./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3535477238 <...> nished ...> [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6132] close(3 [pid 5060] unlink("./104/binderfs" [pid 6133] <... memfd_create resumed>) = 3 [pid 6132] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6132] symlink("/dev/binderfs", "./binderfs" [pid 5060] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6133] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] getdents64(4, [pid 6132] <... symlink resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6132] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, [pid 6132] <... futex resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6132] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] close(4 [pid 6132] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 6132] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] rmdir("./104/file0" [pid 6132] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6132] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6132] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6132] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6134 attached [pid 5060] close(3 [pid 6134] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6132] <... clone3 resumed> => {parent_tid=[6134]}, 88) = 6134 [pid 5060] <... close resumed>) = 0 [pid 6134] <... rseq resumed>) = 0 [pid 6132] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] rmdir("./104" [pid 6134] set_robust_list(0x7fe7c32469a0, 24 [pid 6132] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6134] <... set_robust_list resumed>) = 0 [pid 6132] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] rt_sigprocmask(SIG_SETMASK, [], [pid 6132] <... futex resumed>) = 0 [pid 6132] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] mkdir("./105", 0777 [pid 6134] memfd_create("syzkaller", 0 [pid 6133] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6134] <... memfd_create resumed>) = 3 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6133] <... write resumed>) = 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 6133] munmap(0x7fe7bae00000, 138412032 [pid 6134] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6133] <... munmap resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6133] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6135 [pid 6133] <... openat resumed>) = 4 [pid 6133] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6136 ./strace-static-x86_64: Process 6136 attached ./strace-static-x86_64: Process 6135 attached [pid 6136] set_robust_list(0x55558e6e36a0, 24 [pid 6135] set_robust_list(0x55558e6e36a0, 24 [pid 6136] <... set_robust_list resumed>) = 0 [pid 6135] <... set_robust_list resumed>) = 0 [pid 6136] chdir("./106" [pid 6135] chdir("./105" [pid 6136] <... chdir resumed>) = 0 [pid 6135] <... chdir resumed>) = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6136] <... prctl resumed>) = 0 [pid 6135] <... prctl resumed>) = 0 [pid 6136] setpgid(0, 0 [pid 6135] setpgid(0, 0 [pid 6136] <... setpgid resumed>) = 0 [pid 6135] <... setpgid resumed>) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6136] <... openat resumed>) = 3 [pid 6135] write(3, "1000", 4 [pid 6136] write(3, "1000", 4 [pid 6135] <... write resumed>) = 4 [pid 6136] <... write resumed>) = 4 [pid 6136] close(3 [pid 6135] close(3 [pid 6133] <... ioctl resumed>) = 0 [pid 6136] <... close resumed>) = 0 [pid 6135] <... close resumed>) = 0 [pid 6133] close(3 [pid 6136] symlink("/dev/binderfs", "./binderfs" [pid 6135] symlink("/dev/binderfs", "./binderfs" [pid 6133] <... close resumed>) = 0 [pid 6135] <... symlink resumed>) = 0 [pid 6136] <... symlink resumed>) = 0 [pid 6133] close(4) = 0 [pid 6135] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... write resumed>) = 2097152 [pid 6133] mkdir("./file0", 0777 [pid 6136] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 0 [pid 6135] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6136] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6135] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6136] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6135] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6133] <... mkdir resumed>) = 0 [pid 6136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6135] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6135] <... mmap resumed>) = 0x7fe7c3226000 [pid 6136] <... mmap resumed>) = 0x7fe7c3226000 [pid 6135] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6136] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6135] <... mprotect resumed>) = 0 [pid 6136] <... mprotect resumed>) = 0 [pid 6135] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6136] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6135] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6136] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6134] munmap(0x7fe7bae00000, 138412032 [pid 6133] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"..../strace-static-x86_64: Process 6137 attached [pid 6136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6135] <... clone3 resumed> => {parent_tid=[6137]}, 88) = 6137 [pid 6134] <... munmap resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6138 attached [pid 6137] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6135] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6135] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6137] <... rseq resumed>) = 0 [pid 6137] set_robust_list(0x7fe7c32469a0, 24 [pid 6136] <... clone3 resumed> => {parent_tid=[6138]}, 88) = 6138 [pid 6138] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6137] <... set_robust_list resumed>) = 0 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], [pid 6138] <... rseq resumed>) = 0 [pid 6137] rt_sigprocmask(SIG_SETMASK, [], [pid 6136] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 120.795933][ T6133] loop4: detected capacity change from 0 to 4096 [pid 6138] set_robust_list(0x7fe7c32469a0, 24 [pid 6137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6136] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6137] memfd_create("syzkaller", 0 [pid 6136] <... futex resumed>) = 0 [pid 6138] rt_sigprocmask(SIG_SETMASK, [], [pid 6136] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6138] memfd_create("syzkaller", 0 [pid 6137] <... memfd_create resumed>) = 3 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6138] <... memfd_create resumed>) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6139 attached [pid 6134] <... openat resumed>) = 4 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6139 [pid 6139] set_robust_list(0x55558e6e36a0, 24 [pid 6134] ioctl(4, LOOP_SET_FD, 3 [pid 6139] <... set_robust_list resumed>) = 0 [pid 6139] chdir("./105") = 0 [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6139] setpgid(0, 0) = 0 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6134] <... ioctl resumed>) = 0 [pid 6139] write(3, "1000", 4 [pid 6134] close(3 [pid 6139] <... write resumed>) = 4 [pid 6134] <... close resumed>) = 0 [pid 6139] close(3 [pid 6134] close(4 [pid 6139] <... close resumed>) = 0 [pid 6134] <... close resumed>) = 0 [pid 6139] symlink("/dev/binderfs", "./binderfs" [pid 6134] mkdir("./file0", 0777 [pid 6139] <... symlink resumed>) = 0 [pid 6139] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6134] <... mkdir resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 6139] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6139] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6134] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6139] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 120.858837][ T6133] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 120.897294][ T6134] loop0: detected capacity change from 0 to 4096 [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6137] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6139] <... mmap resumed>) = 0x7fe7c3226000 [pid 6139] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6139] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6133] <... mount resumed>) = 0 [pid 6139] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6140 attached [pid 6133] chdir("./file0" [pid 6140] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6139] <... clone3 resumed> => {parent_tid=[6140]}, 88) = 6140 [pid 6133] <... chdir resumed>) = 0 [pid 6140] <... rseq resumed>) = 0 [pid 6139] rt_sigprocmask(SIG_SETMASK, [], [pid 6133] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6140] set_robust_list(0x7fe7c32469a0, 24 [pid 6139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6140] <... set_robust_list resumed>) = 0 [pid 6139] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], [pid 6139] <... futex resumed>) = 0 [pid 6140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6139] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6140] memfd_create("syzkaller", 0 [pid 6138] <... write resumed>) = 2097152 [pid 6137] <... write resumed>) = 2097152 [pid 6133] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] munmap(0x7fe7bae00000, 138412032 [pid 6137] munmap(0x7fe7bae00000, 138412032 [pid 6131] <... futex resumed>) = 0 [ 120.948222][ T6134] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6131] exit_group(0 [pid 6140] <... memfd_create resumed>) = 3 [pid 6138] <... munmap resumed>) = 0 [pid 6137] <... munmap resumed>) = 0 [pid 6133] <... futex resumed>) = ? [pid 6131] <... exit_group resumed>) = ? [pid 6134] <... mount resumed>) = 0 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6138] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6137] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6133] +++ exited with 0 +++ [pid 6131] +++ exited with 0 +++ [pid 6140] <... mmap resumed>) = 0x7fe7bae00000 [pid 6138] <... openat resumed>) = 4 [pid 6137] <... openat resumed>) = 4 [pid 6134] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6134] chdir("./file0" [pid 6138] ioctl(4, LOOP_SET_FD, 3 [pid 6137] ioctl(4, LOOP_SET_FD, 3 [pid 6134] <... chdir resumed>) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6134] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6134] <... futex resumed>) = 1 [pid 6132] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6134] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6132] exit_group(0 [pid 5063] newfstatat(3, "", [pid 6134] <... futex resumed>) = ? [pid 6132] <... exit_group resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6134] +++ exited with 0 +++ [pid 6132] +++ exited with 0 +++ [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6132, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6137] <... ioctl resumed>) = 0 [pid 5063] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./105/binderfs", [pid 5059] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5063] unlink("./105/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... unlink resumed>) = 0 [pid 5059] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./107/binderfs" [pid 6137] close(3 [pid 5059] <... unlink resumed>) = 0 [pid 6137] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] <... ioctl resumed>) = 0 [pid 6137] close(4 [pid 5059] <... umount2 resumed>) = 0 [pid 6138] close(3 [pid 6137] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./105/file0", [pid 5059] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] <... close resumed>) = 0 [pid 5063] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./107/file0", [pid 6138] mkdir("./file0", 0777) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6140] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6137] mkdir("./file0", 0777 [pid 5063] newfstatat(4, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6137] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5059] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... openat resumed>) = 4 [ 121.020420][ T6137] loop3: detected capacity change from 0 to 4096 [ 121.029236][ T6138] loop2: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, [pid 5059] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./105/file0" [pid 5059] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5063] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] rmdir("./107/file0") = 0 [pid 5063] close(3 [pid 5059] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./105" [pid 5059] close(3) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] rmdir("./107") = 0 [pid 5059] mkdir("./108", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] mkdir("./106", 0777 [pid 5059] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [ 121.064376][ T6138] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 121.064387][ T6137] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6140] <... write resumed>) = 2097152 [pid 6138] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6140] munmap(0x7fe7bae00000, 138412032 [pid 6138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6137] <... mount resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6138] <... openat resumed>) = 3 [pid 6138] chdir("./file0" [pid 6137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6140] <... munmap resumed>) = 0 [pid 6138] <... chdir resumed>) = 0 [pid 6137] <... openat resumed>) = 3 [pid 6140] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6138] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6137] chdir("./file0" [pid 6140] <... openat resumed>) = 4 [pid 6138] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6137] <... chdir resumed>) = 0 [pid 6138] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 6138] <... futex resumed>) = 1 [pid 6137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6136] <... futex resumed>) = 0 [pid 6138] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] exit_group(0 [pid 6138] <... futex resumed>) = ? [pid 6136] <... exit_group resumed>) = ? [pid 6137] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6137] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] exit_group(0 [pid 6137] <... futex resumed>) = ? [pid 6135] <... exit_group resumed>) = ? [pid 6138] +++ exited with 0 +++ [pid 6137] +++ exited with 0 +++ [pid 6136] +++ exited with 0 +++ [pid 6135] +++ exited with 0 +++ [pid 6140] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6136, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6140] close(3) = 0 [pid 6140] close(4 [pid 5062] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6140] <... close resumed>) = 0 [pid 6140] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6140] <... mkdir resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5061] <... openat resumed>) = 3 [pid 6140] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(3, "", [pid 5062] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(3, [pid 5062] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(AT_FDCWD, "./105/binderfs", [pid 5059] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./106/binderfs") = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./105/binderfs") = 0 [pid 5062] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6141 attached [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6141] set_robust_list(0x55558e6e36a0, 24 [pid 5061] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./106/file0", [pid 6141] <... set_robust_list resumed>) = 0 [pid 5063] close(3 [pid 5062] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] newfstatat(AT_FDCWD, "./105/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] chdir("./108" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6141] <... chdir resumed>) = 0 [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6142 [pid 5062] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 6141] <... prctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(4, "", [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6141 [ 121.145709][ T6140] loop1: detected capacity change from 0 to 4096 [ 121.174427][ T6140] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6141] setpgid(0, 0 [pid 5062] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6141] <... setpgid resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] getdents64(4, [pid 5062] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6142 attached [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6141] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] close(4 [pid 6141] write(3, "1000", 4 [pid 5062] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 6142] set_robust_list(0x55558e6e36a0, 24 [pid 6141] <... write resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./106/file0" [pid 6142] <... set_robust_list resumed>) = 0 [pid 6141] close(3 [pid 5062] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 6142] chdir("./106" [pid 6141] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 6142] <... chdir resumed>) = 0 [pid 6141] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./105/file0" [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6141] <... symlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6142] <... prctl resumed>) = 0 [pid 6141] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6142] setpgid(0, 0 [pid 6141] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 6142] <... setpgid resumed>) = 0 [pid 6141] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] close(3 [pid 5061] <... close resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6141] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] rmdir("./106" [pid 6141] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] rmdir("./105" [pid 5061] <... rmdir resumed>) = 0 [pid 6142] <... openat resumed>) = 3 [pid 6141] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] mkdir("./107", 0777 [pid 6142] write(3, "1000", 4 [pid 6141] <... mmap resumed>) = 0x7fe7c3226000 [pid 6142] <... write resumed>) = 4 [pid 6141] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] mkdir("./106", 0777 [pid 6142] close(3 [pid 6141] <... mprotect resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 6142] <... close resumed>) = 0 [pid 6141] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6141] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6142] symlink("/dev/binderfs", "./binderfs" [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6143 attached [pid 6142] <... symlink resumed>) = 0 [pid 6141] <... clone3 resumed> => {parent_tid=[6143]}, 88) = 6143 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 6143] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6142] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] rt_sigprocmask(SIG_SETMASK, [], [pid 6143] <... rseq resumed>) = 0 [pid 6142] <... futex resumed>) = 0 [pid 6141] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6143] set_robust_list(0x7fe7c32469a0, 24 [pid 6142] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6141] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... set_robust_list resumed>) = 0 [pid 6142] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6141] <... futex resumed>) = 0 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], [pid 6142] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6141] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6142] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] memfd_create("syzkaller", 0 [pid 6142] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6143] <... memfd_create resumed>) = 3 [pid 6142] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6144 attached ) = 0x7fe7bae00000 [pid 6142] <... clone3 resumed> => {parent_tid=[6144]}, 88) = 6144 [pid 6144] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6142] rt_sigprocmask(SIG_SETMASK, [], [pid 6144] <... rseq resumed>) = 0 [pid 6142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6144] set_robust_list(0x7fe7c32469a0, 24 [pid 6142] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... set_robust_list resumed>) = 0 [pid 6142] <... futex resumed>) = 0 [pid 6144] rt_sigprocmask(SIG_SETMASK, [], [pid 6142] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6144] memfd_create("syzkaller", 0 [pid 6140] <... mount resumed>) = 0 [pid 6140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6144] <... memfd_create resumed>) = 3 [pid 6140] <... openat resumed>) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6140] chdir("./file0" [pid 6143] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6140] <... chdir resumed>) = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6144] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6140] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6140] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] <... futex resumed>) = 0 [pid 6139] exit_group(0) = ? [pid 6140] <... futex resumed>) = ? [pid 6140] +++ exited with 0 +++ [pid 6139] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./105/binderfs") = 0 [pid 5060] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6144] <... write resumed>) = 2097152 [pid 5062] close(3 [pid 5061] close(3 [pid 5060] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6144] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6144] <... munmap resumed>) = 0 [pid 6143] <... write resumed>) = 2097152 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6145 attached [pid 5060] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6143] munmap(0x7fe7bae00000, 138412032 [pid 6145] set_robust_list(0x55558e6e36a0, 24 [pid 5060] <... openat resumed>) = 4 [pid 6145] <... set_robust_list resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6145] chdir("./107" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6146 attached [pid 6145] <... chdir resumed>) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6143] <... munmap resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6145 [pid 5060] getdents64(4, [pid 6145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6144] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6146] set_robust_list(0x55558e6e36a0, 24 [pid 6145] setpgid(0, 0 [pid 6144] ioctl(4, LOOP_SET_FD, 3 [pid 5060] getdents64(4, [pid 6146] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6146 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6146] chdir("./106") = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6143] <... openat resumed>) = 4 [pid 6146] <... prctl resumed>) = 0 [pid 6146] setpgid(0, 0 [pid 6143] ioctl(4, LOOP_SET_FD, 3 [pid 6146] <... setpgid resumed>) = 0 [pid 6145] <... setpgid resumed>) = 0 [pid 6144] <... ioctl resumed>) = 0 [pid 5060] close(4 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6144] close(3 [pid 6143] <... ioctl resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6146] <... openat resumed>) = 3 [pid 6145] <... openat resumed>) = 3 [pid 6144] <... close resumed>) = 0 [pid 6143] close(3 [pid 5060] rmdir("./105/file0" [pid 6146] write(3, "1000", 4 [pid 6145] write(3, "1000", 4 [pid 6143] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6145] <... write resumed>) = 4 [pid 6144] close(4 [pid 5060] getdents64(3, [pid 6146] <... write resumed>) = 4 [pid 6145] close(3 [pid 6144] <... close resumed>) = 0 [pid 6143] close(4 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6146] close(3 [pid 6145] <... close resumed>) = 0 [pid 5060] close(3 [pid 6146] <... close resumed>) = 0 [pid 6143] <... close resumed>) = 0 [pid 6146] symlink("/dev/binderfs", "./binderfs" [pid 6145] symlink("/dev/binderfs", "./binderfs" [pid 6144] mkdir("./file0", 0777 [pid 6143] mkdir("./file0", 0777 [pid 5060] <... close resumed>) = 0 [pid 6146] <... symlink resumed>) = 0 [pid 6145] <... symlink resumed>) = 0 [pid 6144] <... mkdir resumed>) = 0 [pid 6143] <... mkdir resumed>) = 0 [pid 5060] rmdir("./105" [pid 6145] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6146] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6146] <... futex resumed>) = 0 [pid 6143] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6146] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6145] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] mkdir("./106", 0777 [pid 6146] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6145] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6146] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5060] <... mkdir resumed>) = 0 [pid 6146] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6147]}, 88) = 6147 [pid 6146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6146] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6147 attached [pid 6147] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6147] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6147] memfd_create("syzkaller", 0 [pid 6145] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6147] <... memfd_create resumed>) = 3 [pid 6145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6147] <... mmap resumed>) = 0x7fe7bae00000 [pid 6145] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6145] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6148 attached => {parent_tid=[6148]}, 88) = 6148 [pid 6148] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [ 121.396189][ T6144] loop4: detected capacity change from 0 to 4096 [ 121.401748][ T6143] loop0: detected capacity change from 0 to 4096 [ 121.427045][ T6143] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 121.427546][ T6144] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6145] rt_sigprocmask(SIG_SETMASK, [], [pid 6148] <... rseq resumed>) = 0 [pid 6145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6148] set_robust_list(0x7fe7c32469a0, 24 [pid 6145] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... set_robust_list resumed>) = 0 [pid 6145] <... futex resumed>) = 0 [pid 6148] rt_sigprocmask(SIG_SETMASK, [], [pid 6145] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6148] memfd_create("syzkaller", 0) = 3 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6143] <... mount resumed>) = 0 [pid 6143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6143] chdir("./file0") = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6143] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6141] exit_group(0) = ? [pid 6143] +++ exited with 0 +++ [pid 6141] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./108/binderfs") = 0 [pid 5059] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6148] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6147] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... umount2 resumed>) = 0 [pid 6144] <... mount resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 6144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] close(3 [pid 6144] <... openat resumed>) = 3 [pid 6144] chdir("./file0" [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6149 attached , child_tidptr=0x55558e6e3690) = 6149 [pid 6149] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6144] <... chdir resumed>) = 0 [pid 6149] chdir("./106" [pid 6144] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6149] <... chdir resumed>) = 0 [pid 6144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6144] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./108/file0" [pid 6144] <... futex resumed>) = 1 [pid 6149] <... prctl resumed>) = 0 [pid 6142] <... futex resumed>) = 0 [pid 6144] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] setpgid(0, 0 [pid 6142] exit_group(0 [pid 5059] <... rmdir resumed>) = 0 [pid 6149] <... setpgid resumed>) = 0 [pid 6144] <... futex resumed>) = ? [pid 6142] <... exit_group resumed>) = ? [pid 6144] +++ exited with 0 +++ [pid 5059] getdents64(3, [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 6149] <... openat resumed>) = 3 [pid 5059] rmdir("./108" [pid 6149] write(3, "1000", 4 [pid 5059] <... rmdir resumed>) = 0 [pid 6142] +++ exited with 0 +++ [pid 6149] <... write resumed>) = 4 [pid 5059] mkdir("./109", 0777 [pid 6149] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6142, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6147] <... write resumed>) = 2097152 [pid 6149] <... close resumed>) = 0 [pid 6148] <... write resumed>) = 2097152 [pid 6147] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... mkdir resumed>) = 0 [pid 5063] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] <... openat resumed>) = 3 [pid 6149] symlink("/dev/binderfs", "./binderfs" [pid 6148] munmap(0x7fe7bae00000, 138412032 [pid 5063] newfstatat(3, "", [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6149] <... symlink resumed>) = 0 [pid 6147] <... munmap resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6147] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5063] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6149] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6149] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6149] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6149] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6148] <... munmap resumed>) = 0 [pid 6149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6150]}, 88) = 6150 [pid 6149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6149] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6150 attached [pid 6149] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] newfstatat(AT_FDCWD, "./106/binderfs", [pid 6150] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6148] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6147] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6150] <... rseq resumed>) = 0 [pid 6148] <... openat resumed>) = 4 [pid 6147] close(3 [pid 5063] unlink("./106/binderfs" [pid 6150] set_robust_list(0x7fe7c32469a0, 24 [pid 6148] ioctl(4, LOOP_SET_FD, 3 [pid 6147] <... close resumed>) = 0 [pid 6150] <... set_robust_list resumed>) = 0 [pid 6147] close(4 [pid 5063] <... unlink resumed>) = 0 [pid 6150] rt_sigprocmask(SIG_SETMASK, [], [pid 6147] <... close resumed>) = 0 [pid 5063] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6150] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6150] memfd_create("syzkaller", 0 [pid 6147] mkdir("./file0", 0777 [pid 6150] <... memfd_create resumed>) = 3 [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6147] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6147] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] newfstatat(4, "", [pid 6148] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6148] close(3 [pid 5063] getdents64(4, [pid 6148] <... close resumed>) = 0 [pid 6148] close(4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6148] <... close resumed>) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./106/file0") = 0 [pid 6148] mkdir("./file0", 0777) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./106") = 0 [pid 5063] mkdir("./107", 0777) = 0 [pid 6148] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 121.616354][ T6147] loop3: detected capacity change from 0 to 4096 [ 121.626529][ T6148] loop2: detected capacity change from 0 to 4096 [ 121.646229][ T6147] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6150] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6151 ./strace-static-x86_64: Process 6151 attached [pid 6151] set_robust_list(0x55558e6e36a0, 24) = 0 [ 121.678983][ T6148] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6151] chdir("./109") = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6151] setpgid(0, 0) = 0 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6151] write(3, "1000", 4) = 4 [pid 6151] close(3) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6151] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, ./strace-static-x86_64: Process 6152 attached NULL, 8) = 0 [pid 6152] set_robust_list(0x55558e6e36a0, 24 [pid 6151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6152 [pid 6152] <... set_robust_list resumed>) = 0 [pid 6151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] chdir("./107" [pid 6151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6152] <... chdir resumed>) = 0 [pid 6151] <... mmap resumed>) = 0x7fe7c3226000 [pid 6150] <... write resumed>) = 2097152 [pid 6151] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6151] <... mprotect resumed>) = 0 [pid 6152] <... prctl resumed>) = 0 [pid 6151] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6150] munmap(0x7fe7bae00000, 138412032 [pid 6152] setpgid(0, 0 [pid 6150] <... munmap resumed>) = 0 [pid 6152] <... setpgid resumed>) = 0 [pid 6151] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6152] <... openat resumed>) = 3 [pid 6152] write(3, "1000", 4 [pid 6151] <... clone3 resumed> => {parent_tid=[6153]}, 88) = 6153 ./strace-static-x86_64: Process 6153 attached [pid 6152] <... write resumed>) = 4 [pid 6151] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] close(3 [pid 6151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6153] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6152] <... close resumed>) = 0 [pid 6151] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... rseq resumed>) = 0 [pid 6152] symlink("/dev/binderfs", "./binderfs" [pid 6151] <... futex resumed>) = 0 [pid 6153] set_robust_list(0x7fe7c32469a0, 24 [pid 6152] <... symlink resumed>) = 0 [pid 6151] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6153] <... set_robust_list resumed>) = 0 [pid 6152] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] <... futex resumed>) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6150] <... openat resumed>) = 4 [pid 6153] memfd_create("syzkaller", 0 [pid 6152] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6152] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6150] ioctl(4, LOOP_SET_FD, 3 [pid 6152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6153] <... memfd_create resumed>) = 3 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6152] <... mmap resumed>) = 0x7fe7c3226000 [pid 6153] <... mmap resumed>) = 0x7fe7bae00000 [pid 6152] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6150] <... ioctl resumed>) = 0 [pid 6150] close(3) = 0 [pid 6150] close(4 [pid 6152] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6150] <... close resumed>) = 0 [pid 6150] mkdir("./file0", 0777 [pid 6152] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6150] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6154 attached [pid 6152] <... clone3 resumed> => {parent_tid=[6154]}, 88) = 6154 [pid 6154] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6152] rt_sigprocmask(SIG_SETMASK, [], [pid 6154] <... rseq resumed>) = 0 [pid 6152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6154] set_robust_list(0x7fe7c32469a0, 24 [pid 6152] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6152] <... futex resumed>) = 0 [pid 6150] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6154] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6154] memfd_create("syzkaller", 0) = 3 [pid 6147] <... mount resumed>) = 0 [pid 6148] <... mount resumed>) = 0 [pid 6147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6153] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6148] <... openat resumed>) = 3 [pid 6147] chdir("./file0" [pid 6154] <... mmap resumed>) = 0x7fe7bae00000 [pid 6148] chdir("./file0" [pid 6147] <... chdir resumed>) = 0 [pid 6148] <... chdir resumed>) = 0 [ 121.794063][ T6150] loop1: detected capacity change from 0 to 4096 [ 121.826561][ T6150] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6147] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6150] <... mount resumed>) = 0 [pid 6148] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6147] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6146] <... futex resumed>) = 0 [pid 6148] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... openat resumed>) = 3 [pid 6147] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] exit_group(0 [pid 6150] chdir("./file0" [pid 6146] <... exit_group resumed>) = ? [pid 6150] <... chdir resumed>) = 0 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = ? [pid 6145] <... futex resumed>) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6147] +++ exited with 0 +++ [pid 6146] +++ exited with 0 +++ [pid 6145] exit_group(0 [pid 6150] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... exit_group resumed>) = ? [pid 6150] <... futex resumed>) = 1 [pid 6149] <... futex resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6146, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6150] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] exit_group(0 [pid 6148] +++ exited with 0 +++ [pid 6145] +++ exited with 0 +++ [pid 6154] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6150] <... futex resumed>) = ? [pid 6149] <... exit_group resumed>) = ? [pid 6150] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6145, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5062] newfstatat(3, "", [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5060] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./106/binderfs", [pid 5061] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./107/binderfs", [pid 5060] newfstatat(3, "", [pid 6153] <... write resumed>) = 2097152 [pid 5062] unlink("./106/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] unlink("./107/binderfs" [pid 5060] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./106/binderfs") = 0 [pid 5060] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6153] munmap(0x7fe7bae00000, 138412032 [pid 6154] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6154] munmap(0x7fe7bae00000, 138412032 [pid 5062] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6153] <... munmap resumed>) = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6153] ioctl(4, LOOP_SET_FD, 3 [pid 6154] <... munmap resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./107/file0", [pid 5062] newfstatat(AT_FDCWD, "./106/file0", [pid 5060] newfstatat(AT_FDCWD, "./106/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6154] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6154] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6153] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6153] close(3) = 0 [pid 6153] close(4) = 0 [pid 6153] mkdir("./file0", 0777) = 0 [pid 6153] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6154] <... ioctl resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] newfstatat(4, "", [pid 5060] <... openat resumed>) = 4 [pid 6154] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 6154] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6154] close(4 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 6154] <... close resumed>) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5060] getdents64(4, [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5060] close(4 [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] rmdir("./106/file0" [pid 5060] rmdir("./106/file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5062] close(3 [pid 5060] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] rmdir("./106" [pid 5062] rmdir("./106" [pid 5060] <... rmdir resumed>) = 0 [pid 6154] mkdir("./file0", 0777 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] mkdir("./107", 0777) = 0 [pid 5062] mkdir("./107", 0777 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] close(4 [pid 6154] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6154] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] rmdir("./107/file0") = 0 [ 121.948792][ T6153] loop0: detected capacity change from 0 to 4096 [ 121.953846][ T6154] loop4: detected capacity change from 0 to 4096 [ 121.970404][ T6153] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./107") = 0 [pid 5061] mkdir("./108", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6153] <... mount resumed>) = 0 [ 122.001003][ T6154] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 6153] chdir("./file0") = 0 [pid 5060] <... close resumed>) = 0 [pid 6154] <... mount resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6155 attached [pid 6154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6153] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 6155] set_robust_list(0x55558e6e36a0, 24 [pid 6154] <... openat resumed>) = 3 [pid 6155] <... set_robust_list resumed>) = 0 [pid 6154] chdir("./file0" [pid 6153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6155 [pid 6155] chdir("./107" [pid 6154] <... chdir resumed>) = 0 [pid 6153] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... chdir resumed>) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6153] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6154] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6153] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6151] exit_group(0 [pid 6155] <... prctl resumed>) = 0 [pid 6154] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... futex resumed>) = ? [pid 6151] <... exit_group resumed>) = ? [pid 6155] setpgid(0, 0 [pid 6154] <... futex resumed>) = 1 [pid 6153] +++ exited with 0 +++ [pid 6152] <... futex resumed>) = 0 [pid 6151] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 6155] <... setpgid resumed>) = 0 [pid 5062] close(3 [pid 6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6152] exit_group(0 [pid 5062] <... close resumed>) = 0 [pid 6152] <... exit_group resumed>) = ? [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6155] <... openat resumed>) = 3 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6155] write(3, "1000", 4 [pid 5059] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6156 attached [pid 6155] <... write resumed>) = 4 [pid 6156] set_robust_list(0x55558e6e36a0, 24 [pid 6155] close(3 [pid 5061] close(3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6156 [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6156] <... set_robust_list resumed>) = 0 [pid 6155] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6155] symlink("/dev/binderfs", "./binderfs" [pid 6156] chdir("./107" [pid 6155] <... symlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] newfstatat(3, "", [pid 6156] <... chdir resumed>) = 0 [pid 6155] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] +++ exited with 0 +++ [pid 6152] +++ exited with 0 +++ [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6156] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6157 attached [pid 6155] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6157 [pid 6157] set_robust_list(0x55558e6e36a0, 24 [pid 6156] <... prctl resumed>) = 0 [pid 6155] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6152, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] getdents64(3, [pid 6157] <... set_robust_list resumed>) = 0 [pid 6156] setpgid(0, 0 [pid 6155] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 6157] chdir("./108" [pid 6156] <... setpgid resumed>) = 0 [pid 6155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6157] <... chdir resumed>) = 0 [pid 6156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6155] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6156] <... openat resumed>) = 3 [pid 6155] <... mprotect resumed>) = 0 [pid 5063] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6157] <... prctl resumed>) = 0 [pid 6156] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] setpgid(0, 0 [pid 6156] <... write resumed>) = 4 [pid 6155] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6157] <... setpgid resumed>) = 0 [pid 6156] close(3 [pid 5063] <... openat resumed>) = 3 [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6156] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 6157] <... openat resumed>) = 3 [pid 6156] symlink("/dev/binderfs", "./binderfs" [pid 6155] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6156] <... symlink resumed>) = 0 [pid 6155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6158 attached [pid 6157] write(3, "1000", 4 [pid 6156] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5059] newfstatat(AT_FDCWD, "./109/binderfs", [pid 6158] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6157] <... write resumed>) = 4 [pid 6156] <... futex resumed>) = 0 [pid 6155] <... clone3 resumed> => {parent_tid=[6158]}, 88) = 6158 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6158] <... rseq resumed>) = 0 [pid 6157] close(3 [pid 6156] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6155] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] unlink("./109/binderfs" [pid 6158] set_robust_list(0x7fe7c32469a0, 24 [pid 6157] <... close resumed>) = 0 [pid 6156] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6158] <... set_robust_list resumed>) = 0 [pid 6156] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6155] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(AT_FDCWD, "./107/binderfs", [pid 5059] <... unlink resumed>) = 0 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], [pid 6157] symlink("/dev/binderfs", "./binderfs" [pid 6156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6155] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6155] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] unlink("./107/binderfs" [pid 6158] memfd_create("syzkaller", 0 [pid 6157] <... symlink resumed>) = 0 [pid 6156] <... mmap resumed>) = 0x7fe7c3226000 [pid 6156] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6158] <... memfd_create resumed>) = 3 [pid 6156] <... mprotect resumed>) = 0 [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6156] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6158] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6157] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6157] <... futex resumed>) = 0 [pid 5059] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./109/file0", [pid 6157] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6157] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6157] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6157] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6159 attached [pid 6157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6156] <... clone3 resumed> => {parent_tid=[6159]}, 88) = 6159 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... mmap resumed>) = 0x7fe7c3226000 [pid 6157] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6156] rt_sigprocmask(SIG_SETMASK, [], [pid 6157] <... mprotect resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6159] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6157] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6159] <... rseq resumed>) = 0 [pid 6156] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6159] set_robust_list(0x7fe7c32469a0, 