 138412032 [pid 8995] <... close resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 8998 [pid 8998] <... set_robust_list resumed>) = 0 [pid 8995] close(4 [pid 8998] chdir("./394" [pid 8997] <... chdir resumed>) = 0 [pid 8996] <... munmap resumed>) = 0 [pid 8995] <... close resumed>) = 0 [pid 8998] <... chdir resumed>) = 0 [pid 8995] mkdir("./file0", 0777 [pid 8997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8997] setpgid(0, 0) = 0 [pid 8997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8995] <... mkdir resumed>) = 0 [pid 8998] <... prctl resumed>) = 0 [pid 8998] setpgid(0, 0 [pid 8997] <... openat resumed>) = 3 [pid 8998] <... setpgid resumed>) = 0 [pid 8997] write(3, "1000", 4 [pid 8996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 340.493010][ T8993] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 340.514083][ T8995] loop1: detected capacity change from 0 to 4096 [pid 8995] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 8998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8997] <... write resumed>) = 4 [pid 8996] <... openat resumed>) = 4 [pid 8998] <... openat resumed>) = 3 [pid 8997] close(3 [pid 8996] ioctl(4, LOOP_SET_FD, 3 [pid 8997] <... close resumed>) = 0 [pid 8997] symlink("/dev/binderfs", "./binderfs" [pid 8998] write(3, "1000", 4 [pid 8997] <... symlink resumed>) = 0 [pid 8998] <... write resumed>) = 4 [pid 8997] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8997] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8998] close(3) = 0 [pid 8997] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8993] <... mount resumed>) = 0 [pid 8998] symlink("/dev/binderfs", "./binderfs" [pid 8997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 8993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8998] <... symlink resumed>) = 0 [pid 8997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8993] <... openat resumed>) = 3 [pid 8997] <... mmap resumed>) = 0x7f58200ce000 [pid 8993] chdir("./file0" [pid 8998] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8993] <... chdir resumed>) = 0 [pid 8997] <... mprotect resumed>) = 0 [pid 8993] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8998] <... futex resumed>) = 0 [pid 8997] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8993] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8998] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 8997] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8996] <... ioctl resumed>) = 0 [pid 8998] <... rt_sigaction resumed>NULL, 8) = 0 [pid 8997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8996] close(3 [pid 8993] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8999 attached [pid 8998] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 8996] <... close resumed>) = 0 [pid 8993] <... futex resumed>) = 1 [pid 8991] <... futex resumed>) = 0 [pid 8999] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8998] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8999] <... rseq resumed>) = 0 [pid 8998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8997] <... clone3 resumed> => {parent_tid=[8999]}, 88) = 8999 [pid 8993] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8991] exit_group(0 [pid 8999] set_robust_list(0x7f58200ee9a0, 24 [pid 8998] <... mmap resumed>) = 0x7f58200ce000 [pid 8997] rt_sigprocmask(SIG_SETMASK, [], [pid 8993] <... futex resumed>) = ? [pid 8991] <... exit_group resumed>) = ? [pid 8996] close(4 [pid 8999] <... set_robust_list resumed>) = 0 [pid 8998] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 8997] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8996] <... close resumed>) = 0 [pid 8993] +++ exited with 0 +++ [pid 8991] +++ exited with 0 +++ [pid 8999] rt_sigprocmask(SIG_SETMASK, [], [pid 8998] <... mprotect resumed>) = 0 [pid 8997] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8996] mkdir("./file0", 0777 [pid 8999] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8998] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8997] <... futex resumed>) = 0 [pid 8996] <... mkdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8991, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8999] memfd_create("syzkaller", 0 [pid 8998] <... rt_sigprocmask resumed>[], 8) = 0 [pid 8997] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8996] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8998] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 340.562275][ T8995] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 340.574847][ T8996] loop4: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9000 attached ) = 3 [pid 9000] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 8999] <... memfd_create resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 8998] <... clone3 resumed> => {parent_tid=[9000]}, 88) = 9000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8998] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] getdents64(3, [pid 8999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8998] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 8999] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9000] <... rseq resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9000] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 9000] rt_sigprocmask(SIG_SETMASK, [], [pid 8998] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8998] <... futex resumed>) = 0 [pid 9000] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] unlink("./389/binderfs" [pid 9000] memfd_create("syzkaller", 0 [pid 8998] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... unlink resumed>) = 0 [pid 9000] <... memfd_create resumed>) = 3 [pid 5062] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... umount2 resumed>) = 0 [pid 9000] <... mmap resumed>) = 0x7f5817c00000 [pid 5062] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./389/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./389/file0") = 0 [ 340.626774][ T8996] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./389" [pid 8995] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] mkdir("./390", 0777 [pid 8995] <... openat resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 8995] chdir("./file0") = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8995] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 8999] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8995] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8992] <... futex resumed>) = 0 [pid 8995] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8992] exit_group(0) = ? [pid 8995] <... futex resumed>) = ? [pid 8995] +++ exited with 0 +++ [pid 8992] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8992, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9000] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./393/binderfs") = 0 [pid 5060] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8996] <... mount resumed>) = 0 [pid 8996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8999] <... write resumed>) = 2097152 [pid 8996] <... openat resumed>) = 3 [pid 9000] <... write resumed>) = 2097152 [pid 8999] munmap(0x7f5817c00000, 138412032 [pid 8996] chdir("./file0" [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./393/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8996] <... chdir resumed>) = 0 [pid 9000] munmap(0x7f5817c00000, 138412032 [pid 8999] <... munmap resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 8996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 8996] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] close(3 [pid 5060] rmdir("./393/file0" [pid 8996] <... futex resumed>) = 1 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 8996] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] close(3) = 0 [pid 8994] <... futex resumed>) = 0 [pid 5060] rmdir("./393" [pid 8994] exit_group(0 [pid 5060] <... rmdir resumed>) = 0 [pid 8999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8996] <... futex resumed>) = ? [pid 8994] <... exit_group resumed>) = ? [pid 5060] mkdir("./394", 0777 [pid 8999] <... openat resumed>) = 4 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 9001 [pid 8999] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 9001 attached [pid 9000] <... munmap resumed>) = 0 [pid 8996] +++ exited with 0 +++ [pid 8994] +++ exited with 0 +++ [pid 5060] <... mkdir resumed>) = 0 [pid 9001] set_robust_list(0x5555567436a0, 24) = 0 [pid 9001] chdir("./390" [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9001] <... chdir resumed>) = 0 [pid 9000] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8999] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8994, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] <... openat resumed>) = 3 [pid 9001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9000] <... openat resumed>) = 4 [pid 8999] close(3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9001] <... prctl resumed>) = 0 [pid 9000] ioctl(4, LOOP_SET_FD, 3 [pid 8999] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9001] setpgid(0, 0 [pid 8999] close(4 [pid 5063] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8999] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./388/binderfs") = 0 [pid 5063] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9001] <... setpgid resumed>) = 0 [pid 9000] <... ioctl resumed>) = 0 [pid 8999] mkdir("./file0", 0777 [pid 9000] close(3 [pid 9001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9000] <... close resumed>) = 0 [pid 8999] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 9001] <... openat resumed>) = 3 [pid 9000] close(4 [pid 8999] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [ 340.802336][ T8999] loop2: detected capacity change from 0 to 4096 [ 340.840676][ T9000] loop0: detected capacity change from 0 to 4096 [pid 9001] write(3, "1000", 4 [pid 9000] <... close resumed>) = 0 [pid 9000] mkdir("./file0", 0777) = 0 [pid 5063] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9000] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./388/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9001] <... write resumed>) = 4 [pid 5063] umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9001] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9001] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9001] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9001] <... symlink resumed>) = 0 [pid 5063] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9001] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 9001] <... futex resumed>) = 0 [pid 9001] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9001] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9001] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] close(4 [pid 9001] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... close resumed>) = 0 [pid 9001] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] rmdir("./388/file0" [pid 9001] <... mprotect resumed>) = 0 [pid 8999] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 9001] rt_sigprocmask(SIG_BLOCK, ~[], [pid 8999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9001] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9001] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 8999] <... openat resumed>) = 3 [pid 5063] getdents64(3, ./strace-static-x86_64: Process 9002 attached [pid 8999] chdir("./file0" [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9002] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9001] <... clone3 resumed> => {parent_tid=[9002]}, 88) = 9002 [pid 8999] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 9002] <... rseq resumed>) = 0 [pid 9001] rt_sigprocmask(SIG_SETMASK, [], [pid 8999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 9002] set_robust_list(0x7f58200ee9a0, 24 [pid 9001] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] rmdir("./388" [pid 9002] <... set_robust_list resumed>) = 0 [pid 9001] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8999] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9002] rt_sigprocmask(SIG_SETMASK, [], [pid 9001] <... futex resumed>) = 0 [pid 8999] <... futex resumed>) = 1 [pid 8997] <... futex resumed>) = 0 [ 340.857717][ T8999] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 340.873278][ T9000] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 9001] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8999] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9002] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8997] exit_group(0 [pid 5063] <... rmdir resumed>) = 0 [pid 9002] memfd_create("syzkaller", 0 [pid 8999] <... futex resumed>) = ? [pid 8997] <... exit_group resumed>) = ? [pid 5063] mkdir("./389", 0777 [pid 5060] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 8999] +++ exited with 0 +++ [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8997] +++ exited with 0 +++ ./strace-static-x86_64: Process 9003 attached [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8997, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 9003] set_robust_list(0x5555567436a0, 24 [pid 5063] <... openat resumed>) = 3 [pid 9003] <... set_robust_list resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 9003] chdir("./394" [pid 9002] <... memfd_create resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 9003 [pid 9003] <... chdir resumed>) = 0 [pid 9002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 9002] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] newfstatat(AT_FDCWD, "./390/binderfs", [pid 9003] <... prctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9003] setpgid(0, 0 [pid 5061] unlink("./390/binderfs" [pid 9003] <... setpgid resumed>) = 0 [pid 9003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... unlink resumed>) = 0 [pid 9003] <... openat resumed>) = 3 [pid 9003] write(3, "1000", 4 [pid 5061] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9003] <... write resumed>) = 4 [pid 9003] close(3) = 0 [pid 9003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9003] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9003] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9003] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9003] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9003] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9003] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9004 attached [pid 9004] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 9003] <... clone3 resumed> => {parent_tid=[9004]}, 88) = 9004 [pid 9004] set_robust_list(0x7f58200ee9a0, 24 [pid 9003] rt_sigprocmask(SIG_SETMASK, [], [pid 9004] <... set_robust_list resumed>) = 0 [pid 9003] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9004] rt_sigprocmask(SIG_SETMASK, [], [pid 9003] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9004] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9003] <... futex resumed>) = 0 [pid 9004] memfd_create("syzkaller", 0 [pid 9003] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9004] <... memfd_create resumed>) = 3 [pid 9002] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9000] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 9000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9004] <... mmap resumed>) = 0x7f5817c00000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9000] chdir("./file0" [pid 5061] newfstatat(AT_FDCWD, "./390/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./390/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./390" [pid 9002] <... write resumed>) = 2097152 [pid 9000] <... chdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 9002] munmap(0x7f5817c00000, 138412032 [pid 9000] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] close(3 [pid 9000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [pid 9000] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9000] <... futex resumed>) = 1 [pid 9000] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8998] <... futex resumed>) = 0 [pid 8998] exit_group(0 [pid 9000] <... futex resumed>) = ? [pid 8998] <... exit_group resumed>) = ? [pid 9000] +++ exited with 0 +++ [pid 8998] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8998, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 9005 [pid 5061] mkdir("./391", 0777./strace-static-x86_64: Process 9005 attached ) = 0 [pid 5059] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 9002] <... munmap resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 9005] set_robust_list(0x5555567436a0, 24 [pid 9002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9005] <... set_robust_list resumed>) = 0 [pid 9002] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9005] chdir("./389" [pid 9002] ioctl(4, LOOP_SET_FD, 3 [pid 5059] newfstatat(AT_FDCWD, "./394/binderfs", [pid 9005] <... chdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] unlink("./394/binderfs" [pid 9005] <... prctl resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 9005] setpgid(0, 0 [pid 5059] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9005] <... setpgid resumed>) = 0 [pid 9005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9005] write(3, "1000", 4) = 4 [pid 9005] close(3) = 0 [pid 9005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9004] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9002] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 9005] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9002] close(3) = 0 [pid 9002] close(4) = 0 [pid 9002] mkdir("./file0", 0777) = 0 [pid 9002] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 5059] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9005] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9005] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] newfstatat(AT_FDCWD, "./394/file0", [pid 9005] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9005] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9005] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... ioctl resumed>) = 0 [ 341.056271][ T9002] loop3: detected capacity change from 0 to 4096 [pid 5059] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9005] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] close(3 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9005] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9005] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 9005] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] rmdir("./394/file0" [pid 9005] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9006 attached [pid 5061] <... close resumed>) = 0 [pid 5059] getdents64(3, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9006] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9005] <... clone3 resumed> => {parent_tid=[9006]}, 88) = 9006 [pid 5059] close(3 [pid 9005] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... close resumed>) = 0 [pid 9005] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] rmdir("./394" [pid 9006] <... rseq resumed>) = 0 [pid 9006] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 9006] rt_sigprocmask(SIG_SETMASK, [], [pid 9005] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 9007 [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9007 attached [pid 9006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9007] set_robust_list(0x5555567436a0, 24) = 0 [pid 9007] chdir("./391") = 0 [pid 9005] <... futex resumed>) = 0 [pid 