24 [pid 6156] <... futex resumed>) = 0 [pid 6159] <... set_robust_list resumed>) = 0 [pid 6156] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6159] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] getdents64(4, [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6157] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6157] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6160 attached [pid 6159] memfd_create("syzkaller", 0 [pid 5063] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 6160] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6157] <... clone3 resumed> => {parent_tid=[6160]}, 88) = 6160 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6160] <... rseq resumed>) = 0 [pid 6159] <... memfd_create resumed>) = 3 [pid 6157] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] newfstatat(AT_FDCWD, "./107/file0", [pid 5059] close(4 [pid 6160] set_robust_list(0x7fe7c32469a0, 24 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6157] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 6160] <... set_robust_list resumed>) = 0 [pid 6159] <... mmap resumed>) = 0x7fe7bae00000 [pid 6157] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./109/file0" [pid 6160] rt_sigprocmask(SIG_SETMASK, [], [pid 6157] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6158] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6160] memfd_create("syzkaller", 0 [pid 6158] munmap(0x7fe7bae00000, 138412032 [pid 5063] newfstatat(4, "", [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 6157] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(3, [pid 6160] <... memfd_create resumed>) = 3 [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6160] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] close(4 [pid 5059] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./107/file0" [pid 5059] rmdir("./109" [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] mkdir("./110", 0777 [pid 5063] close(3 [pid 5059] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./107") = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6158] <... munmap resumed>) = 0 [pid 5063] mkdir("./108", 0777 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6159] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6158] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6160] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 6158] <... openat resumed>) = 4 [pid 6158] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6158] <... ioctl resumed>) = 0 [pid 6158] close(3) = 0 [pid 6158] close(4) = 0 [pid 6158] mkdir("./file0", 0777) = 0 [pid 6158] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6159] <... write resumed>) = 2097152 [pid 6159] munmap(0x7fe7bae00000, 138412032 [pid 6160] <... write resumed>) = 2097152 [pid 6160] munmap(0x7fe7bae00000, 138412032 [pid 6159] <... munmap resumed>) = 0 [ 122.228069][ T6158] loop1: detected capacity change from 0 to 4096 [ 122.260123][ T6158] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6159] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6159] ioctl(4, LOOP_SET_FD, 3 [pid 6160] <... munmap resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6160] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6159] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 6159] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6160] <... openat resumed>) = 4 [pid 6159] <... close resumed>) = 0 [pid 6159] close(4) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6161 [pid 6159] mkdir("./file0", 0777 [pid 5063] close(3 [pid 6159] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6159] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6160] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6162 attached [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6162 [pid 6162] set_robust_list(0x55558e6e36a0, 24./strace-static-x86_64: Process 6161 attached ) = 0 [pid 6162] chdir("./108" [pid 6161] set_robust_list(0x55558e6e36a0, 24 [pid 6162] <... chdir resumed>) = 0 [pid 6161] <... set_robust_list resumed>) = 0 [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6161] chdir("./110" [pid 6162] setpgid(0, 0 [pid 6161] <... chdir resumed>) = 0 [pid 6162] <... setpgid resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6162] <... openat resumed>) = 3 [pid 6162] write(3, "1000", 4 [pid 6161] setpgid(0, 0 [pid 6162] <... write resumed>) = 4 [pid 6161] <... setpgid resumed>) = 0 [pid 6162] close(3 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6160] <... ioctl resumed>) = 0 [pid 6162] <... close resumed>) = 0 [pid 6162] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6161] <... openat resumed>) = 3 [pid 6162] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] write(3, "1000", 4 [pid 6160] close(3 [pid 6162] <... futex resumed>) = 0 [pid 6161] <... write resumed>) = 4 [pid 6160] <... close resumed>) = 0 [pid 6162] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6161] close(3 [pid 6160] close(4 [pid 6162] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6161] <... close resumed>) = 0 [pid 6160] <... close resumed>) = 0 [ 122.292676][ T6159] loop3: detected capacity change from 0 to 4096 [ 122.325273][ T6159] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 122.336546][ T6160] loop2: detected capacity change from 0 to 4096 [pid 6162] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6161] symlink("/dev/binderfs", "./binderfs" [pid 6160] mkdir("./file0", 0777 [pid 6162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6160] <... mkdir resumed>) = 0 [pid 6162] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6161] <... symlink resumed>) = 0 [pid 6160] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6162] <... mprotect resumed>) = 0 [pid 6162] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6161] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6163 attached [pid 6163] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6163] set_robust_list(0x7fe7c32469a0, 24 [pid 6162] <... clone3 resumed> => {parent_tid=[6163]}, 88) = 6163 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6162] rt_sigprocmask(SIG_SETMASK, [], [pid 6163] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6161] <... futex resumed>) = 0 [pid 6158] <... mount resumed>) = 0 [pid 6163] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6162] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... mount resumed>) = 0 [pid 6161] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6162] <... futex resumed>) = 0 [pid 6161] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6163] memfd_create("syzkaller", 0 [pid 6162] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6161] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6159] <... openat resumed>) = 3 [pid 6158] <... openat resumed>) = 3 [pid 6161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6158] chdir("./file0" [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6159] chdir("./file0" [pid 6158] <... chdir resumed>) = 0 [pid 6161] <... mmap resumed>) = 0x7fe7c3226000 [pid 6159] <... chdir resumed>) = 0 [pid 6158] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6163] <... memfd_create resumed>) = 3 [pid 6161] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6159] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6158] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6161] <... mprotect resumed>) = 0 [pid 6159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6158] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... mmap resumed>) = 0x7fe7bae00000 [pid 6159] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] <... futex resumed>) = 1 [pid 6161] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6159] <... futex resumed>) = 1 [pid 6158] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6155] <... futex resumed>) = 0 [pid 6161] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6159] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6156] <... futex resumed>) = 0 [pid 6155] exit_group(0 [pid 6161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6158] <... futex resumed>) = ? [pid 6155] <... exit_group resumed>) = ? [pid 6158] +++ exited with 0 +++ [pid 6156] exit_group(0) = ? ./strace-static-x86_64: Process 6164 attached [pid 6161] <... clone3 resumed> => {parent_tid=[6164]}, 88) = 6164 [pid 6159] <... futex resumed>) = ? [pid 6155] +++ exited with 0 +++ [pid 6164] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6161] rt_sigprocmask(SIG_SETMASK, [], [pid 6159] +++ exited with 0 +++ [pid 6156] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6155, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6164] <... rseq resumed>) = 0 [pid 6161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6164] set_robust_list(0x7fe7c32469a0, 24 [pid 6161] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6156, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6164] <... set_robust_list resumed>) = 0 [pid 6161] <... futex resumed>) = 0 [pid 5062] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] rt_sigprocmask(SIG_SETMASK, [], [pid 6161] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 122.377166][ T6160] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5060] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] unlink("./107/binderfs") = 0 [pid 5060] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./107/binderfs", [pid 6164] <... memfd_create resumed>) = 3 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6164] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] unlink("./107/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./107/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./107" [pid 6160] <... mount resumed>) = 0 [pid 6160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6160] <... openat resumed>) = 3 [pid 6160] chdir("./file0" [pid 5062] mkdir("./108", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] <... chdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./107/file0", [pid 6160] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6160] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6160] <... futex resumed>) = 1 [pid 6157] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6157] exit_group(0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6160] <... futex resumed>) = ? [pid 6157] <... exit_group resumed>) = ? [pid 5062] <... openat resumed>) = 3 [pid 6160] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./107/file0" [pid 6157] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... rmdir resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5061] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 6163] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] rmdir("./107" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] mkdir("./108", 0777 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... mkdir resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6163] <... write resumed>) = 2097152 [pid 5061] unlink("./108/binderfs" [pid 5060] <... ioctl resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6163] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6164] <... write resumed>) = 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3) = 0 [pid 6163] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6163] <... openat resumed>) = 4 [pid 6163] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6165 attached [pid 6164] munmap(0x7fe7bae00000, 138412032 [pid 6163] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6165 [pid 6165] set_robust_list(0x55558e6e36a0, 24 [pid 5061] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6164] <... munmap resumed>) = 0 [pid 6165] <... set_robust_list resumed>) = 0 [pid 6163] close(3 [pid 5062] <... close resumed>) = 0 [pid 6163] <... close resumed>) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6165] chdir("./108" [pid 6163] close(4 [pid 5061] close(4) = 0 [pid 5061] rmdir("./108/file0") = 0 [pid 5061] getdents64(3, [pid 6165] <... chdir resumed>) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6163] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6163] mkdir("./file0", 0777 [pid 6164] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6163] <... mkdir resumed>) = 0 [pid 6164] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3./strace-static-x86_64: Process 6166 attached [pid 6165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6163] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6166 [pid 6165] <... prctl resumed>) = 0 [pid 6166] set_robust_list(0x55558e6e36a0, 24 [pid 6165] setpgid(0, 0 [pid 6166] <... set_robust_list resumed>) = 0 [pid 6165] <... setpgid resumed>) = 0 [pid 6166] chdir("./108" [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./108") = 0 [pid 5061] mkdir("./109", 0777 [pid 6166] <... chdir resumed>) = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 122.571244][ T6163] loop4: detected capacity change from 0 to 4096 [ 122.602531][ T6164] loop0: detected capacity change from 0 to 4096 [pid 6166] setpgid(0, 0) = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... mkdir resumed>) = 0 [pid 6165] <... openat resumed>) = 3 [pid 6166] <... openat resumed>) = 3 [pid 6165] write(3, "1000", 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6166] write(3, "1000", 4 [pid 6165] <... write resumed>) = 4 [pid 5061] <... openat resumed>) = 3 [pid 6165] close(3) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6165] symlink("/dev/binderfs", "./binderfs" [pid 6166] <... write resumed>) = 4 [pid 6166] close(3) = 0 [pid 6165] <... symlink resumed>) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6166] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] <... ioctl resumed>) = 0 [pid 6166] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6165] <... futex resumed>) = 0 [pid 6166] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6164] close(3 [pid 6165] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6165] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6165] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6164] <... close resumed>) = 0 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6164] close(4 [pid 6166] <... mmap resumed>) = 0x7fe7c3226000 [pid 6165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6164] <... close resumed>) = 0 [pid 6166] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6165] <... mmap resumed>) = 0x7fe7c3226000 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6165] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6165] rt_sigprocmask(SIG_BLOCK, ~[], [ 122.612325][ T6163] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6164] mkdir("./file0", 0777 [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6165] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6164] <... mkdir resumed>) = 0 [pid 6165] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6166] <... clone3 resumed> => {parent_tid=[6167]}, 88) = 6167 [pid 6164] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6166] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6167 attached NULL, 8) = 0 [pid 6165] <... clone3 resumed> => {parent_tid=[6168]}, 88) = 6168 [pid 6166] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], [pid 6166] <... futex resumed>) = 0 [pid 6165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6165] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6167] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6167] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6167] memfd_create("syzkaller", 0) = 3 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6168 attached [pid 6166] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6168] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6168] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6168] memfd_create("syzkaller", 0) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6163] <... mount resumed>) = 0 [pid 6168] <... mmap resumed>) = 0x7fe7bae00000 [pid 6163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6163] chdir("./file0") = 0 [pid 6163] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6163] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6163] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6162] <... futex resumed>) = 0 [ 122.656058][ T6164] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] close(3 [pid 6162] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 6162] <... exit_group resumed>) = ? [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6163] <... futex resumed>) = ? ./strace-static-x86_64: Process 6169 attached [pid 6163] +++ exited with 0 +++ [pid 6162] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6162, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6169 [pid 6169] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6169] chdir("./109" [pid 6168] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6169] <... chdir resumed>) = 0 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] <... prctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6169] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6164] <... mount resumed>) = 0 [pid 5063] getdents64(3, [pid 6169] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6169] write(3, "1000", 4 [pid 6168] <... write resumed>) = 2097152 [pid 5063] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6169] <... write resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./108/binderfs", [pid 6164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6169] close(3 [pid 6164] <... openat resumed>) = 3 [pid 6164] chdir("./file0") = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6169] <... close resumed>) = 0 [pid 6164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6169] symlink("/dev/binderfs", "./binderfs" [pid 6168] munmap(0x7fe7bae00000, 138412032 [pid 6169] <... symlink resumed>) = 0 [pid 6164] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6164] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] exit_group(0 [pid 6164] <... futex resumed>) = ? [pid 6161] <... exit_group resumed>) = ? [pid 6168] <... munmap resumed>) = 0 [pid 6164] +++ exited with 0 +++ [pid 6161] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6169] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] <... futex resumed>) = 0 [pid 5063] unlink("./108/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 6169] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6169] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6167] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./110/binderfs") = 0 [pid 5059] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6168] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 6169] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... mprotect resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./108/file0", [pid 5059] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6169] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(AT_FDCWD, "./110/file0", [pid 6169] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6168] <... openat resumed>) = 4 [pid 5063] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6170 attached [pid 5059] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6169] <... clone3 resumed> => {parent_tid=[6170]}, 88) = 6170 [pid 6168] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6169] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(4, "", [pid 6170] set_robust_list(0x7fe7c32469a0, 24 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6170] <... set_robust_list resumed>) = 0 [pid 5059] getdents64(4, [pid 6170] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] getdents64(4, [pid 6169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6169] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(4) = 0 [pid 6169] <... futex resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6170] memfd_create("syzkaller", 0 [pid 6169] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6168] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5059] rmdir("./110/file0" [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6168] close(3 [pid 5063] getdents64(4, [pid 6170] <... memfd_create resumed>) = 3 [pid 6168] <... close resumed>) = 0 [pid 6167] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6168] close(4 [pid 6167] munmap(0x7fe7bae00000, 138412032 [pid 5063] close(4 [pid 5059] getdents64(3, [pid 6170] <... mmap resumed>) = 0x7fe7bae00000 [pid 6168] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6168] mkdir("./file0", 0777 [pid 5063] rmdir("./108/file0" [pid 5059] rmdir("./110" [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] mkdir("./111", 0777 [pid 6168] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] close(3 [pid 6168] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./108") = 0 [ 122.796087][ T6168] loop1: detected capacity change from 0 to 4096 [pid 5063] mkdir("./109", 0777 [pid 6170] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6167] <... munmap resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6167] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6167] <... openat resumed>) = 4 [pid 6167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6167] close(3) = 0 [pid 6167] close(4) = 0 [pid 6167] mkdir("./file0", 0777) = 0 [ 122.840877][ T6168] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 122.860838][ T6167] loop3: detected capacity change from 0 to 4096 [pid 6167] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6170] <... write resumed>) = 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 6170] munmap(0x7fe7bae00000, 138412032 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6171 attached [pid 6171] set_robust_list(0x55558e6e36a0, 24 [pid 6170] <... munmap resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6171 [pid 6168] <... mount resumed>) = 0 [ 122.898921][ T6167] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6171] <... set_robust_list resumed>) = 0 [pid 6170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6168] chdir("./file0" [pid 6171] chdir("./111" [pid 6170] <... openat resumed>) = 4 [pid 6168] <... chdir resumed>) = 0 [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6168] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6171] <... chdir resumed>) = 0 [pid 6168] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6168] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6168] <... futex resumed>) = 1 [pid 6171] <... prctl resumed>) = 0 [pid 6168] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] <... futex resumed>) = 0 [pid 6171] setpgid(0, 0 [pid 6165] exit_group(0 [pid 6171] <... setpgid resumed>) = 0 [pid 6168] <... futex resumed>) = ? [pid 6165] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6172 attached [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6168] +++ exited with 0 +++ [pid 6165] +++ exited with 0 +++ [pid 6171] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6172 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6165, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6172] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6172] chdir("./109" [pid 6171] write(3, "1000", 4) = 4 [pid 6171] close(3) = 0 [pid 6171] symlink("/dev/binderfs", "./binderfs" [pid 6172] <... chdir resumed>) = 0 [pid 6171] <... symlink resumed>) = 0 [pid 5060] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6171] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] <... prctl resumed>) = 0 [pid 6171] <... futex resumed>) = 0 [pid 6171] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6171] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6172] setpgid(0, 0 [pid 6171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6170] close(3 [pid 6172] <... setpgid resumed>) = 0 [pid 6171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6170] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6171] <... mmap resumed>) = 0x7fe7c3226000 [pid 6170] close(4 [pid 6167] <... mount resumed>) = 0 [pid 6172] <... openat resumed>) = 3 [pid 6171] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6170] <... close resumed>) = 0 [pid 6167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] newfstatat(3, "", [pid 6172] write(3, "1000", 4 [pid 6171] <... mprotect resumed>) = 0 [pid 6170] mkdir("./file0", 0777 [pid 6167] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6172] <... write resumed>) = 4 [pid 6170] <... mkdir resumed>) = 0 [pid 6167] chdir("./file0" [pid 5060] getdents64(3, [pid 6172] close(3 [pid 6171] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6172] <... close resumed>) = 0 [pid 6171] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6170] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6167] <... chdir resumed>) = 0 [pid 5060] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] symlink("/dev/binderfs", "./binderfs" [pid 6171] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6167] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] <... symlink resumed>) = 0 [pid 6167] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(AT_FDCWD, "./108/binderfs", [pid 6172] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6172] <... futex resumed>) = 0 [pid 6167] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [ 122.963215][ T6170] loop2: detected capacity change from 0 to 4096 [pid 5060] unlink("./108/binderfs"./strace-static-x86_64: Process 6173 attached [pid 6172] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6171] <... clone3 resumed> => {parent_tid=[6173]}, 88) = 6173 [pid 6167] <... futex resumed>) = 1 [pid 6166] <... futex resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6172] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6166] exit_group(0 [pid 5060] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6166] <... exit_group resumed>) = ? [pid 6172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6172] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6174 attached [pid 6174] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6172] <... clone3 resumed> => {parent_tid=[6174]}, 88) = 6174 [pid 6174] <... rseq resumed>) = 0 [pid 6172] rt_sigprocmask(SIG_SETMASK, [], [pid 6174] set_robust_list(0x7fe7c32469a0, 24 [pid 6172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6174] <... set_robust_list resumed>) = 0 [pid 6172] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] rt_sigprocmask(SIG_SETMASK, [], [pid 6172] <... futex resumed>) = 0 [pid 6174] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6172] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = 0 [pid 6173] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6171] rt_sigprocmask(SIG_SETMASK, [], [pid 6174] memfd_create("syzkaller", 0 [pid 5060] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6174] <... memfd_create resumed>) = 3 [pid 6171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6173] <... rseq resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] newfstatat(AT_FDCWD, "./108/file0", [pid 6174] <... mmap resumed>) = 0x7fe7bae00000 [pid 6173] set_robust_list(0x7fe7c32469a0, 24 [pid 6171] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] +++ exited with 0 +++ [pid 6166] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6173] <... set_robust_list resumed>) = 0 [pid 6171] <... futex resumed>) = 0 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], [pid 6171] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6173] <... memfd_create resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] getdents64(3, [pid 5060] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... openat resumed>) = 4 [pid 5062] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5062] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./108/binderfs" [pid 6170] <... mount resumed>) = 0 [pid 6170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6170] chdir("./file0") = 0 [ 123.012080][ T6170] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6170] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6170] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6170] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] exit_group(0 [pid 6170] <... futex resumed>) = ? [pid 6169] <... exit_group resumed>) = ? [pid 6173] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./108/file0") = 0 [pid 6170] +++ exited with 0 +++ [pid 6169] +++ exited with 0 +++ [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5060] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./108" [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./109", 0777 [pid 6174] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./108/file0", [pid 5061] newfstatat(3, "", [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5062] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(4, "", [pid 5061] newfstatat(AT_FDCWD, "./109/binderfs", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./109/binderfs" [pid 5062] getdents64(4, [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./108/file0") = 0 [pid 5062] getdents64(3, [pid 5061] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./108" [pid 6173] <... write resumed>) = 2097152 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./109/file0", [pid 6173] munmap(0x7fe7bae00000, 138412032 [pid 5062] mkdir("./109", 0777 [pid 6173] <... munmap resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 6173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./109/file0" [pid 6174] <... write resumed>) = 2097152 [pid 6173] ioctl(4, LOOP_SET_FD, 3 [pid 6174] munmap(0x7fe7bae00000, 138412032 [pid 6173] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 6173] close(3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6173] <... close resumed>) = 0 [pid 6173] close(4 [pid 6174] <... munmap resumed>) = 0 [pid 5061] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 6173] <... close resumed>) = 0 [pid 6173] mkdir("./file0", 0777) = 0 [pid 6173] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6174] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 5060] close(3 [pid 6174] <... openat resumed>) = 4 [pid 5061] rmdir("./109" [pid 5060] <... close resumed>) = 0 [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6175 attached [ 123.146395][ T6173] loop0: detected capacity change from 0 to 4096 [ 123.169869][ T6173] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5062] <... ioctl resumed>) = 0 [pid 6175] set_robust_list(0x55558e6e36a0, 24 [pid 6174] <... ioctl resumed>) = 0 [pid 6173] <... mount resumed>) = 0 [pid 5061] mkdir("./110", 0777 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6175 [pid 6175] <... set_robust_list resumed>) = 0 [pid 5062] close(3 [pid 6175] chdir("./109" [pid 5062] <... close resumed>) = 0 [pid 6175] <... chdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... mkdir resumed>) = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6176 attached [pid 6175] <... prctl resumed>) = 0 [pid 6174] close(3 [pid 6173] <... openat resumed>) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6176 [pid 6175] setpgid(0, 0 [pid 6174] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6176] set_robust_list(0x55558e6e36a0, 24 [pid 6175] <... setpgid resumed>) = 0 [pid 6174] close(4 [pid 6173] chdir("./file0" [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6174] <... close resumed>) = 0 [pid 6173] <... chdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6176] <... set_robust_list resumed>) = 0 [pid 6175] <... openat resumed>) = 3 [pid 6174] mkdir("./file0", 0777 [pid 6173] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6176] chdir("./109" [pid 6173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6176] <... chdir resumed>) = 0 [ 123.192115][ T6174] loop4: detected capacity change from 0 to 4096 [pid 6175] write(3, "1000", 4 [pid 6174] <... mkdir resumed>) = 0 [pid 6173] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6175] <... write resumed>) = 4 [pid 6173] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 6175] close(3 [pid 6173] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] exit_group(0 [pid 6176] <... prctl resumed>) = 0 [pid 6175] <... close resumed>) = 0 [pid 6173] <... futex resumed>) = ? [pid 6171] <... exit_group resumed>) = ? [pid 6176] setpgid(0, 0 [pid 6175] symlink("/dev/binderfs", "./binderfs" [pid 6174] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6173] +++ exited with 0 +++ [pid 6171] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6176] <... setpgid resumed>) = 0 [pid 6175] <... symlink resumed>) = 0 [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6175] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... openat resumed>) = 3 [pid 6175] <... futex resumed>) = 0 [pid 5059] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6176] write(3, "1000", 4 [pid 6175] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6176] <... write resumed>) = 4 [pid 6175] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6176] close(3 [pid 6175] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6176] <... close resumed>) = 0 [pid 6175] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6176] symlink("/dev/binderfs", "./binderfs" [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6176] <... symlink resumed>) = 0 [pid 6175] <... mmap resumed>) = 0x7fe7c3226000 [pid 6175] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6176] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... mprotect resumed>) = 0 [pid 6175] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6176] <... futex resumed>) = 0 [pid 6176] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6175] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6176] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6175] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6176] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6176] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6177 attached [pid 6176] <... mprotect resumed>) = 0 [pid 6175] <... clone3 resumed> => {parent_tid=[6177]}, 88) = 6177 [pid 6175] rt_sigprocmask(SIG_SETMASK, [], [pid 6177] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6176] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6175] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6177] <... rseq resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6177] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6175] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] rt_sigprocmask(SIG_SETMASK, [], [pid 6175] <... futex resumed>) = 0 [pid 6177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6177] memfd_create("syzkaller", 0 [pid 6175] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6176] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6176] <... clone3 resumed> => {parent_tid=[6178]}, 88) = 6178 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6176] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(AT_FDCWD, "./111/binderfs", [pid 6176] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6178 attached [pid 6177] <... memfd_create resumed>) = 3 [pid 6176] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6178] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6176] <... futex resumed>) = 0 [pid 5059] unlink("./111/binderfs" [pid 6178] <... rseq resumed>) = 0 [pid 6177] <... mmap resumed>) = 0x7fe7bae00000 [pid 6176] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6178] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... set_robust_list resumed>) = 0 [pid 6178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6178] memfd_create("syzkaller", 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./111/file0", [pid 6178] <... memfd_create resumed>) = 3 [pid 5061] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 123.251362][ T6174] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5061] <... close resumed>) = 0 [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6174] <... mount resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6178] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] <... openat resumed>) = 4 [pid 6174] <... openat resumed>) = 3 [pid 5059] newfstatat(4, "", [pid 6174] chdir("./file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6174] <... chdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6179 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 6179 attached [pid 6174] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6179] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6179] chdir("./110" [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 6179] <... chdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] rmdir("./111/file0" [pid 6179] <... prctl resumed>) = 0 [pid 6174] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] setpgid(0, 0) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6174] <... futex resumed>) = 1 [pid 6172] <... futex resumed>) = 0 [pid 5059] getdents64(3, [pid 6174] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] exit_group(0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6174] <... futex resumed>) = ? [pid 6172] <... exit_group resumed>) = ? [pid 5059] close(3 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6177] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6174] +++ exited with 0 +++ [pid 6172] +++ exited with 0 +++ [pid 5059] <... close resumed>) = 0 [pid 6179] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] rmdir("./111" [pid 6179] write(3, "1000", 4) = 4 [pid 6179] close(3) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] mkdir("./112", 0777 [pid 6179] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6179] <... futex resumed>) = 0 [pid 6179] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... mkdir resumed>) = 0 [pid 6179] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] newfstatat(3, "", [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6179] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] getdents64(3, [pid 5059] <... openat resumed>) = 3 [pid 6179] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6179] <... mprotect resumed>) = 0 [pid 6178] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6180 attached => {parent_tid=[6180]}, 88) = 6180 [pid 6180] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6179] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6180] <... rseq resumed>) = 0 [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6180] set_robust_list(0x7fe7c32469a0, 24 [pid 6179] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(AT_FDCWD, "./109/binderfs", [pid 6180] <... set_robust_list resumed>) = 0 [pid 6179] <... futex resumed>) = 0 [pid 6180] rt_sigprocmask(SIG_SETMASK, [], [pid 6179] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6177] <... write resumed>) = 2097152 [pid 5063] unlink("./109/binderfs") = 0 [pid 6177] munmap(0x7fe7bae00000, 138412032 [pid 5063] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] memfd_create("syzkaller", 0 [pid 6178] <... write resumed>) = 2097152 [pid 6177] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 6178] munmap(0x7fe7bae00000, 138412032 [pid 5063] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] <... memfd_create resumed>) = 3 [pid 6177] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6177] <... openat resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./109/file0", [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6177] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6180] <... mmap resumed>) = 0x7fe7bae00000 [pid 6178] <... munmap resumed>) = 0 [pid 6178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6178] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 4 [pid 6177] <... ioctl resumed>) = 0 [pid 6177] close(3) = 0 [pid 5063] newfstatat(4, "", [pid 6177] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6177] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 6177] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 6177] <... mkdir resumed>) = 0 [pid 5063] rmdir("./109/file0" [pid 6177] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6178] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 6178] close(3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6178] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./109" [pid 6178] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./110", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6178] <... close resumed>) = 0 [pid 6180] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6178] mkdir("./file0", 0777) = 0 [ 123.397114][ T6177] loop1: detected capacity change from 0 to 4096 [ 123.402692][ T6178] loop3: detected capacity change from 0 to 4096 [ 123.421806][ T6177] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6178] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6181 ./strace-static-x86_64: Process 6181 attached [pid 6181] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6181] chdir("./112" [pid 6177] <... mount resumed>) = 0 [ 123.439951][ T6178] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6181] <... chdir resumed>) = 0 [pid 6180] <... write resumed>) = 2097152 [pid 6178] <... mount resumed>) = 0 [pid 6177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6180] munmap(0x7fe7bae00000, 138412032 [pid 6178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6177] <... openat resumed>) = 3 [pid 6181] <... prctl resumed>) = 0 [pid 6177] chdir("./file0") = 0 [pid 6181] setpgid(0, 0) = 0 [pid 6178] chdir("./file0" [pid 6177] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6177] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6181] <... openat resumed>) = 3 [pid 6181] write(3, "1000", 4 [pid 6178] <... chdir resumed>) = 0 [pid 6177] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... write resumed>) = 4 [pid 6178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6177] <... futex resumed>) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6181] close(3 [pid 6180] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6181] <... close resumed>) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6177] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] exit_group(0 [pid 5063] close(3 [pid 6181] symlink("/dev/binderfs", "./binderfs" [pid 6180] <... openat resumed>) = 4 [pid 6178] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... futex resumed>) = ? [pid 6175] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 6180] ioctl(4, LOOP_SET_FD, 3 [pid 6178] <... futex resumed>) = 1 [pid 6177] +++ exited with 0 +++ [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6182 ./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6182] chdir("./110") = 0 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6181] <... symlink resumed>) = 0 [pid 6178] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] <... futex resumed>) = 0 [pid 6181] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] exit_group(0 [pid 6175] +++ exited with 0 +++ [pid 6181] <... futex resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6182] <... prctl resumed>) = 0 [pid 6181] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6176] <... exit_group resumed>) = ? [pid 6182] setpgid(0, 0 [pid 6181] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6180] <... ioctl resumed>) = 0 [pid 6178] <... futex resumed>) = ? [pid 6182] <... setpgid resumed>) = 0 [pid 6181] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6180] close(3 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6180] <... close resumed>) = 0 [pid 6178] +++ exited with 0 +++ [pid 6176] +++ exited with 0 +++ [pid 6181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6180] close(4 [pid 6182] <... openat resumed>) = 3 [pid 6180] <... close resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6176, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] mkdir("./file0", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] write(3, "1000", 4 [pid 5060] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6182] <... write resumed>) = 4 [pid 5062] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 6182] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(3, "", [pid 6182] <... close resumed>) = 0 [pid 6180] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6182] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6182] <... symlink resumed>) = 0 [pid 6180] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... openat resumed>) = 3 [pid 5060] getdents64(3, [pid 6182] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(3, "", [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6182] <... futex resumed>) = 0 [pid 5060] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6182] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] newfstatat(AT_FDCWD, "./109/binderfs", [pid 6182] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] unlink("./109/binderfs" [pid 6182] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] <... unlink resumed>) = 0 [pid 6182] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6182] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6182] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6181] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6183 attached [pid 6182] <... clone3 resumed> => {parent_tid=[6183]}, 88) = 6183 [pid 6181] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6182] rt_sigprocmask(SIG_SETMASK, [], [pid 6181] <... mprotect resumed>) = 0 [pid 5062] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6182] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6181] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6183] <... rseq resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6183] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] unlink("./109/binderfs") = 0 [pid 6183] <... set_robust_list resumed>) = 0 [pid 5062] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6183] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6183] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./109/file0", [pid 5060] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6183] <... memfd_create resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5062] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6181] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6183] <... mmap resumed>) = 0x7fe7bae00000 [pid 6181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, [pid 5062] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [ 123.507834][ T6180] loop2: detected capacity change from 0 to 4096 [ 123.545983][ T6180] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). ./strace-static-x86_64: Process 6184 attached [pid 6181] <... clone3 resumed> => {parent_tid=[6184]}, 88) = 6184 [pid 5062] newfstatat(4, "", [pid 5060] getdents64(4, [pid 6184] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6181] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6184] <... rseq resumed>) = 0 [pid 6181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] getdents64(4, [pid 5060] close(4 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 6181] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] rmdir("./109/file0" [pid 6184] <... set_robust_list resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] getdents64(3, [pid 6184] memfd_create("syzkaller", 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./109" [pid 6181] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6184] <... memfd_create resumed>) = 3 [pid 6181] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] close(4 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 6184] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] rmdir("./109/file0") = 0 [pid 5060] mkdir("./110", 0777 [pid 5062] getdents64(3, [pid 5060] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] close(3 [pid 5060] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] rmdir("./109") = 0 [pid 5062] mkdir("./110", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6185 ./strace-static-x86_64: Process 6185 attached [pid 6180] <... mount resumed>) = 0 [pid 6180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6185] set_robust_list(0x55558e6e36a0, 24 [pid 6180] <... openat resumed>) = 3 [pid 6180] chdir("./file0" [pid 6185] <... set_robust_list resumed>) = 0 [pid 6180] <... chdir resumed>) = 0 [pid 6185] chdir("./110" [pid 6180] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6185] <... chdir resumed>) = 0 [pid 6180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6180] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... prctl resumed>) = 0 [pid 6180] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6185] setpgid(0, 0 [pid 6180] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] exit_group(0 [pid 6185] <... setpgid resumed>) = 0 [pid 6180] <... futex resumed>) = ? [pid 6179] <... exit_group resumed>) = ? [pid 6180] +++ exited with 0 +++ [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6179] +++ exited with 0 +++ [pid 6185] <... openat resumed>) = 3 [pid 6184] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6183] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6185] write(3, "1000", 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6185] <... write resumed>) = 4 [pid 6185] close(3) = 0 [pid 5061] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6185] <... symlink resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6185] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] newfstatat(3, "", [pid 6185] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./110/binderfs" [pid 6185] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5061] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./110/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] rmdir("./110") = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] mkdir("./111", 0777) = 0 ./strace-static-x86_64: Process 6186 attached [pid 6185] <... mmap resumed>) = 0x7fe7c3226000 [pid 6186] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6186] chdir("./110" [pid 6185] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6184] <... write resumed>) = 2097152 [pid 6183] <... write resumed>) = 2097152 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6185] <... mprotect resumed>) = 0 [pid 6184] munmap(0x7fe7bae00000, 138412032 [pid 6183] munmap(0x7fe7bae00000, 138412032 [pid 6186] <... chdir resumed>) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6186 [pid 6186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6186] <... prctl resumed>) = 0 [pid 6186] setpgid(0, 0) = 0 [pid 6186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6186] write(3, "1000", 4) = 4 [pid 6184] <... munmap resumed>) = 0 [pid 6185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6186] close(3 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6183] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6187 attached [pid 6186] <... close resumed>) = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6187] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6185] <... clone3 resumed> => {parent_tid=[6187]}, 88) = 6187 [pid 6184] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6187] <... rseq resumed>) = 0 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], [pid 6183] <... openat resumed>) = 4 [pid 6186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6186] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6186] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6186] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6186] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6186] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6188 attached [pid 6187] set_robust_list(0x7fe7c32469a0, 24 [pid 6186] <... clone3 resumed> => {parent_tid=[6188]}, 88) = 6188 [pid 6185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6184] <... openat resumed>) = 4 [pid 6183] ioctl(4, LOOP_SET_FD, 3 [pid 6188] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6187] <... set_robust_list resumed>) = 0 [pid 6186] rt_sigprocmask(SIG_SETMASK, [], [pid 6185] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] ioctl(4, LOOP_SET_FD, 3 [pid 6188] <... rseq resumed>) = 0 [pid 6187] rt_sigprocmask(SIG_SETMASK, [], [pid 6185] <... futex resumed>) = 0 [pid 6186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6186] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6186] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6188] set_robust_list(0x7fe7c32469a0, 24 [pid 6185] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6188] <... set_robust_list resumed>) = 0 [pid 6188] rt_sigprocmask(SIG_SETMASK, [], [pid 6187] memfd_create("syzkaller", 0 [pid 6188] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6188] memfd_create("syzkaller", 0) = 3 [pid 6187] <... memfd_create resumed>) = 3 [pid 6183] <... ioctl resumed>) = 0 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6183] close(3 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6187] <... mmap resumed>) = 0x7fe7bae00000 [pid 6183] <... close resumed>) = 0 [pid 6183] close(4 [pid 6188] <... mmap resumed>) = 0x7fe7bae00000 [pid 6183] <... close resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6183] mkdir("./file0", 0777 [pid 6184] <... ioctl resumed>) = 0 [pid 6183] <... mkdir resumed>) = 0 [pid 6184] close(3 [pid 5061] close(3 [pid 6184] <... close resumed>) = 0 [pid 6183] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... close resumed>) = 0 [pid 6184] close(4 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6184] <... close resumed>) = 0 [ 123.768357][ T6183] loop4: detected capacity change from 0 to 4096 [ 123.769645][ T6184] loop0: detected capacity change from 0 to 4096 [pid 6184] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 6189 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6189 [pid 6189] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6189] chdir("./111") = 0 [pid 6184] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6189] setpgid(0, 0) = 0 [pid 6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6189] write(3, "1000", 4) = 4 [pid 6189] close(3) = 0 [pid 6189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6189] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6189] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6189] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6189] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6188] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6190]}, 88) = 6190 [pid 6189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6189] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6190 attached [pid 6189] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6190] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6190] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6190] memfd_create("syzkaller", 0) = 3 [ 123.820371][ T6183] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 123.833244][ T6184] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6187] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6184] <... mount resumed>) = 0 [pid 6187] <... write resumed>) = 2097152 [pid 6184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6190] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6187] munmap(0x7fe7bae00000, 138412032 [pid 6184] <... openat resumed>) = 3 [pid 6184] chdir("./file0") = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6187] <... munmap resumed>) = 0 [pid 6184] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6184] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6181] <... futex resumed>) = 0 [pid 6184] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] exit_group(0) = ? [pid 6184] <... futex resumed>) = ? [pid 6184] +++ exited with 0 +++ [pid 6181] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6188] <... write resumed>) = 2097152 [pid 6188] munmap(0x7fe7bae00000, 138412032 [pid 6183] <... mount resumed>) = 0 [pid 6190] <... write resumed>) = 2097152 [pid 6187] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] munmap(0x7fe7bae00000, 138412032 [pid 6187] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 5059] newfstatat(AT_FDCWD, "./112/binderfs", [pid 6190] <... munmap resumed>) = 0 [pid 6188] <... munmap resumed>) = 0 [pid 6183] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./112/binderfs") = 0 [pid 6183] chdir("./file0" [pid 5059] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6188] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6187] <... ioctl resumed>) = 0 [pid 6183] <... chdir resumed>) = 0 [pid 6190] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = 0 [pid 6190] ioctl(4, LOOP_SET_FD, 3 [pid 6188] <... openat resumed>) = 4 [pid 5059] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] <... ioctl resumed>) = 0 [pid 6188] ioctl(4, LOOP_SET_FD, 3 [pid 6187] close(3 [pid 6183] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6190] close(3 [pid 6187] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6190] <... close resumed>) = 0 [pid 6187] close(4 [pid 6190] close(4 [pid 6187] <... close resumed>) = 0 [pid 6190] <... close resumed>) = 0 [pid 6187] mkdir("./file0", 0777 [pid 6183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6190] mkdir("./file0", 0777 [pid 6188] <... ioctl resumed>) = 0 [pid 6187] <... mkdir resumed>) = 0 [pid 6183] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6188] close(3 [pid 6183] <... futex resumed>) = 1 [pid 6182] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6190] <... mkdir resumed>) = 0 [pid 6188] <... close resumed>) = 0 [pid 6183] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 123.979268][ T6187] loop3: detected capacity change from 0 to 4096 [ 123.990309][ T6190] loop2: detected capacity change from 0 to 4096 [ 124.001849][ T6188] loop1: detected capacity change from 0 to 4096 [pid 6182] exit_group(0 [pid 5059] newfstatat(4, "", [pid 6188] close(4 [pid 6183] <... futex resumed>) = ? [pid 6182] <... exit_group resumed>) = ? [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6188] <... close resumed>) = 0 [pid 6183] +++ exited with 0 +++ [pid 5059] getdents64(4, [pid 6188] mkdir("./file0", 0777) = 0 [pid 6190] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6182] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6182, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] close(4 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... close resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5059] rmdir("./112/file0") = 0 [pid 5063] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6188] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", [pid 5059] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] rmdir("./112" [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] mkdir("./113", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./110/binderfs" [pid 5059] <... mkdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./110/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [ 124.024573][ T6187] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 124.048054][ T6190] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 124.059151][ T6188] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] rmdir("./110" [pid 6190] <... mount resumed>) = 0 [pid 6187] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] mkdir("./111", 0777) = 0 [pid 6190] <... openat resumed>) = 3 [pid 6190] chdir("./file0") = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6190] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... mount resumed>) = 0 [pid 6187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6190] <... futex resumed>) = 1 [pid 6189] <... futex resumed>) = 0 [pid 6188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6187] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6189] exit_group(0) = ? [pid 6187] chdir("./file0" [pid 6188] <... openat resumed>) = 3 [pid 6187] <... chdir resumed>) = 0 [pid 6190] +++ exited with 0 +++ [pid 6189] +++ exited with 0 +++ [pid 6188] chdir("./file0" [pid 6187] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6189, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5061] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6188] <... chdir resumed>) = 0 [pid 6187] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6188] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6187] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6188] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6185] exit_group(0) = ? [pid 5061] <... openat resumed>) = 3 [pid 6188] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] newfstatat(3, "", [pid 6188] <... futex resumed>) = 1 [pid 6186] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6186] exit_group(0 [pid 5061] getdents64(3, [pid 6186] <... exit_group resumed>) = ? [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6188] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ [pid 6186] +++ exited with 0 +++ [pid 6185] +++ exited with 0 +++ [pid 5061] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6186, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5059] close(3 [pid 5061] newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] unlink("./111/binderfs" [pid 5060] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(AT_FDCWD, "./111/file0", [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./110/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./110/binderfs", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./110/binderfs" [pid 5061] <... openat resumed>) = 4 [pid 5060] unlink("./110/binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6191 attached [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6191] set_robust_list(0x55558e6e36a0, 24 [pid 5062] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6191] <... set_robust_list resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6191 [pid 5062] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./110/file0", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./110/file0", [pid 6191] chdir("./113" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./111/file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5060] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... chdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] newfstatat(4, "", [pid 5060] <... openat resumed>) = 4 [pid 6191] <... prctl resumed>) = 0 [pid 6191] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5060] newfstatat(4, "", [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6191] <... setpgid resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] close(3 [pid 5060] getdents64(4, [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5061] rmdir("./111" [pid 5060] getdents64(4, [pid 6191] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] close(4 [pid 6191] write(3, "1000", 4) = 4 [pid 6191] close(3) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] mkdir("./112", 0777 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./110/file0" [pid 5061] <... mkdir resumed>) = 0 [pid 6191] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./110/file0" [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6191] <... symlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] close(3 [pid 6191] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 5060] <... close resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] rmdir("./110" [pid 6191] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6191] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] close(3 [pid 6191] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... close resumed>) = 0 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] rmdir("./110"./strace-static-x86_64: Process 6192 attached [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6192 [pid 6192] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6191] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] mkdir("./111", 0777 [pid 5060] mkdir("./111", 0777 [pid 6192] chdir("./111" [pid 5061] <... ioctl resumed>) = 0 [pid 6192] <... chdir resumed>) = 0 [pid 6191] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... mkdir resumed>) = 0 [pid 5061] close(3 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 6192] <... prctl resumed>) = 0 [pid 6191] <... mprotect resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6192] setpgid(0, 0./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x55558e6e36a0, 24 [pid 6192] <... setpgid resumed>) = 0 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6193 [pid 6193] <... set_robust_list resumed>) = 0 [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6191] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6193] chdir("./112" [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... openat resumed>) = 3 [pid 6192] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6193] <... chdir resumed>) = 0 [pid 6191] <... clone3 resumed> => {parent_tid=[6194]}, 88) = 6194 ./strace-static-x86_64: Process 6194 attached [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6192] write(3, "1000", 4 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 6194] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6193] <... prctl resumed>) = 0 [pid 6192] <... write resumed>) = 4 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6194] <... rseq resumed>) = 0 [pid 6193] setpgid(0, 0 [pid 6191] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] set_robust_list(0x7fe7c32469a0, 24 [pid 6193] <... setpgid resumed>) = 0 [pid 6192] close(3 [pid 6191] <... futex resumed>) = 0 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6192] <... close resumed>) = 0 [pid 6191] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6194] rt_sigprocmask(SIG_SETMASK, [], [pid 6192] symlink("/dev/binderfs", "./binderfs" [pid 6194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6193] <... openat resumed>) = 3 [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs" [pid 6194] memfd_create("syzkaller", 0 [pid 6192] <... symlink resumed>) = 0 [pid 6194] <... memfd_create resumed>) = 3 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6193] <... symlink resumed>) = 0 [pid 6192] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6192] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6194] <... mmap resumed>) = 0x7fe7bae00000 [pid 6192] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6193] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6193] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6193] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6192] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6193] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6192] <... mmap resumed>) = 0x7fe7c3226000 [pid 6193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6192] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] <... clone3 resumed> => {parent_tid=[6195]}, 88) = 6195 [pid 6192] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6193] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6195 attached NULL, 8) = 0 [pid 6192] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6195] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6193] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6196 attached [pid 6195] <... rseq resumed>) = 0 [pid 6193] <... futex resumed>) = 0 [pid 6196] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6195] set_robust_list(0x7fe7c32469a0, 24 [pid 6193] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6192] <... clone3 resumed> => {parent_tid=[6196]}, 88) = 6196 [pid 6195] <... set_robust_list resumed>) = 0 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], [pid 6195] rt_sigprocmask(SIG_SETMASK, [], [pid 6192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6196] set_robust_list(0x7fe7c32469a0, 24 [pid 6195] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6192] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] <... set_robust_list resumed>) = 0 [pid 6195] memfd_create("syzkaller", 0 [pid 6192] <... futex resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6196] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6192] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6195] <... memfd_create resumed>) = 3 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6196] memfd_create("syzkaller", 0 [pid 6195] <... mmap resumed>) = 0x7fe7bae00000 [pid 6196] <... memfd_create resumed>) = 3 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6197 ./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6197] chdir("./111") = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6197] setpgid(0, 0) = 0 [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6197] write(3, "1000", 4) = 4 [pid 6197] close(3) = 0 [pid 6197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6197] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6197] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6197] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6197] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6195] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6196] <... mmap resumed>) = 0x7fe7bae00000 [pid 6197] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6198]}, 88) = 6198 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6197] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6198 attached [pid 6197] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6198] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] <... ioctl resumed>) = 0 [pid 6198] <... set_robust_list resumed>) = 0 [pid 6198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6198] memfd_create("syzkaller", 0 [pid 6194] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] close(3 [pid 6198] <... memfd_create resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6199 attached [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6199] set_robust_list(0x55558e6e36a0, 24 [pid 6198] <... mmap resumed>) = 0x7fe7bae00000 [pid 6199] <... set_robust_list resumed>) = 0 [pid 6199] chdir("./111" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6199 [pid 6199] <... chdir resumed>) = 0 [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6199] setpgid(0, 0) = 0 [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6199] write(3, "1000", 4) = 4 [pid 6199] close(3) = 0 [pid 6199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6196] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6199] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6195] <... write resumed>) = 2097152 [pid 6194] <... write resumed>) = 2097152 [pid 6199] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6198] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6196] <... write resumed>) = 2097152 [pid 6195] munmap(0x7fe7bae00000, 138412032 [pid 6194] munmap(0x7fe7bae00000, 138412032 [pid 6199] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6196] munmap(0x7fe7bae00000, 138412032 [pid 6195] <... munmap resumed>) = 0 [pid 6194] <... munmap resumed>) = 0 [pid 6199] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6199] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6196] <... munmap resumed>) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6195] <... openat resumed>) = 4 [pid 6196] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6200 attached [pid 6198] <... write resumed>) = 2097152 [pid 6196] <... openat resumed>) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6200] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6198] munmap(0x7fe7bae00000, 138412032 [pid 6196] ioctl(4, LOOP_SET_FD, 3 [pid 6194] <... openat resumed>) = 4 [pid 6200] <... rseq resumed>) = 0 [pid 6199] <... clone3 resumed> => {parent_tid=[6200]}, 88) = 6200 [pid 6198] <... munmap resumed>) = 0 [pid 6195] <... ioctl resumed>) = 0 [pid 6199] rt_sigprocmask(SIG_SETMASK, [], [pid 6198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6195] close(3 [pid 6200] set_robust_list(0x7fe7c32469a0, 24 [pid 6199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6196] <... ioctl resumed>) = 0 [pid 6194] ioctl(4, LOOP_SET_FD, 3 [pid 6200] <... set_robust_list resumed>) = 0 [pid 6199] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... openat resumed>) = 4 [pid 6195] <... close resumed>) = 0 [pid 6198] ioctl(4, LOOP_SET_FD, 3 [pid 6195] close(4 [pid 6200] rt_sigprocmask(SIG_SETMASK, [], [pid 6199] <... futex resumed>) = 0 [pid 6196] close(3 [pid 6194] <... ioctl resumed>) = 0 [pid 6200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6199] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6196] <... close resumed>) = 0 [pid 6200] memfd_create("syzkaller", 0 [pid 6194] close(3 [pid 6200] <... memfd_create resumed>) = 3 [pid 6196] close(4 [pid 6194] <... close resumed>) = 0 [pid 6200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6196] <... close resumed>) = 0 [pid 6195] <... close resumed>) = 0 [pid 6194] close(4 [pid 6200] <... mmap resumed>) = 0x7fe7bae00000 [pid 6196] mkdir("./file0", 0777 [pid 6194] <... close resumed>) = 0 [pid 6195] mkdir("./file0", 0777) = 0 [pid 6195] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6196] <... mkdir resumed>) = 0 [pid 6194] mkdir("./file0", 0777 [pid 6198] <... ioctl resumed>) = 0 [pid 6194] <... mkdir resumed>) = 0 [ 124.453789][ T6195] loop2: detected capacity change from 0 to 4096 [ 124.454283][ T6196] loop4: detected capacity change from 0 to 4096 [ 124.468378][ T6194] loop0: detected capacity change from 0 to 4096 [ 124.470503][ T6198] loop1: detected capacity change from 0 to 4096 [pid 6198] close(3 [pid 6194] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6198] <... close resumed>) = 0 [pid 6196] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6198] close(4) = 0 [pid 6198] mkdir("./file0", 0777) = 0 [ 124.496788][ T6194] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 124.507756][ T6195] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 124.519956][ T6196] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 124.540657][ T6198] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6198] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6200] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6194] <... mount resumed>) = 0 [pid 6194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6194] chdir("./file0") = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6194] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... mount resumed>) = 0 [pid 6194] <... futex resumed>) = 1 [pid 6194] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6195] chdir("./file0") = 0 [pid 6191] <... futex resumed>) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6191] exit_group(0 [pid 6195] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6191] <... exit_group resumed>) = ? [pid 6194] <... futex resumed>) = ? [pid 6195] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] +++ exited with 0 +++ [pid 6191] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6195] <... futex resumed>) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6195] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] exit_group(0 [pid 5059] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6193] <... exit_group resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6195] <... futex resumed>) = ? [pid 5059] <... openat resumed>) = 3 [pid 6195] +++ exited with 0 +++ [pid 6193] +++ exited with 0 +++ [pid 5059] newfstatat(3, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(3, "", [pid 5059] newfstatat(AT_FDCWD, "./113/binderfs", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] unlink("./113/binderfs" [pid 5061] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./112/binderfs", [pid 6198] <... mount resumed>) = 0 [pid 6198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6198] <... openat resumed>) = 3 [pid 5061] unlink("./112/binderfs" [pid 6198] chdir("./file0" [pid 5061] <... unlink resumed>) = 0 [pid 6198] <... chdir resumed>) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6198] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6198] <... futex resumed>) = 1 [pid 6200] <... write resumed>) = 2097152 [pid 6197] <... futex resumed>) = 0 [pid 6196] <... mount resumed>) = 0 [pid 5059] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6198] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6197] exit_group(0 [pid 5059] newfstatat(AT_FDCWD, "./113/file0", [pid 6198] <... futex resumed>) = ? [pid 6197] <... exit_group resumed>) = ? [pid 6196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6198] +++ exited with 0 +++ [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6200] munmap(0x7fe7bae00000, 138412032 [pid 5059] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(4, "", [pid 5061] newfstatat(AT_FDCWD, "./112/file0", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, [pid 5061] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6196] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6200] <... munmap resumed>) = 0 [pid 6197] +++ exited with 0 +++ [pid 6196] chdir("./file0" [pid 5061] <... openat resumed>) = 4 [pid 6200] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6196] <... chdir resumed>) = 0 [pid 5059] getdents64(4, [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6197, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6200] <... openat resumed>) = 4 [pid 6196] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(4, "", [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6196] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] close(4 [pid 5061] getdents64(4, [pid 6200] ioctl(4, LOOP_SET_FD, 3 [pid 6196] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 6196] <... futex resumed>) = 1 [pid 6192] <... futex resumed>) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./112/file0") = 0 [pid 5061] getdents64(3, [pid 6200] <... ioctl resumed>) = 0 [pid 6196] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./113/file0" [pid 6200] close(3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6200] <... close resumed>) = 0 [pid 6196] <... futex resumed>) = ? [pid 6192] <... exit_group resumed>) = ? [pid 5061] close(3 [pid 5060] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6196] +++ exited with 0 +++ [pid 6200] close(4) = 0 [pid 5061] <... close resumed>) = 0 [pid 6200] mkdir("./file0", 0777) = 0 [pid 5061] rmdir("./112" [pid 6192] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6192, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 6200] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] mkdir("./113", 0777 [pid 5060] newfstatat(3, "", [pid 5059] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(3, [pid 5059] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... close resumed>) = 0 [pid 5060] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./113" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./111/binderfs", [pid 5059] mkdir("./114", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] unlink("./111/binderfs" [pid 5059] <... mkdir resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(3, "", [pid 5059] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./111/binderfs") = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5063] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./111/file0", [pid 6200] <... mount resumed>) = 0 [pid 5063] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6200] <... openat resumed>) = 3 [ 124.689890][ T6200] loop3: detected capacity change from 0 to 4096 [ 124.719325][ T6200] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5063] newfstatat(AT_FDCWD, "./111/file0", [pid 6200] chdir("./file0" [pid 5060] <... openat resumed>) = 4 [pid 6200] <... chdir resumed>) = 0 [pid 6200] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6200] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 6200] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6200] <... futex resumed>) = 1 [pid 6199] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 6200] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] exit_group(0 [pid 5063] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 6200] <... futex resumed>) = ? [pid 6199] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6200] +++ exited with 0 +++ [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 6199] +++ exited with 0 +++ [pid 5060] close(4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./111/file0") = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] <... ioctl resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./111") = 0 [pid 5063] mkdir("./112", 0777) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5060] rmdir("./111/file0" [pid 5059] close(3 [pid 5062] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(3, [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5060] close(3./strace-static-x86_64: Process 6201 attached [pid 5062] newfstatat(3, "", [pid 5060] <... close resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6201 [pid 6201] set_robust_list(0x55558e6e36a0, 24 [pid 5060] rmdir("./111" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6201] <... set_robust_list resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6202 attached [pid 6201] chdir("./114" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] mkdir("./112", 0777 [pid 6202] set_robust_list(0x55558e6e36a0, 24 [pid 5062] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6202 [pid 6202] <... set_robust_list resumed>) = 0 [pid 6201] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... mkdir resumed>) = 0 [pid 6202] chdir("./113" [pid 5062] newfstatat(AT_FDCWD, "./111/binderfs", [pid 6201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6202] <... chdir resumed>) = 0 [pid 6201] <... prctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6201] setpgid(0, 0 [pid 5062] unlink("./111/binderfs" [pid 5060] <... openat resumed>) = 3 [pid 6201] <... setpgid resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6202] <... prctl resumed>) = 0 [pid 5062] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6202] setpgid(0, 0) = 0 [pid 6202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... umount2 resumed>) = 0 [pid 6202] <... openat resumed>) = 3 [pid 6201] <... openat resumed>) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6202] write(3, "1000", 4 [pid 6201] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] <... write resumed>) = 4 [pid 6201] <... write resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./111/file0", [pid 6202] close(3 [pid 6201] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6201] <... close resumed>) = 0 [pid 6202] <... close resumed>) = 0 [pid 6201] symlink("/dev/binderfs", "./binderfs" [pid 6202] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(3 [pid 5062] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6201] <... symlink resumed>) = 0 [pid 6202] <... symlink resumed>) = 0 [pid 6202] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] <... futex resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6202] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6201] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6202] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6201] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6203 attached [pid 6202] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... openat resumed>) = 4 [pid 6203] set_robust_list(0x55558e6e36a0, 24 [pid 6202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6201] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6203 [pid 5062] newfstatat(4, "", [pid 6202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6201] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6203] <... set_robust_list resumed>) = 0 [pid 6202] <... mmap resumed>) = 0x7fe7c3226000 [pid 6201] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] getdents64(4, [pid 6203] chdir("./112" [pid 6202] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6203] <... chdir resumed>) = 0 [pid 6202] <... mprotect resumed>) = 0 [pid 6201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6201] <... mmap resumed>) = 0x7fe7c3226000 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6202] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6201] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(4, [pid 6203] <... prctl resumed>) = 0 [pid 6203] setpgid(0, 0 [pid 6202] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6201] <... mprotect resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6203] <... setpgid resumed>) = 0 [pid 5062] close(4 [pid 6202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6201] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6204 attached [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... close resumed>) = 0 [pid 6204] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6203] <... openat resumed>) = 3 [pid 6202] <... clone3 resumed> => {parent_tid=[6204]}, 88) = 6204 [pid 6201] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6204] <... rseq resumed>) = 0 [pid 6202] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] rmdir("./111/file0" [pid 6204] set_robust_list(0x7fe7c32469a0, 24 [pid 6203] write(3, "1000", 4) = 4 [pid 6203] close(3) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6204] <... set_robust_list resumed>) = 0 [pid 6202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6203] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 6202] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6205 attached [pid 6203] <... futex resumed>) = 0 [pid 6201] <... clone3 resumed> => {parent_tid=[6205]}, 88) = 6205 [pid 6205] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6203] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6201] rt_sigprocmask(SIG_SETMASK, [], [pid 6205] <... rseq resumed>) = 0 [pid 6203] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6205] set_robust_list(0x7fe7c32469a0, 24 [pid 6203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6201] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... set_robust_list resumed>) = 0 [pid 6204] rt_sigprocmask(SIG_SETMASK, [], [pid 6203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6202] <... futex resumed>) = 0 [pid 6201] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... ioctl resumed>) = 0 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], [pid 6204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6202] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6201] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6203] <... mmap resumed>) = 0x7fe7c3226000 [pid 6205] memfd_create("syzkaller", 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./111" [pid 6203] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... rmdir resumed>) = 0 [pid 6204] memfd_create("syzkaller", 0 [pid 6203] <... mprotect resumed>) = 0 [pid 6203] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6204] <... memfd_create resumed>) = 3 [pid 5062] mkdir("./112", 0777 [pid 6203] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6205] <... memfd_create resumed>) = 3 [pid 6203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6203] <... clone3 resumed> => {parent_tid=[6206]}, 88) = 6206 [pid 6204] <... mmap resumed>) = 0x7fe7bae00000 [pid 6203] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6206 attached [pid 6203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6206] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6203] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... rseq resumed>) = 0 [pid 6203] <... futex resumed>) = 0 [pid 6206] set_robust_list(0x7fe7c32469a0, 24 [pid 6203] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6206] <... set_robust_list resumed>) = 0 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6206] memfd_create("syzkaller", 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6207 attached [pid 6206] <... memfd_create resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6207 [pid 6207] set_robust_list(0x55558e6e36a0, 24 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... openat resumed>) = 3 [pid 6206] <... mmap resumed>) = 0x7fe7bae00000 [pid 6207] <... set_robust_list resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6207] chdir("./112" [pid 6205] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6207] <... chdir resumed>) = 0 [pid 6207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6207] setpgid(0, 0) = 0 [pid 6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6207] write(3, "1000", 4) = 4 [pid 6207] close(3) = 0 [pid 6207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6204] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6207] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6207] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6207] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6207] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6207] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6206] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 6208 attached [pid 5062] <... ioctl resumed>) = 0 [pid 6208] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6207] <... clone3 resumed> => {parent_tid=[6208]}, 88) = 6208 [pid 6207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6208] <... rseq resumed>) = 0 [pid 6207] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] set_robust_list(0x7fe7c32469a0, 24 [pid 6207] <... futex resumed>) = 0 [pid 6208] <... set_robust_list resumed>) = 0 [pid 6207] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6208] memfd_create("syzkaller", 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6208] <... memfd_create resumed>) = 3 [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6209 attached [pid 6209] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6209 [pid 6209] chdir("./112") = 0 [pid 6204] <... write resumed>) = 2097152 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6209] setpgid(0, 0) = 0 [pid 6204] munmap(0x7fe7bae00000, 138412032 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6209] write(3, "1000", 4) = 4 [pid 6209] close(3) = 0 [pid 6209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6209] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6209] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6205] <... write resumed>) = 2097152 [pid 6204] <... munmap resumed>) = 0 [pid 6209] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6205] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6209] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6209] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6204] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6204] ioctl(4, LOOP_SET_FD, 3 [pid 6209] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6210]}, 88) = 6210 [pid 6205] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6209] rt_sigprocmask(SIG_SETMASK, [], [pid 6205] <... openat resumed>) = 4 [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6205] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6210 attached [pid 6209] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... ioctl resumed>) = 0 [pid 6210] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6204] close(3 [pid 6210] <... rseq resumed>) = 0 [pid 6204] <... close resumed>) = 0 [pid 6210] set_robust_list(0x7fe7c32469a0, 24 [pid 6208] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6210] <... set_robust_list resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 6204] close(4 [pid 6210] rt_sigprocmask(SIG_SETMASK, [], [pid 6209] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6205] <... ioctl resumed>) = 0 [pid 6210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6206] <... write resumed>) = 2097152 [pid 6204] <... close resumed>) = 0 [pid 6204] mkdir("./file0", 0777 [pid 6206] munmap(0x7fe7bae00000, 138412032 [pid 6205] close(3 [pid 6210] memfd_create("syzkaller", 0 [pid 6204] <... mkdir resumed>) = 0 [pid 6204] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6210] <... memfd_create resumed>) = 3 [pid 6205] <... close resumed>) = 0 [pid 6205] close(4) = 0 [pid 6205] mkdir("./file0", 0777) = 0 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6206] <... munmap resumed>) = 0 [pid 6205] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6210] <... mmap resumed>) = 0x7fe7bae00000 [pid 6206] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 125.060496][ T6204] loop2: detected capacity change from 0 to 4096 [ 125.065313][ T6205] loop0: detected capacity change from 0 to 4096 [ 125.100140][ T6204] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6206] ioctl(4, LOOP_SET_FD, 3 [pid 6208] <... write resumed>) = 2097152 [pid 6208] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6206] <... ioctl resumed>) = 0 [pid 6206] close(3) = 0 [pid 6206] close(4) = 0 [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6206] mkdir("./file0", 0777 [pid 6208] <... openat resumed>) = 4 [pid 6206] <... mkdir resumed>) = 0 [pid 6208] ioctl(4, LOOP_SET_FD, 3 [ 125.120763][ T6205] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 125.131273][ T6206] loop4: detected capacity change from 0 to 