9007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9005] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] mkdir("./395", 0777 [pid 9006] memfd_create("syzkaller", 0 [pid 9007] <... prctl resumed>) = 0 [pid 9006] <... memfd_create resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 9007] setpgid(0, 0 [pid 9006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9007] <... setpgid resumed>) = 0 [pid 9006] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] <... openat resumed>) = 3 [pid 9007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] ioctl(3, LOOP_CLR_FD [pid 9007] <... openat resumed>) = 3 [pid 9007] write(3, "1000", 4) = 4 [pid 9007] close(3) = 0 [pid 9007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9007] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9007] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9007] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9004] <... write resumed>) = 2097152 [pid 9007] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 341.102975][ T9002] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 9007] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9007] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9008 attached => {parent_tid=[9008]}, 88) = 9008 [pid 9008] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9007] rt_sigprocmask(SIG_SETMASK, [], [pid 9004] munmap(0x7f5817c00000, 138412032 [pid 9008] <... rseq resumed>) = 0 [pid 9007] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9008] set_robust_list(0x7f58200ee9a0, 24 [pid 9004] <... munmap resumed>) = 0 [pid 9008] <... set_robust_list resumed>) = 0 [pid 9007] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9008] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9007] <... futex resumed>) = 0 [pid 9008] memfd_create("syzkaller", 0 [pid 9007] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9002] <... mount resumed>) = 0 [pid 9008] <... memfd_create resumed>) = 3 [pid 9008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9008] <... mmap resumed>) = 0x7f5817c00000 [pid 9002] <... openat resumed>) = 3 [pid 9002] chdir("./file0" [pid 9004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9002] <... chdir resumed>) = 0 [pid 9004] <... openat resumed>) = 4 [pid 9002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9004] ioctl(4, LOOP_SET_FD, 3 [pid 9002] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9006] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9004] <... ioctl resumed>) = 0 [pid 9002] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9001] <... futex resumed>) = 0 [pid 9001] exit_group(0) = ? [pid 9002] +++ exited with 0 +++ [pid 9001] +++ exited with 0 +++ [pid 5059] <... ioctl resumed>) = 0 [pid 9004] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9001, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5059] close(3 [pid 5062] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9004] <... close resumed>) = 0 [pid 9004] close(4./strace-static-x86_64: Process 9009 attached ) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 9009 [pid 9009] set_robust_list(0x5555567436a0, 24 [pid 9004] mkdir("./file0", 0777 [pid 5062] newfstatat(3, "", [pid 9009] <... set_robust_list resumed>) = 0 [pid 9004] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 9009] chdir("./395" [pid 9008] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9004] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [ 341.204999][ T9004] loop1: detected capacity change from 0 to 4096 [pid 5062] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9009] <... chdir resumed>) = 0 [pid 9006] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./390/binderfs", [pid 9006] munmap(0x7f5817c00000, 138412032) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9009] setpgid(0, 0) = 0 [pid 9009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9009] write(3, "1000", 4) = 4 [pid 9009] close(3) = 0 [pid 5062] unlink("./390/binderfs" [pid 9009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... unlink resumed>) = 0 [pid 9009] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9009] <... futex resumed>) = 0 [pid 9009] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9006] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9009] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9006] <... openat resumed>) = 4 [pid 9009] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9006] ioctl(4, LOOP_SET_FD, 3 [pid 9009] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9009] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9009] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9009] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} => {parent_tid=[9010]}, 88) = 9010 [pid 9009] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9009] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9010 attached ) = 0 [pid 9010] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9009] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9010] <... rseq resumed>) = 0 [pid 9010] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 9010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9010] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = 0 [pid 9010] <... memfd_create resumed>) = 3 [pid 9010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9006] <... ioctl resumed>) = 0 [pid 5062] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9006] close(3) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./390/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9006] close(4 [pid 5062] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9006] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 9006] mkdir("./file0", 0777 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9006] <... mkdir resumed>) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9006] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [ 341.253406][ T9004] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 341.282881][ T9006] loop4: detected capacity change from 0 to 4096 [pid 5062] getdents64(4, [pid 9008] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9008] munmap(0x7f5817c00000, 138412032) = 0 [pid 9010] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] close(4) = 0 [pid 5062] rmdir("./390/file0" [pid 9008] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 9008] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9008] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(3) = 0 [pid 9006] <... mount resumed>) = 0 [pid 5062] rmdir("./390" [pid 9006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9004] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 9006] chdir("./file0" [pid 9004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] mkdir("./391", 0777 [pid 9006] <... chdir resumed>) = 0 [pid 9004] <... openat resumed>) = 3 [pid 9006] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9004] chdir("./file0") = 0 [pid 9008] <... ioctl resumed>) = 0 [pid 9004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9008] close(3) = 0 [pid 9004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9008] close(4 [pid 9004] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9008] <... close resumed>) = 0 [pid 9004] <... futex resumed>) = 1 [pid 9003] <... futex resumed>) = 0 [pid 9008] mkdir("./file0", 0777 [pid 9003] exit_group(0 [pid 9008] <... mkdir resumed>) = 0 [pid 9003] <... exit_group resumed>) = ? [pid 9008] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 9004] +++ exited with 0 +++ [pid 9003] +++ exited with 0 +++ [pid 9006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... mkdir resumed>) = 0 [ 341.332157][ T9006] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 341.365811][ T9008] loop2: detected capacity change from 0 to 4096 [pid 9006] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9003, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 9006] <... futex resumed>) = 1 [pid 5062] <... openat resumed>) = 3 [pid 9005] <... futex resumed>) = 0 [pid 9005] exit_group(0) = ? [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./394/binderfs") = 0 [pid 5060] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9006] +++ exited with 0 +++ [pid 9005] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9005, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./394/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 4 [pid 5063] newfstatat(3, "", [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./394/file0") = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] getdents64(3, [pid 5063] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(AT_FDCWD, "./389/binderfs", [pid 5060] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./389/binderfs" [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./394") = 0 [pid 9010] <... write resumed>) = 2097152 [pid 5060] mkdir("./395", 0777) = 0 [pid 9010] munmap(0x7f5817c00000, 138412032 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 341.412570][ T9008] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 9010] <... munmap resumed>) = 0 [pid 9008] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] close(3 [pid 9010] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9010] <... openat resumed>) = 4 [pid 9008] <... openat resumed>) = 3 [pid 9008] chdir("./file0") = 0 [pid 9008] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9010] ioctl(4, LOOP_SET_FD, 3 [pid 9008] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9007] <... futex resumed>) = 0 [pid 9007] exit_group(0) = ? [pid 9008] <... futex resumed>) = ? [pid 9008] +++ exited with 0 +++ [pid 9007] +++ exited with 0 +++ [pid 5063] newfstatat(AT_FDCWD, "./389/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 9011 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9007, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 9011 attached [pid 9010] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9011] set_robust_list(0x5555567436a0, 24) = 0 [pid 5061] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9011] chdir("./391" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9011] <... chdir resumed>) = 0 [pid 9010] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... openat resumed>) = 3 [pid 9011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] newfstatat(3, "", [pid 5063] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 9011] <... prctl resumed>) = 0 [pid 9010] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9011] setpgid(0, 0 [pid 9010] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9010] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./391/binderfs") = 0 [ 341.479995][ T9010] loop0: detected capacity change from 0 to 4096 [pid 9010] mkdir("./file0", 0777 [pid 5060] <... ioctl resumed>) = 0 [pid 9011] <... setpgid resumed>) = 0 [pid 9010] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9010] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9011] <... openat resumed>) = 3 [pid 9011] write(3, "1000", 4) = 4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9011] close(3 [pid 5063] close(4 [pid 9011] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 9011] symlink("/dev/binderfs", "./binderfs" [pid 5063] rmdir("./389/file0"./strace-static-x86_64: Process 9012 attached [pid 9011] <... symlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 9012] set_robust_list(0x5555567436a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 9012 [pid 9012] <... set_robust_list resumed>) = 0 [pid 9011] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5061] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9011] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9012] chdir("./395" [pid 9011] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9012] <... chdir resumed>) = 0 [pid 9011] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./391/file0", [pid 9012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9011] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] rmdir("./389" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9012] <... prctl resumed>) = 0 [pid 9011] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9012] setpgid(0, 0 [pid 9011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] mkdir("./390", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9012] <... setpgid resumed>) = 0 [pid 9011] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9011] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9012] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 4 [pid 9012] write(3, "1000", 4 [pid 9011] <... mprotect resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 9012] <... write resumed>) = 4 [pid 9012] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9011] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9012] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] getdents64(4, [pid 9012] symlink("/dev/binderfs", "./binderfs" [pid 9011] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9012] <... symlink resumed>) = 0 [pid 9011] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 9013 attached [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(4, [pid 9013] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9012] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(4 [pid 9013] <... rseq resumed>) = 0 [pid 9012] <... futex resumed>) = 0 [pid 9011] <... clone3 resumed> => {parent_tid=[9013]}, 88) = 9013 [pid 9010] <... mount resumed>) = 0 [pid 9013] set_robust_list(0x7f58200ee9a0, 24 [pid 9012] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9011] rt_sigprocmask(SIG_SETMASK, [], [pid 9010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 9013] <... set_robust_list resumed>) = 0 [pid 9012] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9011] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9010] <... openat resumed>) = 3 [pid 5061] rmdir("./391/file0" [pid 9013] rt_sigprocmask(SIG_SETMASK, [], [pid 9012] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9011] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9010] chdir("./file0" [pid 9013] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9012] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9011] <... futex resumed>) = 0 [pid 9012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9011] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9012] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9013] memfd_create("syzkaller", 0 [pid 5061] <... rmdir resumed>) = 0 [pid 9010] <... chdir resumed>) = 0 [pid 5061] getdents64(3, [pid 9010] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9013] <... memfd_create resumed>) = 3 [ 341.547044][ T9010] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5061] close(3 [pid 9012] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... close resumed>) = 0 [pid 9013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9012] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] rmdir("./391" [pid 9013] <... mmap resumed>) = 0x7f5817c00000 [pid 9012] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9010] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9014 attached ) = 1 [pid 9009] <... futex resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 9010] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9009] exit_group(0 [pid 5061] mkdir("./392", 0777 [pid 9010] <... futex resumed>) = ? [pid 9009] <... exit_group resumed>) = ? [pid 9014] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9012] <... clone3 resumed> => {parent_tid=[9014]}, 88) = 9014 [pid 9014] <... rseq resumed>) = 0 [pid 9012] rt_sigprocmask(SIG_SETMASK, [], [pid 9014] set_robust_list(0x7f58200ee9a0, 24 [pid 9012] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9014] <... set_robust_list resumed>) = 0 [pid 9012] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9010] +++ exited with 0 +++ [pid 9014] rt_sigprocmask(SIG_SETMASK, [], [pid 9012] <... futex resumed>) = 0 [pid 9014] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9012] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9014] memfd_create("syzkaller", 0) = 3 [pid 9009] +++ exited with 0 +++ [pid 5061] <... mkdir resumed>) = 0 [pid 9014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9009, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9013] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./395/binderfs", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 9015 attached [pid 5059] unlink("./395/binderfs" [pid 9015] set_robust_list(0x5555567436a0, 24) = 0 [pid 9015] chdir("./390" [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9015] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 9015 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9015] setpgid(0, 0) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] newfstatat(AT_FDCWD, "./395/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9015] <... openat resumed>) = 3 [pid 9014] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] getdents64(4, [pid 9015] write(3, "1000", 4) = 4 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9015] close(3) = 0 [pid 5059] getdents64(4, [pid 9015] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 9015] <... symlink resumed>) = 0 [pid 5059] rmdir("./395/file0" [pid 9015] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 9015] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 5059] getdents64(3, [pid 9015] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9015] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] close(3 [pid 9015] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./395" [pid 9015] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] mkdir("./396", 0777 [pid 9015] <... mprotect resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9015] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9013] <... write resumed>) = 2097152 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9015] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9017 attached [pid 9017] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9015] <... clone3 resumed> => {parent_tid=[9017]}, 88) = 9017 [pid 9015] rt_sigprocmask(SIG_SETMASK, [], [pid 9017] <... rseq resumed>) = 0 [pid 9015] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9017] set_robust_list(0x7f58200ee9a0, 24 [pid 9015] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9017] <... set_robust_list resumed>) = 0 [pid 9017] rt_sigprocmask(SIG_SETMASK, [], [pid 9015] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 9017] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9015] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 9016 [pid 5059] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 9016 attached [pid 9016] set_robust_list(0x5555567436a0, 24 [pid 9017] memfd_create("syzkaller", 0 [pid 9016] <... set_robust_list resumed>) = 0 [pid 9016] chdir("./392") = 0 [pid 9017] <... memfd_create resumed>) = 3 [pid 9017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9017] <... mmap resumed>) = 0x7f5817c00000 [pid 9016] <... prctl resumed>) = 0 [pid 9016] setpgid(0, 0) = 0 [pid 9016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9016] write(3, "1000", 4 [pid 9013] munmap(0x7f5817c00000, 138412032 [pid 9016] <... write resumed>) = 4 [pid 9014] <... write resumed>) = 2097152 [pid 9013] <... munmap resumed>) = 0 [pid 9016] close(3) = 0 [pid 