4096 [ 125.152428][ T6208] loop1: detected capacity change from 0 to 4096 [pid 6206] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6208] <... ioctl resumed>) = 0 [pid 6208] close(3) = 0 [pid 6208] close(4) = 0 [pid 6208] mkdir("./file0", 0777) = 0 [pid 6208] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 125.164207][ T6206] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6210] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6204] <... mount resumed>) = 0 [pid 6204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6204] chdir("./file0") = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6204] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... write resumed>) = 2097152 [pid 6204] <... futex resumed>) = 1 [pid 6204] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6202] <... futex resumed>) = 0 [pid 6202] exit_group(0 [pid 6204] <... futex resumed>) = ? [pid 6202] <... exit_group resumed>) = ? [pid 6204] +++ exited with 0 +++ [pid 6205] <... mount resumed>) = 0 [pid 6205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6202] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6202, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6205] <... openat resumed>) = 3 [pid 6210] munmap(0x7fe7bae00000, 138412032 [pid 5061] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6205] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 125.203768][ T6208] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5061] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./113/binderfs", [pid 6205] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] exit_group(0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6205] <... futex resumed>) = ? [pid 6201] <... exit_group resumed>) = ? [pid 5061] unlink("./113/binderfs" [pid 6205] +++ exited with 0 +++ [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... munmap resumed>) = 0 [pid 6206] <... mount resumed>) = 0 [pid 6201] +++ exited with 0 +++ [pid 6210] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6206] chdir("./file0") = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 6210] <... openat resumed>) = 4 [pid 6206] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 6208] <... mount resumed>) = 0 [pid 6210] <... ioctl resumed>) = 0 [pid 6206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./114/binderfs") = 0 [pid 5059] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6206] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = 0 [pid 6208] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./113/file0", [pid 6206] <... futex resumed>) = 1 [pid 6203] <... futex resumed>) = 0 [pid 5059] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6208] chdir("./file0" [pid 6206] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] exit_group(0 [pid 5061] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6208] <... chdir resumed>) = 0 [pid 6206] <... futex resumed>) = ? [pid 6203] <... exit_group resumed>) = ? [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6206] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5061] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6203] +++ exited with 0 +++ [pid 5059] getdents64(4, [pid 6208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6210] close(3 [pid 6208] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] newfstatat(4, "", [pid 5059] close(4 [pid 6210] <... close resumed>) = 0 [pid 5063] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6210] close(4 [pid 6208] <... futex resumed>) = 1 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 6208] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6207] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] rmdir("./114/file0" [pid 5063] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 6210] <... close resumed>) = 0 [pid 6207] exit_group(0 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6210] mkdir("./file0", 0777 [pid 6208] <... futex resumed>) = ? [pid 6207] <... exit_group resumed>) = ? [pid 5063] newfstatat(3, "", [pid 5061] close(4 [pid 5059] getdents64(3, [pid 6210] <... mkdir resumed>) = 0 [pid 6208] +++ exited with 0 +++ [pid 6207] +++ exited with 0 +++ [pid 5061] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] rmdir("./113/file0" [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6207, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] close(3 [pid 5063] getdents64(3, [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... close resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] rmdir("./114" [pid 6210] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [ 125.291404][ T6210] loop3: detected capacity change from 0 to 4096 [pid 5063] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5059] mkdir("./115", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./112/binderfs", [pid 5061] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] unlink("./112/binderfs" [pid 5061] rmdir("./113" [pid 5060] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5063] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] mkdir("./114", 0777 [pid 5060] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./112/binderfs") = 0 [pid 5059] <... openat resumed>) = 3 [pid 5060] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = 0 [pid 5063] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5060] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] newfstatat(AT_FDCWD, "./112/file0", [pid 5063] newfstatat(AT_FDCWD, "./112/file0", [pid 5061] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5060] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6210] <... mount resumed>) = 0 [pid 5063] getdents64(4, [pid 5059] <... ioctl resumed>) = 0 [pid 6210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] close(3 [pid 6210] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 6210] chdir("./file0" [pid 5063] close(4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [ 125.333629][ T6210] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6210] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] close(4 [pid 6210] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6210] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6211 attached [pid 6210] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] exit_group(0 [pid 5060] <... close resumed>) = 0 [pid 6211] set_robust_list(0x55558e6e36a0, 24 [pid 6210] <... futex resumed>) = ? [pid 6209] <... exit_group resumed>) = ? [pid 5063] rmdir("./112/file0" [pid 5060] rmdir("./112/file0" [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6211 [pid 6211] <... set_robust_list resumed>) = 0 [pid 6211] chdir("./115" [pid 6210] +++ exited with 0 +++ [pid 6209] +++ exited with 0 +++ [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6211] <... chdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6211] setpgid(0, 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 6211] <... setpgid resumed>) = 0 [pid 5063] close(3 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5060] rmdir("./112") = 0 [pid 5062] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./112" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./113", 0777 [pid 6211] <... openat resumed>) = 3 [pid 6211] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... mkdir resumed>) = 0 [pid 6211] <... write resumed>) = 4 [pid 6211] close(3) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6211] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 5063] mkdir("./113", 0777 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] newfstatat(3, "", [pid 6211] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6211] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6211] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 6211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 6211] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] newfstatat(AT_FDCWD, "./112/binderfs", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6211] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6211] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6212 attached [pid 6211] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] unlink("./112/binderfs" [pid 6212] set_robust_list(0x55558e6e36a0, 24 [pid 6211] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6211] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6212 ./strace-static-x86_64: Process 6213 attached [pid 6212] chdir("./114" [pid 5062] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6213] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6212] <... chdir resumed>) = 0 [pid 6211] <... clone3 resumed> => {parent_tid=[6213]}, 88) = 6213 [pid 6213] <... rseq resumed>) = 0 [pid 6211] rt_sigprocmask(SIG_SETMASK, [], [pid 6213] set_robust_list(0x7fe7c32469a0, 24 [pid 6211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6213] <... set_robust_list resumed>) = 0 [pid 6211] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] rt_sigprocmask(SIG_SETMASK, [], [pid 6211] <... futex resumed>) = 0 [pid 6213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6211] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = 0 [pid 6213] memfd_create("syzkaller", 0 [pid 6212] <... prctl resumed>) = 0 [pid 6212] setpgid(0, 0 [pid 5062] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6212] <... setpgid resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6212] <... openat resumed>) = 3 [pid 6212] write(3, "1000", 4 [pid 5062] newfstatat(AT_FDCWD, "./112/file0", [pid 6212] <... write resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6212] close(3 [pid 5062] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6213] <... memfd_create resumed>) = 3 [pid 6212] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6212] symlink("/dev/binderfs", "./binderfs" [pid 5062] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6213] <... mmap resumed>) = 0x7fe7bae00000 [pid 6212] <... symlink resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 6212] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(4, "", [pid 6212] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6212] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] getdents64(4, [pid 6212] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6212] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] getdents64(4, [pid 6212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] close(4 [pid 6212] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] <... close resumed>) = 0 [pid 6212] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] rmdir("./112/file0" [pid 6212] <... mprotect resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6212] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] getdents64(3, [pid 6212] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] close(3) = 0 ./strace-static-x86_64: Process 6214 attached [pid 6212] <... clone3 resumed> => {parent_tid=[6214]}, 88) = 6214 [pid 6213] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6214] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6212] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... ioctl resumed>) = 0 [pid 5062] rmdir("./112" [pid 5060] <... ioctl resumed>) = 0 [pid 6214] <... rseq resumed>) = 0 [pid 6212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6214] set_robust_list(0x7fe7c32469a0, 24 [pid 6212] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] mkdir("./113", 0777 [pid 6214] <... set_robust_list resumed>) = 0 [pid 6212] <... futex resumed>) = 0 [pid 5063] close(3 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] close(3 [pid 6214] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6212] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6214] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6215 ./strace-static-x86_64: Process 6215 attached [pid 6214] <... memfd_create resumed>) = 3 [pid 6215] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6215] chdir("./113") = 0 ./strace-static-x86_64: Process 6216 attached [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6216] set_robust_list(0x55558e6e36a0, 24 [pid 6215] <... prctl resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6216 [pid 6214] <... mmap resumed>) = 0x7fe7bae00000 [pid 6216] <... set_robust_list resumed>) = 0 [pid 6215] setpgid(0, 0 [pid 6216] chdir("./113" [pid 6215] <... setpgid resumed>) = 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6216] <... chdir resumed>) = 0 [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6216] setpgid(0, 0 [pid 6215] <... openat resumed>) = 3 [pid 6216] <... setpgid resumed>) = 0 [pid 6215] write(3, "1000", 4 [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6215] <... write resumed>) = 4 [pid 6216] <... openat resumed>) = 3 [pid 6215] close(3 [pid 6216] write(3, "1000", 4 [pid 6215] <... close resumed>) = 0 [pid 6216] <... write resumed>) = 4 [pid 6215] symlink("/dev/binderfs", "./binderfs" [pid 6216] close(3 [pid 6215] <... symlink resumed>) = 0 [pid 6216] <... close resumed>) = 0 [pid 6216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6215] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6215] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6216] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6216] <... futex resumed>) = 0 [pid 6215] <... mprotect resumed>) = 0 [pid 6216] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6216] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6216] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6215] <... clone3 resumed> => {parent_tid=[6217]}, 88) = 6217 [pid 6213] <... write resumed>) = 2097152 [pid 6216] <... mmap resumed>) = 0x7fe7c3226000 [pid 6215] rt_sigprocmask(SIG_SETMASK, [], [pid 6213] munmap(0x7fe7bae00000, 138412032 [pid 6216] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6215] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6217 attached [pid 6217] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6217] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6215] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] <... futex resumed>) = 0 [pid 6217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6215] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6217] memfd_create("syzkaller", 0 [pid 6216] <... mprotect resumed>) = 0 [pid 6216] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6216] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6218]}, 88) = 6218 ./strace-static-x86_64: Process 6218 attached [pid 6217] <... memfd_create resumed>) = 3 [pid 6216] rt_sigprocmask(SIG_SETMASK, [], [pid 6214] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6213] <... munmap resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] <... mmap resumed>) = 0x7fe7bae00000 [pid 6216] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6218] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6216] <... futex resumed>) = 0 [pid 6213] <... openat resumed>) = 4 [pid 5062] close(3 [pid 6213] ioctl(4, LOOP_SET_FD, 3 [pid 6216] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 6218] <... rseq resumed>) = 0 [pid 6218] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6218] memfd_create("syzkaller", 0 [pid 6213] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6219 attached [pid 6218] <... memfd_create resumed>) = 3 [pid 6213] close(3) = 0 [pid 6213] close(4) = 0 [pid 6213] mkdir("./file0", 0777 [pid 6219] set_robust_list(0x55558e6e36a0, 24 [pid 6213] <... mkdir resumed>) = 0 [pid 6219] <... set_robust_list resumed>) = 0 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6217] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6219 [pid 6219] chdir("./113" [pid 6218] <... mmap resumed>) = 0x7fe7bae00000 [pid 6213] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6214] <... write resumed>) = 2097152 [pid 6219] <... chdir resumed>) = 0 [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6219] setpgid(0, 0) = 0 [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 125.596050][ T6213] loop0: detected capacity change from 0 to 4096 [pid 6219] write(3, "1000", 4) = 4 [pid 6219] close(3) = 0 [pid 6219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6219] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6219] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6219] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6219] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6219] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6219] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6214] munmap(0x7fe7bae00000, 138412032./strace-static-x86_64: Process 6220 attached [pid 6219] <... clone3 resumed> => {parent_tid=[6220]}, 88) = 6220 [pid 6219] rt_sigprocmask(SIG_SETMASK, [], [pid 6220] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6218] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6220] <... rseq resumed>) = 0 [pid 6219] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6220] set_robust_list(0x7fe7c32469a0, 24 [pid 6219] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6214] <... munmap resumed>) = 0 [pid 6220] <... set_robust_list resumed>) = 0 [pid 6220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6220] memfd_create("syzkaller", 0) = 3 [pid 6220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6217] <... write resumed>) = 2097152 [pid 6214] close(3 [pid 6217] munmap(0x7fe7bae00000, 138412032 [pid 6214] <... close resumed>) = 0 [pid 6217] <... munmap resumed>) = 0 [pid 6214] close(4 [pid 6218] <... write resumed>) = 2097152 [pid 6214] <... close resumed>) = 0 [pid 6214] mkdir("./file0", 0777) = 0 [pid 6218] munmap(0x7fe7bae00000, 138412032 [pid 6214] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6218] <... munmap resumed>) = 0 [ 125.650624][ T6213] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 125.681949][ T6214] loop2: detected capacity change from 0 to 4096 [pid 6217] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6217] ioctl(4, LOOP_SET_FD, 3 [pid 6218] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 6213] <... mount resumed>) = 0 [pid 6217] <... ioctl resumed>) = 0 [pid 6213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6217] close(3) = 0 [pid 6213] <... openat resumed>) = 3 [pid 6217] close(4 [pid 6213] chdir("./file0" [pid 6217] <... close resumed>) = 0 [pid 6213] <... chdir resumed>) = 0 [pid 6217] mkdir("./file0", 0777) = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6218] <... ioctl resumed>) = 0 [pid 6217] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6213] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6220] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6218] close(3) = 0 [pid 6218] close(4) = 0 [pid 6218] mkdir("./file0", 0777) = 0 [ 125.723820][ T6217] loop4: detected capacity change from 0 to 4096 [ 125.730298][ T6214] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 125.741303][ T6218] loop1: detected capacity change from 0 to 4096 [ 125.761718][ T6217] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6218] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6213] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] <... futex resumed>) = 0 [pid 6211] exit_group(0) = ? [pid 6213] <... futex resumed>) = ? [pid 6213] +++ exited with 0 +++ [pid 6211] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./115/binderfs" [pid 6214] <... mount resumed>) = 0 [pid 6214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6220] <... write resumed>) = 2097152 [ 125.776849][ T6218] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5059] <... unlink resumed>) = 0 [pid 6220] munmap(0x7fe7bae00000, 138412032 [pid 6214] chdir("./file0" [pid 5059] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6214] <... chdir resumed>) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6214] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6212] <... futex resumed>) = 0 [pid 6214] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] exit_group(0 [pid 6214] <... futex resumed>) = ? [pid 6212] <... exit_group resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = 0 [pid 6220] <... munmap resumed>) = 0 [pid 6217] <... mount resumed>) = 0 [pid 6212] +++ exited with 0 +++ [pid 5059] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6220] <... openat resumed>) = 4 [pid 6218] <... mount resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6212, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6217] <... openat resumed>) = 3 [pid 5061] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./115/file0", [pid 6220] ioctl(4, LOOP_SET_FD, 3 [pid 6218] <... openat resumed>) = 3 [pid 6217] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6218] chdir("./file0") = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6218] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] <... ioctl resumed>) = 0 [pid 6217] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] close(3 [pid 6218] <... futex resumed>) = 1 [pid 6217] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6216] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6220] <... close resumed>) = 0 [pid 6218] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6216] exit_group(0 [pid 5061] newfstatat(3, "", [pid 5059] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6220] close(4 [pid 6218] <... futex resumed>) = ? [pid 6217] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] <... exit_group resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6220] <... close resumed>) = 0 [pid 6218] +++ exited with 0 +++ [pid 6217] <... futex resumed>) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] exit_group(0 [pid 6220] mkdir("./file0", 0777 [pid 6215] <... exit_group resumed>) = ? [pid 5061] getdents64(3, [pid 5059] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6220] <... mkdir resumed>) = 0 [pid 6216] +++ exited with 0 +++ [pid 5061] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6216, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] newfstatat(AT_FDCWD, "./114/binderfs", [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6217] +++ exited with 0 +++ [pid 6220] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6215] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] unlink("./114/binderfs" [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./113/binderfs") = 0 [pid 5060] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5063] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./115/file0" [pid 5063] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", [pid 5059] close(3) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] rmdir("./115") = 0 [pid 5063] getdents64(3, [pid 5059] mkdir("./116", 0777 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5063] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./113/binderfs", [pid 5060] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] unlink("./113/binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./113/file0", [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] getdents64(4, [pid 5061] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 6220] <... mount resumed>) = 0 [pid 5063] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./114/file0", [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4) = 0 [pid 5060] rmdir("./113/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./113") = 0 [ 125.866766][ T6220] loop3: detected capacity change from 0 to 4096 [ 125.895212][ T6220] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5060] mkdir("./114", 0777 [pid 6220] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./113/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6220] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] <... chdir resumed>) = 0 [pid 5063] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... mkdir resumed>) = 0 [pid 6220] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6220] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6219] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... openat resumed>) = 4 [pid 6220] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] exit_group(0 [pid 5063] newfstatat(4, "", [pid 5061] newfstatat(4, "", [pid 6220] <... futex resumed>) = ? [pid 6219] <... exit_group resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6220] +++ exited with 0 +++ [pid 5063] getdents64(4, [pid 5060] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5063] close(4) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./113/file0" [pid 5061] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] rmdir("./114/file0" [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5061] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 6219] +++ exited with 0 +++ [pid 5063] rmdir("./113" [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5061] close(3 [pid 5062] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] rmdir("./114" [pid 5063] mkdir("./114", 0777 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] mkdir("./115", 0777 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6221 ./strace-static-x86_64: Process 6221 attached [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./113/binderfs", [pid 6221] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6221] <... set_robust_list resumed>) = 0 [pid 5062] unlink("./113/binderfs" [pid 6221] chdir("./116" [pid 5062] <... unlink resumed>) = 0 [pid 6221] <... chdir resumed>) = 0 [pid 5062] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6221] setpgid(0, 0) = 0 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6221] write(3, "1000", 4) = 4 [pid 6221] close(3) = 0 [pid 6221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6221] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 6221] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 6221] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 6221] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] close(4 [pid 6221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 6221] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] rmdir("./113/file0" [pid 6221] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... rmdir resumed>) = 0 [pid 6221] <... mprotect resumed>) = 0 [pid 6221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] getdents64(3, [pid 5060] close(3 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 6221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... ioctl resumed>) = 0 [pid 5062] rmdir("./113" [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6221] <... clone3 resumed> => {parent_tid=[6222]}, 88) = 6222 [pid 6221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] mkdir("./114", 0777 [pid 6221] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... mkdir resumed>) = 0 [pid 6221] <... futex resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6223 ./strace-static-x86_64: Process 6222 attached [pid 6221] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... openat resumed>) = 3 [pid 5061] close(3 [pid 6222] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6222] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6223 attached [pid 5063] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6222] <... set_robust_list resumed>) = 0 [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 6224 attached [pid 6223] set_robust_list(0x55558e6e36a0, 24 [pid 6222] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6224] set_robust_list(0x55558e6e36a0, 24 [pid 6223] <... set_robust_list resumed>) = 0 [pid 6222] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6225 attached [pid 6224] <... set_robust_list resumed>) = 0 [pid 6223] chdir("./114" [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6224 [pid 6225] set_robust_list(0x55558e6e36a0, 24 [pid 6224] chdir("./115" [pid 6223] <... chdir resumed>) = 0 [pid 6224] <... chdir resumed>) = 0 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6225] <... set_robust_list resumed>) = 0 [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6223] <... prctl resumed>) = 0 [pid 6222] memfd_create("syzkaller", 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6225 [pid 6225] chdir("./114" [pid 6223] setpgid(0, 0 [pid 6224] <... prctl resumed>) = 0 [pid 6223] <... setpgid resumed>) = 0 [pid 6222] <... memfd_create resumed>) = 3 [pid 6225] <... chdir resumed>) = 0 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6224] setpgid(0, 0 [pid 6223] <... openat resumed>) = 3 [pid 6224] <... setpgid resumed>) = 0 [pid 6223] write(3, "1000", 4 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6223] <... write resumed>) = 4 [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6223] close(3 [pid 6225] <... prctl resumed>) = 0 [pid 6223] <... close resumed>) = 0 [pid 6225] setpgid(0, 0 [pid 6224] <... openat resumed>) = 3 [pid 6223] symlink("/dev/binderfs", "./binderfs" [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6225] <... setpgid resumed>) = 0 [pid 6223] <... symlink resumed>) = 0 [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6224] write(3, "1000", 4 [pid 6222] <... mmap resumed>) = 0x7fe7bae00000 [pid 6225] <... openat resumed>) = 3 [pid 6224] <... write resumed>) = 4 [pid 6223] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] write(3, "1000", 4 [pid 6224] close(3) = 0 [pid 6223] <... futex resumed>) = 0 [pid 6225] <... write resumed>) = 4 [pid 6224] symlink("/dev/binderfs", "./binderfs" [pid 6223] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6225] close(3 [pid 6224] <... symlink resumed>) = 0 [pid 6223] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6225] <... close resumed>) = 0 [pid 6225] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6224] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6224] <... futex resumed>) = 0 [pid 6223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6224] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6225] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6224] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6223] <... mmap resumed>) = 0x7fe7c3226000 [pid 6223] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6223] <... mprotect resumed>) = 0 [pid 6224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6225] <... futex resumed>) = 0 [pid 6224] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6223] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6225] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6224] <... mprotect resumed>) = 0 [pid 6225] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6225] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6224] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6223] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6225] <... mmap resumed>) = 0x7fe7c3226000 [pid 6223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6225] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6226 attached [pid 6224] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6226] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6223] <... clone3 resumed> => {parent_tid=[6226]}, 88) = 6226 ./strace-static-x86_64: Process 6227 attached [pid 6226] <... rseq resumed>) = 0 [pid 6223] rt_sigprocmask(SIG_SETMASK, [], [pid 6227] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6226] set_robust_list(0x7fe7c32469a0, 24 [pid 6227] <... rseq resumed>) = 0 [pid 6226] <... set_robust_list resumed>) = 0 [pid 6225] <... mprotect resumed>) = 0 [pid 6224] <... clone3 resumed> => {parent_tid=[6227]}, 88) = 6227 [pid 6223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6227] set_robust_list(0x7fe7c32469a0, 24 [pid 6226] rt_sigprocmask(SIG_SETMASK, [], [pid 6224] rt_sigprocmask(SIG_SETMASK, [], [pid 6223] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... ioctl resumed>) = 0 [pid 6227] <... set_robust_list resumed>) = 0 [pid 6226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6225] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6223] <... futex resumed>) = 0 [pid 6227] rt_sigprocmask(SIG_SETMASK, [], [pid 6225] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] close(3 [pid 6227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6226] memfd_create("syzkaller", 0 [pid 6224] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6227] memfd_create("syzkaller", 0 [pid 6226] <... memfd_create resumed>) = 3 [pid 6225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6224] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 6224] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6228 attached [pid 6222] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6228] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6225] <... clone3 resumed> => {parent_tid=[6228]}, 88) = 6228 [pid 6228] <... rseq resumed>) = 0 [pid 6225] rt_sigprocmask(SIG_SETMASK, [], [pid 6227] <... memfd_create resumed>) = 3 [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6226] <... mmap resumed>) = 0x7fe7bae00000 [pid 6225] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6229 attached [pid 6228] set_robust_list(0x7fe7c32469a0, 24 [pid 6225] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] set_robust_list(0x55558e6e36a0, 24 [pid 6228] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6229 [pid 6229] <... set_robust_list resumed>) = 0 [pid 6228] rt_sigprocmask(SIG_SETMASK, [], [pid 6227] <... mmap resumed>) = 0x7fe7bae00000 [pid 6225] <... futex resumed>) = 0 [pid 6229] chdir("./114" [pid 6228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6225] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6229] <... chdir resumed>) = 0 [pid 6228] memfd_create("syzkaller", 0 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6229] setpgid(0, 0) = 0 [pid 6228] <... memfd_create resumed>) = 3 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6226] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6229] <... openat resumed>) = 3 [pid 6229] write(3, "1000", 4 [pid 6228] <... mmap resumed>) = 0x7fe7bae00000 [pid 6229] <... write resumed>) = 4 [pid 6229] close(3) = 0 [pid 6229] symlink("/dev/binderfs", "./binderfs" [pid 6227] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6229] <... symlink resumed>) = 0 [pid 6228] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6226] <... write resumed>) = 2097152 [pid 6222] <... write resumed>) = 2097152 [pid 6229] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] munmap(0x7fe7bae00000, 138412032 [pid 6222] munmap(0x7fe7bae00000, 138412032 [pid 6229] <... futex resumed>) = 0 [pid 6229] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6222] <... munmap resumed>) = 0 [pid 6229] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6229] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6226] <... munmap resumed>) = 0 [pid 6226] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6222] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6229] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6226] <... openat resumed>) = 4 [pid 6222] <... openat resumed>) = 4 [pid 6229] <... mprotect resumed>) = 0 [pid 6226] ioctl(4, LOOP_SET_FD, 3 [pid 6222] ioctl(4, LOOP_SET_FD, 3 [pid 6229] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6228] <... write resumed>) = 2097152 [pid 6227] <... write resumed>) = 2097152 [pid 6226] <... ioctl resumed>) = 0 [pid 6229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6228] munmap(0x7fe7bae00000, 138412032 [pid 6227] munmap(0x7fe7bae00000, 138412032 [pid 6226] close(3 [pid 6222] <... ioctl resumed>) = 0 [pid 6222] close(3) = 0 [pid 6222] close(4 [pid 6227] <... munmap resumed>) = 0 [pid 6226] <... close resumed>) = 0 [pid 6229] <... clone3 resumed> => {parent_tid=[6230]}, 88) = 6230 ./strace-static-x86_64: Process 6230 attached [pid 6229] rt_sigprocmask(SIG_SETMASK, [], [pid 6228] <... munmap resumed>) = 0 [pid 6227] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6226] close(4 [pid 6222] <... close resumed>) = 0 [pid 6230] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6227] <... openat resumed>) = 4 [pid 6226] <... close resumed>) = 0 [pid 6222] mkdir("./file0", 0777 [pid 6230] <... rseq resumed>) = 0 [pid 6229] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... openat resumed>) = 4 [pid 6227] ioctl(4, LOOP_SET_FD, 3 [pid 6226] mkdir("./file0", 0777 [pid 6222] <... mkdir resumed>) = 0 [pid 6230] set_robust_list(0x7fe7c32469a0, 24 [pid 6222] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6230] <... set_robust_list resumed>) = 0 [pid 6229] <... futex resumed>) = 0 [pid 6226] <... mkdir resumed>) = 0 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], [pid 6229] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 6230] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 126.246455][ T6226] loop1: detected capacity change from 0 to 4096 [ 126.253943][ T6222] loop0: detected capacity change from 0 to 4096 [ 126.279013][ T6227] loop2: detected capacity change from 0 to 4096 [ 126.279192][ T6222] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6230] memfd_create("syzkaller", 0 [pid 6227] <... ioctl resumed>) = 0 [pid 6226] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6227] close(3 [pid 6230] <... memfd_create resumed>) = 3 [pid 6227] <... close resumed>) = 0 [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6227] close(4 [pid 6230] <... mmap resumed>) = 0x7fe7bae00000 [pid 6227] <... close resumed>) = 0 [ 126.285822][ T6228] loop4: detected capacity change from 0 to 4096 [pid 6227] mkdir("./file0", 0777 [pid 6228] <... ioctl resumed>) = 0 [pid 6227] <... mkdir resumed>) = 0 [pid 6228] close(3 [pid 6227] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6228] <... close resumed>) = 0 [pid 6228] close(4) = 0 [pid 6228] mkdir("./file0", 0777) = 0 [pid 6228] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6226] <... mount resumed>) = 0 [ 126.317420][ T6226] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 126.329964][ T6227] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6222] <... mount resumed>) = 0 [pid 6226] chdir("./file0" [pid 6222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6226] <... chdir resumed>) = 0 [pid 6222] <... openat resumed>) = 3 [pid 6226] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6222] chdir("./file0" [pid 6226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6222] <... chdir resumed>) = 0 [pid 6230] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6226] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6226] <... futex resumed>) = 1 [pid 6223] <... futex resumed>) = 0 [pid 6227] <... mount resumed>) = 0 [pid 6226] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6223] exit_group(0 [pid 6222] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6226] <... futex resumed>) = ? [pid 6223] <... exit_group resumed>) = ? [pid 6222] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... openat resumed>) = 3 [pid 6226] +++ exited with 0 +++ [pid 6227] chdir("./file0" [pid 6223] +++ exited with 0 +++ [pid 6227] <... chdir resumed>) = 0 [pid 6227] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5060] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6222] <... futex resumed>) = 1 [pid 6221] <... futex resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 6221] exit_group(0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6221] <... exit_group resumed>) = ? [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./114/binderfs", [pid 6227] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] +++ exited with 0 +++ [pid 6221] +++ exited with 0 +++ [pid 6227] <... futex resumed>) = 1 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6221, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6227] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] unlink("./114/binderfs" [pid 6224] <... futex resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6224] exit_group(0 [pid 5060] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] <... futex resumed>) = ? [pid 6224] <... exit_group resumed>) = ? [ 126.362504][ T6228] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5059] <... openat resumed>) = 3 [pid 6227] +++ exited with 0 +++ [pid 6224] +++ exited with 0 +++ [pid 5060] <... umount2 resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6224, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5060] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./114/file0", [pid 5061] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6230] <... write resumed>) = 2097152 [pid 5061] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] munmap(0x7fe7bae00000, 138412032 [pid 5061] newfstatat(3, "", [pid 5060] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 5061] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] getdents64(4, [pid 5061] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 5059] newfstatat(AT_FDCWD, "./116/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./115/binderfs", [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6230] <... munmap resumed>) = 0 [pid 5061] unlink("./115/binderfs" [pid 5060] <... close resumed>) = 0 [pid 5059] unlink("./116/binderfs" [pid 6230] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... unlink resumed>) = 0 [pid 5060] rmdir("./114/file0" [pid 6230] <... openat resumed>) = 4 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 6230] <... ioctl resumed>) = 0 [pid 6228] <... mount resumed>) = 0 [pid 5061] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 6230] close(3) = 0 [pid 6228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./114" [pid 5059] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./115/file0", [pid 5060] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./116/file0", [pid 6228] chdir("./file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] mkdir("./115", 0777 [pid 6230] <... close resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 5061] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... mkdir resumed>) = 0 [pid 5059] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] mkdir("./file0", 0777 [pid 6228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6228] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] <... mkdir resumed>) = 0 [pid 6228] <... futex resumed>) = 1 [pid 6225] <... futex resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6230] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6228] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] exit_group(0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6228] <... futex resumed>) = ? [pid 6225] <... exit_group resumed>) = ? [pid 5061] getdents64(4, [pid 5059] <... openat resumed>) = 4 [pid 6228] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./115/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6225] +++ exited with 0 +++ [pid 5059] newfstatat(4, "", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5059] getdents64(4, [pid 5063] <... restart_syscall resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5063] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./115") = 0 [pid 5061] mkdir("./116", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(4 [pid 5063] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] rmdir("./116/file0" [pid 5063] newfstatat(3, "", [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5059] getdents64(3, [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] rmdir("./116" [pid 5063] unlink("./114/binderfs" [pid 5059] <... rmdir resumed>) = 0 [ 126.456166][ T6230] loop3: detected capacity change from 0 to 4096 [ 126.486475][ T6230] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5063] <... unlink resumed>) = 0 [pid 5059] mkdir("./117", 0777) = 0 [pid 6230] <... mount resumed>) = 0 [pid 5063] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6230] chdir("./file0") = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6230] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 6230] <... futex resumed>) = 1 [pid 6229] <... futex resumed>) = 0 [pid 6229] exit_group(0) = ? [pid 5063] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] +++ exited with 0 +++ [pid 6229] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... ioctl resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./114/file0", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5063] newfstatat(4, "", [pid 5062] newfstatat(3, "", [pid 5060] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./114/binderfs") = 0 [pid 5062] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./114/file0" [pid 5063] getdents64(4, [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./114") = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] mkdir("./115", 0777 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6231 ./strace-static-x86_64: Process 6231 attached [pid 5063] getdents64(4, [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./114/file0") = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6231] set_robust_list(0x55558e6e36a0, 24 [pid 5063] getdents64(3, [pid 6231] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./114" [pid 6231] chdir("./115") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./115", 0777 [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... mkdir resumed>) = 0 [pid 6231] <... prctl resumed>) = 0 [pid 5061] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... ioctl resumed>) = 0 [pid 6231] setpgid(0, 0 [pid 5061] <... close resumed>) = 0 [pid 6231] <... setpgid resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] close(3) = 0 [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6233 ./strace-static-x86_64: Process 6233 attached ./strace-static-x86_64: Process 6232 attached [pid 6231] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6232 [pid 6231] write(3, "1000", 4 [pid 6232] set_robust_list(0x55558e6e36a0, 24 [pid 6231] <... write resumed>) = 4 [pid 6232] <... set_robust_list resumed>) = 0 [pid 6233] set_robust_list(0x55558e6e36a0, 24 [pid 6232] chdir("./116" [pid 6233] <... set_robust_list resumed>) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 6231] close(3 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6231] <... close resumed>) = 0 [pid 6232] <... prctl resumed>) = 0 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 6233] chdir("./117" [pid 6231] <... symlink resumed>) = 0 [pid 6232] setpgid(0, 0) = 0 [pid 6231] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6231] <... futex resumed>) = 0 [pid 6231] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6232] <... openat resumed>) = 3 [pid 6231] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6233] <... chdir resumed>) = 0 [pid 6232] write(3, "1000", 4 [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] <... write resumed>) = 4 [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6232] close(3 [pid 6231] <... mmap resumed>) = 0x7fe7c3226000 [pid 6231] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6232] <... close resumed>) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs" [pid 6231] <... mprotect resumed>) = 0 [pid 6231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6232] <... symlink resumed>) = 0 [pid 6233] <... prctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6233] setpgid(0, 0 [pid 6231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6234]}, 88) = 6234 [pid 6232] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] close(3 [pid 6233] <... setpgid resumed>) = 0 [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... close resumed>) = 0 ./strace-static-x86_64: Process 6234 attached [pid 6231] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6234] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6232] <... futex resumed>) = 0 [pid 6234] <... rseq resumed>) = 0 [pid 6233] <... openat resumed>) = 3 [pid 6232] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6234] set_robust_list(0x7fe7c32469a0, 24 [pid 6233] write(3, "1000", 4 [pid 6234] <... set_robust_list resumed>) = 0 [pid 6233] <... write resumed>) = 4 [pid 6234] rt_sigprocmask(SIG_SETMASK, [], [pid 6233] close(3./strace-static-x86_64: Process 6235 attached [pid 6234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6233] <... close resumed>) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6232] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6231] <... futex resumed>) = 0 [pid 6234] memfd_create("syzkaller", 0 [pid 6232] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6231] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6233] <... symlink resumed>) = 0 [pid 6235] set_robust_list(0x55558e6e36a0, 24 [pid 6233] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6233] <... futex resumed>) = 0 [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6234] <... memfd_create resumed>) = 3 [pid 6233] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6232] <... mmap resumed>) = 0x7fe7c3226000 [pid 6235] <... set_robust_list resumed>) = 0 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6233] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6232] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6235 [pid 6235] chdir("./115" [pid 6234] <... mmap resumed>) = 0x7fe7bae00000 [pid 6233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6232] <... mprotect resumed>) = 0 [pid 6235] <... chdir resumed>) = 0 [pid 6233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] close(3 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6232] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] <... mmap resumed>) = 0x7fe7c3226000 [pid 6232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6235] <... prctl resumed>) = 0 [pid 6233] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6236 attached ) = 0 [pid 6232] <... clone3 resumed> => {parent_tid=[6236]}, 88) = 6236 [pid 6236] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6232] rt_sigprocmask(SIG_SETMASK, [], [pid 6233] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6236] <... rseq resumed>) = 0 [pid 6235] setpgid(0, 0 [pid 6232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6237 attached [pid 6236] set_robust_list(0x7fe7c32469a0, 24 [pid 6235] <... setpgid resumed>) = 0 [pid 6233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6232] <... futex resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6237 [pid 6237] set_robust_list(0x55558e6e36a0, 24 [pid 6236] <... set_robust_list resumed>) = 0 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6232] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6238 attached [pid 6236] rt_sigprocmask(SIG_SETMASK, [], [pid 6233] <... clone3 resumed> => {parent_tid=[6238]}, 88) = 6238 [pid 6237] <... set_robust_list resumed>) = 0 [pid 6237] chdir("./115" [pid 6236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6238] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6237] <... chdir resumed>) = 0 [pid 6236] memfd_create("syzkaller", 0 [pid 6235] <... openat resumed>) = 3 [pid 6233] rt_sigprocmask(SIG_SETMASK, [], [pid 6238] <... rseq resumed>) = 0 [pid 6237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6238] set_robust_list(0x7fe7c32469a0, 24 [pid 6237] <... prctl resumed>) = 0 [pid 6235] write(3, "1000", 4 [pid 6233] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... set_robust_list resumed>) = 0 [pid 6237] setpgid(0, 0 [pid 6235] <... write resumed>) = 4 [pid 6233] <... futex resumed>) = 0 [pid 6238] rt_sigprocmask(SIG_SETMASK, [], [pid 6237] <... setpgid resumed>) = 0 [pid 6236] <... memfd_create resumed>) = 3 [pid 6235] close(3 [pid 6233] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6235] <... close resumed>) = 0 [pid 6236] <... mmap resumed>) = 0x7fe7bae00000 [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 6237] <... openat resumed>) = 3 [pid 6235] <... symlink resumed>) = 0 [pid 6238] memfd_create("syzkaller", 0 [pid 6237] write(3, "1000", 4) = 4 [pid 6238] <... memfd_create resumed>) = 3 [pid 6237] close(3 [pid 6235] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6237] <... close resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6237] symlink("/dev/binderfs", "./binderfs" [pid 6235] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6234] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6235] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6237] <... symlink resumed>) = 0 [pid 6235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6235] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6237] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6237] <... futex resumed>) = 0 [pid 6235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6237] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6239 attached [pid 6237] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6239] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6237] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6235] <... clone3 resumed> => {parent_tid=[6239]}, 88) = 6239 [pid 6239] <... rseq resumed>) = 0 [pid 6237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6235] rt_sigprocmask(SIG_SETMASK, [], [pid 6236] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6239] set_robust_list(0x7fe7c32469a0, 24 [pid 6238] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6234] <... write resumed>) = 2097152 [pid 6239] <... set_robust_list resumed>) = 0 [pid 6237] <... mmap resumed>) = 0x7fe7c3226000 [pid 6239] rt_sigprocmask(SIG_SETMASK, [], [pid 6237] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6237] <... mprotect resumed>) = 0 [pid 6239] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6234] munmap(0x7fe7bae00000, 138412032 [pid 6235] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... futex resumed>) = 0 [pid 6237] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6235] <... futex resumed>) = 1 [pid 6239] memfd_create("syzkaller", 0 [pid 6237] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6235] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6240 attached [pid 6240] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6240] set_robust_list(0x7fe7c32469a0, 24 [pid 6237] <... clone3 resumed> => {parent_tid=[6240]}, 88) = 6240 [pid 6237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6237] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6237] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6239] <... memfd_create resumed>) = 3 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6240] <... set_robust_list resumed>) = 0 [pid 6236] <... write resumed>) = 2097152 [pid 6234] <... munmap resumed>) = 0 [pid 6240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6238] <... write resumed>) = 2097152 [pid 6236] munmap(0x7fe7bae00000, 138412032 [pid 6234] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6238] munmap(0x7fe7bae00000, 138412032 [pid 6240] memfd_create("syzkaller", 0 [pid 6239] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6236] <... munmap resumed>) = 0 [pid 6234] <... openat resumed>) = 4 [pid 6240] <... memfd_create resumed>) = 3 [pid 6236] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6234] ioctl(4, LOOP_SET_FD, 3 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6236] <... openat resumed>) = 4 [pid 6234] <... ioctl resumed>) = 0 [pid 6240] <... mmap resumed>) = 0x7fe7bae00000 [pid 6238] <... munmap resumed>) = 0 [pid 6238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6236] ioctl(4, LOOP_SET_FD, 3 [pid 6238] ioctl(4, LOOP_SET_FD, 3 [pid 6239] <... write resumed>) = 2097152 [pid 6238] <... ioctl resumed>) = 0 [pid 6234] close(3 [pid 6236] <... ioctl resumed>) = 0 [pid 6240] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6239] munmap(0x7fe7bae00000, 138412032 [pid 6238] close(3 [pid 6234] <... close resumed>) = 0 [pid 6236] close(3 [pid 6238] <... close resumed>) = 0 [pid 6234] close(4 [pid 6238] close(4 [pid 6236] <... close resumed>) = 0 [pid 6234] <... close resumed>) = 0 [pid 6239] <... munmap resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 6236] close(4 [pid 6234] mkdir("./file0", 0777 [pid 6238] mkdir("./file0", 0777 [pid 6236] <... close resumed>) = 0 [pid 6234] <... mkdir resumed>) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6238] <... mkdir resumed>) = 0 [pid 6236] mkdir("./file0", 0777 [ 126.831659][ T6234] loop1: detected capacity change from 0 to 4096 [ 126.851223][ T6238] loop0: detected capacity change from 0 to 4096 [ 126.851310][ T6236] loop2: detected capacity change from 0 to 4096 [pid 6239] ioctl(4, LOOP_SET_FD, 3 [pid 6238] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6236] <... mkdir resumed>) = 0 [pid 6234] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6236] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6240] <... write resumed>) = 2097152 [pid 6239] <... ioctl resumed>) = 0 [pid 6240] munmap(0x7fe7bae00000, 138412032 [pid 6239] close(3) = 0 [pid 6239] close(4) = 0 [pid 6239] mkdir("./file0", 0777) = 0 [pid 6239] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6240] <... munmap resumed>) = 0 [pid 6240] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 126.893149][ T6239] loop3: detected capacity change from 0 to 4096 [ 126.901234][ T6238] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 126.901997][ T6234] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 126.923513][ T6236] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6240] ioctl(4, LOOP_SET_FD, 3 [pid 6238] <... mount resumed>) = 0 [pid 6238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6238] chdir("./file0") = 0 [pid 6238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6238] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = 0 [pid 6238] <... futex resumed>) = 1 [pid 6238] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] exit_group(0) = ? [pid 6240] <... ioctl resumed>) = 0 [pid 6239] <... mount resumed>) = 0 [pid 6238] <... futex resumed>) = ? [pid 6236] <... mount resumed>) = 0 [pid 6239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6240] close(3) = 0 [pid 6239] <... openat resumed>) = 3 [pid 6238] +++ exited with 0 +++ [pid 6236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6233] +++ exited with 0 +++ [pid 6240] close(4 [pid 6239] chdir("./file0" [pid 6236] <... openat resumed>) = 3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 6240] <... close resumed>) = 0 [ 126.958412][ T6239] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 126.960760][ T6240] loop4: detected capacity change from 0 to 4096 [pid 6239] <... chdir resumed>) = 0 [pid 6236] chdir("./file0" [pid 6240] mkdir("./file0", 0777 [pid 6239] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6236] <... chdir resumed>) = 0 [pid 6240] <... mkdir resumed>) = 0 [pid 6239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6236] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6239] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6240] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6239] <... futex resumed>) = 1 [pid 6236] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = 0 [pid 6234] <... mount resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6239] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] <... futex resumed>) = 1 [pid 6235] exit_group(0 [pid 6234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6232] <... futex resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 6239] <... futex resumed>) = ? [pid 6236] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] <... exit_group resumed>) = ? [pid 6234] <... openat resumed>) = 3 [pid 6234] chdir("./file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6239] +++ exited with 0 +++ [pid 6235] +++ exited with 0 +++ [pid 6234] <... chdir resumed>) = 0 [pid 5059] getdents64(3, [pid 6234] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6232] exit_group(0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6236] <... futex resumed>) = ? [pid 6234] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6232] <... exit_group resumed>) = ? [pid 5059] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6236] +++ exited with 0 +++ [pid 6232] +++ exited with 0 +++ [pid 5059] newfstatat(AT_FDCWD, "./117/binderfs", [pid 6234] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./117/binderfs" [pid 6234] <... futex resumed>) = 1 [pid 6231] <... futex resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] exit_group(0 [pid 5062] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] <... futex resumed>) = ? [pid 6231] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] +++ exited with 0 +++ [pid 6231] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5061] newfstatat(3, "", [pid 5059] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] getdents64(3, [pid 5061] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./117/file0", [pid 5062] newfstatat(AT_FDCWD, "./115/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./116/binderfs", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./115/binderfs" [pid 5061] unlink("./116/binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5059] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 127.029608][ T6240] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5062] newfstatat(AT_FDCWD, "./115/file0", [pid 5061] newfstatat(AT_FDCWD, "./116/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5059] newfstatat(4, "", [pid 5062] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] getdents64(4, [pid 5059] getdents64(4, [pid 5062] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] close(4 [pid 5062] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./116/file0" [pid 5062] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./115/file0" [pid 5061] getdents64(3, [pid 5060] newfstatat(AT_FDCWD, "./115/binderfs", [pid 5059] close(4 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5061] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] unlink("./115/binderfs" [pid 5059] rmdir("./117/file0" [pid 5061] <... close resumed>) = 0 [pid 5062] close(3) = 0 [pid 5061] rmdir("./116" [pid 5059] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5059] getdents64(3, [pid 5060] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./115") = 0 [pid 5059] close(3 [pid 5061] mkdir("./117", 0777 [pid 5062] mkdir("./116", 0777 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] rmdir("./117" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6240] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 6240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6240] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./118", 0777 [pid 6240] chdir("./file0" [pid 5060] newfstatat(AT_FDCWD, "./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6240] <... chdir resumed>) = 0 [pid 5060] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 6240] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6240] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 3 [pid 6240] <... futex resumed>) = 1 [pid 6237] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6240] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] exit_group(0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6240] <... futex resumed>) = ? [pid 6237] <... exit_group resumed>) = ? [pid 5060] newfstatat(4, "", [pid 6240] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6237] +++ exited with 0 +++ [pid 5060] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5063] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./115/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", [pid 5060] close(3) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] rmdir("./115") = 0 [pid 5063] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] unlink("./115/binderfs" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... unlink resumed>) = 0 [pid 5060] mkdir("./116", 0777) = 0 [pid 5063] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] close(3 [pid 5060] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6241 attached [pid 5062] <... close resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6241 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6241] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6241] chdir("./117" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6241] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6242 attached [pid 6241] <... prctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] set_robust_list(0x55558e6e36a0, 24 [pid 6241] setpgid(0, 0 [pid 5063] newfstatat(AT_FDCWD, "./115/file0", [pid 6242] <... set_robust_list resumed>) = 0 [pid 6241] <... setpgid resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6242] chdir("./116" [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6242 [pid 6242] <... chdir resumed>) = 0 [pid 6241] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] close(3) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6242] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 6242] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6242] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 6242] <... openat resumed>) = 3 [pid 5063] rmdir("./115/file0") = 0 [pid 6242] write(3, "1000", 4 [pid 5063] getdents64(3, [pid 6242] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6242] close(3 [pid 5063] close(3 [pid 6242] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] rmdir("./115" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6241] write(3, "1000", 4 [pid 6242] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6243 attached [pid 6241] <... write resumed>) = 4 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6243 [pid 6241] close(3 [pid 6243] set_robust_list(0x55558e6e36a0, 24 [pid 6242] <... futex resumed>) = 0 [pid 6241] <... close resumed>) = 0 [pid 6242] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6243] <... set_robust_list resumed>) = 0 [pid 6242] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6241] symlink("/dev/binderfs", "./binderfs" [pid 5063] mkdir("./116", 0777 [pid 6243] chdir("./118" [pid 6242] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6241] <... symlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6243] <... chdir resumed>) = 0 [pid 6242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6241] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6241] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6243] <... prctl resumed>) = 0 [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6241] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6243] setpgid(0, 0 [pid 6242] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6243] <... setpgid resumed>) = 0 [pid 6242] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6241] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... openat resumed>) = 3 [pid 6242] <... mprotect resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6244]}, 88) = 6244 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], [pid 6241] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6242] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6242] <... futex resumed>) = 0 [pid 6242] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6244 attached [pid 6244] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6244] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6244] memfd_create("syzkaller", 0 [pid 6243] <... openat resumed>) = 3 [pid 6241] <... mmap resumed>) = 0x7fe7c3226000 [pid 6241] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6243] write(3, "1000", 4 [pid 6244] <... memfd_create resumed>) = 3 [pid 6243] <... write resumed>) = 4 [pid 6241] <... mprotect resumed>) = 0 [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6243] close(3 [pid 6241] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6243] <... close resumed>) = 0 [pid 6243] symlink("/dev/binderfs", "./binderfs" [pid 6241] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6243] <... symlink resumed>) = 0 [pid 6241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6243] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6241] <... clone3 resumed> => {parent_tid=[6245]}, 88) = 6245 ./strace-static-x86_64: Process 6245 attached [pid 6243] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6241] rt_sigprocmask(SIG_SETMASK, [], [pid 6243] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6241] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6241] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6241] <... futex resumed>) = 0 [pid 6245] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6243] <... mmap resumed>) = 0x7fe7c3226000 [pid 6241] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6245] <... rseq resumed>) = 0 [pid 6243] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6245] set_robust_list(0x7fe7c32469a0, 24 [pid 6243] <... mprotect resumed>) = 0 [pid 5060] close(3 [pid 6243] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6245] <... set_robust_list resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6245] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6246 attached [pid 6243] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6246 [pid 6246] set_robust_list(0x55558e6e36a0, 24 [pid 6245] <... memfd_create resumed>) = 3 [pid 6246] <... set_robust_list resumed>) = 0 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6246] chdir("./116" [pid 6245] <... mmap resumed>) = 0x7fe7bae00000 [pid 6246] <... chdir resumed>) = 0 [pid 6243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6247 attached ) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6247] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6243] <... clone3 resumed> => {parent_tid=[6247]}, 88) = 6247 [pid 6247] <... rseq resumed>) = 0 [pid 6246] setpgid(0, 0) = 0 [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6247] set_robust_list(0x7fe7c32469a0, 24 [pid 6246] <... openat resumed>) = 3 [pid 6246] write(3, "1000", 4 [pid 6247] <... set_robust_list resumed>) = 0 [pid 6243] rt_sigprocmask(SIG_SETMASK, [], [pid 6247] rt_sigprocmask(SIG_SETMASK, [], [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6246] <... write resumed>) = 4 [pid 6247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6246] close(3 [pid 6243] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... close resumed>) = 0 [pid 6246] symlink("/dev/binderfs", "./binderfs" [pid 6247] memfd_create("syzkaller", 0 [pid 6246] <... symlink resumed>) = 0 [pid 6243] <... futex resumed>) = 0 [pid 5063] close(3 [pid 6247] <... memfd_create resumed>) = 3 [pid 6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6246] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 6246] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6246] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6246] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6249]}, 88) = 6249 [pid 6246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6248 [pid 6246] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6249 attached ./strace-static-x86_64: Process 6248 attached [pid 6246] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6249] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6248] set_robust_list(0x55558e6e36a0, 24 [pid 6249] set_robust_list(0x7fe7c32469a0, 24 [pid 6248] <... set_robust_list resumed>) = 0 [pid 6249] <... set_robust_list resumed>) = 0 [pid 6249] rt_sigprocmask(SIG_SETMASK, [], [pid 6248] chdir("./116" [pid 6249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6248] <... chdir resumed>) = 0 [pid 6249] memfd_create("syzkaller", 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6244] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6248] write(3, "1000", 4) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6248] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6249] <... memfd_create resumed>) = 3 [pid 6247] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6245] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6248] <... futex resumed>) = 0 [pid 6249] <... mmap resumed>) = 0x7fe7bae00000 [pid 6248] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6247] <... write resumed>) = 2097152 [pid 6248] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6248] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6247] munmap(0x7fe7bae00000, 138412032 [pid 6248] <... mprotect resumed>) = 0 [pid 6244] <... write resumed>) = 2097152 [pid 6248] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6245] <... write resumed>) = 2097152 [pid 6244] munmap(0x7fe7bae00000, 138412032 [pid 6248] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6250 attached => {parent_tid=[6250]}, 88) = 6250 [pid 6250] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6250] <... rseq resumed>) = 0 [pid 6248] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6247] <... munmap resumed>) = 0 [pid 6247] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6250] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6250] rt_sigprocmask(SIG_SETMASK, [], [pid 6247] ioctl(4, LOOP_SET_FD, 3 [pid 6250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6249] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6245] munmap(0x7fe7bae00000, 138412032 [pid 6244] <... munmap resumed>) = 0 [pid 6250] memfd_create("syzkaller", 0 [pid 6247] <... ioctl resumed>) = 0 [pid 6247] close(3) = 0 [pid 6245] <... munmap resumed>) = 0 [pid 6244] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6247] close(4 [pid 6250] <... memfd_create resumed>) = 3 [pid 6247] <... close resumed>) = 0 [pid 6244] <... openat resumed>) = 4 [pid 6247] mkdir("./file0", 0777 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6244] ioctl(4, LOOP_SET_FD, 3 [pid 6247] <... mkdir resumed>) = 0 [pid 6247] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6250] <... mmap resumed>) = 0x7fe7bae00000 [pid 6245] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6249] <... write resumed>) = 2097152 [pid 6249] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6244] <... ioctl resumed>) = 0 [ 127.433205][ T6247] loop0: detected capacity change from 0 to 4096 [ 127.447603][ T6244] loop3: detected capacity change from 0 to 4096 [ 127.460790][ T6247] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6249] ioctl(4, LOOP_SET_FD, 3 [pid 6245] ioctl(4, LOOP_SET_FD, 3 [pid 6244] close(3 [pid 6249] <... ioctl resumed>) = 0 [pid 6244] <... close resumed>) = 0 [pid 6249] close(3 [pid 6244] close(4 [pid 6249] <... close resumed>) = 0 [pid 6244] <... close resumed>) = 0 [pid 6249] close(4 [pid 6244] mkdir("./file0", 0777 [pid 6249] <... close resumed>) = 0 [pid 6249] mkdir("./file0", 0777 [pid 6244] <... mkdir resumed>) = 0 [pid 6249] <... mkdir resumed>) = 0 [pid 6244] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6249] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6250] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6247] <... mount resumed>) = 0 [pid 6247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6247] chdir("./file0") = 0 [pid 6247] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6247] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6247] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6243] exit_group(0 [pid 6247] <... futex resumed>) = ? [pid 6243] <... exit_group resumed>) = ? [pid 6247] +++ exited with 0 +++ [pid 6243] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6245] close(3 [pid 5059] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6250] <... write resumed>) = 2097152 [pid 5059] getdents64(3, [pid 6250] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./118/binderfs") = 0 [ 127.480227][ T6249] loop1: detected capacity change from 0 to 4096 [ 127.481441][ T6245] loop2: detected capacity change from 0 to 4096 [ 127.500392][ T6249] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 127.512168][ T6244] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6250] <... munmap resumed>) = 0 [pid 5059] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6245] <... close resumed>) = 0 [pid 6250] <... openat resumed>) = 4 [pid 6245] close(4 [pid 6250] ioctl(4, LOOP_SET_FD, 3 [pid 6245] <... close resumed>) = 0 [pid 6245] mkdir("./file0", 0777) = 0 [pid 6245] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... umount2 resumed>) = 0 [pid 6250] <... ioctl resumed>) = 0 [pid 5059] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] close(3) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] close(4 [pid 6249] <... mount resumed>) = 0 [pid 6250] <... close resumed>) = 0 [pid 6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./118/file0", [pid 6250] mkdir("./file0", 0777 [pid 6249] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6250] <... mkdir resumed>) = 0 [pid 6249] chdir("./file0" [pid 5059] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6249] <... chdir resumed>) = 0 [ 127.570051][ T6250] loop4: detected capacity change from 0 to 4096 [ 127.575808][ T6245] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6249] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6249] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] newfstatat(4, "", [pid 6249] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6249] <... futex resumed>) = 1 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6249] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] <... mount resumed>) = 0 [pid 5059] close(4) = 0 [pid 6244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] rmdir("./118/file0" [pid 6246] <... futex resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6244] <... openat resumed>) = 3 [pid 6244] chdir("./file0" [pid 5059] getdents64(3, [pid 6246] exit_group(0 [pid 6244] <... chdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6249] <... futex resumed>) = ? [pid 6246] <... exit_group resumed>) = ? [pid 6244] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6249] +++ exited with 0 +++ [pid 6244] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] close(3) = 0 [pid 6246] +++ exited with 0 +++ [pid 6244] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6242] <... futex resumed>) = 0 [pid 6244] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5059] rmdir("./118" [pid 6242] exit_group(0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... rmdir resumed>) = 0 [pid 6244] <... futex resumed>) = ? [pid 6242] <... exit_group resumed>) = ? [pid 5060] <... restart_syscall resumed>) = 0 [pid 5060] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6244] +++ exited with 0 +++ [pid 6242] +++ exited with 0 +++ [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] mkdir("./119", 0777 [pid 6245] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 6245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6245] <... openat resumed>) = 3 [pid 5060] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] chdir("./file0" [pid 5062] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 3 [pid 6245] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./116/binderfs", [pid 6245] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 5060] unlink("./116/binderfs" [pid 6245] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(3, "", [pid 6245] <... futex resumed>) = 1 [pid 6241] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6245] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] exit_group(0 [pid 5062] getdents64(3, [pid 6241] <... exit_group resumed>) = ? [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [ 127.611425][ T6250] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6245] <... futex resumed>) = ? [pid 5062] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6245] +++ exited with 0 +++ [pid 6241] +++ exited with 0 +++ [pid 5062] newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./116/binderfs" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] <... unlink resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = 0 [pid 5062] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(AT_FDCWD, "./116/file0", [pid 5061] getdents64(3, [pid 6250] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6250] chdir("./file0") = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6250] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6250] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6248] <... futex resumed>) = 0 [pid 6248] exit_group(0) = ? [pid 5061] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./117/binderfs", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./116/file0", [pid 6250] <... futex resumed>) = ? [pid 5062] <... openat resumed>) = 4 [pid 5061] unlink("./117/binderfs" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(4, "", [pid 5061] <... unlink resumed>) = 0 [pid 5060] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] +++ exited with 0 +++ [pid 6248] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] getdents64(4, [pid 5060] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(4, [pid 5063] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5060] getdents64(4, [pid 5063] newfstatat(3, "", [pid 5062] rmdir("./116/file0" [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] close(4 [pid 5063] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] rmdir("./116/file0" [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5063] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./116/binderfs", [pid 5062] getdents64(3, [pid 5061] newfstatat(AT_FDCWD, "./117/file0", [pid 5060] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./116/binderfs" [pid 5062] close(3 [pid 5061] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5062] rmdir("./116" [pid 5061] <... openat resumed>) = 4 [pid 5060] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] rmdir("./116" [pid 5063] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5060] <... rmdir resumed>) = 0 [pid 5062] mkdir("./117", 0777 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] mkdir("./117", 0777 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./117/file0") = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6251 attached [pid 5063] <... umount2 resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6251 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./116/file0", [pid 5062] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6251] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6251] <... set_robust_list resumed>) = 0 [pid 5063] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6251] chdir("./119" [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] close(3 [pid 6251] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... close resumed>) = 0 [pid 6251] <... prctl resumed>) = 0 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] rmdir("./117" [pid 6251] setpgid(0, 0 [pid 5063] getdents64(4, [pid 6251] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./116/file0" [pid 5061] <... rmdir resumed>) = 0 [pid 6251] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 6251] write(3, "1000", 4 [pid 5061] mkdir("./118", 0777 [pid 5063] getdents64(3, [pid 6251] <... write resumed>) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6251] <... symlink resumed>) = 0 [pid 6251] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6251] <... futex resumed>) = 0 [pid 5063] close(3 [pid 6251] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6251] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] rmdir("./116" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] mkdir("./117", 0777 [pid 6251] <... mmap resumed>) = 0x7fe7c3226000 [pid 6251] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... mkdir resumed>) = 0 [pid 6251] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6251] <... clone3 resumed> => {parent_tid=[6252]}, 88) = 6252 ./strace-static-x86_64: Process 6252 attached [pid 6251] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6252] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6252] <... rseq resumed>) = 0 [pid 6251] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6251] <... futex resumed>) = 0 [pid 6252] rt_sigprocmask(SIG_SETMASK, [], [pid 6251] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6252] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5060] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... close resumed>) = 0 ./strace-static-x86_64: Process 6253 attached [pid 6253] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6253 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6253] <... set_robust_list resumed>) = 0 [pid 6253] chdir("./117"./strace-static-x86_64: Process 6254 attached ) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6254 [pid 6254] set_robust_list(0x55558e6e36a0, 24 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6254] <... set_robust_list resumed>) = 0 [pid 5062] <... close resumed>) = 0 ./strace-static-x86_64: Process 6255 attached [pid 6254] chdir("./117" [pid 6253] <... prctl resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6255] set_robust_list(0x55558e6e36a0, 24 [pid 6254] <... chdir resumed>) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6255] <... set_robust_list resumed>) = 0 [pid 6254] <... prctl resumed>) = 0 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] chdir("./118" [pid 6254] setpgid(0, 0 [pid 6253] <... openat resumed>) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6256 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6255 [pid 6255] <... chdir resumed>) = 0 [pid 6254] <... setpgid resumed>) = 0 [pid 6253] write(3, "1000", 4./strace-static-x86_64: Process 6256 attached [pid 6255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6253] <... write resumed>) = 4 [pid 6252] <... write resumed>) = 2097152 [pid 6256] set_robust_list(0x55558e6e36a0, 24 [pid 6255] <... prctl resumed>) = 0 [pid 6254] <... openat resumed>) = 3 [pid 6253] close(3 [pid 6252] munmap(0x7fe7bae00000, 138412032 [pid 6256] <... set_robust_list resumed>) = 0 [pid 6255] setpgid(0, 0 [pid 6254] write(3, "1000", 4 [pid 6253] <... close resumed>) = 0 [pid 6255] <... setpgid resumed>) = 0 [pid 6254] <... write resumed>) = 4 [pid 6256] chdir("./117" [pid 6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6254] close(3 [pid 6253] symlink("/dev/binderfs", "./binderfs" [pid 6254] <... close resumed>) = 0 [pid 6253] <... symlink resumed>) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs" [pid 6253] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... chdir resumed>) = 0 [pid 6255] <... openat resumed>) = 3 [pid 6254] <... symlink resumed>) = 0 [pid 6253] <... futex resumed>) = 0 [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6254] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6252] <... munmap resumed>) = 0 [pid 6255] write(3, "1000", 4 [pid 6254] <... futex resumed>) = 0 [pid 6253] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6255] <... write resumed>) = 4 [pid 6254] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6253] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6252] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6256] <... prctl resumed>) = 0 [pid 6255] close(3 [pid 6254] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6256] setpgid(0, 0 [pid 6255] <... close resumed>) = 0 [pid 6254] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6252] <... openat resumed>) = 4 [pid 6256] <... setpgid resumed>) = 0 [pid 6255] symlink("/dev/binderfs", "./binderfs" [pid 6254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6253] <... mmap resumed>) = 0x7fe7c3226000 [pid 6252] ioctl(4, LOOP_SET_FD, 3 [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] <... symlink resumed>) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6253] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6256] <... openat resumed>) = 3 [pid 6253] <... mprotect resumed>) = 0 [pid 6256] write(3, "1000", 4 [pid 6253] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6256] <... write resumed>) = 4 [pid 6253] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6256] close(3 [pid 6253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6256] <... close resumed>) = 0 [pid 6253] <... clone3 resumed> => {parent_tid=[6257]}, 88) = 6257 ./strace-static-x86_64: Process 6257 attached [pid 6256] symlink("/dev/binderfs", "./binderfs" [pid 6253] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6256] <... symlink resumed>) = 0 [pid 6253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] <... rseq resumed>) = 0 [pid 6256] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... mmap resumed>) = 0x7fe7c3226000 [pid 6253] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... ioctl resumed>) = 0 [pid 6257] set_robust_list(0x7fe7c32469a0, 24 [pid 6256] <... futex resumed>) = 0 [pid 6255] <... futex resumed>) = 0 [pid 6254] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6253] <... futex resumed>) = 0 [pid 6252] close(3 [pid 6257] <... set_robust_list resumed>) = 0 [pid 6256] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6255] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6254] <... mprotect resumed>) = 0 [pid 6253] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6252] <... close resumed>) = 0 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6256] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6255] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6252] close(4 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6256] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6255] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6254] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6257] memfd_create("syzkaller", 0 [pid 6255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6252] <... close resumed>) = 0 [pid 6255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6255] <... mmap resumed>) = 0x7fe7c3226000 [pid 6256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6255] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6252] mkdir("./file0", 0777./strace-static-x86_64: Process 6258 attached [pid 6257] <... memfd_create resumed>) = 3 [pid 6256] <... mmap resumed>) = 0x7fe7c3226000 [pid 6254] <... clone3 resumed> => {parent_tid=[6258]}, 88) = 6258 [pid 6255] <... mprotect resumed>) = 0 [pid 6256] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6258] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6256] <... mprotect resumed>) = 0 [pid 6255] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6258] <... rseq resumed>) = 0 [pid 6257] <... mmap resumed>) = 0x7fe7bae00000 [pid 6256] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6255] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], [pid 6252] <... mkdir resumed>) = 0 [pid 6258] set_robust_list(0x7fe7c32469a0, 24 [pid 6256] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6252] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6254] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] <... set_robust_list resumed>) = 0 [pid 6256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6254] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6259 attached ./strace-static-x86_64: Process 6260 attached [pid 6258] rt_sigprocmask(SIG_SETMASK, [], [pid 6260] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6256] <... clone3 resumed> => {parent_tid=[6260]}, 88) = 6260 [pid 6259] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6260] <... rseq resumed>) = 0 [pid 6258] memfd_create("syzkaller", 0 [pid 6255] <... clone3 resumed> => {parent_tid=[6259]}, 88) = 6259 [pid 6256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6256] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6260] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6255] rt_sigprocmask(SIG_SETMASK, [], [pid 6259] <... rseq resumed>) = 0 [pid 6255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6259] set_robust_list(0x7fe7c32469a0, 24 [pid 6255] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... set_robust_list resumed>) = 0 [pid 6255] <... futex resumed>) = 0 [pid 6259] rt_sigprocmask(SIG_SETMASK, [], [pid 6255] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6259] memfd_create("syzkaller", 0) = 3 [pid 6258] <... memfd_create resumed>) = 3 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6260] memfd_create("syzkaller", 0 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6257] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6252] <... mount resumed>) = 0 [pid 6259] <... mmap resumed>) = 0x7fe7bae00000 [pid 6260] <... memfd_create resumed>) = 3 [pid 6258] <... mmap resumed>) = 0x7fe7bae00000 [ 127.948744][ T6252] loop0: detected capacity change from 0 to 4096 [ 127.984399][ T6252] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6252] <... openat resumed>) = 3 [pid 6260] <... mmap resumed>) = 0x7fe7bae00000 [pid 6252] chdir("./file0" [pid 6259] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6252] <... chdir resumed>) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6252] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = 0 [pid 6251] exit_group(0) = ? [pid 6252] <... futex resumed>) = ? [pid 6252] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6258] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] unlink("./119/binderfs") = 0 [pid 5059] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6260] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6257] <... write resumed>) = 