9016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9016] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9016] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9014] munmap(0x7f5817c00000, 138412032 [pid 9016] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9016] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9016] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9016] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9018 attached [pid 9013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9018] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9016] <... clone3 resumed> => {parent_tid=[9018]}, 88) = 9018 [pid 9013] <... openat resumed>) = 4 [pid 9018] <... rseq resumed>) = 0 [pid 9016] rt_sigprocmask(SIG_SETMASK, [], [pid 9018] set_robust_list(0x7f58200ee9a0, 24 [pid 9016] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9013] ioctl(4, LOOP_SET_FD, 3 [pid 9018] <... set_robust_list resumed>) = 0 [pid 9016] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9014] <... munmap resumed>) = 0 [pid 9018] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9016] <... futex resumed>) = 0 [pid 9016] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9018] memfd_create("syzkaller", 0 [pid 9013] <... ioctl resumed>) = 0 [pid 9018] <... memfd_create resumed>) = 3 [pid 9017] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9014] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9014] <... openat resumed>) = 4 [pid 9013] close(3 [pid 9018] <... mmap resumed>) = 0x7f5817c00000 [pid 9014] ioctl(4, LOOP_SET_FD, 3 [pid 9013] <... close resumed>) = 0 [pid 9013] close(4) = 0 [pid 9013] mkdir("./file0", 0777) = 0 [ 341.774369][ T9013] loop3: detected capacity change from 0 to 4096 [ 341.813963][ T9014] loop1: detected capacity change from 0 to 4096 [pid 9013] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 9014] <... ioctl resumed>) = 0 [pid 9017] <... write resumed>) = 2097152 [pid 9017] munmap(0x7f5817c00000, 138412032) = 0 [pid 9017] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9014] close(3 [pid 9017] ioctl(4, LOOP_SET_FD, 3 [pid 9014] <... close resumed>) = 0 [pid 9014] close(4) = 0 [pid 9014] mkdir("./file0", 0777) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9014] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 9019 [pid 9017] <... ioctl resumed>) = 0 [pid 9017] close(3./strace-static-x86_64: Process 9019 attached ) = 0 [pid 9019] set_robust_list(0x5555567436a0, 24 [pid 9017] close(4 [pid 9019] <... set_robust_list resumed>) = 0 [pid 9017] <... close resumed>) = 0 [pid 9019] chdir("./396" [pid 9017] mkdir("./file0", 0777 [pid 9019] <... chdir resumed>) = 0 [pid 9017] <... mkdir resumed>) = 0 [pid 9019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9017] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 9019] <... prctl resumed>) = 0 [ 341.832398][ T9013] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 341.850833][ T9017] loop4: detected capacity change from 0 to 4096 [ 341.869018][ T9014] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 9019] setpgid(0, 0 [pid 9018] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9019] <... setpgid resumed>) = 0 [pid 9019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9019] write(3, "1000", 4) = 4 [pid 9019] close(3) = 0 [pid 9019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9019] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9019] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9019] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9019] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9019] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9019] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9020 attached [pid 9020] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9019] <... clone3 resumed> => {parent_tid=[9020]}, 88) = 9020 [pid 9020] <... rseq resumed>) = 0 [pid 9019] rt_sigprocmask(SIG_SETMASK, [], [pid 9020] set_robust_list(0x7f58200ee9a0, 24 [pid 9019] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9020] <... set_robust_list resumed>) = 0 [pid 9019] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9020] rt_sigprocmask(SIG_SETMASK, [], [pid 9019] <... futex resumed>) = 0 [pid 9020] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9019] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9020] memfd_create("syzkaller", 0) = 3 [ 341.893019][ T9017] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 9020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9013] <... mount resumed>) = 0 [pid 9013] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9013] chdir("./file0") = 0 [pid 9013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9014] <... mount resumed>) = 0 [pid 9013] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9011] <... futex resumed>) = 0 [pid 9014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9013] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9011] exit_group(0 [pid 9014] <... openat resumed>) = 3 [pid 9013] <... futex resumed>) = ? [pid 9011] <... exit_group resumed>) = ? [pid 9018] <... write resumed>) = 2097152 [pid 9014] chdir("./file0" [pid 9013] +++ exited with 0 +++ [pid 9011] +++ exited with 0 +++ [pid 9018] munmap(0x7f5817c00000, 138412032 [pid 9014] <... chdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9011, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 9014] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9014] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9020] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9014] <... futex resumed>) = 1 [pid 9012] <... futex resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 9018] <... munmap resumed>) = 0 [pid 9012] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9018] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9012] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 9018] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9018] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./391/binderfs") = 0 [pid 5062] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9017] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 9017] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9017] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9017] chdir("./file0" [pid 9014] +++ exited with 0 +++ [pid 9018] <... ioctl resumed>) = 0 [pid 9012] +++ exited with 0 +++ [pid 5062] newfstatat(AT_FDCWD, "./391/file0", [pid 9018] close(3 [pid 9017] <... chdir resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9012, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=4 /* 0.04 s */} --- [pid 9018] <... close resumed>) = 0 [pid 9017] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 9018] close(4 [pid 5060] <... restart_syscall resumed>) = 0 [pid 9018] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9018] mkdir("./file0", 0777 [pid 5060] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9020] <... write resumed>) = 2097152 [pid 9018] <... mkdir resumed>) = 0 [pid 9017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9018] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 9017] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9017] <... futex resumed>) = 1 [pid 5062] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 9017] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9015] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] newfstatat(3, "", [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9015] exit_group(0 [pid 5062] close(4 [pid 9015] <... exit_group resumed>) = ? [pid 9017] <... futex resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 9017] +++ exited with 0 +++ [pid 5062] rmdir("./391/file0" [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 342.029524][ T9018] loop2: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./395/binderfs", [pid 5062] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./395/binderfs" [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./391" [pid 5060] <... unlink resumed>) = 0 [pid 9015] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 5060] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./392", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 9020] munmap(0x7f5817c00000, 138412032 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9015, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5060] <... umount2 resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./395/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 9020] <... munmap resumed>) = 0 [pid 5060] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9020] <... openat resumed>) = 4 [pid 9020] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 5063] newfstatat(AT_FDCWD, "./390/binderfs", [pid 9018] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./390/binderfs") = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9020] <... ioctl resumed>) = 0 [pid 9018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = 0 [pid 9018] <... openat resumed>) = 3 [pid 5060] getdents64(4, [pid 9020] close(3 [pid 9018] chdir("./file0" [pid 5063] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9020] <... close resumed>) = 0 [pid 9018] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9020] close(4 [pid 9018] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./390/file0", [pid 5060] close(4 [pid 9018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9020] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9018] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./395/file0" [pid 9018] <... futex resumed>) = 1 [pid 9016] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9020] mkdir("./file0", 0777 [pid 9018] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9016] exit_group(0) = ? [pid 9018] <... futex resumed>) = ? [pid 5060] <... rmdir resumed>) = 0 [pid 9020] <... mkdir resumed>) = 0 [pid 9018] +++ exited with 0 +++ [pid 9016] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9020] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9016, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 342.073603][ T9018] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 342.107515][ T9020] loop0: detected capacity change from 0 to 4096 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5061] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5061] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./392/binderfs") = 0 [pid 5061] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5063] close(4 [pid 5060] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] rmdir("./395" [pid 5062] close(3 [pid 5063] rmdir("./390/file0" [pid 5061] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] mkdir("./396", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./392/file0", [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] close(3./strace-static-x86_64: Process 9021 attached [pid 5061] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 9021] set_robust_list(0x5555567436a0, 24 [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./390" [pid 9021] <... set_robust_list resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 9021] chdir("./392" [pid 5061] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9021] <... chdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 9021 [ 342.156042][ T9020] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5063] mkdir("./391", 0777 [pid 9021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9020] <... mount resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 9021] <... prctl resumed>) = 0 [pid 9020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 9021] setpgid(0, 0 [pid 9020] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9021] <... setpgid resumed>) = 0 [pid 5061] getdents64(4, [pid 9021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9020] chdir("./file0" [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9021] <... openat resumed>) = 3 [pid 9020] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9021] write(3, "1000", 4 [pid 5063] <... openat resumed>) = 3 [pid 5061] getdents64(4, [pid 9021] <... write resumed>) = 4 [pid 9020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9021] close(3 [pid 9020] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] close(4 [pid 9021] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 9021] symlink("/dev/binderfs", "./binderfs" [pid 9020] <... futex resumed>) = 1 [pid 9019] <... futex resumed>) = 0 [pid 5061] rmdir("./392/file0" [pid 9020] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9019] exit_group(0 [pid 9020] <... futex resumed>) = ? [pid 9019] <... exit_group resumed>) = ? [pid 9020] +++ exited with 0 +++ [pid 9021] <... symlink resumed>) = 0 [pid 9019] +++ exited with 0 +++ [pid 5061] <... rmdir resumed>) = 0 [pid 9021] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(3, [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9019, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 9021] <... futex resumed>) = 0 [pid 9021] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 9021] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9021] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9021] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5061] close(3 [pid 5060] close(3 [pid 5059] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] <... mprotect resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] rmdir("./392" [pid 9021] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] mkdir("./393", 0777 [pid 5059] newfstatat(3, "", ./strace-static-x86_64: Process 9022 attached [pid 9021] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 9022 [pid 9022] set_robust_list(0x5555567436a0, 24 [pid 9021] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 9023 attached [pid 9022] <... set_robust_list resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 9023] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9022] chdir("./396" [pid 9021] <... clone3 resumed> => {parent_tid=[9023]}, 88) = 9023 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9023] <... rseq resumed>) = 0 [pid 9022] <... chdir resumed>) = 0 [pid 9021] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 9021] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9023] set_robust_list(0x7f58200ee9a0, 24 [pid 9022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9021] <... futex resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./396/binderfs", [pid 9023] <... set_robust_list resumed>) = 0 [pid 9022] <... prctl resumed>) = 0 [pid 9021] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9022] setpgid(0, 0 [pid 9023] rt_sigprocmask(SIG_SETMASK, [], [pid 9022] <... setpgid resumed>) = 0 [pid 5059] unlink("./396/binderfs" [pid 9023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9023] memfd_create("syzkaller", 0 [pid 9022] <... openat resumed>) = 3 [pid 5059] <... unlink resumed>) = 0 [pid 9022] write(3, "1000", 4 [pid 5059] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9022] <... write resumed>) = 4 [pid 9022] close(3) = 0 [pid 9022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9022] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9023] <... memfd_create resumed>) = 3 [pid 9022] <... futex resumed>) = 0 [pid 9023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9022] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9023] <... mmap resumed>) = 0x7f5817c00000 [pid 9022] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] close(3 [pid 9022] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... umount2 resumed>) = 0 [pid 9022] <... mmap resumed>) = 0x7f58200ce000 [pid 5063] <... close resumed>) = 0 [pid 9022] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9022] <... mprotect resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./396/file0", [pid 9022] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9022] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 9024 [pid 9022] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9022] <... clone3 resumed> => {parent_tid=[9025]}, 88) = 9025 [pid 5059] <... openat resumed>) = 4 [pid 9022] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(4, "", [pid 9022] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9022] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 9024 attached ./strace-static-x86_64: Process 9025 attached [pid 9022] <... futex resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9022] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] getdents64(4, [pid 9025] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./396/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 9025] <... rseq resumed>) = 0 [pid 9025] set_robust_list(0x7f58200ee9a0, 24 [pid 9024] set_robust_list(0x5555567436a0, 24 [pid 5059] <... close resumed>) = 0 [pid 9025] <... set_robust_list resumed>) = 0 [pid 9024] <... set_robust_list resumed>) = 0 [pid 9023] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] rmdir("./396" [pid 9025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9024] chdir("./391" [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./397", 0777 [pid 9025] memfd_create("syzkaller", 0 [pid 9024] <... chdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9024] setpgid(0, 0 [pid 9025] <... memfd_create resumed>) = 3 [pid 9025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9024] <... setpgid resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 9024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9025] <... mmap resumed>) = 0x7f5817c00000 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 9024] <... openat resumed>) = 3 [pid 9024] write(3, "1000", 4) = 4 [pid 9024] close(3 [pid 5061] <... ioctl resumed>) = 0 [pid 9024] <... close resumed>) = 0 [pid 5061] close(3 [pid 9024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9024] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9024] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 9026 [pid 9023] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 9026 attached [pid 9026] set_robust_list(0x5555567436a0, 24) = 0 [pid 9026] chdir("./393" [pid 9024] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9026] <... chdir resumed>) = 0 [pid 9026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9026] setpgid(0, 0) = 0 [pid 9024] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9026] write(3, "1000", 4) = 4 [pid 9026] close(3) = 0 [pid 9026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9023] munmap(0x7f5817c00000, 138412032 [pid 9024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9026] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9025] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9024] <... mmap resumed>) = 0x7f58200ce000 [pid 9023] <... munmap resumed>) = 0 [pid 9026] <... futex resumed>) = 0 [pid 9024] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9026] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9026] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9026] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9026] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9026] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9026] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9024] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 9027 attached [pid 9024] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9027] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9026] <... clone3 resumed> => {parent_tid=[9027]}, 88) = 9027 [pid 