2097152 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6259] <... write resumed>) = 2097152 [pid 6257] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6259] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... openat resumed>) = 4 [pid 6259] <... munmap resumed>) = 0 [pid 6257] <... munmap resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 6260] <... write resumed>) = 2097152 [pid 6259] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6258] <... write resumed>) = 2097152 [pid 6257] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6260] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6259] <... openat resumed>) = 4 [pid 6258] munmap(0x7fe7bae00000, 138412032 [pid 6257] <... openat resumed>) = 4 [pid 5059] getdents64(4, [pid 6260] <... munmap resumed>) = 0 [pid 6259] ioctl(4, LOOP_SET_FD, 3 [pid 6258] <... munmap resumed>) = 0 [pid 6257] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6260] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 6260] <... openat resumed>) = 4 [pid 5059] <... close resumed>) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6258] ioctl(4, LOOP_SET_FD, 3 [pid 6259] <... ioctl resumed>) = 0 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 6257] <... ioctl resumed>) = 0 [pid 5059] rmdir("./119/file0" [pid 6259] close(3 [pid 6258] <... ioctl resumed>) = 0 [pid 6258] close(3) = 0 [pid 6258] close(4 [pid 6259] <... close resumed>) = 0 [pid 6260] <... ioctl resumed>) = 0 [pid 6257] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./119") = 0 [pid 5059] mkdir("./120", 0777 [pid 6259] close(4 [pid 6260] close(3 [pid 6258] <... close resumed>) = 0 [pid 6257] <... close resumed>) = 0 [pid 6259] <... close resumed>) = 0 [ 128.147689][ T6257] loop4: detected capacity change from 0 to 4096 [ 128.148046][ T6259] loop2: detected capacity change from 0 to 4096 [ 128.156188][ T6258] loop1: detected capacity change from 0 to 4096 [ 128.162476][ T6260] loop3: detected capacity change from 0 to 4096 [pid 6258] mkdir("./file0", 0777 [pid 5059] <... mkdir resumed>) = 0 [pid 6259] mkdir("./file0", 0777 [pid 6260] <... close resumed>) = 0 [pid 6258] <... mkdir resumed>) = 0 [pid 6257] close(4) = 0 [pid 6259] <... mkdir resumed>) = 0 [pid 6258] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6257] mkdir("./file0", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6260] close(4 [pid 5059] <... openat resumed>) = 3 [pid 6260] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6260] mkdir("./file0", 0777 [pid 6257] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6260] <... mkdir resumed>) = 0 [pid 6259] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6260] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... ioctl resumed>) = 0 [ 128.207498][ T6258] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 128.214945][ T6257] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 128.230530][ T6260] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 128.231701][ T6259] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6260] <... mount resumed>) = 0 [pid 6260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] close(3 [pid 6259] <... mount resumed>) = 0 [pid 6260] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6261 attached [pid 6261] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6261 [pid 6261] <... set_robust_list resumed>) = 0 [pid 6260] chdir("./file0" [pid 6261] chdir("./120" [pid 6260] <... chdir resumed>) = 0 [pid 6259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6260] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6261] <... chdir resumed>) = 0 [pid 6260] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... openat resumed>) = 3 [pid 6260] <... futex resumed>) = 1 [pid 6256] <... futex resumed>) = 0 [pid 6259] chdir("./file0" [pid 6256] exit_group(0 [pid 6259] <... chdir resumed>) = 0 [pid 6256] <... exit_group resumed>) = ? [pid 6261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6259] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6260] +++ exited with 0 +++ [pid 6256] +++ exited with 0 +++ [pid 6261] <... prctl resumed>) = 0 [pid 6259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6261] setpgid(0, 0 [pid 6259] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 6259] <... futex resumed>) = 1 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6261] <... setpgid resumed>) = 0 [pid 6259] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... restart_syscall resumed>) = 0 [pid 6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6258] <... mount resumed>) = 0 [pid 6255] <... futex resumed>) = 0 [pid 6261] write(3, "1000", 4) = 4 [pid 6255] exit_group(0 [pid 6261] close(3) = 0 [pid 6261] symlink("/dev/binderfs", "./binderfs" [pid 6259] <... futex resumed>) = ? [pid 6255] <... exit_group resumed>) = ? [pid 6259] +++ exited with 0 +++ [pid 6261] <... symlink resumed>) = 0 [pid 6261] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6257] <... mount resumed>) = 0 [pid 6255] +++ exited with 0 +++ [pid 5062] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6261] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6255, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6261] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6258] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6261] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6258] chdir("./file0" [pid 5062] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... openat resumed>) = 3 [pid 6261] <... mmap resumed>) = 0x7fe7c3226000 [pid 6258] <... chdir resumed>) = 0 [pid 6257] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 6261] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6261] <... mprotect resumed>) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6257] chdir("./file0" [pid 6261] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6258] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6257] <... chdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6261] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6261] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6262 attached [pid 6258] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6262] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6261] <... clone3 resumed> => {parent_tid=[6262]}, 88) = 6262 [pid 5061] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6262] <... rseq resumed>) = 0 [pid 6261] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 6262] set_robust_list(0x7fe7c32469a0, 24 [pid 6261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] <... futex resumed>) = 1 [pid 6257] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(3, "", [pid 6262] <... set_robust_list resumed>) = 0 [pid 6261] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] <... futex resumed>) = 1 [pid 6254] exit_group(0 [pid 6253] <... futex resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./117/binderfs", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6262] rt_sigprocmask(SIG_SETMASK, [], [pid 6261] <... futex resumed>) = 0 [pid 6258] <... futex resumed>) = ? [pid 6257] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] <... exit_group resumed>) = ? [pid 6253] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(3, [pid 6262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6261] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6258] +++ exited with 0 +++ [pid 6253] <... exit_group resumed>) = ? [pid 6262] memfd_create("syzkaller", 0 [pid 6254] +++ exited with 0 +++ [pid 6257] <... futex resumed>) = ? [pid 5062] unlink("./117/binderfs" [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./118/binderfs", [pid 5060] newfstatat(3, "", [pid 6262] <... memfd_create resumed>) = 3 [pid 6257] +++ exited with 0 +++ [pid 6253] +++ exited with 0 +++ [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] unlink("./118/binderfs" [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5062] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./117/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", [pid 5060] unlink("./117/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 5060] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] unlink("./117/binderfs" [pid 5060] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./117/file0", [pid 5060] newfstatat(AT_FDCWD, "./117/file0", [pid 6262] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./118/file0", [pid 5060] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 4 [pid 5063] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./117/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 5061] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, [pid 5063] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(4, "", [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(4, [pid 5061] getdents64(4, [pid 5062] close(4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] close(4 [pid 5063] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5062] rmdir("./117/file0" [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5060] rmdir("./117/file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5061] close(4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./117/file0" [pid 5060] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] rmdir("./118/file0" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./117" [pid 5061] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5063] rmdir("./117" [pid 5062] mkdir("./118", 0777 [pid 5061] close(3 [pid 5060] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5063] mkdir("./118", 0777 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./118" [pid 5060] rmdir("./117" [pid 5063] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] mkdir("./118", 0777 [pid 6262] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] mkdir("./119", 0777 [pid 6262] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 6262] <... munmap resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6262] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6262] <... openat resumed>) = 4 [pid 5062] close(3 [pid 5060] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6263 attached [pid 6263] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6262] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6263 [pid 6263] chdir("./118") = 0 [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6263] setpgid(0, 0) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6262] <... ioctl resumed>) = 0 [pid 6263] <... openat resumed>) = 3 [pid 6263] write(3, "1000", 4) = 4 [pid 6263] close(3) = 0 [pid 6263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6263] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6263] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6262] close(3 [pid 6263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6262] <... close resumed>) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6262] close(4 [pid 6263] <... mmap resumed>) = 0x7fe7c3226000 [pid 6262] <... close resumed>) = 0 [pid 6263] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6262] mkdir("./file0", 0777 [pid 6263] <... mprotect resumed>) = 0 [pid 6263] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6262] <... mkdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6263] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6264]}, 88) = 6264 [pid 6262] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... ioctl resumed>) = 0 [pid 6263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6263] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6264 attached [pid 6264] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5063] close(3 [pid 6264] <... rseq resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6264] set_robust_list(0x7fe7c32469a0, 24 [ 128.473019][ T6262] loop0: detected capacity change from 0 to 4096 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6264] <... set_robust_list resumed>) = 0 [pid 6264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6264] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6265 attached [pid 6265] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6265] chdir("./118") = 0 [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6264] <... memfd_create resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6265 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6265] <... prctl resumed>) = 0 [pid 6264] <... mmap resumed>) = 0x7fe7bae00000 [pid 6265] setpgid(0, 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6265] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6266 attached [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6266 [pid 6265] <... openat resumed>) = 3 [pid 6266] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6265] write(3, "1000", 4 [pid 6266] chdir("./118" [pid 6265] <... write resumed>) = 4 [pid 6266] <... chdir resumed>) = 0 [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6265] close(3) = 0 [pid 6265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6265] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] <... prctl resumed>) = 0 [pid 6265] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6266] setpgid(0, 0 [pid 6265] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6266] <... setpgid resumed>) = 0 [pid 6265] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6265] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6266] <... openat resumed>) = 3 [pid 6265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] close(3./strace-static-x86_64: Process 6267 attached [pid 6267] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6265] <... clone3 resumed> => {parent_tid=[6267]}, 88) = 6267 [pid 6267] <... rseq resumed>) = 0 [pid 6266] write(3, "1000", 4 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], [pid 6267] set_robust_list(0x7fe7c32469a0, 24 [pid 6266] <... write resumed>) = 4 [pid 6265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6266] close(3 [pid 6265] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... set_robust_list resumed>) = 0 [pid 6266] <... close resumed>) = 0 [pid 6265] <... futex resumed>) = 0 [pid 6267] rt_sigprocmask(SIG_SETMASK, [], [pid 6266] symlink("/dev/binderfs", "./binderfs" [pid 6265] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6267] memfd_create("syzkaller", 0) = 3 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6266] <... symlink resumed>) = 0 [pid 6266] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [ 128.524081][ T6262] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6266] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6264] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6266] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6268 attached [pid 6266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6268 [pid 6268] set_robust_list(0x55558e6e36a0, 24 [pid 6266] <... mmap resumed>) = 0x7fe7c3226000 [pid 6268] <... set_robust_list resumed>) = 0 [pid 6266] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6266] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6269 attached [pid 6269] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6269] set_robust_list(0x7fe7c32469a0, 24 [pid 6268] chdir("./119" [pid 6266] <... clone3 resumed> => {parent_tid=[6269]}, 88) = 6269 [pid 6269] <... set_robust_list resumed>) = 0 [pid 6269] rt_sigprocmask(SIG_SETMASK, [], [pid 6268] <... chdir resumed>) = 0 [pid 6269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6269] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6266] rt_sigprocmask(SIG_SETMASK, [], [pid 6268] <... prctl resumed>) = 0 [pid 6266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6268] setpgid(0, 0 [pid 6266] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] <... futex resumed>) = 0 [pid 6268] <... setpgid resumed>) = 0 [pid 6266] <... futex resumed>) = 1 [pid 6269] memfd_create("syzkaller", 0 [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6266] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6269] <... memfd_create resumed>) = 3 [pid 6268] <... openat resumed>) = 3 [pid 6268] write(3, "1000", 4) = 4 [pid 6268] close(3) = 0 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6268] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6268] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6268] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6270 attached [pid 6270] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6268] <... clone3 resumed> => {parent_tid=[6270]}, 88) = 6270 [pid 6270] <... rseq resumed>) = 0 [pid 6268] rt_sigprocmask(SIG_SETMASK, [], [pid 6270] set_robust_list(0x7fe7c32469a0, 24 [pid 6268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] <... set_robust_list resumed>) = 0 [pid 6268] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] rt_sigprocmask(SIG_SETMASK, [], [pid 6268] <... futex resumed>) = 0 [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6268] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6264] <... write resumed>) = 2097152 [pid 6270] memfd_create("syzkaller", 0 [pid 6267] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6264] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6270] <... memfd_create resumed>) = 3 [pid 6262] <... mount resumed>) = 0 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6262] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6262] chdir("./file0" [pid 6269] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6264] <... openat resumed>) = 4 [pid 6262] <... chdir resumed>) = 0 [pid 6264] ioctl(4, LOOP_SET_FD, 3 [pid 6262] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6262] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6262] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6267] <... write resumed>) = 2097152 [pid 6267] munmap(0x7fe7bae00000, 138412032 [pid 6261] <... futex resumed>) = 0 [pid 6261] exit_group(0 [pid 6262] <... futex resumed>) = ? [pid 6261] <... exit_group resumed>) = ? [pid 6267] <... munmap resumed>) = 0 [pid 6262] +++ exited with 0 +++ [pid 6261] +++ exited with 0 +++ [pid 6264] <... ioctl resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6261, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6264] close(3 [pid 5059] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6264] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6267] <... openat resumed>) = 4 [pid 6264] close(4 [pid 5059] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6267] ioctl(4, LOOP_SET_FD, 3 [pid 6264] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6264] mkdir("./file0", 0777 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 6264] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./120/binderfs") = 0 [pid 5059] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6267] <... ioctl resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 6267] close(3) = 0 [pid 6270] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6267] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6267] <... close resumed>) = 0 [pid 6267] mkdir("./file0", 0777 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6267] <... mkdir resumed>) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./120/file0" [pid 6267] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... rmdir resumed>) = 0 [pid 6269] <... write resumed>) = 2097152 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./120") = 0 [pid 5059] mkdir("./121", 0777 [pid 6269] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... mkdir resumed>) = 0 [pid 6269] <... munmap resumed>) = 0 [ 128.683167][ T6264] loop3: detected capacity change from 0 to 4096 [ 128.709165][ T6267] loop4: detected capacity change from 0 to 4096 [ 128.722231][ T6264] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6269] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6269] ioctl(4, LOOP_SET_FD, 3 [pid 6270] <... write resumed>) = 2097152 [pid 6270] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6269] <... ioctl resumed>) = 0 [pid 6269] close(3) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6269] close(4) = 0 [pid 6269] mkdir("./file0", 0777) = 0 [ 128.762857][ T6267] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 128.779078][ T6269] loop1: detected capacity change from 0 to 4096 [pid 6269] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6270] <... openat resumed>) = 4 [pid 5059] <... ioctl resumed>) = 0 [pid 6270] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5059] close(3 [pid 6270] close(3 [pid 5059] <... close resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6270] close(4) = 0 ./strace-static-x86_64: Process 6271 attached [pid 6270] mkdir("./file0", 0777 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6271 [pid 6271] set_robust_list(0x55558e6e36a0, 24 [pid 6270] <... mkdir resumed>) = 0 [pid 6271] <... set_robust_list resumed>) = 0 [ 128.825169][ T6269] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 128.840288][ T6270] loop2: detected capacity change from 0 to 4096 [pid 6270] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6271] chdir("./121" [pid 6264] <... mount resumed>) = 0 [pid 6264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./file0") = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6264] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6271] <... chdir resumed>) = 0 [pid 6263] <... futex resumed>) = 0 [pid 6263] exit_group(0 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6263] <... exit_group resumed>) = ? [pid 6264] <... futex resumed>) = ? [pid 6271] <... prctl resumed>) = 0 [pid 6264] +++ exited with 0 +++ [pid 6263] +++ exited with 0 +++ [pid 6271] setpgid(0, 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6271] <... setpgid resumed>) = 0 [pid 6270] <... mount resumed>) = 0 [pid 6267] <... mount resumed>) = 0 [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6271] <... openat resumed>) = 3 [pid 6267] <... openat resumed>) = 3 [pid 5062] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] write(3, "1000", 4 [pid 6270] <... openat resumed>) = 3 [pid 6267] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6271] <... write resumed>) = 4 [pid 6270] chdir("./file0" [pid 6267] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6271] close(3 [pid 6267] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 6267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6271] <... close resumed>) = 0 [pid 6270] <... chdir resumed>) = 0 [pid 6267] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(3, "", [pid 6267] <... futex resumed>) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6271] <... symlink resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6267] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6271] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6267] <... futex resumed>) = ? [pid 6265] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 6271] <... futex resumed>) = 0 [pid 6270] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] +++ exited with 0 +++ [pid 6271] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6271] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6271] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6270] <... futex resumed>) = 1 [pid 6268] <... futex resumed>) = 0 [pid 5062] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6268] exit_group(0 [pid 6265] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6270] <... futex resumed>) = ? [pid 6268] <... exit_group resumed>) = ? [pid 5062] newfstatat(AT_FDCWD, "./118/binderfs", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6271] <... mmap resumed>) = 0x7fe7c3226000 [pid 6271] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6271] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6271] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... openat resumed>) = 3 [pid 6271] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] newfstatat(3, "", [pid 5062] unlink("./118/binderfs" [pid 6271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6272 attached [pid 6269] <... mount resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [ 128.878870][ T6270] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6271] <... clone3 resumed> => {parent_tid=[6272]}, 88) = 6272 [pid 6269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], [pid 6270] +++ exited with 0 +++ [pid 6269] <... openat resumed>) = 3 [pid 6268] +++ exited with 0 +++ [pid 5063] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6269] chdir("./file0" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6269] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6271] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... restart_syscall resumed>) = 0 [pid 6272] <... rseq resumed>) = 0 [pid 6271] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6269] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6272] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] newfstatat(AT_FDCWD, "./118/binderfs", [pid 6272] <... set_robust_list resumed>) = 0 [pid 6269] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] rt_sigprocmask(SIG_SETMASK, [], [pid 6269] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] unlink("./118/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6269] <... futex resumed>) = 1 [pid 6266] <... futex resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./118/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6269] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6266] exit_group(0 [pid 5063] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6269] <... futex resumed>) = ? [pid 6266] <... exit_group resumed>) = ? [pid 5062] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 6272] memfd_create("syzkaller", 0 [pid 6269] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./119/binderfs") = 0 [pid 5061] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] <... memfd_create resumed>) = 3 [pid 6266] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6266, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5062] <... openat resumed>) = 4 [pid 6272] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./119/file0", [pid 5060] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5060] unlink("./118/binderfs") = 0 [pid 5061] newfstatat(4, "", [pid 5060] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5061] getdents64(4, [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5061] getdents64(4, [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(4 [pid 5061] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] rmdir("./118/file0" [pid 5061] rmdir("./119/file0") = 0 [pid 5061] getdents64(3, [pid 5063] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5063] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6272] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 5062] close(3 [pid 5061] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./118/file0", [pid 5061] rmdir("./119" [pid 5063] getdents64(4, [pid 5062] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] rmdir("./118" [pid 5060] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] mkdir("./120", 0777 [pid 5060] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5063] close(4 [pid 5060] newfstatat(4, "", [pid 5063] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./118/file0") = 0 [pid 5062] mkdir("./119", 0777 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] getdents64(4, [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5060] close(4 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5063] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] rmdir("./118/file0" [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] rmdir("./118") = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] mkdir("./119", 0777 [pid 5060] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./118" [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6272] <... write resumed>) = 2097152 [pid 5060] <... rmdir resumed>) = 0 [pid 6272] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... openat resumed>) = 3 [pid 5060] mkdir("./119", 0777) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6272] <... munmap resumed>) = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 6272] <... openat resumed>) = 4 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6272] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6272] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 6272] <... close resumed>) = 0 [pid 6272] close(4) = 0 [pid 5062] close(3 [pid 6272] mkdir("./file0", 0777 [pid 5062] <... close resumed>) = 0 [pid 6272] <... mkdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... ioctl resumed>) = 0 [pid 6272] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] close(3./strace-static-x86_64: Process 6273 attached [pid 6273] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6273] chdir("./119") = 0 [pid 6273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6273] setpgid(0, 0) = 0 [pid 6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6273] write(3, "1000", 4) = 4 [pid 6273] close(3) = 0 [pid 6273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6273] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6273] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6273] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [ 129.035251][ T6272] loop0: detected capacity change from 0 to 4096 [pid 6273] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6274]}, 88) = 6274 [pid 5061] <... close resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6273 ./strace-static-x86_64: Process 6274 attached [pid 6273] rt_sigprocmask(SIG_SETMASK, [], [pid 6274] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6274] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6274] rt_sigprocmask(SIG_SETMASK, [], [pid 6273] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... ioctl resumed>) = 0 [pid 6274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6273] <... futex resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6274] memfd_create("syzkaller", 0 [pid 6273] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6275 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6275 [pid 6275] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6275] chdir("./120") = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6274] <... memfd_create resumed>) = 3 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6275] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6276 attached [pid 6275] setpgid(0, 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6276 [pid 5060] close(3 [pid 6275] <... setpgid resumed>) = 0 [pid 6276] set_robust_list(0x55558e6e36a0, 24 [pid 5060] <... close resumed>) = 0 [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6276] <... set_robust_list resumed>) = 0 [pid 6275] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6277 [pid 6276] chdir("./119" [pid 6275] write(3, "1000", 4./strace-static-x86_64: Process 6277 attached [pid 6276] <... chdir resumed>) = 0 [pid 6275] <... write resumed>) = 4 [pid 6277] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6277] chdir("./119") = 0 [pid 6277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6277] setpgid(0, 0 [pid 6275] close(3 [pid 6277] <... setpgid resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 6277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6276] <... prctl resumed>) = 0 [ 129.098321][ T6272] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6277] write(3, "1000", 4 [pid 6276] setpgid(0, 0 [pid 6275] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... setpgid resumed>) = 0 [pid 6275] <... futex resumed>) = 0 [pid 6276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6275] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6277] <... write resumed>) = 4 [pid 6277] close(3 [pid 6275] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6275] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6277] <... close resumed>) = 0 [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6276] <... openat resumed>) = 3 [pid 6275] <... mmap resumed>) = 0x7fe7c3226000 [pid 6277] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6277] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6275] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6277] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6276] write(3, "1000", 4 [pid 6275] <... mprotect resumed>) = 0 [pid 6277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6272] <... mount resumed>) = 0 [pid 6277] <... mmap resumed>) = 0x7fe7c3226000 [pid 6275] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6277] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6276] <... write resumed>) = 4 [pid 6275] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6276] close(3 [pid 6272] <... openat resumed>) = 3 [pid 6275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6276] <... close resumed>) = 0 [pid 6272] chdir("./file0"./strace-static-x86_64: Process 6278 attached [pid 6277] <... mprotect resumed>) = 0 [pid 6276] symlink("/dev/binderfs", "./binderfs" [pid 6272] <... chdir resumed>) = 0 [pid 6278] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6277] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6278] <... rseq resumed>) = 0 [pid 6277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6276] <... symlink resumed>) = 0 [pid 6275] <... clone3 resumed> => {parent_tid=[6278]}, 88) = 6278 [pid 6274] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6272] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6275] rt_sigprocmask(SIG_SETMASK, [], [pid 6278] set_robust_list(0x7fe7c32469a0, 24 [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6272] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6278] <... set_robust_list resumed>) = 0 [pid 6275] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] rt_sigprocmask(SIG_SETMASK, [], [pid 6275] <... futex resumed>) = 0 [pid 6278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6271] <... futex resumed>) = 0 [pid 6275] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6272] <... futex resumed>) = 1 [pid 6271] exit_group(0) = ? ./strace-static-x86_64: Process 6279 attached [pid 6277] <... clone3 resumed> => {parent_tid=[6279]}, 88) = 6279 [pid 6276] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6277] rt_sigprocmask(SIG_SETMASK, [], [pid 6276] <... futex resumed>) = 0 [pid 6279] <... rseq resumed>) = 0 [pid 6279] set_robust_list(0x7fe7c32469a0, 24 [pid 6277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6276] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6279] <... set_robust_list resumed>) = 0 [pid 6277] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6279] rt_sigprocmask(SIG_SETMASK, [], [pid 6277] <... futex resumed>) = 0 [pid 6276] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6277] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6279] memfd_create("syzkaller", 0 [pid 6276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6279] <... memfd_create resumed>) = 3 [pid 6278] memfd_create("syzkaller", 0 [pid 6276] <... mmap resumed>) = 0x7fe7c3226000 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] <... memfd_create resumed>) = 3 [pid 6276] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6272] +++ exited with 0 +++ [pid 6271] +++ exited with 0 +++ [pid 6278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6279] <... mmap resumed>) = 0x7fe7bae00000 [pid 6278] <... mmap resumed>) = 0x7fe7bae00000 [pid 6276] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 6280 attached [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6280] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6276] <... clone3 resumed> => {parent_tid=[6280]}, 88) = 6280 [pid 5059] <... restart_syscall resumed>) = 0 [pid 6276] rt_sigprocmask(SIG_SETMASK, [], [pid 6280] <... rseq resumed>) = 0 [pid 6276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6276] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 6280] set_robust_list(0x7fe7c32469a0, 24 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6280] <... set_robust_list resumed>) = 0 [pid 5059] getdents64(3, [pid 6280] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6278] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6274] <... write resumed>) = 2097152 [pid 6280] memfd_create("syzkaller", 0 [pid 5059] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6274] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6280] <... memfd_create resumed>) = 3 [pid 6279] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6274] <... munmap resumed>) = 0 [pid 5059] unlink("./121/binderfs" [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 6274] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6274] <... openat resumed>) = 4 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6278] <... write resumed>) = 2097152 [pid 6274] ioctl(4, LOOP_SET_FD, 3 [pid 5059] getdents64(4, [pid 6278] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./121/file0") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./121") = 0 [pid 5059] mkdir("./122", 0777 [pid 6278] <... munmap resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6278] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6278] ioctl(4, LOOP_SET_FD, 3 [pid 6274] <... ioctl resumed>) = 0 [pid 6274] close(3) = 0 [pid 6274] close(4) = 0 [pid 6274] mkdir("./file0", 0777) = 0 [pid 6274] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6280] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6278] <... ioctl resumed>) = 0 [pid 6278] close(3) = 0 [pid 6279] <... write resumed>) = 2097152 [ 129.308101][ T6274] loop3: detected capacity change from 0 to 4096 [ 129.327294][ T6278] loop2: detected capacity change from 0 to 4096 [pid 6278] close(4 [pid 6279] munmap(0x7fe7bae00000, 138412032 [pid 6278] <... close resumed>) = 0 [pid 6278] mkdir("./file0", 0777) = 0 [pid 6278] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6279] <... munmap resumed>) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... ioctl resumed>) = 0 [pid 6279] <... openat resumed>) = 4 [pid 6279] ioctl(4, LOOP_SET_FD, 3 [pid 6280] <... write resumed>) = 2097152 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6280] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6281 ./strace-static-x86_64: Process 6281 attached [pid 6281] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6281] chdir("./122" [pid 6280] <... munmap resumed>) = 0 [pid 6279] <... ioctl resumed>) = 0 [pid 6281] <... chdir resumed>) = 0 [pid 6280] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6279] close(3) = 0 [pid 6280] <... openat resumed>) = 4 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6279] close(4 [pid 6281] <... prctl resumed>) = 0 [pid 6280] ioctl(4, LOOP_SET_FD, 3 [pid 6279] <... close resumed>) = 0 [pid 6274] <... mount resumed>) = 0 [ 129.352708][ T6274] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 129.377388][ T6278] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 129.396687][ T6279] loop1: detected capacity change from 0 to 4096 [pid 6281] setpgid(0, 0 [pid 6279] mkdir("./file0", 0777 [pid 6281] <... setpgid resumed>) = 0 [pid 6280] <... ioctl resumed>) = 0 [pid 6274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6274] <... openat resumed>) = 3 [pid 6281] <... openat resumed>) = 3 [pid 6280] close(3 [pid 6274] chdir("./file0" [pid 6281] write(3, "1000", 4 [pid 6280] <... close resumed>) = 0 [pid 6279] <... mkdir resumed>) = 0 [pid 6274] <... chdir resumed>) = 0 [pid 6281] <... write resumed>) = 4 [pid 6280] close(4 [pid 6279] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6274] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6281] close(3 [pid 6280] <... close resumed>) = 0 [pid 6274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6281] <... close resumed>) = 0 [pid 6280] mkdir("./file0", 0777 [pid 6274] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] symlink("/dev/binderfs", "./binderfs" [pid 6280] <... mkdir resumed>) = 0 [pid 6274] <... futex resumed>) = 1 [pid 6273] <... futex resumed>) = 0 [pid 6281] <... symlink resumed>) = 0 [pid 6280] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6278] <... mount resumed>) = 0 [pid 6274] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6273] exit_group(0 [pid 6274] <... futex resumed>) = ? [pid 6273] <... exit_group resumed>) = ? [pid 6274] +++ exited with 0 +++ [pid 6278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6281] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] <... openat resumed>) = 3 [pid 6273] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 129.435725][ T6280] loop4: detected capacity change from 0 to 4096 [ 129.471201][ T6279] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5062] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6281] <... futex resumed>) = 0 [pid 6278] chdir("./file0" [pid 5062] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6278] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6278] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./119/binderfs", [pid 6281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6278] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6278] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] unlink("./119/binderfs" [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6278] <... futex resumed>) = 1 [pid 6275] <... futex resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6281] <... mmap resumed>) = 0x7fe7c3226000 [pid 6278] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6275] exit_group(0 [pid 5062] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6280] <... mount resumed>) = 0 [pid 6278] <... futex resumed>) = ? [pid 6275] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = 0 [pid 6278] +++ exited with 0 +++ [pid 5062] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6275] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6281] <... mprotect resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6281] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6280] <... openat resumed>) = 3 [pid 6279] <... mount resumed>) = 0 [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6282 attached [pid 6280] chdir("./file0" [pid 6279] <... openat resumed>) = 3 [pid 5062] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6282] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6281] <... clone3 resumed> => {parent_tid=[6282]}, 88) = 6282 [pid 6280] <... chdir resumed>) = 0 [pid 6279] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6282] <... rseq resumed>) = 0 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], [pid 6280] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6279] <... chdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6282] set_robust_list(0x7fe7c32469a0, 24 [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(3, "", [pid 6282] <... set_robust_list resumed>) = 0 [pid 6281] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 129.483560][ T6280] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6282] rt_sigprocmask(SIG_SETMASK, [], [pid 6281] <... futex resumed>) = 0 [pid 6280] <... futex resumed>) = 1 [pid 6276] <... futex resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 6282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6281] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6280] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6279] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] exit_group(0 [pid 5062] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6282] memfd_create("syzkaller", 0 [pid 6280] <... futex resumed>) = ? [pid 6279] <... futex resumed>) = 1 [pid 6277] <... futex resumed>) = 0 [pid 6276] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6282] <... memfd_create resumed>) = 3 [pid 6280] +++ exited with 0 +++ [pid 6279] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6277] exit_group(0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6279] <... futex resumed>) = ? [pid 6277] <... exit_group resumed>) = ? [pid 5061] newfstatat(AT_FDCWD, "./120/binderfs", [pid 6282] <... mmap resumed>) = 0x7fe7bae00000 [pid 6279] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./120/binderfs") = 0 [pid 6276] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6276, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5063] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] rmdir("./119/file0" [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5061] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 6277] +++ exited with 0 +++ [pid 5063] newfstatat(AT_FDCWD, "./119/binderfs", [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./120/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6277, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] unlink("./119/binderfs" [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] rmdir("./119" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 5060] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 5063] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./120", 0777 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6282] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] newfstatat(AT_FDCWD, "./119/file0", [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(3, [pid 5063] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] rmdir("./120/file0" [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(4, "", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./119/binderfs", [pid 5061] getdents64(3, [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5061] close(3 [pid 5060] unlink("./119/binderfs" [pid 5063] rmdir("./119/file0" [pid 5061] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] rmdir("./120" [pid 5060] <... unlink resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./121", 0777 [pid 5063] close(3) = 0 [pid 5063] rmdir("./119") = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5063] mkdir("./120", 0777 [pid 6282] <... write resumed>) = 2097152 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... umount2 resumed>) = 0 [pid 6282] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./119/file0", [pid 5062] close(3) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6283 attached [pid 6282] <... munmap resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6283] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5060] newfstatat(4, "", [pid 6282] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6283] chdir("./120" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6283 