9024] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9027] <... rseq resumed>) = 0 [pid 9026] rt_sigprocmask(SIG_SETMASK, [], [pid 9024] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9027] set_robust_list(0x7f58200ee9a0, 24 [pid 9026] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 9028 attached [pid 9027] <... set_robust_list resumed>) = 0 [pid 9026] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9023] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9028] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9027] rt_sigprocmask(SIG_SETMASK, [], [pid 9026] <... futex resumed>) = 0 [pid 9024] <... clone3 resumed> => {parent_tid=[9028]}, 88) = 9028 [pid 9028] <... rseq resumed>) = 0 [pid 9027] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9026] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9024] rt_sigprocmask(SIG_SETMASK, [], [pid 9023] <... openat resumed>) = 4 [pid 5059] <... ioctl resumed>) = 0 [pid 9028] set_robust_list(0x7f58200ee9a0, 24 [pid 9023] ioctl(4, LOOP_SET_FD, 3 [pid 9028] <... set_robust_list resumed>) = 0 [pid 9027] memfd_create("syzkaller", 0 [pid 9024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9028] rt_sigprocmask(SIG_SETMASK, [], [pid 9024] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9024] <... futex resumed>) = 0 [pid 5059] close(3) = 0 [pid 9028] memfd_create("syzkaller", 0 [pid 9024] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9028] <... memfd_create resumed>) = 3 [pid 9027] <... memfd_create resumed>) = 3 [pid 9025] <... write resumed>) = 2097152 [pid 9023] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 9029 attached [pid 9028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9025] munmap(0x7f5817c00000, 138412032 [pid 9027] <... mmap resumed>) = 0x7f5817c00000 [pid 9025] <... munmap resumed>) = 0 [pid 9029] set_robust_list(0x5555567436a0, 24 [pid 9028] <... mmap resumed>) = 0x7f5817c00000 [pid 9023] close(3 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 9029 [pid 9029] <... set_robust_list resumed>) = 0 [pid 9023] <... close resumed>) = 0 [pid 9023] close(4 [ 342.461724][ T9023] loop3: detected capacity change from 0 to 4096 [pid 9025] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9023] <... close resumed>) = 0 [pid 9029] chdir("./397" [pid 9027] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9025] <... openat resumed>) = 4 [pid 9029] <... chdir resumed>) = 0 [pid 9025] ioctl(4, LOOP_SET_FD, 3 [pid 9023] mkdir("./file0", 0777) = 0 [pid 9023] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 9029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9029] setpgid(0, 0) = 0 [pid 9029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9029] write(3, "1000", 4) = 4 [pid 9029] close(3) = 0 [pid 9029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9029] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9025] <... ioctl resumed>) = 0 [pid 9025] close(3 [pid 9029] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9025] <... close resumed>) = 0 [pid 9029] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9025] close(4 [pid 9029] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9025] <... close resumed>) = 0 [pid 9029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9025] mkdir("./file0", 0777 [pid 9029] <... mmap resumed>) = 0x7f58200ce000 [pid 9025] <... mkdir resumed>) = 0 [pid 9029] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9025] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 9029] <... mprotect resumed>) = 0 [pid 9028] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9030 attached => {parent_tid=[9030]}, 88) = 9030 [pid 9030] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 9029] rt_sigprocmask(SIG_SETMASK, [], [pid 9030] set_robust_list(0x7f58200ee9a0, 24 [pid 9029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9030] <... set_robust_list resumed>) = 0 [pid 9029] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] rt_sigprocmask(SIG_SETMASK, [], [pid 9029] <... futex resumed>) = 0 [pid 9027] <... write resumed>) = 2097152 [pid 9030] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9029] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9030] memfd_create("syzkaller", 0 [pid 9027] munmap(0x7f5817c00000, 138412032 [pid 9030] <... memfd_create resumed>) = 3 [pid 9027] <... munmap resumed>) = 0 [ 342.527074][ T9025] loop1: detected capacity change from 0 to 4096 [ 342.535758][ T9023] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 342.561031][ T9025] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 9030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9027] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9027] ioctl(4, LOOP_SET_FD, 3 [pid 9028] <... write resumed>) = 2097152 [pid 9028] munmap(0x7f5817c00000, 138412032) = 0 [pid 9028] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9027] <... ioctl resumed>) = 0 [pid 9027] close(3) = 0 [pid 9027] close(4 [pid 9028] <... openat resumed>) = 4 [pid 9027] <... close resumed>) = 0 [pid 9023] <... mount resumed>) = 0 [pid 9027] mkdir("./file0", 0777 [pid 9028] ioctl(4, LOOP_SET_FD, 3 [pid 9027] <... mkdir resumed>) = 0 [pid 9027] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 9025] <... mount resumed>) = 0 [ 342.637407][ T9027] loop2: detected capacity change from 0 to 4096 [ 342.676317][ T9028] loop4: detected capacity change from 0 to 4096 [pid 9023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9025] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9023] <... openat resumed>) = 3 [pid 9025] <... openat resumed>) = 3 [pid 9023] chdir("./file0" [pid 9025] chdir("./file0" [pid 9023] <... chdir resumed>) = 0 [pid 9025] <... chdir resumed>) = 0 [pid 9023] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9025] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9023] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9023] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9021] <... futex resumed>) = 0 [pid 9023] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9021] exit_group(0 [pid 9023] <... futex resumed>) = ? [pid 9021] <... exit_group resumed>) = ? [pid 9023] +++ exited with 0 +++ [pid 9021] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9021, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 9025] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 9025] <... futex resumed>) = 1 [pid 9022] <... futex resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 9025] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9022] exit_group(0 [pid 9025] <... futex resumed>) = ? [pid 9022] <... exit_group resumed>) = ? [pid 9025] +++ exited with 0 +++ [pid 9022] +++ exited with 0 +++ [pid 5062] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9028] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9022, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9028] close(3 [pid 5062] <... openat resumed>) = 3 [pid 9030] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9028] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 9028] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5060] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9028] <... close resumed>) = 0 [pid 5062] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 9028] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(3, "", [pid 9028] <... mkdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(AT_FDCWD, "./392/binderfs", [pid 5060] getdents64(3, [pid 9028] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] unlink("./392/binderfs") = 0 [pid 5062] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./396/binderfs") = 0 [pid 5060] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./392/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [ 342.685166][ T9027] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 342.727194][ T9028] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 5062] rmdir("./392/file0") = 0 [pid 9030] <... write resumed>) = 2097152 [pid 9030] munmap(0x7f5817c00000, 138412032) = 0 [pid 9027] <... mount resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9030] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9028] <... mount resumed>) = 0 [pid 9027] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3) = 0 [pid 5060] newfstatat(AT_FDCWD, "./396/file0", [pid 5062] rmdir("./392" [pid 9030] <... openat resumed>) = 4 [pid 9028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9030] ioctl(4, LOOP_SET_FD, 3 [pid 9028] <... openat resumed>) = 3 [pid 9027] <... openat resumed>) = 3 [pid 9030] <... ioctl resumed>) = 0 [pid 9028] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5060] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9028] <... chdir resumed>) = 0 [pid 9028] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9028] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9028] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9024] <... futex resumed>) = 0 [pid 9024] exit_group(0) = ? [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] mkdir("./393", 0777) = 0 [pid 5060] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9027] chdir("./file0") = 0 [pid 5060] <... openat resumed>) = 4 [pid 9027] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9028] <... futex resumed>) = ? [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] newfstatat(4, "", [pid 9027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9027] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9027] <... futex resumed>) = 1 [pid 9026] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 9027] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9026] exit_group(0) = ? [pid 9027] <... futex resumed>) = ? [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 9030] close(3 [pid 9028] +++ exited with 0 +++ [pid 9027] +++ exited with 0 +++ [pid 9026] +++ exited with 0 +++ [pid 9024] +++ exited with 0 +++ [pid 5060] <... close resumed>) = 0 [pid 9030] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9024, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9026, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 9030] close(4 [pid 5060] rmdir("./396/file0" [pid 9030] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9030] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(3, "", [pid 5060] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5060] rmdir("./396" [pid 9030] <... mkdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 342.794780][ T9030] loop0: detected capacity change from 0 to 4096 [pid 9030] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5061] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5060] mkdir("./397", 0777 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] unlink("./393/binderfs" [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... unlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(AT_FDCWD, "./391/binderfs", [pid 5061] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./391/binderfs" [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./393/file0", [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(4, "", ./strace-static-x86_64: Process 9031 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 342.847071][ T9030] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 9031] set_robust_list(0x5555567436a0, 24 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] getdents64(4, [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 9031 [pid 9031] <... set_robust_list resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 9031] chdir("./393" [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9031] <... chdir resumed>) = 0 [pid 5061] close(4) = 0 [pid 9031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] rmdir("./393/file0") = 0 [pid 9031] setpgid(0, 0 [pid 5061] getdents64(3, [pid 9031] <... setpgid resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 9031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./391/file0", [pid 9031] <... openat resumed>) = 3 [pid 9031] write(3, "1000", 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] rmdir("./393") = 0 [pid 5063] umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9031] <... write resumed>) = 4 [pid 5061] mkdir("./394", 0777 [pid 9031] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9031] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... mkdir resumed>) = 0 [pid 9031] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9031] <... symlink resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9031] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9031] <... futex resumed>) = 0 [pid 5063] getdents64(4, [pid 9031] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 9030] <... mount resumed>) = 0 [pid 9031] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(4 [pid 9031] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9030] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5060] close(3 [pid 9031] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9030] chdir("./file0" [pid 5063] rmdir("./391/file0" [pid 9030] <... chdir resumed>) = 0 [pid 9030] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9030] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9029] <... futex resumed>) = 0 [pid 9030] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] exit_group(0 [pid 9030] <... futex resumed>) = ? [pid 9029] <... exit_group resumed>) = ? [pid 5063] <... rmdir resumed>) = 0 [pid 9031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9030] +++ exited with 0 +++ [pid 9029] +++ exited with 0 +++ [pid 5060] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9029, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] getdents64(3, [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9031] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 9032 attached [pid 9031] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 9032] set_robust_list(0x5555567436a0, 24 [pid 9031] <... mprotect resumed>) = 0 [pid 5063] close(3 [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 9032] <... set_robust_list resumed>) = 0 [pid 5059] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9032] chdir("./397" [pid 9031] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 9032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./391" [pid 5059] newfstatat(AT_FDCWD, "./397/binderfs", [pid 9032] <... chdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... rmdir resumed>) = 0 [pid 5059] unlink("./397/binderfs" [pid 9032] <... prctl resumed>) = 0 [pid 9031] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] mkdir("./392", 0777 [pid 5059] <... unlink resumed>) = 0 [pid 9032] setpgid(0, 0 [pid 5059] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9032] <... setpgid resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 9031] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9032] <... openat resumed>) = 3 [pid 5059] newfstatat(AT_FDCWD, "./397/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9032] write(3, "1000", 4./strace-static-x86_64: Process 9033 attached [pid 9033] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 9032] <... write resumed>) = 4 [pid 5059] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9033] set_robust_list(0x7f58200ee9a0, 24 [pid 9032] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9033] <... set_robust_list resumed>) = 0 [pid 9032] <... close resumed>) = 0 [pid 9033] rt_sigprocmask(SIG_SETMASK, [], [pid 9032] symlink("/dev/binderfs", "./binderfs" [pid 5059] openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9033] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9032] <... symlink resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 9033] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] newfstatat(4, "", [pid 9032] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9031] <... clone3 resumed> => {parent_tid=[9033]}, 88) = 9033 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9031] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9032] <... futex resumed>) = 0 [pid 9032] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9031] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9032] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9031] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(4, [pid 9033] <... futex resumed>) = 0 [pid 9032] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9031] <... futex resumed>) = 1 [pid 9033] memfd_create("syzkaller", 0 [pid 9032] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9031] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9032] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] getdents64(4, [pid 9032] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5059] close(4 [pid 9033] <... memfd_create resumed>) = 3 [pid 9032] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... close resumed>) = 0 [pid 9033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9032] <... mprotect resumed>) = 0 [pid 5059] rmdir("./397/file0" [pid 5061] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 9033] <... mmap resumed>) = 0x7f5817c00000 [pid 9032] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 9032] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] close(3 [pid 9032] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./397"./strace-static-x86_64: Process 9034 attached [pid 9032] <... clone3 resumed> => {parent_tid=[9034]}, 88) = 9034 [pid 5059] <... rmdir resumed>) = 0 [pid 9034] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 9032] rt_sigprocmask(SIG_SETMASK, [], [pid 9034] set_robust_list(0x7f58200ee9a0, 24 [pid 9032] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] mkdir("./398", 0777 [pid 9034] <... set_robust_list resumed>) = 0 [pid 9032] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] rt_sigprocmask(SIG_SETMASK, [], [pid 9032] <... futex resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 9034] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9032] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 9034] memfd_create("syzkaller", 0./strace-static-x86_64: Process 9035 attached [pid 9035] set_robust_list(0x5555567436a0, 24 [pid 9034] <... memfd_create resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 9035 [pid 9035] <... set_robust_list resumed>) = 0 [pid 9034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9035] chdir("./394" [pid 9034] <... mmap resumed>) = 0x7f5817c00000 [pid 9035] <... chdir resumed>) = 0 [pid 9033] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 9035] setpgid(0, 0) = 0 [pid 5063] close(3) = 0 [pid 9035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9036 attached , child_tidptr=0x555556743690) = 9036 [pid 9035] <... openat resumed>) = 3 [pid 9036] set_robust_list(0x5555567436a0, 24) = 0 [pid 9035] write(3, "1000", 4 [pid 9036] chdir("./392" [pid 9035] <... write resumed>) = 4 [pid 9036] <... chdir resumed>) = 0 [pid 9035] close(3) = 0 [pid 9036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9035] symlink("/dev/binderfs", "./binderfs" [pid 9036] <... prctl resumed>) = 0 [pid 9035] <... symlink resumed>) = 0 [pid 9035] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9036] setpgid(0, 0) = 0 [pid 9036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9036] write(3, "1000", 4) = 4 [pid 9036] close(3) = 0 [pid 9036] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9035] <... futex resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 