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6283] <... chdir resumed>) = 0 [pid 6282] <... openat resumed>) = 4 [pid 5060] getdents64(4, [pid 6282] ioctl(4, LOOP_SET_FD, 3 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6283] setpgid(0, 0) = 0 [pid 6282] <... ioctl resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 6282] close(3 [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6282] <... close resumed>) = 0 [pid 6282] close(4 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./119/file0") = 0 [pid 6282] <... close resumed>) = 0 [pid 6282] mkdir("./file0", 0777 [pid 5060] getdents64(3, [pid 6283] <... openat resumed>) = 3 [pid 6282] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6283] write(3, "1000", 4) = 4 [pid 5060] close(3 [pid 6283] close(3) = 0 [pid 5060] <... close resumed>) = 0 [pid 6283] symlink("/dev/binderfs", "./binderfs" [pid 5060] rmdir("./119") = 0 [pid 6283] <... symlink resumed>) = 0 [ 129.645865][ T6282] loop0: detected capacity change from 0 to 4096 [pid 6283] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6283] <... futex resumed>) = 0 [pid 6283] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6283] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] mkdir("./120", 0777) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... openat resumed>) = 3 [pid 6283] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6284 attached [pid 6284] set_robust_list(0x55558e6e36a0, 24 [pid 6283] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6284] <... set_robust_list resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6284 [pid 6284] chdir("./121" [pid 6283] <... mprotect resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6284] <... chdir resumed>) = 0 [pid 6283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6283] <... clone3 resumed> => {parent_tid=[6285]}, 88) = 6285 ./strace-static-x86_64: Process 6285 attached [pid 6284] <... prctl resumed>) = 0 [pid 6283] rt_sigprocmask(SIG_SETMASK, [], [pid 6285] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] <... rseq resumed>) = 0 [pid 6284] setpgid(0, 0 [pid 6283] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6286 attached [pid 6285] set_robust_list(0x7fe7c32469a0, 24 [pid 6284] <... setpgid resumed>) = 0 [pid 6283] <... futex resumed>) = 0 [pid 6286] set_robust_list(0x55558e6e36a0, 24 [pid 6285] <... set_robust_list resumed>) = 0 [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6283] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6286 [pid 6286] <... set_robust_list resumed>) = 0 [pid 6285] rt_sigprocmask(SIG_SETMASK, [], [ 129.687589][ T6282] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6284] <... openat resumed>) = 3 [pid 6286] chdir("./120" [pid 6285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6286] <... chdir resumed>) = 0 [pid 6285] memfd_create("syzkaller", 0 [pid 6284] write(3, "1000", 4 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6284] <... write resumed>) = 4 [pid 6286] <... prctl resumed>) = 0 [pid 6284] close(3 [pid 6286] setpgid(0, 0 [pid 6284] <... close resumed>) = 0 [pid 6284] symlink("/dev/binderfs", "./binderfs" [pid 6286] <... setpgid resumed>) = 0 [pid 6285] <... memfd_create resumed>) = 3 [pid 6284] <... symlink resumed>) = 0 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6284] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6286] <... openat resumed>) = 3 [pid 6285] <... mmap resumed>) = 0x7fe7bae00000 [pid 6284] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6286] write(3, "1000", 4 [pid 6284] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6286] <... write resumed>) = 4 [pid 6286] close(3 [pid 6284] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6286] <... close resumed>) = 0 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6286] symlink("/dev/binderfs", "./binderfs" [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6286] <... symlink resumed>) = 0 [pid 6284] <... mmap resumed>) = 0x7fe7c3226000 [pid 6284] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6286] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] <... mprotect resumed>) = 0 [pid 6282] <... mount resumed>) = 0 [pid 6286] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6286] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6284] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6282] <... openat resumed>) = 3 [pid 6286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6286] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6287 attached ) = 0 [pid 6284] <... clone3 resumed> => {parent_tid=[6287]}, 88) = 6287 [pid 6282] chdir("./file0" [pid 6287] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 6282] <... chdir resumed>) = 0 [pid 6287] <... rseq resumed>) = 0 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6284] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] set_robust_list(0x7fe7c32469a0, 24 [pid 6284] <... futex resumed>) = 0 [pid 6282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6284] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6282] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... set_robust_list resumed>) = 0 [pid 6282] <... futex resumed>) = 1 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], [pid 6282] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6286] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6287] memfd_create("syzkaller", 0 [pid 6286] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6281] <... futex resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6287] <... memfd_create resumed>) = 3 [pid 6286] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6281] exit_group(0) = ? [pid 6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6288 attached [pid 6282] <... futex resumed>) = ? [pid 6288] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6287] <... mmap resumed>) = 0x7fe7bae00000 [pid 6282] +++ exited with 0 +++ [pid 6281] +++ exited with 0 +++ [pid 6288] <... rseq resumed>) = 0 [pid 6288] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 5060] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 6288] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6286] <... clone3 resumed> => {parent_tid=[6288]}, 88) = 6288 [pid 6286] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6286] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6286] <... futex resumed>) = 1 [pid 5059] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6286] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 6288] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./122/binderfs", ./strace-static-x86_64: Process 6289 attached [pid 6288] memfd_create("syzkaller", 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6289] set_robust_list(0x55558e6e36a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6289 [pid 6289] <... set_robust_list resumed>) = 0 [pid 5059] unlink("./122/binderfs" [pid 6289] chdir("./120" [pid 6288] <... memfd_create resumed>) = 3 [pid 5059] <... unlink resumed>) = 0 [pid 6289] <... chdir resumed>) = 0 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6288] <... mmap resumed>) = 0x7fe7bae00000 [pid 6285] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6289] setpgid(0, 0) = 0 [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... umount2 resumed>) = 0 [pid 6289] <... openat resumed>) = 3 [pid 6289] write(3, "1000", 4) = 4 [pid 6289] close(3) = 0 [pid 6289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6289] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6289] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] newfstatat(AT_FDCWD, "./122/file0", [pid 6289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6289] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6289] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6289] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] getdents64(4, [pid 6289] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] close(4) = 0 [pid 5059] rmdir("./122/file0" [pid 6289] <... clone3 resumed> => {parent_tid=[6290]}, 88) = 6290 [pid 5059] <... rmdir resumed>) = 0 [pid 6289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6289] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6290 attached 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6290] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 5059] close(3 [pid 6290] set_robust_list(0x7fe7c32469a0, 24 [pid 5059] <... close resumed>) = 0 [pid 6290] <... set_robust_list resumed>) = 0 [pid 5059] rmdir("./122" [pid 6290] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... rmdir resumed>) = 0 [pid 6290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6288] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6290] memfd_create("syzkaller", 0 [pid 6285] <... write resumed>) = 2097152 [pid 6285] munmap(0x7fe7bae00000, 138412032 [pid 5059] mkdir("./123", 0777) = 0 [pid 6290] <... memfd_create resumed>) = 3 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6285] <... munmap resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6285] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6287] <... write resumed>) = 2097152 [pid 6285] <... openat resumed>) = 4 [pid 6287] munmap(0x7fe7bae00000, 138412032 [pid 6285] ioctl(4, LOOP_SET_FD, 3 [pid 6287] <... munmap resumed>) = 0 [pid 6287] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6288] <... write resumed>) = 2097152 [pid 6287] ioctl(4, LOOP_SET_FD, 3 [pid 6285] <... ioctl resumed>) = 0 [pid 6290] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6288] munmap(0x7fe7bae00000, 138412032 [pid 6287] <... ioctl resumed>) = 0 [pid 6285] close(3 [pid 6288] <... munmap resumed>) = 0 [pid 6287] close(3 [pid 6285] <... close resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6287] <... close resumed>) = 0 [pid 6285] close(4 [pid 6287] close(4 [pid 6285] <... close resumed>) = 0 [pid 6285] mkdir("./file0", 0777) = 0 [pid 6287] <... close resumed>) = 0 [pid 6288] <... openat resumed>) = 4 [pid 6287] mkdir("./file0", 0777 [pid 6285] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... ioctl resumed>) = 0 [pid 6288] ioctl(4, LOOP_SET_FD, 3 [pid 6287] <... mkdir resumed>) = 0 [ 129.900611][ T6285] loop3: detected capacity change from 0 to 4096 [ 129.925385][ T6287] loop2: detected capacity change from 0 to 4096 [pid 5059] close(3) = 0 [pid 6290] <... write resumed>) = 2097152 [pid 6287] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6290] munmap(0x7fe7bae00000, 138412032./strace-static-x86_64: Process 6291 attached [pid 6288] <... ioctl resumed>) = 0 [pid 6291] set_robust_list(0x55558e6e36a0, 24 [pid 6288] close(3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6291 [pid 6290] <... munmap resumed>) = 0 [pid 6291] <... set_robust_list resumed>) = 0 [pid 6288] <... close resumed>) = 0 [pid 6288] close(4 [pid 6291] chdir("./123") = 0 [pid 6288] <... close resumed>) = 0 [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6288] mkdir("./file0", 0777 [pid 6291] <... prctl resumed>) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6291] setpgid(0, 0 [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 6288] <... mkdir resumed>) = 0 [ 129.964909][ T6288] loop4: detected capacity change from 0 to 4096 [ 129.971992][ T6285] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 129.989643][ T6287] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6291] <... setpgid resumed>) = 0 [pid 6288] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6290] <... ioctl resumed>) = 0 [pid 6291] <... openat resumed>) = 3 [pid 6290] close(3 [pid 6291] write(3, "1000", 4 [pid 6290] <... close resumed>) = 0 [pid 6291] <... write resumed>) = 4 [pid 6290] close(4 [pid 6291] close(3 [pid 6290] <... close resumed>) = 0 [pid 6291] <... close resumed>) = 0 [pid 6291] symlink("/dev/binderfs", "./binderfs" [pid 6290] mkdir("./file0", 0777 [pid 6291] <... symlink resumed>) = 0 [pid 6290] <... mkdir resumed>) = 0 [pid 6291] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6291] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6291] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6291] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6291] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6292]}, 88) = 6292 [pid 6291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6291] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6291] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6292 attached [pid 6292] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6292] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6292] memfd_create("syzkaller", 0) = 3 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 130.011750][ T6290] loop1: detected capacity change from 0 to 4096 [ 130.034116][ T6290] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 130.037239][ T6288] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6287] <... mount resumed>) = 0 [pid 6287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6287] chdir("./file0" [pid 6285] <... mount resumed>) = 0 [pid 6292] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6287] <... chdir resumed>) = 0 [pid 6287] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6287] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6287] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... openat resumed>) = 3 [pid 6287] <... futex resumed>) = 1 [pid 6285] chdir("./file0") = 0 [pid 6287] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6284] <... futex resumed>) = 0 [pid 6285] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6284] exit_group(0 [pid 6290] <... mount resumed>) = 0 [pid 6284] <... exit_group resumed>) = ? [pid 6288] <... mount resumed>) = 0 [pid 6287] <... futex resumed>) = ? [pid 6285] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] +++ exited with 0 +++ [pid 6290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6285] <... futex resumed>) = 1 [pid 6284] +++ exited with 0 +++ [pid 6283] <... futex resumed>) = 0 [pid 6290] <... openat resumed>) = 3 [pid 6285] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] exit_group(0 [pid 6285] <... futex resumed>) = ? [pid 6283] <... exit_group resumed>) = ? [pid 6285] +++ exited with 0 +++ [pid 6283] +++ exited with 0 +++ [pid 6290] chdir("./file0" [pid 6288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6284, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6290] <... chdir resumed>) = 0 [pid 6288] <... openat resumed>) = 3 [pid 5061] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6290] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6288] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6290] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6289] <... futex resumed>) = 0 [pid 5062] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 6290] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(3, "", [pid 6290] <... futex resumed>) = ? [pid 6289] <... exit_group resumed>) = ? [pid 5062] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6290] +++ exited with 0 +++ [pid 6289] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 6288] <... chdir resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6288] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6288] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6288] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(AT_FDCWD, "./121/binderfs", [pid 5060] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... write resumed>) = 2097152 [pid 6288] <... futex resumed>) = 1 [pid 6286] <... futex resumed>) = 0 [pid 5062] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] munmap(0x7fe7bae00000, 138412032 [pid 6288] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6286] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./120/binderfs", [pid 5061] unlink("./121/binderfs" [pid 5060] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(3, "", [pid 6288] <... futex resumed>) = ? [pid 6286] <... exit_group resumed>) = ? [pid 5062] unlink("./120/binderfs" [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6288] +++ exited with 0 +++ [pid 5062] <... unlink resumed>) = 0 [pid 5060] getdents64(3, [pid 5062] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] <... munmap resumed>) = 0 [pid 6286] +++ exited with 0 +++ [pid 5061] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5062] <... umount2 resumed>) = 0 [pid 6292] <... openat resumed>) = 4 [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./120/binderfs", [pid 5061] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./120/file0", [pid 5061] newfstatat(AT_FDCWD, "./121/file0", [pid 5060] unlink("./120/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... unlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6292] <... ioctl resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6292] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 6292] close(4 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6292] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(AT_FDCWD, "./120/file0", [pid 6292] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6292] <... mkdir resumed>) = 0 [pid 5063] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5061] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [ 130.210719][ T6292] loop0: detected capacity change from 0 to 4096 [pid 6292] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] newfstatat(AT_FDCWD, "./120/binderfs", [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./120/binderfs" [pid 5061] getdents64(4, [pid 5060] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5061] close(4) = 0 [pid 5061] rmdir("./121/file0" [pid 5060] newfstatat(4, "", [pid 5063] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5061] getdents64(3, [pid 5060] getdents64(4, [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./120/file0" [pid 5061] close(3 [pid 5060] close(4) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5060] rmdir("./120/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./120/file0", [pid 5062] rmdir("./120" [pid 5061] rmdir("./121" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./121", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5063] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5063] newfstatat(4, "", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] mkdir("./122", 0777 [pid 5060] close(3 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6292] <... mount resumed>) = 0 [pid 5063] close(4 [pid 5060] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./120/file0" [pid 6292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] rmdir("./120" [pid 6292] <... openat resumed>) = 3 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6292] chdir("./file0" [pid 5063] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... rmdir resumed>) = 0 [pid 6292] <... chdir resumed>) = 0 [pid 5063] rmdir("./120" [pid 6292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 5060] mkdir("./121", 0777 [pid 6292] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./121", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6292] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... mkdir resumed>) = 0 [pid 6292] <... futex resumed>) = 1 [pid 6291] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6291] exit_group(0) = ? [pid 5063] ioctl(3, LOOP_CLR_FD [ 130.256466][ T6292] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6292] +++ exited with 0 +++ [pid 6291] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5059] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./123/binderfs") = 0 [pid 5062] close(3 [pid 5059] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6293 attached [pid 5059] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6293] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5059] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6293] chdir("./121" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6293 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./123/file0" [pid 6293] <... chdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 6293] <... prctl resumed>) = 0 [pid 5061] close(3 [pid 5059] <... close resumed>) = 0 [pid 6293] setpgid(0, 0) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] rmdir("./123" [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6294 attached [pid 6293] <... openat resumed>) = 3 [pid 6293] write(3, "1000", 4 [pid 6294] set_robust_list(0x55558e6e36a0, 24 [pid 6293] <... write resumed>) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6294 [pid 6294] <... set_robust_list resumed>) = 0 [pid 6293] close(3 [pid 6294] chdir("./122" [pid 6293] <... close resumed>) = 0 [pid 5059] mkdir("./124", 0777 [pid 6294] <... chdir resumed>) = 0 [pid 6293] symlink("/dev/binderfs", "./binderfs" [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6293] <... symlink resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6294] <... prctl resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6294] setpgid(0, 0 [pid 6293] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 3 [pid 6294] <... setpgid resumed>) = 0 [pid 6293] <... futex resumed>) = 0 [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6293] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6293] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] close(3 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6294] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 6294] write(3, "1000", 4 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6295 attached [pid 6294] <... write resumed>) = 4 [pid 6293] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6295] set_robust_list(0x55558e6e36a0, 24 [pid 6294] close(3 [pid 6295] <... set_robust_list resumed>) = 0 [pid 6294] <... close resumed>) = 0 [pid 6295] chdir("./121" [pid 6294] symlink("/dev/binderfs", "./binderfs" [pid 6293] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6295 [pid 6295] <... chdir resumed>) = 0 [pid 6295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6295] setpgid(0, 0) = 0 [pid 6295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6296 attached ) = 3 [pid 6294] <... symlink resumed>) = 0 [pid 6293] <... mprotect resumed>) = 0 [pid 6295] write(3, "1000", 4 [pid 6296] set_robust_list(0x55558e6e36a0, 24 [pid 6294] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6296 [pid 6296] <... set_robust_list resumed>) = 0 [pid 6294] <... futex resumed>) = 0 [pid 6293] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6296] chdir("./121" [pid 6295] <... write resumed>) = 4 [pid 6294] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6297 attached [pid 6296] <... chdir resumed>) = 0 [pid 6295] close(3 [pid 6294] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6297] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6293] <... clone3 resumed> => {parent_tid=[6297]}, 88) = 6297 [pid 5059] <... ioctl resumed>) = 0 [pid 6297] <... rseq resumed>) = 0 [pid 6296] <... prctl resumed>) = 0 [pid 6294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] rt_sigprocmask(SIG_SETMASK, [], [pid 6296] setpgid(0, 0 [pid 6294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6296] <... setpgid resumed>) = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6295] <... close resumed>) = 0 [pid 6294] <... mmap resumed>) = 0x7fe7c3226000 [pid 6293] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] symlink("/dev/binderfs", "./binderfs" [pid 6293] <... futex resumed>) = 0 [pid 6297] set_robust_list(0x7fe7c32469a0, 24 [pid 6296] <... openat resumed>) = 3 [pid 6295] <... symlink resumed>) = 0 [pid 6294] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6293] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] close(3 [pid 6297] <... set_robust_list resumed>) = 0 [pid 6296] write(3, "1000", 4 [pid 6295] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] <... mprotect resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], [pid 6295] <... futex resumed>) = 0 [pid 6297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6296] <... write resumed>) = 4 [pid 6295] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6294] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6295] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6297] memfd_create("syzkaller", 0 [pid 6295] <... mmap resumed>) = 0x7fe7c3226000 [pid 6295] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6298 attached [pid 6296] close(3 [pid 6295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6294] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6296] <... close resumed>) = 0 [pid 6294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6299 attached [pid 6296] symlink("/dev/binderfs", "./binderfs" [pid 6295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6298 [pid 6297] <... memfd_create resumed>) = 3 [pid 6298] set_robust_list(0x55558e6e36a0, 24 [pid 6296] <... symlink resumed>) = 0 [pid 6295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6294] <... clone3 resumed> => {parent_tid=[6299]}, 88) = 6299 [pid 6299] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6298] <... set_robust_list resumed>) = 0 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6296] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6300 attached [pid 6299] <... rseq resumed>) = 0 [pid 6298] chdir("./124" [pid 6297] <... mmap resumed>) = 0x7fe7bae00000 [pid 6296] <... futex resumed>) = 0 [pid 6295] <... clone3 resumed> => {parent_tid=[6300]}, 88) = 6300 [pid 6294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6300] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6299] set_robust_list(0x7fe7c32469a0, 24 [pid 6298] <... chdir resumed>) = 0 [pid 6296] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6295] rt_sigprocmask(SIG_SETMASK, [], [pid 6300] <... rseq resumed>) = 0 [pid 6299] <... set_robust_list resumed>) = 0 [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6296] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6294] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] rt_sigprocmask(SIG_SETMASK, [], [pid 6296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6294] <... futex resumed>) = 0 [pid 6299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6300] set_robust_list(0x7fe7c32469a0, 24 [pid 6298] <... prctl resumed>) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6295] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6300] <... set_robust_list resumed>) = 0 [pid 6298] setpgid(0, 0 [pid 6296] <... mmap resumed>) = 0x7fe7c3226000 [pid 6295] <... futex resumed>) = 0 [pid 6296] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6299] memfd_create("syzkaller", 0 [pid 6296] <... mprotect resumed>) = 0 [pid 6295] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6300] rt_sigprocmask(SIG_SETMASK, [], [pid 6298] <... setpgid resumed>) = 0 [pid 6300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6299] <... memfd_create resumed>) = 3 [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6298] <... openat resumed>) = 3 [pid 6296] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 6299] <... mmap resumed>) = 0x7fe7bae00000 [pid 6298] write(3, "1000", 4 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6298] <... write resumed>) = 4 [pid 6298] close(3 [pid 6300] <... memfd_create resumed>) = 3 [pid 6298] <... close resumed>) = 0 ./strace-static-x86_64: Process 6301 attached [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6298] symlink("/dev/binderfs", "./binderfs" [pid 6301] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6300] <... mmap resumed>) = 0x7fe7bae00000 [pid 6298] <... symlink resumed>) = 0 [pid 6296] <... clone3 resumed> => {parent_tid=[6301]}, 88) = 6301 [pid 6301] <... rseq resumed>) = 0 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], [pid 6301] set_robust_list(0x7fe7c32469a0, 24 [pid 6296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6301] <... set_robust_list resumed>) = 0 [pid 6298] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6301] rt_sigprocmask(SIG_SETMASK, [], [pid 6298] <... futex resumed>) = 0 [pid 6298] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6298] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6296] <... futex resumed>) = 0 [pid 6298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6301] memfd_create("syzkaller", 0 [pid 6298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6296] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6298] <... mmap resumed>) = 0x7fe7c3226000 [pid 6298] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6301] <... memfd_create resumed>) = 3 [pid 6298] <... mprotect resumed>) = 0 [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6301] <... mmap resumed>) = 0x7fe7bae00000 [pid 6298] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6302 attached => {parent_tid=[6302]}, 88) = 6302 [pid 6302] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6298] rt_sigprocmask(SIG_SETMASK, [], [pid 6302] <... rseq resumed>) = 0 [pid 6298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6302] set_robust_list(0x7fe7c32469a0, 24 [pid 6298] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... set_robust_list resumed>) = 0 [pid 6298] <... futex resumed>) = 0 [pid 6297] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6302] rt_sigprocmask(SIG_SETMASK, [], [pid 6298] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6302] memfd_create("syzkaller", 0) = 3 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6299] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6300] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6302] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6301] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6297] <... write resumed>) = 2097152 [pid 6297] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6299] <... write resumed>) = 2097152 [pid 6299] munmap(0x7fe7bae00000, 138412032 [pid 6300] <... write resumed>) = 2097152 [pid 6299] <... munmap resumed>) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6297] <... openat resumed>) = 4 [pid 6299] ioctl(4, LOOP_SET_FD, 3 [pid 6297] ioctl(4, LOOP_SET_FD, 3 [pid 6300] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6302] <... write resumed>) = 2097152 [pid 6301] <... write resumed>) = 2097152 [pid 6299] <... ioctl resumed>) = 0 [pid 6297] <... ioctl resumed>) = 0 [pid 6300] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6297] close(3) = 0 [pid 6300] <... openat resumed>) = 4 [pid 6297] close(4 [pid 6302] munmap(0x7fe7bae00000, 138412032 [pid 6301] munmap(0x7fe7bae00000, 138412032 [ 130.633630][ T6299] loop2: detected capacity change from 0 to 4096 [ 130.640509][ T6297] loop3: detected capacity change from 0 to 4096 [ 130.658968][ T6300] loop1: detected capacity change from 0 to 4096 [ 130.671665][ T6302] loop0: detected capacity change from 0 to 4096 [pid 6300] ioctl(4, LOOP_SET_FD, 3 [pid 6299] close(3 [pid 6302] <... munmap resumed>) = 0 [pid 6297] <... close resumed>) = 0 [pid 6297] mkdir("./file0", 0777 [pid 6302] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6299] <... close resumed>) = 0 [pid 6297] <... mkdir resumed>) = 0 [pid 6302] <... openat resumed>) = 4 [pid 6299] close(4) = 0 [pid 6299] mkdir("./file0", 0777) = 0 [pid 6299] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6297] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6302] ioctl(4, LOOP_SET_FD, 3 [pid 6300] <... ioctl resumed>) = 0 [pid 6300] close(3) = 0 [pid 6300] close(4) = 0 [pid 6300] mkdir("./file0", 0777) = 0 [pid 6300] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6302] <... ioctl resumed>) = 0 [pid 6301] <... munmap resumed>) = 0 [pid 6302] close(3 [pid 6301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6302] <... close resumed>) = 0 [pid 6301] <... openat resumed>) = 4 [pid 6302] close(4 [pid 6301] ioctl(4, LOOP_SET_FD, 3 [pid 6302] <... close resumed>) = 0 [ 130.671979][ T6297] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 130.688039][ T6300] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 130.697497][ T6299] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6302] mkdir("./file0", 0777 [pid 6297] <... mount resumed>) = 0 [pid 6297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6297] chdir("./file0") = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6297] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6302] <... mkdir resumed>) = 0 [pid 6297] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] exit_group(0 [pid 6297] <... futex resumed>) = ? [pid 6293] <... exit_group resumed>) = ? [pid 6302] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6297] +++ exited with 0 +++ [pid 6293] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6301] <... ioctl resumed>) = 0 [pid 5062] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] close(3 [pid 6299] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 6301] close(4 [pid 6299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6301] <... close resumed>) = 0 [pid 6299] <... openat resumed>) = 3 [pid 6301] mkdir("./file0", 0777 [pid 5062] getdents64(3, [pid 6301] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./121/binderfs", [pid 6299] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 130.726627][ T6301] loop4: detected capacity change from 0 to 4096 [ 130.748099][ T6302] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6301] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6299] <... chdir resumed>) = 0 [pid 5062] unlink("./121/binderfs") = 0 [pid 5062] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6300] <... mount resumed>) = 0 [pid 6300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6300] chdir("./file0") = 0 [pid 6300] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6300] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6299] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6294] <... futex resumed>) = 0 [pid 6294] exit_group(0 [pid 6299] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6294] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = 0 [pid 6299] <... futex resumed>) = ? [pid 6295] <... futex resumed>) = 0 [pid 6295] exit_group(0 [pid 6300] <... futex resumed>) = ? [pid 6295] <... exit_group resumed>) = ? [pid 6300] +++ exited with 0 +++ [pid 6299] +++ exited with 0 +++ [pid 6294] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 6295] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6295, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5062] newfstatat(AT_FDCWD, "./121/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./122/binderfs", [pid 5062] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./122/binderfs" [pid 5062] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... unlink resumed>) = 0 [pid 6302] <... mount resumed>) = 0 [pid 6301] <... mount resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5060] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6302] <... openat resumed>) = 3 [pid 5061] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6302] chdir("./file0" [pid 5062] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6302] <... chdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 6302] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6301] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 130.786861][ T6301] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6302] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] getdents64(4, [pid 5060] getdents64(3, [pid 6302] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6302] <... futex resumed>) = 1 [pid 6301] chdir("./file0" [pid 6298] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6302] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6301] <... chdir resumed>) = 0 [pid 6298] exit_group(0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6302] <... futex resumed>) = ? [pid 6301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6298] <... exit_group resumed>) = ? [pid 5062] close(4 [pid 5061] newfstatat(AT_FDCWD, "./122/file0", [pid 5060] newfstatat(AT_FDCWD, "./121/binderfs", [pid 6302] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./121/file0" [pid 5061] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] unlink("./121/binderfs" [pid 6301] <... futex resumed>) = 1 [pid 6296] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6301] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6298] +++ exited with 0 +++ [pid 6296] exit_group(0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5060] <... unlink resumed>) = 0 [pid 6301] <... futex resumed>) = ? [pid 6296] <... exit_group resumed>) = ? [pid 5062] close(3 [pid 5061] newfstatat(4, "", [pid 5060] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 6301] +++ exited with 0 +++ [pid 6296] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6296, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] getdents64(4, [pid 5060] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... restart_syscall resumed>) = 0 [pid 5062] rmdir("./121" [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5060] newfstatat(AT_FDCWD, "./121/file0", [pid 5063] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5062] mkdir("./122", 0777 [pid 5061] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5060] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5059] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] rmdir("./122/file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] newfstatat(3, "", [pid 5063] newfstatat(AT_FDCWD, "./121/binderfs", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(3, [pid 5060] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5063] unlink("./121/binderfs" [pid 5061] close(3 [pid 5060] close(4 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./122" [pid 5060] rmdir("./121/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./124/binderfs", [pid 5061] mkdir("./123", 0777 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] unlink("./124/binderfs" [pid 5063] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] close(3 [pid 5059] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./121/file0", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./121" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5059] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] mkdir("./122", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./124/file0", [pid 5063] close(4 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] rmdir("./121/file0" [pid 5059] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5059] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(4, "", [pid 5063] close(3) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./121" [pid 5059] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5063] mkdir("./122", 0777) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./124/file0") = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5059] getdents64(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./124") = 0 [pid 5059] mkdir("./125", 0777 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6303 ./strace-static-x86_64: Process 6303 attached [pid 5061] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 6303] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... close resumed>) = 0 [pid 6303] <... set_robust_list resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6303] chdir("./122") = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6304 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6303] setpgid(0, 0) = 0 [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6303] write(3, "1000", 4) = 4 [pid 6303] close(3) = 0 [pid 6303] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6304 attached [pid 5063] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5059] <... ioctl resumed>) = 0 [pid 6304] set_robust_list(0x55558e6e36a0, 24 [pid 6303] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 5060] <... close resumed>) = 0 [pid 5059] close(3 [pid 6304] <... set_robust_list resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6303] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6304] chdir("./123" [pid 6303] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6304] <... chdir resumed>) = 0 [pid 6303] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 6305 attached NULL, 8) = 0 [pid 6305] set_robust_list(0x55558e6e36a0, 24 [pid 6303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6305] <... set_robust_list resumed>) = 0 [pid 6303] <... mmap resumed>) = 0x7fe7c3226000 [pid 6304] <... prctl resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6305 [pid 6303] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6306 attached [pid 6305] chdir("./122" [pid 6304] setpgid(0, 0 [pid 6303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6306 ./strace-static-x86_64: Process 6307 attached [pid 6305] <... chdir resumed>) = 0 [pid 6304] <... setpgid resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6307 [pid 6306] set_robust_list(0x55558e6e36a0, 24 [pid 6307] set_robust_list(0x55558e6e36a0, 24 [pid 6306] <... set_robust_list resumed>) = 0 [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6307] <... set_robust_list resumed>) = 0 [pid 6306] chdir("./125" [pid 6305] <... prctl resumed>) = 0 [pid 6303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6307] chdir("./122" [pid 6306] <... chdir resumed>) = 0 [pid 6305] setpgid(0, 0 [pid 6304] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6308 attached [pid 6307] <... chdir resumed>) = 0 [pid 6306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6304] write(3, "1000", 4 [pid 6306] <... prctl resumed>) = 0 [pid 6304] <... write resumed>) = 4 [pid 6308] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6306] setpgid(0, 0 [pid 6305] <... setpgid resumed>) = 0 [pid 6304] close(3 [pid 6303] <... clone3 resumed> => {parent_tid=[6308]}, 88) = 6308 [pid 6308] <... rseq resumed>) = 0 [pid 6307] <... prctl resumed>) = 0 [pid 6306] <... setpgid resumed>) = 0 [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6304] <... close resumed>) = 0 [pid 6303] rt_sigprocmask(SIG_SETMASK, [], [pid 6308] set_robust_list(0x7fe7c32469a0, 24 [pid 6307] setpgid(0, 0 [pid 6305] <... openat resumed>) = 3 [pid 6304] symlink("/dev/binderfs", "./binderfs" [pid 6303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6308] <... set_robust_list resumed>) = 0 [pid 6307] <... setpgid resumed>) = 0 [pid 6306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6305] write(3, "1000", 4 [pid 6303] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... symlink resumed>) = 0 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], [pid 6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6305] <... write resumed>) = 4 [pid 6303] <... futex resumed>) = 0 [pid 6308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6306] <... openat resumed>) = 3 [pid 6304] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6308] memfd_create("syzkaller", 0 [pid 6307] <... openat resumed>) = 3 [pid 6305] close(3 [pid 6306] write(3, "1000", 4 [pid 6304] <... futex resumed>) = 0 [pid 6304] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6306] <... write resumed>) = 4 [pid 6305] <... close resumed>) = 0 [pid 6304] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6307] write(3, "1000", 4 [pid 6306] close(3 [pid 6305] symlink("/dev/binderfs", "./binderfs" [pid 6304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6308] <... memfd_create resumed>) = 3 [pid 6307] <... write resumed>) = 4 [pid 6305] <... symlink resumed>) = 0 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6307] close(3 [pid 6306] <... close resumed>) = 0 [pid 6304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6308] <... mmap resumed>) = 0x7fe7bae00000 [pid 6307] <... close resumed>) = 0 [pid 6306] symlink("/dev/binderfs", "./binderfs" [pid 6305] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6307] symlink("/dev/binderfs", "./binderfs" [pid 6306] <... symlink resumed>) = 0 [pid 6304] <... mmap resumed>) = 0x7fe7c3226000 [pid 6306] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = 0 [pid 6307] <... symlink resumed>) = 0 [pid 6306] <... futex resumed>) = 0 [pid 6305] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6304] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6305] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6304] <... mprotect resumed>) = 0 [pid 6307] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6306] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6307] <... futex resumed>) = 0 [pid 6306] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6306] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6307] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6306] <... mmap resumed>) = 0x7fe7c3226000 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6306] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6305] <... mmap resumed>) = 0x7fe7c3226000 [pid 6304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6306] <... mprotect resumed>) = 0 [pid 6305] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6307] <... mmap resumed>) = 0x7fe7c3226000 [pid 6305] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6309 attached [pid 6307] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6306] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6305] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6309] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6307] <... mprotect resumed>) = 0 [pid 6305] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6307] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6309] <... rseq resumed>) = 0 [pid 6307] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6306] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6304] <... clone3 resumed> => {parent_tid=[6309]}, 88) = 6309 ./strace-static-x86_64: Process 6310 attached [pid 6309] set_robust_list(0x7fe7c32469a0, 24 [pid 6307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6305] <... clone3 resumed> => {parent_tid=[6310]}, 88) = 6310 ./strace-static-x86_64: Process 6311 attached [pid 6310] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6309] <... set_robust_list resumed>) = 0 [pid 6305] rt_sigprocmask(SIG_SETMASK, [], [pid 6304] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6312 attached [pid 6311] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6310] <... rseq resumed>) = 0 [pid 6309] rt_sigprocmask(SIG_SETMASK, [], [pid 6305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6312] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6306] <... clone3 