9035] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9034] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9033] <... write resumed>) = 2097152 [pid 9035] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9035] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9036] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9036] <... futex resumed>) = 0 [pid 9036] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9035] <... mmap resumed>) = 0x7f58200ce000 [pid 9036] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9035] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9033] munmap(0x7f5817c00000, 138412032 [pid 9036] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9035] <... mprotect resumed>) = 0 [pid 9036] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9036] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9036] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9036] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9035] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9036] <... clone3 resumed> => {parent_tid=[9037]}, 88) = 9037 [pid 9036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9036] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 9037 attached [pid 9036] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9037] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053) = 0 [pid 9037] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 9037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9037] memfd_create("syzkaller", 0 [pid 5059] close(3 [pid 9035] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9037] <... memfd_create resumed>) = 3 [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 9038 attached [pid 9037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9035] <... clone3 resumed> => {parent_tid=[9038]}, 88) = 9038 [pid 9033] <... munmap resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9038] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9035] rt_sigprocmask(SIG_SETMASK, [], [pid 9033] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9038] <... rseq resumed>) = 0 [pid 9035] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9038] set_robust_list(0x7f58200ee9a0, 24 [pid 9035] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9038] <... set_robust_list resumed>) = 0 [pid 9035] <... futex resumed>) = 0 [pid 9038] rt_sigprocmask(SIG_SETMASK, [], [pid 9035] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9038] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9037] <... mmap resumed>) = 0x7f5817c00000 [pid 9038] memfd_create("syzkaller", 0 [pid 9033] <... openat resumed>) = 4 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 9039 [pid 9033] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 9039 attached [pid 9039] set_robust_list(0x5555567436a0, 24) = 0 [pid 9039] chdir("./398") = 0 [pid 9039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9039] setpgid(0, 0) = 0 [pid 9039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9038] <... memfd_create resumed>) = 3 [pid 9039] write(3, "1000", 4 [pid 9038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9039] <... write resumed>) = 4 [pid 9038] <... mmap resumed>) = 0x7f5817c00000 [pid 9034] <... write resumed>) = 2097152 [pid 9039] close(3) = 0 [pid 9039] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9039] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9039] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9039] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9039] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9039] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9039] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9034] munmap(0x7f5817c00000, 138412032 [pid 9033] <... ioctl resumed>) = 0 [pid 9033] close(3) = 0 [pid 9039] <... clone3 resumed> => {parent_tid=[9040]}, 88) = 9040 [pid 9033] close(4 [pid 9039] rt_sigprocmask(SIG_SETMASK, [], [pid 9033] <... close resumed>) = 0 [pid 9033] mkdir("./file0", 0777./strace-static-x86_64: Process 9040 attached [pid 9039] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9040] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9039] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9033] <... mkdir resumed>) = 0 [pid 9040] <... rseq resumed>) = 0 [pid 9039] <... futex resumed>) = 0 [pid 9040] set_robust_list(0x7f58200ee9a0, 24 [pid 9039] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9040] <... set_robust_list resumed>) = 0 [ 343.133503][ T9033] loop3: detected capacity change from 0 to 4096 [pid 9033] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 9040] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9040] memfd_create("syzkaller", 0) = 3 [pid 9040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9034] <... munmap resumed>) = 0 [pid 9038] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9034] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9034] ioctl(4, LOOP_SET_FD, 3 [pid 9037] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9034] <... ioctl resumed>) = 0 [pid 9034] close(3) = 0 [pid 9034] close(4) = 0 [pid 9034] mkdir("./file0", 0777) = 0 [ 343.182487][ T9033] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 343.206987][ T9034] loop1: detected capacity change from 0 to 4096 [pid 9034] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 9040] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9037] <... write resumed>) = 2097152 [pid 9037] munmap(0x7f5817c00000, 138412032) = 0 [pid 9037] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 343.244480][ T9034] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 9037] ioctl(4, LOOP_SET_FD, 3 [pid 9033] <... mount resumed>) = 0 [pid 9038] <... write resumed>) = 2097152 [pid 9037] <... ioctl resumed>) = 0 [pid 9033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9038] munmap(0x7f5817c00000, 138412032 [pid 9037] close(3 [pid 9033] chdir("./file0") = 0 [pid 9037] <... close resumed>) = 0 [pid 9037] close(4 [pid 9033] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9037] <... close resumed>) = 0 [pid 9037] mkdir("./file0", 0777 [pid 9033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9037] <... mkdir resumed>) = 0 [pid 9033] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9031] <... futex resumed>) = 0 [pid 9040] <... write resumed>) = 2097152 [pid 9038] <... munmap resumed>) = 0 [pid 9033] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] exit_group(0 [pid 9033] <... futex resumed>) = ? [pid 9031] <... exit_group resumed>) = ? [pid 9033] +++ exited with 0 +++ [ 343.295532][ T9037] loop4: detected capacity change from 0 to 4096 [pid 9040] munmap(0x7f5817c00000, 138412032 [pid 9031] +++ exited with 0 +++ [pid 9037] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9031, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9040] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./393/binderfs" [pid 9038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... unlink resumed>) = 0 [pid 9038] <... openat resumed>) = 4 [pid 9038] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9040] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9034] <... mount resumed>) = 0 [pid 9040] <... openat resumed>) = 4 [pid 9040] ioctl(4, LOOP_SET_FD, 3 [pid 9034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9040] <... ioctl resumed>) = 0 [pid 9038] <... ioctl resumed>) = 0 [pid 9034] chdir("./file0" [pid 5062] <... umount2 resumed>) = 0 [pid 9038] close(3 [pid 9034] <... chdir resumed>) = 0 [pid 9038] <... close resumed>) = 0 [pid 9034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9040] close(3 [pid 9038] close(4 [pid 9040] <... close resumed>) = 0 [pid 9038] <... close resumed>) = 0 [pid 9034] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9040] close(4 [pid 9038] mkdir("./file0", 0777 [pid 9034] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9040] <... close resumed>) = 0 [pid 9038] <... mkdir resumed>) = 0 [pid 9034] <... futex resumed>) = 1 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9032] <... futex resumed>) = 0 [pid 9040] mkdir("./file0", 0777 [pid 9034] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9032] exit_group(0 [pid 5062] newfstatat(AT_FDCWD, "./393/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9034] <... futex resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9034] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9032] <... exit_group resumed>) = ? [pid 9040] <... mkdir resumed>) = 0 [pid 9038] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 9037] <... mount resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 9037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] newfstatat(4, "", [pid 9040] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 343.344250][ T9037] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 343.360353][ T9038] loop2: detected capacity change from 0 to 4096 [ 343.368380][ T9040] loop0: detected capacity change from 0 to 4096 [pid 9037] chdir("./file0" [pid 5062] getdents64(4, [pid 9037] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9037] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9032] +++ exited with 0 +++ [pid 9037] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9032, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 9037] <... futex resumed>) = 1 [pid 9037] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9036] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9036] exit_group(0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] <... openat resumed>) = 3 [pid 9036] <... exit_group resumed>) = ? [pid 5062] close(4 [pid 5060] newfstatat(3, "", [pid 9037] <... futex resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9037] +++ exited with 0 +++ [pid 9036] +++ exited with 0 +++ [pid 5062] rmdir("./393/file0" [pid 5060] getdents64(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9036, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5060] newfstatat(AT_FDCWD, "./397/binderfs", [pid 5063] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] unlink("./397/binderfs" [pid 5063] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(3 [pid 5060] <... unlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] rmdir("./393" [pid 5060] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./397/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] mkdir("./394", 0777 [pid 5063] newfstatat(AT_FDCWD, "./392/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] unlink("./392/binderfs" [pid 5060] <... openat resumed>) = 4 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] newfstatat(4, "", [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./397/file0") = 0 [pid 5060] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./397" [ 343.416545][ T9040] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 343.428526][ T9038] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 5063] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./392/file0", [pid 5060] mkdir("./398", 0777) = 0 [pid 9040] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 9040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9040] <... openat resumed>) = 3 [pid 9040] chdir("./file0" [pid 5063] openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9040] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 9040] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9038] <... mount resumed>) = 0 [pid 9040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9040] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9038] <... openat resumed>) = 3 [pid 5063] newfstatat(4, "", [pid 9040] <... futex resumed>) = 1 [pid 9039] <... futex resumed>) = 0 [pid 9038] chdir("./file0" [pid 9040] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9039] exit_group(0 [pid 9038] <... chdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9040] <... futex resumed>) = ? [pid 9039] <... exit_group resumed>) = ? [pid 9038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, [pid 9040] +++ exited with 0 +++ [pid 9038] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9035] <... futex resumed>) = 0 [pid 9038] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9035] exit_group(0 [pid 9038] <... futex resumed>) = ? [pid 9035] <... exit_group resumed>) = ? [pid 9038] +++ exited with 0 +++ [pid 9039] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9039, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9035] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9035, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5063] close(4 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./392/file0" [pid 5061] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./394/binderfs", [pid 5059] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] unlink("./394/binderfs" [pid 5059] newfstatat(3, "", [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5063] rmdir("./392" [pid 5061] newfstatat(AT_FDCWD, "./394/file0", [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./393", 0777 [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5062] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./398/binderfs", [pid 5063] <... mkdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5059] unlink("./398/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./394/file0") = 0 [pid 5061] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9041 attached [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... unlink resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 9041 [pid 5059] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./394" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 9041] set_robust_list(0x5555567436a0, 24) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./395", 0777 [pid 9041] chdir("./394" [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = 0 [pid 9041] <... chdir resumed>) = 0 [pid 9041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9041] <... prctl resumed>) = 0 [pid 9041] setpgid(0, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9041] <... setpgid resumed>) = 0 [pid 9041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9041] write(3, "1000", 4) = 4 [pid 5059] newfstatat(AT_FDCWD, "./398/file0", [pid 9041] close(3) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9041] symlink("/dev/binderfs", "./binderfs" [pid 5059] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 9041] <... symlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 9041] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(4, "", [pid 9041] <... futex resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9041] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 5059] getdents64(4, [pid 9041] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9041] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 9041] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] getdents64(4, [pid 9041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9041] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] close(4 [pid 9041] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 9042 attached [pid 5059] rmdir("./398/file0" [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 9042 [pid 5059] <... rmdir resumed>) = 0 [pid 9041] <... mprotect resumed>) = 0 [pid 9042] set_robust_list(0x5555567436a0, 24) = 0 [pid 9041] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9042] chdir("./398" [pid 9041] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] getdents64(3, [pid 9042] <... chdir resumed>) = 0 [pid 9041] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9042] <... prctl resumed>) = 0 [pid 5059] close(3 [pid 5063] close(3./strace-static-x86_64: Process 9043 attached [pid 9042] setpgid(0, 0 [pid 5063] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 9043] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9042] <... setpgid resumed>) = 0 [pid 9041] <... clone3 resumed> => {parent_tid=[9043]}, 88) = 9043 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] rmdir("./398" [pid 9043] <... rseq resumed>) = 0 [pid 9043] set_robust_list(0x7f58200ee9a0, 24 [pid 5059] <... rmdir resumed>) = 0 [pid 9043] <... set_robust_list resumed>) = 0 [pid 5059] mkdir("./399", 0777 [pid 9042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9041] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... mkdir resumed>) = 0 [pid 9043] rt_sigprocmask(SIG_SETMASK, [], [pid 9041] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9043] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9041] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 9044 ./strace-static-x86_64: Process 9044 attached [pid 9044] set_robust_list(0x5555567436a0, 24 [pid 9043] memfd_create("syzkaller", 0 [pid 5059] <... openat resumed>) = 3 [pid 9044] <... set_robust_list resumed>) = 0 [pid 9042] <... openat resumed>) = 3 [pid 9041] <... futex resumed>) = 0 [pid 9044] chdir("./393" [pid 9043] <... memfd_create resumed>) = 3 [pid 9041] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] ioctl(3, LOOP_CLR_FD [pid 9044] <... chdir resumed>) = 0 [pid 9043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9042] write(3, "1000", 4 [pid 9044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9043] <... mmap resumed>) = 0x7f5817c00000 [pid 9042] <... write resumed>) = 4 [pid 9044] <... prctl resumed>) = 0 [pid 9042] close(3 [pid 9044] setpgid(0, 0 [pid 9042] <... close resumed>) = 0 [pid 9044] <... setpgid resumed>) = 0 [pid 9044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9044] write(3, "1000", 4) = 4 [pid 9042] symlink("/dev/binderfs", "./binderfs" [pid 9044] close(3) = 0 [pid 9042] <... symlink resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 9042] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9042] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9044] symlink("/dev/binderfs", "./binderfs" [pid 9042] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9044] <... symlink resumed>) = 0 [pid 9042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9044] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9044] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9042] <... mmap resumed>) = 0x7f58200ce000 [pid 9044] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9044] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] close(3 [pid 9044] <... mmap resumed>) = 0x7f58200ce000 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9044] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 9045 attached ) = 0 [pid 9044] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9045] set_robust_list(0x5555567436a0, 24) = 0 [pid 9045] chdir("./395" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 9045 [pid 9044] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9045] <... chdir resumed>) = 0 [pid 9044] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9045] setpgid(0, 0./strace-static-x86_64: Process 9046 attached ) = 0 [pid 9046] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9044] <... clone3 resumed> => {parent_tid=[9046]}, 88) = 9046 [pid 9046] <... rseq resumed>) = 0 [pid 9045] <... openat resumed>) = 3 [pid 9044] rt_sigprocmask(SIG_SETMASK, [], [pid 9046] set_robust_list(0x7f58200ee9a0, 24 [pid 9044] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9046] <... set_robust_list resumed>) = 0 [pid 9045] write(3, "1000", 4 [pid 9044] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9046] rt_sigprocmask(SIG_SETMASK, [], [pid 9045] <... write resumed>) = 4 [pid 9044] <... futex resumed>) = 0 [pid 9046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9044] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9045] close(3 [pid 9046] memfd_create("syzkaller", 0 [pid 9045] <... close resumed>) = 0 [pid 9042] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9045] symlink("/dev/binderfs", "./binderfs" [pid 9042] <... mprotect resumed>) = 0 [pid 9045] <... symlink resumed>) = 0 [pid 9042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9046] <... memfd_create resumed>) = 3 [pid 9043] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... ioctl resumed>) = 0 [pid 9046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 ./strace-static-x86_64: Process 9047 attached [pid 9042] <... clone3 resumed> => {parent_tid=[9047]}, 88) = 9047 [pid 5059] close(3 [pid 9047] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 5059] <... close resumed>) = 0 [pid 9047] <... rseq resumed>) = 0 [pid 9045] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9042] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9047] set_robust_list(0x7f58200ee9a0, 24 [pid 9042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9045] <... futex resumed>) = 0 [pid 9045] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9045] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9047] <... set_robust_list resumed>) = 0 [pid 9042] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9047] rt_sigprocmask(SIG_SETMASK, [], [pid 9042] <... futex resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 9048 [pid 9042] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9045] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9047] memfd_create("syzkaller", 0 [pid 9045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9048 attached [pid 9047] <... memfd_create resumed>) = 3 [pid 9048] set_robust_list(0x5555567436a0, 24 [pid 9047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9045] <... clone3 resumed> => {parent_tid=[9049]}, 88) = 9049 ./strace-static-x86_64: Process 9049 attached [pid 9048] <... set_robust_list resumed>) = 0 [pid 9047] <... mmap resumed>) = 0x7f5817c00000 [pid 9045] rt_sigprocmask(SIG_SETMASK, [], [pid 9049] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9048] chdir("./399" [pid 9045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9049] <... rseq resumed>) = 0 [pid 9048] <... chdir resumed>) = 0 [pid 9045] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9049] set_robust_list(0x7f58200ee9a0, 24 [pid 9048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9045] <... futex resumed>) = 0 [pid 9045] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9049] <... set_robust_list resumed>) = 0 [pid 9048] <... prctl resumed>) = 0 [pid 9049] rt_sigprocmask(SIG_SETMASK, [], [pid 9048] setpgid(0, 0 [pid 9049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9048] <... setpgid resumed>) = 0 [pid 9049] memfd_create("syzkaller", 0 [pid 9048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9049] <... memfd_create resumed>) = 3 [pid 9048] <... openat resumed>) = 3 [pid 9049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9048] write(3, "1000", 4) = 4 [pid 9048] close(3 [pid 9046] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9048] <... close resumed>) = 0 [pid 9048] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9048] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9048] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9048] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9048] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9048] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9050 attached => {parent_tid=[9050]}, 88) = 9050 [pid 9050] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9048] rt_sigprocmask(SIG_SETMASK, [], [pid 9047] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9043] <... write resumed>) = 2097152 [pid 9048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9048] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9043] munmap(0x7f5817c00000, 138412032 [pid 9050] <... rseq resumed>) = 0 [pid 9048] <... futex resumed>) = 0 [pid 9050] set_robust_list(0x7f58200ee9a0, 24 [pid 9048] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9050] <... set_robust_list resumed>) = 0 [pid 9050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9050] memfd_create("syzkaller", 0) = 3 [pid 9050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9043] <... munmap resumed>) = 0 [pid 9043] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9043] ioctl(4, LOOP_SET_FD, 3 [pid 9049] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9047] <... write resumed>) = 2097152 [pid 9043] <... ioctl resumed>) = 0 [pid 9043] close(3 [pid 9047] munmap(0x7f5817c00000, 138412032 [pid 9043] <... close resumed>) = 0 [pid 9047] <... munmap resumed>) = 0 [pid 9046] <... write resumed>) = 2097152 [pid 9043] close(4) = 0 [pid 9047] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9043] mkdir("./file0", 0777) = 0 [pid 9047] <... openat resumed>) = 4 [ 343.857448][ T9043] loop3: detected capacity change from 0 to 4096 [pid 9047] ioctl(4, LOOP_SET_FD, 3 [pid 9043] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 9050] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9049] <... write resumed>) = 2097152 [pid 9047] <... ioctl resumed>) = 0 [pid 9046] munmap(0x7f5817c00000, 138412032 [pid 9049] munmap(0x7f5817c00000, 138412032) = 0 [pid 9047] close(3) = 0 [pid 9047] close(4) = 0 [pid 9047] mkdir("./file0", 0777 [pid 9046] <... munmap resumed>) = 0 [pid 9049] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9047] <... mkdir resumed>) = 0 [ 343.898120][ T9047] loop1: detected capacity change from 0 to 4096 [ 343.919831][ T9043] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [pid 9046] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9049] <... openat resumed>) = 4 [pid 9047] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 9046] <... openat resumed>) = 4 [pid 9049] ioctl(4, LOOP_SET_FD, 3 [pid 9046] ioctl(4, LOOP_SET_FD, 3 [pid 9049] <... ioctl resumed>) = 0 [pid 9049] close(3) = 0 [pid 9049] close(4) = 0 [pid 9049] mkdir("./file0", 0777) = 0 [pid 9049] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 9046] <... ioctl resumed>) = 0 [pid 9046] close(3) = 0 [pid 9046] close(4) = 0 [pid 9046] mkdir("./file0", 0777) = 0 [pid 9050] <... write resumed>) = 2097152 [ 343.949218][ T9049] loop2: detected capacity change from 0 to 4096 [ 343.950569][ T9047] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 343.957411][ T9046] loop4: detected capacity change from 0 to 4096 [ 343.988910][ T9049] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 9046] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 9050] munmap(0x7f5817c00000, 138412032) = 0 [pid 9050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9050] ioctl(4, LOOP_SET_FD, 3 [pid 9047] <... mount resumed>) = 0 [pid 9047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9047] chdir("./file0") = 0 [pid 9047] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9047] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9042] <... futex resumed>) = 0 [pid 9047] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9042] exit_group(0 [pid 9047] <... futex resumed>) = ? [pid 9042] <... exit_group resumed>) = ? [pid 9047] +++ exited with 0 +++ [pid 9042] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9042, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 9043] <... mount resumed>) = 0 [pid 9050] <... ioctl resumed>) = 0 [pid 5060] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9050] close(3 [pid 9043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9050] <... close resumed>) = 0 [pid 9043] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9043] chdir("./file0" [pid 5060] <... openat resumed>) = 3 [pid 9050] close(4 [pid 9043] <... chdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 9050] <... close resumed>) = 0 [pid 9043] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 344.009214][ T9046] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 344.040107][ T9050] loop0: detected capacity change from 0 to 4096 [pid 9050] mkdir("./file0", 0777 [pid 9049] <... mount resumed>) = 0 [pid 9043] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(3, [pid 9043] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 9043] <... futex resumed>) = 1 [pid 9041] <... futex resumed>) = 0 [pid 5060] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9050] <... mkdir resumed>) = 0 [pid 9049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9043] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9041] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9050] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 9049] <... openat resumed>) = 3 [pid 9043] <... futex resumed>) = ? [pid 9041] <... exit_group resumed>) = ? [pid 9043] +++ exited with 0 +++ [pid 5060] newfstatat(AT_FDCWD, "./398/binderfs", [pid 9049] chdir("./file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9049] <... chdir resumed>) = 0 [pid 5060] unlink("./398/binderfs" [pid 9049] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9046] <... mount resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 9049] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9041] +++ exited with 0 +++ [pid 9049] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9046] <... openat resumed>) = 3 [pid 5060] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9049] <... futex resumed>) = 1 [pid 9046] chdir("./file0" [pid 9045] <... futex resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9041, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9049] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9046] <... chdir resumed>) = 0 [pid 9045] exit_group(0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 9049] <... futex resumed>) = ? [pid 9046] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9045] <... exit_group resumed>) = ? [pid 5062] <... restart_syscall resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./398/file0", [pid 9049] +++ exited with 0 +++ [pid 9046] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9045] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9046] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9045, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9046] <... futex resumed>) = 1 [pid 9044] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9046] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9044] exit_group(0 [pid 5062] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9046] <... futex resumed>) = ? [pid 9044] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 4 [pid 9046] +++ exited with 0 +++ [pid 9044] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(4, "", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9044, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5062] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(3, "", [pid 5061] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5063] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(3, [pid 5061] getdents64(3, [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [ 344.103637][ T9050] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [pid 5063] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] getdents64(4, [pid 9050] <... mount resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 9050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 9050] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./394/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./395/binderfs", [pid 9050] chdir("./file0" [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 9050] <... chdir resumed>) = 0 [pid 5063] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] unlink("./395/binderfs" [pid 5060] rmdir("./398/file0" [pid 9050] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./394/binderfs" [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5061] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 9050] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9050] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] unlink("./393/binderfs" [pid 5061] <... umount2 resumed>) = 0 [pid 5060] close(3 [pid 9050] <... futex resumed>) = 1 [pid 9048] <... futex resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 9050] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9048] exit_group(0 [pid 5063] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./398" [pid 9050] <... futex resumed>) = ? [pid 9048] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./395/file0", [pid 5060] <... rmdir resumed>) = 0 [pid 5063] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./393/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./399", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9050] +++ exited with 0 +++ [pid 9048] +++ exited with 0 +++ [pid 5063] umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 5062] newfstatat(AT_FDCWD, "./394/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9048, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(4, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(4, [pid 5062] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5062] <... openat resumed>) = 4 [pid 5061] close(4 [pid 5059] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5059] getdents64(3, [pid 5063] rmdir("./393/file0" [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] rmdir("./395/file0" [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(4 [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] rmdir("./394/file0" [pid 5059] newfstatat(AT_FDCWD, "./399/binderfs", [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(3, [pid 5063] close(3 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(3, [pid 5059] unlink("./399/binderfs" [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] close(3 [pid 5061] close(3 [pid 5059] <... unlink resumed>) = 0 [pid 5063] rmdir("./393" [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5062] rmdir("./394" [pid 5061] rmdir("./395" [pid 5063] mkdir("./394", 0777 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5062] mkdir("./395", 0777 [pid 5059] <... umount2 resumed>) = 0 [pid 5061] mkdir("./396", 0777 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] newfstatat(AT_FDCWD, "./399/file0", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./399/file0") = 0 [pid 5059] getdents64(3, 0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./399") = 0 [pid 5059] mkdir("./400", 0777) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] close(3) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] close(3 [pid 5063] close(3 [pid 5060] <... close resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 9051 ./strace-static-x86_64: Process 9051 attached [pid 5063] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9051] set_robust_list(0x5555567436a0, 24 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9052 attached [pid 9051] <... set_robust_list resumed>) = 0 [pid 9052] set_robust_list(0x5555567436a0, 24 [pid 9051] chdir("./395" [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 9052 [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 9053 [pid 9052] <... set_robust_list resumed>) = 0 [pid 9051] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 9053 attached [pid 9052] chdir("./396" [pid 9051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 9054 ./strace-static-x86_64: Process 9054 attached [pid 9052] <... chdir resumed>) = 0 [pid 9053] set_robust_list(0x5555567436a0, 24 [pid 9051] <... prctl resumed>) = 0 [pid 9051] setpgid(0, 0 [pid 9054] set_robust_list(0x5555567436a0, 24 [pid 9052] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9053] <... set_robust_list resumed>) = 0 [pid 9051] <... setpgid resumed>) = 0 [pid 9053] chdir("./399") = 0 [pid 9051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9052] <... prctl resumed>) = 0 [pid 9053] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9054] <... set_robust_list resumed>) = 0 [pid 9054] chdir("./394" [pid 9052] setpgid(0, 0 [pid 9053] <... prctl resumed>) = 0 [pid 9051] <... openat resumed>) = 3 [pid 9053] setpgid(0, 0 [pid 9054] <... chdir resumed>) = 0 [pid 9052] <... setpgid resumed>) = 0 [pid 9053] <... setpgid resumed>) = 0 [pid 9051] write(3, "1000", 4 [pid 9054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9051] <... write resumed>) = 4 [pid 9054] setpgid(0, 0 [pid 9051] close(3 [pid 9054] <... setpgid resumed>) = 0 [pid 9051] <... close resumed>) = 0 [pid 9054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9052] <... openat resumed>) = 3 [pid 9053] <... openat resumed>) = 3 [pid 9051] symlink("/dev/binderfs", "./binderfs" [pid 9054] <... openat resumed>) = 3 [pid 9053] write(3, "1000", 4) = 4 [pid 9054] write(3, "1000", 4 [pid 9052] write(3, "1000", 4 [pid 9053] close(3 [pid 9051] <... symlink resumed>) = 0 [pid 9054] <... write resumed>) = 4 [pid 9052] <... write resumed>) = 4 [pid 9053] <... close resumed>) = 0 [pid 9051] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9053] symlink("/dev/binderfs", "./binderfs" [pid 9052] close(3 [pid 9053] <... symlink resumed>) = 0 [pid 9051] <... futex resumed>) = 0 [pid 9054] close(3 [pid 9052] <... close resumed>) = 0 [pid 9053] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9051] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9054] <... close resumed>) = 0 [pid 9052] symlink("/dev/binderfs", "./binderfs" [pid 9053] <... futex resumed>) = 0 [pid 9051] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9054] symlink("/dev/binderfs", "./binderfs" [pid 9053] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9051] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... ioctl resumed>) = 0 [pid 9054] <... symlink resumed>) = 0 [pid 9052] <... symlink resumed>) = 0 [pid 9053] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9053] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9053] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9053] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9054] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] close(3 [pid 9054] <... futex resumed>) = 0 [pid 9052] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9053] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9051] <... mmap resumed>) = 0x7f58200ce000 [pid 5059] <... close resumed>) = 0 [pid 9054] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9052] <... futex resumed>) = 0 [pid 9053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9051] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9055 attached [pid 9054] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9052] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9051] <... mprotect resumed>) = 0 [pid 9055] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9053] <... clone3 resumed> => {parent_tid=[9055]}, 88) = 9055 [pid 9055] <... rseq resumed>) = 0 [pid 9055] set_robust_list(0x7f58200ee9a0, 24 [pid 9052] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9053] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 9056 attached [pid 9055] <... set_robust_list resumed>) = 0 [pid 9054] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9052] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9053] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9051] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9056] set_robust_list(0x5555567436a0, 24 [pid 9055] rt_sigprocmask(SIG_SETMASK, [], [pid 9054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9053] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9051] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9056] <... set_robust_list resumed>) = 0 [pid 9055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9053] <... futex resumed>) = 0 [pid 9051] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 9056 [pid 9056] chdir("./400" [pid 9055] memfd_create("syzkaller", 0 [pid 9054] <... mmap resumed>) = 0x7f58200ce000 [pid 9052] <... mmap resumed>) = 0x7f58200ce000 [pid 9053] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9057 attached [pid 9056] <... chdir resumed>) = 0 [pid 9054] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9052] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9057] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9052] <... mprotect resumed>) = 0 [pid 9051] <... clone3 resumed> => {parent_tid=[9057]}, 88) = 9057 [pid 9057] <... rseq resumed>) = 0 [pid 9056] setpgid(0, 0 [pid 9057] set_robust_list(0x7f58200ee9a0, 24 [pid 9056] <... setpgid resumed>) = 0 [pid 9055] <... memfd_create resumed>) = 3 [pid 9054] <... mprotect resumed>) = 0 [pid 9052] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9051] rt_sigprocmask(SIG_SETMASK, [], [pid 9057] <... set_robust_list resumed>) = 0 [pid 9056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9054] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9052] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9057] rt_sigprocmask(SIG_SETMASK, [], [pid 9056] <... openat resumed>) = 3 [pid 9054] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9051] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9055] <... mmap resumed>) = 0x7f5817c00000 ./strace-static-x86_64: Process 9058 attached [pid 9057] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9056] write(3, "1000", 4 [pid 9054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9051] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9059 attached [pid 9058] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9057] memfd_create("syzkaller", 0 [pid 9056] <... write resumed>) = 4 [pid 9052] <... clone3 resumed> => {parent_tid=[9058]}, 88) = 9058 [pid 9051] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9058] <... rseq resumed>) = 0 [pid 9057] <... memfd_create resumed>) = 3 [pid 9056] close(3 [pid 9058] set_robust_list(0x7f58200ee9a0, 24 [pid 9057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9056] <... close resumed>) = 0 [pid 9054] <... clone3 resumed> => {parent_tid=[9059]}, 88) = 9059 [pid 9052] rt_sigprocmask(SIG_SETMASK, [], [pid 9059] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9058] <... set_robust_list resumed>) = 0 [pid 9057] <... mmap resumed>) = 0x7f5817c00000 [pid 9056] symlink("/dev/binderfs", "./binderfs" [pid 9054] rt_sigprocmask(SIG_SETMASK, [], [pid 9052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9059] <... rseq resumed>) = 0 [pid 9058] rt_sigprocmask(SIG_SETMASK, [], [pid 9059] set_robust_list(0x7f58200ee9a0, 24 [pid 9058] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9056] <... symlink resumed>) = 0 [pid 9054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9052] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9059] <... set_robust_list resumed>) = 0 [pid 9058] memfd_create("syzkaller", 0) = 3 [pid 9058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9059] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9052] <... futex resumed>) = 0 [pid 9054] <... futex resumed>) = 1 [pid 9052] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9059] <... futex resumed>) = 0 [pid 9056] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9054] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9056] <... futex resumed>) = 0 [pid 9056] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9056] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f58200ce000 [pid 9056] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9059] memfd_create("syzkaller", 0 [pid 9056] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9059] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 9060 attached [pid 9059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9056] <... clone3 resumed> => {parent_tid=[9060]}, 88) = 9060 [pid 9056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9056] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9056] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9060] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9059] <... mmap resumed>) = 0x7f5817c00000 [pid 9055] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9060] <... rseq resumed>) = 0 [pid 9060] set_robust_list(0x7f58200ee9a0, 24) = 0 [pid 9060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9060] memfd_create("syzkaller", 0 [pid 9057] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9060] <... memfd_create resumed>) = 3 [pid 9060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9058] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9059] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9055] <... write resumed>) = 2097152 [pid 9055] munmap(0x7f5817c00000, 138412032 [pid 9057] <... write resumed>) = 2097152 [pid 9057] munmap(0x7f5817c00000, 138412032) = 0 [pid 9055] <... munmap resumed>) = 0 [pid 9060] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9055] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9055] ioctl(4, LOOP_SET_FD, 3 [pid 9058] <... write resumed>) = 2097152 [pid 9057] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9059] <... write resumed>) = 2097152 [pid 9058] munmap(0x7f5817c00000, 138412032 [pid 9057] ioctl(4, LOOP_SET_FD, 3 [pid 9055] <... ioctl resumed>) = 0 [pid 9060] <... write resumed>) = 2097152 [pid 9059] munmap(0x7f5817c00000, 138412032 [pid 9055] close(3 [pid 9060] munmap(0x7f5817c00000, 138412032 [pid 9055] <... close resumed>) = 0 [pid 9055] close(4) = 0 [pid 9055] mkdir("./file0", 0777 [pid 9059] <... munmap resumed>) = 0 [pid 9055] <... mkdir resumed>) = 0 [pid 9058] <... munmap resumed>) = 0 [pid 9057] <... ioctl resumed>) = 0 [pid 9057] close(3) = 0 [pid 9057] close(4 [pid 9055] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 9060] <... munmap resumed>) = 0 [pid 9057] <... close resumed>) = 0 [pid 9057] mkdir("./file0", 0777 [pid 9058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9059] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9058] <... openat resumed>) = 4 [pid 9057] <... mkdir resumed>) = 0 [ 344.555822][ T9055] loop1: detected capacity change from 0 to 4096 [ 344.568282][ T9057] loop3: detected capacity change from 0 to 4096 [ 344.595204][ T9055] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [pid 9060] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9059] <... openat resumed>) = 4 [pid 9058] ioctl(4, LOOP_SET_FD, 3 [pid 9057] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [pid 9060] <... openat resumed>) = 4 [pid 9059] ioctl(4, LOOP_SET_FD, 3 [pid 9058] <... ioctl resumed>) = 0 [pid 9058] close(3) = 0 [pid 9058] close(4) = 0 [pid 9058] mkdir("./file0", 0777) = 0 [pid 9060] ioctl(4, LOOP_SET_FD, 3 [pid 9058] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 9060] <... ioctl resumed>) = 0 [ 344.608558][ T9058] loop2: detected capacity change from 0 to 4096 [ 344.609441][ T9057] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 344.615992][ T9059] loop4: detected capacity change from 0 to 4096 [ 344.636197][ T9060] loop0: detected capacity change from 0 to 4096 [ 344.648856][ T9058] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [pid 9060] close(3) = 0 [pid 9060] close(4) = 0 [pid 9060] mkdir("./file0", 0777) = 0 [pid 9060] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 9059] <... ioctl resumed>) = 0 [pid 9059] close(3) = 0 [pid 9059] close(4) = 0 [pid 9059] mkdir("./file0", 0777) = 0 [pid 9059] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 9055] <... mount resumed>) = 0 [pid 9055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9055] chdir("./file0") = 0 [pid 9055] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 9055] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9053] <... futex resumed>) = 0 [pid 9055] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9053] exit_group(0 [pid 9055] <... futex resumed>) = ? [pid 9053] <... exit_group resumed>) = ? [pid 9055] +++ exited with 0 +++ [ 344.667633][ T9060] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 344.674979][ T9059] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [pid 9053] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9053, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", [pid 9060] <... mount resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9060] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 9060] <... openat resumed>) = 3 [pid 5060] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./399/binderfs", [pid 9060] chdir("./file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9060] <... chdir resumed>) = 0 [pid 5060] unlink("./399/binderfs") = 0 [pid 9060] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9060] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9056] <... futex resumed>) = 0 [pid 9060] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9056] exit_group(0) = ? [pid 9060] <... futex resumed>) = ? [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9058] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./399/file0", [pid 9058] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9057] <... mount resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9058] <... openat resumed>) = 3 [pid 9057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9057] <... openat resumed>) = 3 [pid 9058] chdir("./file0" [pid 9057] chdir("./file0" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9060] +++ exited with 0 +++ [pid 9058] <... chdir resumed>) = 0 [pid 9057] <... chdir resumed>) = 0 [pid 9056] +++ exited with 0 +++ [pid 9059] <... mount resumed>) = 0 [pid 9059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9057] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9056, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 9059] <... openat resumed>) = 3 [pid 9058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9057] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9059] chdir("./file0" [pid 5060] <... openat resumed>) = 4 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 9057] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9059] <... chdir resumed>) = 0 [pid 9058] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(4, "", [pid 5059] <... restart_syscall resumed>) = 0 [pid 9059] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 9059] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9059] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, [pid 9058] <... futex resumed>) = 1 [pid 9057] <... futex resumed>) = 1 [pid 9052] <... futex resumed>) = 0 [pid 9051] <... futex resumed>) = 0 [pid 5059] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9059] <... futex resumed>) = 1 [pid 9058] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9057] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] <... futex resumed>) = 0 [pid 9052] exit_group(0 [pid 9051] exit_group(0 [pid 5060] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9059] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9058] <... futex resumed>) = ? [pid 9057] <... futex resumed>) = ? [pid 9054] exit_group(0 [pid 9052] <... exit_group resumed>) = ? [pid 9051] <... exit_group resumed>) = ? [pid 5060] getdents64(4, [pid 9059] <... futex resumed>) = ? [pid 9058] +++ exited with 0 +++ [pid 9057] +++ exited with 0 +++ [pid 9054] <... exit_group resumed>) = ? [pid 9052] +++ exited with 0 +++ [pid 5059] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9059] +++ exited with 0 +++ [pid 9054] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5060] close(4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9054, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9052, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./399/file0" [pid 5059] getdents64(3, [pid 9051] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9051, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 5060] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5061] newfstatat(3, "", [pid 5060] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(3 [pid 5059] newfstatat(AT_FDCWD, "./400/binderfs", [pid 5063] getdents64(3, [pid 5061] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] rmdir("./399" [pid 5061] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5059] unlink("./400/binderfs" [pid 5063] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./400", 0777 [pid 5059] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./394/binderfs", [pid 5062] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./396/binderfs", [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] unlink("./394/binderfs" [pid 5062] newfstatat(3, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5061] unlink("./396/binderfs" [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 4 entries */, 32768) = 112 [pid 5060] <... openat resumed>) = 3 [pid 5059] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(AT_FDCWD, "./400/file0", [pid 5062] unlink("./395/binderfs") = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./400/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(AT_FDCWD, "./394/file0", [pid 5062] <... umount2 resumed>) = 0 [pid 5061] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./395/file0", [pid 5061] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5062] umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./396/file0", [pid 5059] getdents64(4, [pid 5063] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(3 [pid 5059] close(4 [pid 5063] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5059] rmdir("./400/file0" [pid 5063] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... rmdir resumed>) = 0 [pid 5063] close(4 [pid 5062] openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 5059] getdents64(3, ./strace-static-x86_64: Process 9061 attached [pid 5063] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5061] getdents64(4, [pid 5063] rmdir("./394/file0" [pid 5060] <... clone resumed>, child_tidptr=0x555556743690) = 9061 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./400" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 9061] set_robust_list(0x5555567436a0, 24 [pid 5063] getdents64(3, [pid 5062] newfstatat(4, "", [pid 9061] <... set_robust_list resumed>) = 0 [pid 5061] close(4 [pid 5059] mkdir("./401", 0777 [pid 9061] chdir("./400" [pid 5063] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 9061] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 5062] getdents64(4, [pid 5061] rmdir("./396/file0" [pid 9061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 9061] <... prctl resumed>) = 0 [pid 5063] rmdir("./394" [pid 9061] setpgid(0, 0 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(3, [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 9061] <... setpgid resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 9061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] mkdir("./395", 0777 [pid 5062] getdents64(4, [pid 5061] close(3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 9061] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555674c770 /* 0 entries */, 32768) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] close(4 [pid 5061] rmdir("./396" [pid 5062] <... close resumed>) = 0 [pid 9061] write(3, "1000", 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] rmdir("./395/file0" [pid 5061] <... rmdir resumed>) = 0 [pid 9061] <... write resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5061] mkdir("./397", 0777 [pid 9061] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5061] <... mkdir resumed>) = 0 [pid 9061] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555556744730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 9061] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... close resumed>) = 0 [pid 9061] <... symlink resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] rmdir("./395" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5062] mkdir("./396", 0777 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 9061] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9061] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9061] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 9061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9061] <... mmap resumed>) = 0x7f58200ce000 [pid 9061] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... openat resumed>) = 3 [pid 9061] <... mprotect resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 9061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 9061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0}./strace-static-x86_64: Process 9062 attached [pid 9062] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9061] <... clone3 resumed> => {parent_tid=[9062]}, 88) = 9062 [pid 5059] <... ioctl resumed>) = 0 [pid 9062] <... rseq resumed>) = 0 [pid 9061] rt_sigprocmask(SIG_SETMASK, [], [pid 9062] set_robust_list(0x7f58200ee9a0, 24 [pid 9061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 9062] <... set_robust_list resumed>) = 0 [pid 9061] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 9062] rt_sigprocmask(SIG_SETMASK, [], [pid 9061] <... futex resumed>) = 0 [pid 9062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... close resumed>) = 0 [pid 9061] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] close(3 [pid 9062] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5062] close(3 [pid 5061] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9062] <... memfd_create resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 ./strace-static-x86_64: Process 9064 attached ./strace-static-x86_64: Process 9063 attached [pid 9062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9064] set_robust_list(0x5555567436a0, 24 [pid 9062] <... mmap resumed>) = 0x7f5817c00000 [pid 5063] <... clone resumed>, child_tidptr=0x555556743690) = 9064 [pid 5059] <... clone resumed>, child_tidptr=0x555556743690) = 9063 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9064] <... set_robust_list resumed>) = 0 [pid 9063] set_robust_list(0x5555567436a0, 24 [pid 9064] chdir("./395" [pid 9063] <... set_robust_list resumed>) = 0 [pid 9064] <... chdir resumed>) = 0 [pid 9063] chdir("./401" [pid 9064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9063] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 9066 attached [pid 9064] <... prctl resumed>) = 0 [pid 9063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... clone resumed>, child_tidptr=0x555556743690) = 9066 [pid 5061] <... clone resumed>, child_tidptr=0x555556743690) = 9065 [pid 9064] setpgid(0, 0 [pid 9063] <... prctl resumed>) = 0 [pid 9066] set_robust_list(0x5555567436a0, 24 [pid 9063] setpgid(0, 0./strace-static-x86_64: Process 9065 attached [pid 9066] <... set_robust_list resumed>) = 0 [pid 9064] <... setpgid resumed>) = 0 [pid 9063] <... setpgid resumed>) = 0 [pid 9065] set_robust_list(0x5555567436a0, 24 [pid 9063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9065] <... set_robust_list resumed>) = 0 [pid 9066] chdir("./396" [pid 9065] chdir("./397" [pid 9064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9065] <... chdir resumed>) = 0 [pid 9065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9063] <... openat resumed>) = 3 [pid 9065] <... prctl resumed>) = 0 [pid 9065] setpgid(0, 0 [pid 9066] <... chdir resumed>) = 0 [pid 9064] <... openat resumed>) = 3 [pid 9063] write(3, "1000", 4 [pid 9065] <... setpgid resumed>) = 0 [pid 9065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9064] write(3, "1000", 4 [pid 9063] <... write resumed>) = 4 [pid 9064] <... write resumed>) = 4 [pid 9063] close(3 [pid 9065] <... openat resumed>) = 3 [pid 9064] close(3 [pid 9063] <... close resumed>) = 0 [pid 9065] write(3, "1000", 4) = 4 [pid 9066] <... prctl resumed>) = 0 [pid 9064] <... close resumed>) = 0 [pid 9063] symlink("/dev/binderfs", "./binderfs" [pid 9066] setpgid(0, 0 [pid 9064] symlink("/dev/binderfs", "./binderfs" [pid 9063] <... symlink resumed>) = 0 [pid 9065] close(3 [pid 9066] <... setpgid resumed>) = 0 [pid 9064] <... symlink resumed>) = 0 [pid 9065] <... close resumed>) = 0 [pid 9066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9065] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9066] <... openat resumed>) = 3 [pid 9064] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9065] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9065] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, NULL, 8) = 0 [pid 9065] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9064] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9065] <... mmap resumed>) = 0x7f58200ce000 [pid 9066] write(3, "1000", 4 [pid 9064] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9065] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9066] <... write resumed>) = 4 [pid 9064] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9065] <... mprotect resumed>) = 0 [pid 9066] close(3 [pid 9064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9066] <... close resumed>) = 0 [pid 9063] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9066] symlink("/dev/binderfs", "./binderfs" [pid 9064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9065] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9066] <... symlink resumed>) = 0 [pid 9063] <... futex resumed>) = 0 [pid 9064] <... mmap resumed>) = 0x7f58200ce000 [pid 9065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9064] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9063] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, ./strace-static-x86_64: Process 9067 attached [pid 9064] <... mprotect resumed>) = 0 [pid 9063] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9067] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9065] <... clone3 resumed> => {parent_tid=[9067]}, 88) = 9067 [pid 9066] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9064] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9063] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 9067] <... rseq resumed>) = 0 [pid 9065] rt_sigprocmask(SIG_SETMASK, [], [pid 9066] <... futex resumed>) = 0 [pid 9062] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9067] set_robust_list(0x7f58200ee9a0, 24 [pid 9065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9067] <... set_robust_list resumed>) = 0 [pid 9065] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9066] rt_sigaction(SIGRT_1, {sa_handler=0x7f5820157ea0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5820149050}, [pid 9064] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9063] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9067] rt_sigprocmask(SIG_SETMASK, [], [pid 9065] <... futex resumed>) = 0 [pid 9066] <... rt_sigaction resumed>NULL, 8) = 0 [pid 9064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9066] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 9063] <... mmap resumed>) = 0x7f58200ce000 [pid 9066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9065] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9068 attached [pid 9066] <... mmap resumed>) = 0x7f58200ce000 [pid 9063] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9064] <... clone3 resumed> => {parent_tid=[9068]}, 88) = 9068 [pid 9068] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9066] mprotect(0x7f58200cf000, 131072, PROT_READ|PROT_WRITE [pid 9064] rt_sigprocmask(SIG_SETMASK, [], [pid 9068] <... rseq resumed>) = 0 [pid 9063] <... mprotect resumed>) = 0 [pid 9068] set_robust_list(0x7f58200ee9a0, 24 [pid 9066] <... mprotect resumed>) = 0 [pid 9064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9068] <... set_robust_list resumed>) = 0 [pid 9067] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9064] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9068] rt_sigprocmask(SIG_SETMASK, [], [pid 9067] memfd_create("syzkaller", 0 [pid 9066] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9064] <... futex resumed>) = 0 [pid 9063] rt_sigprocmask(SIG_BLOCK, ~[], [pid 9068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9066] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9064] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9063] <... rt_sigprocmask resumed>[], 8) = 0 [pid 9067] <... memfd_create resumed>) = 3 [pid 9068] memfd_create("syzkaller", 0 [pid 9066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f58200ee990, parent_tid=0x7f58200ee990, exit_signal=0, stack=0x7f58200ce000, stack_size=0x20300, tls=0x7f58200ee6c0} [pid 9062] <... write resumed>) = 2097152 [pid 9067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9062] munmap(0x7f5817c00000, 138412032./strace-static-x86_64: Process 9070 attached ./strace-static-x86_64: Process 9069 attached [pid 9068] <... memfd_create resumed>) = 3 [pid 9067] <... mmap resumed>) = 0x7f5817c00000 [pid 9070] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9069] rseq(0x7f58200eefe0, 0x20, 0, 0x53053053 [pid 9068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9066] <... clone3 resumed> => {parent_tid=[9070]}, 88) = 9070 [pid 9063] <... clone3 resumed> => {parent_tid=[9069]}, 88) = 9069 [pid 9062] <... munmap resumed>) = 0 [pid 9070] <... rseq resumed>) = 0 [pid 9069] <... rseq resumed>) = 0 [pid 9068] <... mmap resumed>) = 0x7f5817c00000 [pid 9066] rt_sigprocmask(SIG_SETMASK, [], [pid 9063] rt_sigprocmask(SIG_SETMASK, [], [pid 9062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9070] set_robust_list(0x7f58200ee9a0, 24 [pid 9069] set_robust_list(0x7f58200ee9a0, 24 [pid 9070] <... set_robust_list resumed>) = 0 [pid 9069] <... set_robust_list resumed>) = 0 [pid 9066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9063] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 9066] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9063] futex(0x7f58201d96a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 9069] rt_sigprocmask(SIG_SETMASK, [], [pid 9066] <... futex resumed>) = 0 [pid 9063] <... futex resumed>) = 0 [pid 9062] <... openat resumed>) = 4 [pid 9069] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 9066] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9063] futex(0x7f58201d96ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9062] ioctl(4, LOOP_SET_FD, 3 [pid 9069] memfd_create("syzkaller", 0 [pid 9070] memfd_create("syzkaller", 0 [pid 9067] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9062] <... ioctl resumed>) = 0 [pid 9070] <... memfd_create resumed>) = 3 [pid 9070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9069] <... memfd_create resumed>) = 3 [pid 9069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5817c00000 [pid 9070] <... mmap resumed>) = 0x7f5817c00000 [pid 9062] close(3) = 0 [pid 9062] close(4 [pid 9069] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9062] <... close resumed>) = 0 [pid 9062] mkdir("./file0", 0777) = 0 [ 345.153148][ T9062] loop1: detected capacity change from 0 to 4096 [pid 9062] mount("/dev/loop1", "./file0", "ntfs3", 0, "" [pid 9068] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 9067] <... write resumed>) = 2097152 [pid 9070] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 345.215404][ T9062] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 345.261158][ C1] ================================================================== [ 345.269298][ C1] BUG: KASAN: out-of-bounds in end_buffer_read_sync+0xc1/0xd0 [ 345.276925][ C1] Write of size 4 at addr ffffc9000e7bf6c0 by task ksoftirqd/1/22 [ 345.284850][ C1] [ 345.287197][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted 6.8.0-rc4-syzkaller-00014-g7e90b5c295ec #0 [ 345.297126][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 345.307401][ C1] Call Trace: [ 345.310730][ C1] [ 345.313707][ C1] dump_stack_lvl+0x1e7/0x2e0 [ 345.318567][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.323824][ C1] ? __pfx__printk+0x10/0x10 [ 345.328480][ T9067] loop2: detected capacity change from 0 to 4096 [ 345.328509][ C1] ? _printk+0xd5/0x120 [ 345.339056][ C1] print_report+0x167/0x540 [ 345.343660][ C1] ? __virt_addr_valid+0xbd/0x520 [ 345.348822][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 345.354090][ C1] kasan_report+0x142/0x180 [ 345.358650][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 345.363918][ C1] kasan_check_range+0x282/0x290 [ 345.364833][ T9068] loop4: detected capacity change from 0 to 4096 [ 345.368895][ C1] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 345.368938][ C1] end_buffer_read_sync+0xc1/0xd0 [ 345.376927][ T9069] loop0: detected capacity change from 0 to 4096 [ 345.380981][ C1] end_bio_bh_io_sync+0xbf/0x120 [ 345.397349][ C1] blk_update_request+0x55d/0x1050 [ 345.402585][ C1] blk_mq_end_request+0x3e/0x70 [ 345.405652][ T9067] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 345.407465][ C1] blk_done_softirq+0x100/0x150 [ 345.419839][ T9070] loop3: detected capacity change from 0 to 4096 [ 345.421244][ C1] __do_softirq+0x2bb/0x942 [ 345.432165][ C1] ? run_ksoftirqd+0xc5/0x130 [ 345.436883][ C1] ? __pfx___do_softirq+0x10/0x10 [ 345.441389][ T9069] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 345.442044][ C1] run_ksoftirqd+0xc5/0x130 [ 345.442077][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 345.442099][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 345.442127][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 345.461721][ T9068] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 345.466423][ C1] smpboot_thread_fn+0x543/0xa30 [ 345.466501][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 345.466536][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 345.466564][ C1] kthread+0x2ef/0x390 [ 345.466587][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [pid 9067] munmap(0x7f5817c00000, 138412032 [pid 9070] <... write resumed>) = 2097152 [pid 9069] <... write resumed>) = 2097152 [pid 9068] <... write resumed>) = 2097152 [pid 9067] <... munmap resumed>) = 0 [pid 9067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9069] munmap(0x7f5817c00000, 138412032 [pid 9068] munmap(0x7f5817c00000, 138412032 [pid 9067] <... openat resumed>) = 4 [pid 9068] <... munmap resumed>) = 0 [pid 9067] ioctl(4, LOOP_SET_FD, 3 [pid 9069] <... munmap resumed>) = 0 [pid 9070] munmap(0x7f5817c00000, 138412032 [pid 9068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9067] <... ioctl resumed>) = 0 [pid 9068] <... openat resumed>) = 4 [pid 9069] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9068] ioctl(4, LOOP_SET_FD, 3 [pid 9067] close(3 [pid 9069] <... openat resumed>) = 4 [pid 9067] <... close resumed>) = 0 [pid 9069] ioctl(4, LOOP_SET_FD, 3 [pid 9067] close(4) = 0 [pid 9067] mkdir("./file0", 0777) = 0 [pid 9070] <... munmap resumed>) = 0 [pid 9067] mount("/dev/loop2", "./file0", "ntfs3", 0, "" [pid 9070] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9070] ioctl(4, LOOP_SET_FD, 3 [pid 9069] <... ioctl resumed>) = 0 [pid 9062] <... mount resumed>) = 0 [pid 9069] close(3 [pid 9062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9069] <... close resumed>) = 0 [pid 9062] <... openat resumed>) = 3 [pid 9069] close(4 [pid 9062] chdir("./file0" [pid 9069] <... close resumed>) = 0 [pid 9062] <... chdir resumed>) = 0 [pid 9069] mkdir("./file0", 0777 [pid 9062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9069] <... mkdir resumed>) = 0 [pid 9062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 9069] mount("/dev/loop0", "./file0", "ntfs3", 0, "" [pid 9062] futex(0x7f58201d96ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 9068] <... ioctl resumed>) = 0 [pid 9062] <... futex resumed>) = 1 [pid 9061] <... futex resumed>) = 0 [pid 9068] close(3 [pid 9062] futex(0x7f58201d96a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9061] exit_group(0 [pid 9068] <... close resumed>) = 0 [pid 9062] <... futex resumed>) = ? [pid 9061] <... exit_group resumed>) = ? [pid 9068] close(4 [pid 9062] +++ exited with 0 +++ [pid 9061] +++ exited with 0 +++ [pid 9068] <... close resumed>) = 0 [pid 9068] mkdir("./file0", 0777 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9061, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 9068] <... mkdir resumed>) = 0 [pid 9068] mount("/dev/loop4", "./file0", "ntfs3", 0, "" [pid 5060] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9070] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556744730 /* 4 entries */, 32768) = 112 [pid 9070] close(3 [pid 5060] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9070] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9070] close(4 [pid 5060] newfstatat(AT_FDCWD, "./400/binderfs", [pid 9070] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 9070] mkdir("./file0", 0777 [pid 5060] unlink("./400/binderfs" [pid 9070] <... mkdir resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 9070] mount("/dev/loop3", "./file0", "ntfs3", 0, "" [ 345.493303][ T9070] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 345.496114][ C1] ? __pfx_kthread+0x10/0x10 [ 345.496147][ C1] ret_from_fork+0x4b/0x80 [ 345.523754][ C1] ? __pfx_kthread+0x10/0x10 [ 345.528391][ C1] ret_from_fork_asm+0x1b/0x30 [ 345.533259][ C1] [ 345.536308][ C1] [ 345.538660][ C1] The buggy address belongs to the virtual mapping at [ 345.538660][ C1] [ffffc9000e7b8000, ffffc9000e7c1000) created by: [ 345.538660][ C1] copy_process+0x5d5/0x3fc0 [ 345.556333][ C1] [ 345.558684][ C1] The buggy address belongs to the physical page: [ 345.565125][ C1] page:ffffea000092cbc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24b2f [ 345.575316][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 345.582467][ C1] page_type: 0xffffffff() [ 345.586837][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 345.595458][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 345.604248][ C1] page dumped because: kasan: bad access detected [ 345.610696][ C1] page_owner tracks the page as allocated [ 345.616437][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 9056, tgid 9056 (syz-executor267), ts 344439059953, free_ts 344187581502 [ 345.636196][ C1] post_alloc_hook+0x1ea/0x210 [ 345.641060][ C1] get_page_from_freelist+0x33ea/0x3580 [ 345.646657][ C1] __alloc_pages+0x255/0x680 [ 345.651304][ C1] alloc_pages_mpol+0x3de/0x650 [ 345.656212][ C1] __vmalloc_node_range+0x9a3/0x14a0 [ 345.661548][ C1] dup_task_struct+0x3e9/0x7d0 [ 345.666357][ C1] copy_process+0x5d5/0x3fc0 [ 345.671021][ C1] kernel_clone+0x222/0x840 [ 345.675570][ C1] __se_sys_clone3+0x2cb/0x350 [ 345.680387][ C1] do_syscall_64+0xf9/0x240 [ 345.685037][ C1] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 345.691072][ C1] page last free pid 9050 tgid 9048 stack trace: [ 345.697432][ C1] free_unref_page_prepare+0x95d/0xa80 [ 345.702942][ C1] free_unref_page_list+0x5a3/0x850 [ 345.708194][ C1] release_pages+0x2117/0x2400 [ 345.713093][ C1] tlb_flush_mmu+0x34c/0x4e0 [ 345.717732][ C1] tlb_finish_mmu+0xd4/0x200 [ 345.722383][ C1] exit_mmap+0x4b6/0xd40 [ 345.726757][ C1] __mmput+0x115/0x3c0 [ 345.730881][ C1] exit_mm+0x21f/0x310 [ 345.734997][ C1] do_exit+0x9af/0x2740 [ 345.739211][ C1] do_group_exit+0x206/0x2c0 [ 345.743853][ C1] get_signal+0x176d/0x1850 [ 345.748589][ C1] arch_do_signal_or_restart+0x96/0x860 [ 345.754223][ C1] syscall_exit_to_user_mode+0xc8/0x370 [ 345.759891][ C1] do_syscall_64+0x108/0x240 [ 345.764882][ C1] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 345.770832][ C1] [ 345.773196][ C1] Memory state around the buggy address: [ 345.778865][ C1] ffffc9000e7bf580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.786966][ C1] ffffc9000e7bf600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.795073][ C1] >ffffc9000e7bf680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.803264][ C1] ^ [ 345.809711][ C1] ffffc9000e7bf700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.817813][ C1] ffffc9000e7bf780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.825905][ C1] ================================================================== [ 345.834109][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 345.841438][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted 6.8.0-rc4-syzkaller-00014-g7e90b5c295ec #0 [ 345.851440][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 345.861546][ C1] Call Trace: [ 345.864859][ C1] [ 345.867813][ C1] dump_stack_lvl+0x1e7/0x2e0 [ 345.872510][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.877731][ C1] ? __pfx__printk+0x10/0x10 [ 345.882342][ C1] ? vscnprintf+0x5d/0x90 [ 345.886763][ C1] panic+0x349/0x860 [ 345.890703][ C1] ? check_panic_on_warn+0x21/0xb0 [ 345.895827][ C1] ? __pfx_panic+0x10/0x10 [ 345.900266][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 345.906194][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 345.912100][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.918453][ C1] ? print_report+0x4ff/0x540 [ 345.923176][ C1] check_panic_on_warn+0x86/0xb0 [ 345.928128][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 345.933350][ C1] end_report+0x6e/0x140 [ 345.937760][ C1] kasan_report+0x153/0x180 [ 345.942296][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 345.947542][ C1] kasan_check_range+0x282/0x290 [ 345.952588][ C1] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 345.958348][ C1] end_buffer_read_sync+0xc1/0xd0 [ 345.963739][ C1] end_bio_bh_io_sync+0xbf/0x120 [ 345.968741][ C1] blk_update_request+0x55d/0x1050 [ 345.973868][ C1] blk_mq_end_request+0x3e/0x70 [ 345.978744][ C1] blk_done_softirq+0x100/0x150 [ 345.983641][ C1] __do_softirq+0x2bb/0x942 [ 345.988156][ C1] ? run_ksoftirqd+0xc5/0x130 [ 345.992848][ C1] ? __pfx___do_softirq+0x10/0x10 [ 345.997896][ C1] run_ksoftirqd+0xc5/0x130 [ 346.002416][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 346.007565][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 346.013320][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 346.018449][ C1] smpboot_thread_fn+0x543/0xa30 [ 346.023424][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 346.028458][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 346.033929][ C1] kthread+0x2ef/0x390 [ 346.038012][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 346.043665][ C1] ? __pfx_kthread+0x10/0x10 [ 346.048278][ C1] ret_from_fork+0x4b/0x80 [ 346.052705][ C1] ? __pfx_kthread+0x10/0x10 [ 346.057398][ C1] ret_from_fork_asm+0x1b/0x30 [ 346.062203][ C1] [ 346.065566][ C1] Kernel Offset: disabled [ 346.069901][ C1] Rebooting in 86400 seconds..