resumed> => {parent_tid=[6312]}, 88) = 6312 [pid 6304] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] <... rseq resumed>) = 0 [pid 6304] <... futex resumed>) = 0 [pid 6306] rt_sigprocmask(SIG_SETMASK, [], [pid 6304] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6312] set_robust_list(0x7fe7c32469a0, 24 [pid 6306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6312] <... set_robust_list resumed>) = 0 [pid 6311] <... rseq resumed>) = 0 [pid 6310] set_robust_list(0x7fe7c32469a0, 24 [pid 6307] <... clone3 resumed> => {parent_tid=[6311]}, 88) = 6311 [pid 6306] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] rt_sigprocmask(SIG_SETMASK, [], [pid 6311] set_robust_list(0x7fe7c32469a0, 24 [pid 6310] <... set_robust_list resumed>) = 0 [pid 6309] memfd_create("syzkaller", 0 [pid 6307] rt_sigprocmask(SIG_SETMASK, [], [pid 6306] <... futex resumed>) = 0 [pid 6305] <... futex resumed>) = 0 [pid 6312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6310] rt_sigprocmask(SIG_SETMASK, [], [pid 6309] <... memfd_create resumed>) = 3 [pid 6307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6306] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6305] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6311] <... set_robust_list resumed>) = 0 [pid 6310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6307] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] memfd_create("syzkaller", 0 [pid 6311] rt_sigprocmask(SIG_SETMASK, [], [pid 6310] memfd_create("syzkaller", 0 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6307] <... futex resumed>) = 0 [pid 6312] <... memfd_create resumed>) = 3 [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6310] <... memfd_create resumed>) = 3 [pid 6309] <... mmap resumed>) = 0x7fe7bae00000 [pid 6307] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6311] memfd_create("syzkaller", 0 [pid 6310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6311] <... memfd_create resumed>) = 3 [pid 6310] <... mmap resumed>) = 0x7fe7bae00000 [pid 6311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6312] <... mmap resumed>) = 0x7fe7bae00000 [pid 6311] <... mmap resumed>) = 0x7fe7bae00000 [pid 6308] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6309] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6311] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6312] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6310] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6309] <... write resumed>) = 2097152 [pid 6308] <... write resumed>) = 2097152 [pid 6308] munmap(0x7fe7bae00000, 138412032 [pid 6309] munmap(0x7fe7bae00000, 138412032 [pid 6308] <... munmap resumed>) = 0 [pid 6309] <... munmap resumed>) = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6309] <... openat resumed>) = 4 [pid 6308] <... openat resumed>) = 4 [pid 6309] ioctl(4, LOOP_SET_FD, 3 [pid 6308] ioctl(4, LOOP_SET_FD, 3 [pid 6310] <... write resumed>) = 2097152 [pid 6312] <... write resumed>) = 2097152 [pid 6311] <... write resumed>) = 2097152 [pid 6310] munmap(0x7fe7bae00000, 138412032 [pid 6309] <... ioctl resumed>) = 0 [pid 6308] <... ioctl resumed>) = 0 [pid 6312] munmap(0x7fe7bae00000, 138412032 [pid 6311] munmap(0x7fe7bae00000, 138412032 [pid 6310] <... munmap resumed>) = 0 [pid 6309] close(3 [pid 6308] close(3 [pid 6312] <... munmap resumed>) = 0 [pid 6311] <... munmap resumed>) = 0 [pid 6308] <... close resumed>) = 0 [pid 6308] close(4 [pid 6312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6311] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6310] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6309] <... close resumed>) = 0 [pid 6312] <... openat resumed>) = 4 [pid 6311] <... openat resumed>) = 4 [pid 6310] <... openat resumed>) = 4 [pid 6309] close(4 [pid 6308] <... close resumed>) = 0 [ 131.210834][ T6309] loop2: detected capacity change from 0 to 4096 [ 131.217948][ T6308] loop3: detected capacity change from 0 to 4096 [pid 6312] ioctl(4, LOOP_SET_FD, 3 [pid 6311] ioctl(4, LOOP_SET_FD, 3 [pid 6310] ioctl(4, LOOP_SET_FD, 3 [pid 6309] <... close resumed>) = 0 [pid 6310] <... ioctl resumed>) = 0 [pid 6309] mkdir("./file0", 0777 [pid 6308] mkdir("./file0", 0777 [pid 6309] <... mkdir resumed>) = 0 [pid 6308] <... mkdir resumed>) = 0 [pid 6308] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6309] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6310] close(3 [pid 6312] <... ioctl resumed>) = 0 [pid 6310] <... close resumed>) = 0 [pid 6310] close(4) = 0 [pid 6310] mkdir("./file0", 0777) = 0 [pid 6310] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6312] close(3) = 0 [pid 6312] close(4) = 0 [pid 6312] mkdir("./file0", 0777) = 0 [ 131.260053][ T6310] loop1: detected capacity change from 0 to 4096 [ 131.272380][ T6308] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 131.273344][ T6311] loop4: detected capacity change from 0 to 4096 [ 131.290685][ T6312] loop0: detected capacity change from 0 to 4096 [ 131.297587][ T6309] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6312] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6311] <... ioctl resumed>) = 0 [pid 6311] close(3) = 0 [pid 6311] close(4) = 0 [pid 6311] mkdir("./file0", 0777) = 0 [pid 6311] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6309] <... mount resumed>) = 0 [ 131.315540][ T6310] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 131.328539][ T6312] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6309] chdir("./file0") = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6309] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6304] <... futex resumed>) = 0 [pid 6309] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6304] exit_group(0 [pid 6309] <... futex resumed>) = ? [pid 6304] <... exit_group resumed>) = ? [pid 6309] +++ exited with 0 +++ [pid 6308] <... mount resumed>) = 0 [pid 6304] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6304, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6308] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6308] <... chdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] newfstatat(3, "", [pid 6308] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6308] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] getdents64(3, [pid 6308] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] <... futex resumed>) = 0 [pid 6303] exit_group(0) = ? [pid 6308] <... futex resumed>) = ? [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./123/binderfs", [pid 6310] <... mount resumed>) = 0 [ 131.371145][ T6311] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6308] +++ exited with 0 +++ [pid 6303] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 6312] <... mount resumed>) = 0 [pid 6310] <... openat resumed>) = 3 [pid 5061] unlink("./123/binderfs" [pid 6312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6310] chdir("./file0" [pid 5061] <... unlink resumed>) = 0 [pid 6312] <... openat resumed>) = 3 [pid 6310] <... chdir resumed>) = 0 [pid 5062] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6312] chdir("./file0" [pid 6310] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6312] <... chdir resumed>) = 0 [pid 6310] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6310] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 6312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6311] <... mount resumed>) = 0 [pid 6310] <... futex resumed>) = 1 [pid 6305] <... futex resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 6305] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6305] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(AT_FDCWD, "./123/file0", [pid 5062] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./122/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6312] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] +++ exited with 0 +++ [pid 6305] +++ exited with 0 +++ [pid 5062] unlink("./122/binderfs" [pid 5061] <... openat resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6305, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 6312] <... futex resumed>) = 1 [pid 6311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6306] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6312] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6311] <... openat resumed>) = 3 [pid 6306] exit_group(0 [pid 5062] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6312] <... futex resumed>) = ? [pid 6311] chdir("./file0" [pid 6306] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 6312] +++ exited with 0 +++ [pid 6311] <... chdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./122/file0", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6311] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 6311] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 6311] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./123/file0" [pid 6311] <... futex resumed>) = 1 [pid 6307] <... futex resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 6311] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6307] exit_group(0 [pid 5062] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 6311] <... futex resumed>) = ? [pid 6307] <... exit_group resumed>) = ? [pid 6306] +++ exited with 0 +++ [pid 5062] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6311] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6306, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6307] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] rmdir("./123" [pid 5060] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5059] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5062] getdents64(4, [pid 5061] <... rmdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] mkdir("./124", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] getdents64(3, [pid 5059] <... openat resumed>) = 3 [pid 5063] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./122/file0" [pid 5061] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(3, [pid 5060] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./122/binderfs", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./122" [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5059] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] unlink("./122/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./122/binderfs", [pid 5059] newfstatat(AT_FDCWD, "./125/binderfs", [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] mkdir("./123", 0777 [pid 5060] <... unlink resumed>) = 0 [pid 5063] unlink("./122/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5059] unlink("./125/binderfs") = 0 [pid 5063] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = 0 [pid 5059] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(AT_FDCWD, "./122/file0", [pid 5059] <... umount2 resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./122/file0", [pid 5060] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./125/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5063] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, [pid 5059] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(4, "", [pid 5060] getdents64(4, [pid 5059] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] rmdir("./122/file0" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] getdents64(4, [pid 5063] close(4 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] close(4 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./122" [pid 5061] close(3 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] rmdir("./122/file0" [pid 5061] <... close resumed>) = 0 [pid 5060] mkdir("./123", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... mkdir resumed>) = 0 [pid 5059] rmdir("./125/file0" [pid 5062] close(3./strace-static-x86_64: Process 6313 attached [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6314 attached 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6314] set_robust_list(0x55558e6e36a0, 24 [pid 5059] close(3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6313 [pid 5059] <... close resumed>) = 0 [pid 6314] <... set_robust_list resumed>) = 0 [pid 5059] rmdir("./125" [pid 6314] chdir("./123" [pid 5059] <... rmdir resumed>) = 0 [pid 6314] <... chdir resumed>) = 0 [pid 6314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6314] setpgid(0, 0 [pid 5059] mkdir("./126", 0777 [pid 6314] <... setpgid resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6313] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6314 [pid 5060] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] close(3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] rmdir("./122" [pid 6314] write(3, "1000", 4 [pid 6313] <... set_robust_list resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 6314] <... write resumed>) = 4 [pid 6313] chdir("./124" [pid 5063] mkdir("./123", 0777 [pid 6314] close(3) = 0 [pid 6313] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6314] symlink("/dev/binderfs", "./binderfs" [pid 6313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6314] <... symlink resumed>) = 0 [pid 6313] <... prctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6313] setpgid(0, 0 [pid 6314] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... setpgid resumed>) = 0 [pid 6314] <... futex resumed>) = 0 [pid 6313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6314] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6313] <... openat resumed>) = 3 [pid 6314] <... mmap resumed>) = 0x7fe7c3226000 [pid 6314] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6313] write(3, "1000", 4) = 4 [pid 6313] close(3) = 0 [pid 6314] <... mprotect resumed>) = 0 [pid 6313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6313] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6313] <... futex resumed>) = 0 [pid 6314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6313] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6315 attached [pid 6315] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6313] <... mmap resumed>) = 0x7fe7c3226000 [pid 6314] <... clone3 resumed> => {parent_tid=[6315]}, 88) = 6315 [pid 6315] <... rseq resumed>) = 0 [pid 6314] rt_sigprocmask(SIG_SETMASK, [], [pid 6313] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] set_robust_list(0x7fe7c32469a0, 24 [pid 6314] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... mprotect resumed>) = 0 [pid 6314] <... futex resumed>) = 0 [pid 6315] <... set_robust_list resumed>) = 0 [pid 6314] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6315] memfd_create("syzkaller", 0) = 3 [pid 6313] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... ioctl resumed>) = 0 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6313] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6316 ./strace-static-x86_64: Process 6316 attached [pid 6316] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6316] chdir("./123") = 0 [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6316] setpgid(0, 0) = 0 [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6316] <... openat resumed>) = 3 [pid 6316] write(3, "1000", 4 [pid 5059] <... ioctl resumed>) = 0 [pid 6316] <... write resumed>) = 4 [pid 6313] <... clone3 resumed> => {parent_tid=[6317]}, 88) = 6317 [pid 6316] close(3) = 0 [pid 6316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6316] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6316] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] close(3./strace-static-x86_64: Process 6317 attached [pid 6313] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6313] <... futex resumed>) = 0 [pid 6317] <... rseq resumed>) = 0 [pid 6313] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6316] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] <... close resumed>) = 0 [pid 6316] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6317] set_robust_list(0x7fe7c32469a0, 24 [pid 6316] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... ioctl resumed>) = 0 [pid 6317] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6318 attached [pid 6317] rt_sigprocmask(SIG_SETMASK, [], [pid 6316] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] close(3 [pid 6317] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6318] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6318 [pid 6318] chdir("./126" [pid 6317] memfd_create("syzkaller", 0 [pid 6318] <... chdir resumed>) = 0 [pid 6318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6317] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 6318] setpgid(0, 0 [pid 6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6318] <... setpgid resumed>) = 0 [pid 6318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6317] <... mmap resumed>) = 0x7fe7bae00000 [pid 6316] <... clone3 resumed> => {parent_tid=[6319]}, 88) = 6319 ./strace-static-x86_64: Process 6319 attached [pid 6318] <... openat resumed>) = 3 [pid 6316] rt_sigprocmask(SIG_SETMASK, [], [pid 6319] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6319] set_robust_list(0x7fe7c32469a0, 24 [pid 6316] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... set_robust_list resumed>) = 0 [pid 6316] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6320 attached [pid 6319] rt_sigprocmask(SIG_SETMASK, [], [pid 6318] write(3, "1000", 4 [pid 6316] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6320 [pid 6319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6318] <... write resumed>) = 4 [pid 6320] set_robust_list(0x55558e6e36a0, 24 [pid 6319] memfd_create("syzkaller", 0 [pid 6318] close(3 [pid 6315] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6318] <... close resumed>) = 0 [pid 6318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6320] <... set_robust_list resumed>) = 0 [pid 6319] <... memfd_create resumed>) = 3 [pid 6320] chdir("./123" [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6320] <... chdir resumed>) = 0 [pid 6319] <... mmap resumed>) = 0x7fe7bae00000 [pid 6318] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6318] <... mmap resumed>) = 0x7fe7c3226000 [pid 6320] <... prctl resumed>) = 0 [pid 6318] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6320] setpgid(0, 0 [pid 6318] <... mprotect resumed>) = 0 [pid 6320] <... setpgid resumed>) = 0 [pid 6318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6320] <... openat resumed>) = 3 [pid 6317] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6320] write(3, "1000", 4) = 4 [pid 6318] <... clone3 resumed> => {parent_tid=[6321]}, 88) = 6321 [pid 6318] rt_sigprocmask(SIG_SETMASK, [], [pid 6320] close(3 [pid 6318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6320] <... close resumed>) = 0 [pid 6318] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] symlink("/dev/binderfs", "./binderfs" [pid 6318] <... futex resumed>) = 0 [pid 6320] <... symlink resumed>) = 0 [pid 6318] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6321 attached [pid 6321] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6321] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6320] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] memfd_create("syzkaller", 0) = 3 [pid 6320] <... futex resumed>) = 0 [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6315] <... write resumed>) = 2097152 [pid 6320] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6315] munmap(0x7fe7bae00000, 138412032 [pid 6320] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6315] <... munmap resumed>) = 0 [pid 6320] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6315] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6320] <... mprotect resumed>) = 0 [pid 6320] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6315] <... openat resumed>) = 4 [pid 6320] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6315] ioctl(4, LOOP_SET_FD, 3 [pid 6320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6322 attached => {parent_tid=[6322]}, 88) = 6322 [pid 6317] <... write resumed>) = 2097152 [pid 6315] <... ioctl resumed>) = 0 [pid 6322] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6320] rt_sigprocmask(SIG_SETMASK, [], [pid 6317] munmap(0x7fe7bae00000, 138412032 [pid 6315] close(3 [pid 6322] <... rseq resumed>) = 0 [pid 6320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6319] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6317] <... munmap resumed>) = 0 [pid 6315] <... close resumed>) = 0 [pid 6322] set_robust_list(0x7fe7c32469a0, 24 [pid 6320] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... set_robust_list resumed>) = 0 [pid 6320] <... futex resumed>) = 0 [pid 6322] rt_sigprocmask(SIG_SETMASK, [], [pid 6320] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] close(4 [pid 6317] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6317] ioctl(4, LOOP_SET_FD, 3 [pid 6322] memfd_create("syzkaller", 0 [pid 6321] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6319] <... write resumed>) = 2097152 [pid 6317] <... ioctl resumed>) = 0 [pid 6315] <... close resumed>) = 0 [pid 6322] <... memfd_create resumed>) = 3 [pid 6315] mkdir("./file0", 0777 [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6315] <... mkdir resumed>) = 0 [pid 6319] munmap(0x7fe7bae00000, 138412032 [pid 6317] close(3) = 0 [pid 6317] close(4) = 0 [pid 6317] mkdir("./file0", 0777) = 0 [ 131.781693][ T6315] loop3: detected capacity change from 0 to 4096 [ 131.810082][ T6317] loop2: detected capacity change from 0 to 4096 [pid 6317] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6315] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6319] <... munmap resumed>) = 0 [pid 6319] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6319] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6321] <... write resumed>) = 2097152 [pid 6319] close(3 [pid 6321] munmap(0x7fe7bae00000, 138412032 [pid 6319] <... close resumed>) = 0 [pid 6321] <... munmap resumed>) = 0 [pid 6319] close(4) = 0 [pid 6319] mkdir("./file0", 0777) = 0 [pid 6317] <... mount resumed>) = 0 [pid 6317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 131.835399][ T6317] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 131.851184][ T6315] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 131.861302][ T6319] loop1: detected capacity change from 0 to 4096 [pid 6319] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6317] <... openat resumed>) = 3 [pid 6322] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6321] ioctl(4, LOOP_SET_FD, 3 [pid 6317] chdir("./file0") = 0 [pid 6317] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6317] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6313] <... futex resumed>) = 0 [pid 6313] exit_group(0) = ? [pid 6321] <... ioctl resumed>) = 0 [pid 6322] <... write resumed>) = 2097152 [pid 6317] +++ exited with 0 +++ [pid 6315] <... mount resumed>) = 0 [pid 6313] +++ exited with 0 +++ [pid 6321] close(3 [pid 6315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6313, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6322] munmap(0x7fe7bae00000, 138412032 [pid 6321] <... close resumed>) = 0 [pid 6319] <... mount resumed>) = 0 [pid 6315] <... openat resumed>) = 3 [pid 6321] close(4 [pid 6319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6315] chdir("./file0" [pid 6322] <... munmap resumed>) = 0 [pid 6321] <... close resumed>) = 0 [pid 6319] <... openat resumed>) = 3 [pid 6315] <... chdir resumed>) = 0 [pid 5061] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] mkdir("./file0", 0777 [pid 6315] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6319] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6319] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6321] <... mkdir resumed>) = 0 [pid 6319] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 6315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(3, "", [pid 6315] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6319] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(3, [pid 6319] <... futex resumed>) = 1 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6319] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6315] <... futex resumed>) = 1 [pid 5061] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6316] <... futex resumed>) = 0 [pid 6315] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6314] <... futex resumed>) = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] exit_group(0 [pid 6314] exit_group(0 [ 131.908999][ T6319] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 131.942272][ T6321] loop0: detected capacity change from 0 to 4096 [pid 5061] newfstatat(AT_FDCWD, "./124/binderfs", [pid 6322] <... openat resumed>) = 4 [pid 6319] <... futex resumed>) = ? [pid 6316] <... exit_group resumed>) = ? [pid 6315] <... futex resumed>) = ? [pid 6314] <... exit_group resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6319] +++ exited with 0 +++ [pid 5061] unlink("./124/binderfs") = 0 [pid 5061] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] +++ exited with 0 +++ [pid 6315] +++ exited with 0 +++ [pid 6314] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6322] ioctl(4, LOOP_SET_FD, 3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6314, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5061] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... restart_syscall resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./124/file0", [pid 5062] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5061] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... openat resumed>) = 4 [pid 5062] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(4, "", [pid 5062] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] unlink("./123/binderfs") = 0 [pid 5061] getdents64(4, [pid 5062] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./123/file0", [pid 5061] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./124/file0" [pid 5062] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(3, [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5061] close(3 [pid 5062] rmdir("./123/file0" [pid 5061] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] rmdir("./124" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./125", 0777 [pid 5062] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] rmdir("./123") = 0 [pid 5062] mkdir("./124", 0777) = 0 [pid 5060] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6322] <... ioctl resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 6322] close(3) = 0 [pid 6322] close(4) = 0 [pid 6322] mkdir("./file0", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 6322] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [ 131.992680][ T6322] loop4: detected capacity change from 0 to 4096 [ 132.004352][ T6321] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6322] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] unlink("./123/binderfs" [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5061] close(3 [pid 5060] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./123/file0", [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6323 ./strace-static-x86_64: Process 6323 attached [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6323] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6323] chdir("./125") = 0 [pid 5060] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6323] <... prctl resumed>) = 0 [pid 6321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6323] setpgid(0, 0 [pid 6321] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6323] <... setpgid resumed>) = 0 [pid 6321] chdir("./file0" [pid 6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6321] <... chdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6323] <... openat resumed>) = 3 [pid 6321] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... close resumed>) = 0 [pid 6323] write(3, "1000", 4 [pid 6321] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] getdents64(4, [pid 6323] <... write resumed>) = 4 [pid 6321] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6321] <... futex resumed>) = 1 [pid 6318] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 6323] close(3 [pid 6321] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] exit_group(0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6318] <... exit_group resumed>) = ? [pid 5060] close(4 [pid 6323] <... close resumed>) = 0 [pid 6321] <... futex resumed>) = ? [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./123/file0"./strace-static-x86_64: Process 6324 attached [pid 6323] symlink("/dev/binderfs", "./binderfs" [pid 6321] +++ exited with 0 +++ [pid 6318] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 6324] set_robust_list(0x55558e6e36a0, 24 [pid 5060] getdents64(3, [pid 6324] <... set_robust_list resumed>) = 0 [pid 6323] <... symlink resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6324 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6323] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] chdir("./124" [pid 6323] <... futex resumed>) = 0 [ 132.067121][ T6322] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5060] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6318, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6323] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./123" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] mkdir("./124", 0777 [pid 5059] newfstatat(3, "", [pid 6323] <... mmap resumed>) = 0x7fe7c3226000 [pid 6324] <... chdir resumed>) = 0 [pid 6323] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6323] <... mprotect resumed>) = 0 [pid 6324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6323] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] getdents64(3, [pid 6324] <... prctl resumed>) = 0 [pid 6323] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6324] setpgid(0, 0 [pid 6323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6325 attached ) = -1 EINVAL (Invalid argument) [pid 6325] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6323] <... clone3 resumed> => {parent_tid=[6325]}, 88) = 6325 [pid 5059] newfstatat(AT_FDCWD, "./126/binderfs", [pid 6325] <... rseq resumed>) = 0 [pid 6324] <... setpgid resumed>) = 0 [pid 6323] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6325] set_robust_list(0x7fe7c32469a0, 24 [pid 6324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] unlink("./126/binderfs" [pid 6325] <... set_robust_list resumed>) = 0 [pid 6323] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... unlink resumed>) = 0 [pid 6325] rt_sigprocmask(SIG_SETMASK, [], [pid 6324] <... openat resumed>) = 3 [pid 6323] <... futex resumed>) = 0 [pid 5059] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6324] write(3, "1000", 4 [pid 6323] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... umount2 resumed>) = 0 [pid 6324] <... write resumed>) = 4 [pid 5059] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6325] memfd_create("syzkaller", 0 [pid 6324] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./126/file0", [pid 6324] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6324] <... symlink resumed>) = 0 [pid 5059] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6324] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... openat resumed>) = 4 [pid 6324] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] newfstatat(4, "", [pid 6324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6322] <... mount resumed>) = 0 [pid 6325] <... memfd_create resumed>) = 3 [pid 6324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] getdents64(4, [pid 6325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6322] <... openat resumed>) = 3 [pid 6325] <... mmap resumed>) = 0x7fe7bae00000 [pid 6322] chdir("./file0" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6324] <... mmap resumed>) = 0x7fe7c3226000 [pid 6322] <... chdir resumed>) = 0 [pid 5059] getdents64(4, [pid 6324] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6322] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6324] <... mprotect resumed>) = 0 [pid 6322] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] close(4 [pid 6324] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6322] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... close resumed>) = 0 [pid 6322] <... futex resumed>) = 1 [pid 6320] <... futex resumed>) = 0 [pid 6322] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] exit_group(0 [pid 6324] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6322] <... futex resumed>) = ? [pid 6320] <... exit_group resumed>) = ? [pid 5059] rmdir("./126/file0" [pid 6324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6322] +++ exited with 0 +++ [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6326 attached [pid 6326] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6324] <... clone3 resumed> => {parent_tid=[6326]}, 88) = 6326 [pid 6320] +++ exited with 0 +++ [pid 6326] <... rseq resumed>) = 0 [pid 6324] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... close resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5059] rmdir("./126") = 0 [pid 6326] set_robust_list(0x7fe7c32469a0, 24 [pid 6324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] mkdir("./127", 0777 [pid 6326] <... set_robust_list resumed>) = 0 [pid 6324] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 6326] rt_sigprocmask(SIG_SETMASK, [], [pid 6324] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6324] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6326] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5060] <... ioctl resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6326] <... memfd_create resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./123/binderfs") = 0 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6325] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] close(3 [pid 5063] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./123/file0", [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6327 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6327 attached ) = -1 EINVAL (Invalid argument) [pid 6327] set_robust_list(0x55558e6e36a0, 24 [pid 5063] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6327] <... set_robust_list resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6327] chdir("./124" [pid 5063] newfstatat(4, "", [pid 6327] <... chdir resumed>) = 0 [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6327] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 6327] setpgid(0, 0) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6325] <... write resumed>) = 2097152 [pid 5063] getdents64(4, [pid 6327] write(3, "1000", 4 [pid 6325] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6327] <... write resumed>) = 4 [pid 5063] close(4 [pid 6327] close(3 [pid 5063] <... close resumed>) = 0 [pid 6327] <... close resumed>) = 0 [pid 5063] rmdir("./123/file0" [pid 6327] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... rmdir resumed>) = 0 [pid 6327] <... symlink resumed>) = 0 [pid 5063] getdents64(3, [pid 6327] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6327] <... futex resumed>) = 0 [pid 5063] close(3 [pid 6327] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... close resumed>) = 0 [pid 6327] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] rmdir("./123" [pid 6327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6327] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] close(3 [pid 6327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5059] <... close resumed>) = 0 [pid 6327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6327] <... clone3 resumed> => {parent_tid=[6328]}, 88) = 6328 ./strace-static-x86_64: Process 6328 attached [pid 6327] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] mkdir("./124", 0777 [pid 6328] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6327] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6329 attached [pid 6328] <... rseq resumed>) = 0 [pid 6327] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6325] <... munmap resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6329 [pid 6329] set_robust_list(0x55558e6e36a0, 24 [pid 6328] set_robust_list(0x7fe7c32469a0, 24 [pid 6327] <... futex resumed>) = 0 [pid 6328] <... set_robust_list resumed>) = 0 [pid 6327] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6328] rt_sigprocmask(SIG_SETMASK, [], [pid 6329] <... set_robust_list resumed>) = 0 [pid 6328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6325] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6329] chdir("./127") = 0 [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6328] memfd_create("syzkaller", 0 [pid 6325] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 6329] <... prctl resumed>) = 0 [pid 6329] setpgid(0, 0) = 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6329] write(3, "1000", 4) = 4 [pid 6329] close(3) = 0 [pid 6329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6329] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6328] <... memfd_create resumed>) = 3 [pid 6325] ioctl(4, LOOP_SET_FD, 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6329] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6325] <... ioctl resumed>) = 0 [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6329] <... clone3 resumed> => {parent_tid=[6330]}, 88) = 6330 [pid 6329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6329] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6330 attached [pid 6330] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6330] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6330] memfd_create("syzkaller", 0 [pid 6325] close(3) = 0 [pid 6325] close(4) = 0 [pid 6330] <... memfd_create resumed>) = 3 [pid 6330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6325] mkdir("./file0", 0777) = 0 [pid 6326] <... write resumed>) = 2097152 [pid 6326] munmap(0x7fe7bae00000, 138412032) = 0 [ 132.291054][ T6325] loop2: detected capacity change from 0 to 4096 [pid 6325] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6326] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6328] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 6326] ioctl(4, LOOP_SET_FD, 3 [pid 6330] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6326] <... ioctl resumed>) = 0 [pid 6326] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6331 [pid 6326] <... close resumed>) = 0 [pid 6326] close(4) = 0 ./strace-static-x86_64: Process 6331 attached [pid 6326] mkdir("./file0", 0777 [pid 6331] set_robust_list(0x55558e6e36a0, 24 [pid 6326] <... mkdir resumed>) = 0 [pid 6331] <... set_robust_list resumed>) = 0 [pid 6331] chdir("./124" [ 132.343500][ T6325] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 132.372704][ T6326] loop3: detected capacity change from 0 to 4096 [pid 6326] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6331] <... chdir resumed>) = 0 [pid 6331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6330] <... write resumed>) = 2097152 [pid 6331] <... prctl resumed>) = 0 [pid 6331] setpgid(0, 0) = 0 [pid 6331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6331] write(3, "1000", 4) = 4 [pid 6325] <... mount resumed>) = 0 [pid 6331] close(3 [pid 6325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6331] <... close resumed>) = 0 [pid 6325] <... openat resumed>) = 3 [pid 6331] symlink("/dev/binderfs", "./binderfs" [pid 6325] chdir("./file0" [pid 6331] <... symlink resumed>) = 0 [pid 6330] munmap(0x7fe7bae00000, 138412032 [pid 6325] <... chdir resumed>) = 0 [pid 6331] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... munmap resumed>) = 0 [pid 6328] <... write resumed>) = 2097152 [pid 6331] <... futex resumed>) = 0 [pid 6331] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6328] munmap(0x7fe7bae00000, 138412032 [pid 6325] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6325] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6331] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6325] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] <... mprotect resumed>) = 0 [pid 6325] <... futex resumed>) = 1 [pid 6323] <... futex resumed>) = 0 [pid 6331] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6325] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6323] exit_group(0 [pid 6331] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6325] <... futex resumed>) = ? [pid 6323] <... exit_group resumed>) = ? [pid 6331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6330] <... openat resumed>) = 4 [pid 6325] +++ exited with 0 +++ ./strace-static-x86_64: Process 6332 attached [pid 6330] ioctl(4, LOOP_SET_FD, 3 [pid 6332] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6331] <... clone3 resumed> => {parent_tid=[6332]}, 88) = 6332 [pid 6323] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6323, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 6332] <... rseq resumed>) = 0 [pid 6331] rt_sigprocmask(SIG_SETMASK, [], [pid 6332] set_robust_list(0x7fe7c32469a0, 24 [pid 6331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6332] <... set_robust_list resumed>) = 0 [pid 6331] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] rt_sigprocmask(SIG_SETMASK, [], [pid 6331] <... futex resumed>) = 0 [pid 6332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6328] <... munmap resumed>) = 0 [pid 6332] memfd_create("syzkaller", 0 [pid 6328] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6332] <... memfd_create resumed>) = 3 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6328] <... openat resumed>) = 4 [pid 6332] <... mmap resumed>) = 0x7fe7bae00000 [ 132.414990][ T6326] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 132.447140][ T6330] loop0: detected capacity change from 0 to 4096 [pid 6331] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6328] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] <... ioctl resumed>) = 0 [pid 6330] close(3) = 0 [pid 6330] close(4) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6330] mkdir("./file0", 0777) = 0 [pid 6330] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 6328] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6328] <... close resumed>) = 0 [pid 6328] close(4 [pid 5061] newfstatat(AT_FDCWD, "./125/binderfs", [pid 6328] <... close resumed>) = 0 [pid 6328] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6328] <... mkdir resumed>) = 0 [pid 5061] unlink("./125/binderfs") = 0 [pid 6328] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./125/file0") = 0 [pid 6332] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./125") = 0 [pid 5061] mkdir("./126", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 132.476381][ T6328] loop1: detected capacity change from 0 to 4096 [ 132.483556][ T6330] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 132.505938][ T6328] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6326] <... mount resumed>) = 0 [pid 6326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6328] <... mount resumed>) = 0 [pid 6328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6326] <... openat resumed>) = 3 [pid 6328] chdir("./file0") = 0 [pid 6328] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6326] chdir("./file0" [pid 6330] <... mount resumed>) = 0 [pid 6326] <... chdir resumed>) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6326] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... openat resumed>) = 3 [pid 6326] <... futex resumed>) = 1 [pid 6324] <... futex resumed>) = 0 [pid 6324] exit_group(0) = ? [pid 6330] chdir("./file0" [pid 6326] +++ exited with 0 +++ [pid 6324] +++ exited with 0 +++ [pid 6330] <... chdir resumed>) = 0 [pid 6330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6324, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6330] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... restart_syscall resumed>) = 0 [pid 6330] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6328] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6327] <... futex resumed>) = 0 [pid 6328] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6330] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] exit_group(0 [pid 6327] exit_group(0 [pid 6329] <... exit_group resumed>) = ? [pid 5062] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] <... futex resumed>) = ? [pid 6327] <... exit_group resumed>) = ? [pid 6332] <... write resumed>) = 2097152 [pid 6330] <... futex resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6330] +++ exited with 0 +++ [pid 6329] +++ exited with 0 +++ [pid 6328] +++ exited with 0 +++ [pid 6327] +++ exited with 0 +++ [pid 5062] newfstatat(3, "", [pid 5061] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6327, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./124/binderfs", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6332] munmap(0x7fe7bae00000, 138412032 [pid 5062] unlink("./124/binderfs" [pid 5060] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 6332] <... munmap resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5059] newfstatat(3, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 5059] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./127/binderfs" [pid 5060] newfstatat(AT_FDCWD, "./124/binderfs", [pid 5059] <... unlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6333 attached [pid 6332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6333 [pid 5060] unlink("./124/binderfs" [pid 5059] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6333] set_robust_list(0x55558e6e36a0, 24 [pid 6332] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6333] <... set_robust_list resumed>) = 0 [pid 5062] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6333] chdir("./126" [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6333] <... chdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./124/file0", [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6332] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./124/file0", [pid 6333] <... prctl resumed>) = 0 [pid 6333] setpgid(0, 0 [pid 6332] close(3 [pid 5062] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6333] <... setpgid resumed>) = 0 [pid 6332] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 6333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6332] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./127/file0", [pid 6333] write(3, "1000", 4 [pid 6332] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6333] <... write resumed>) = 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6333] close(3 [pid 6332] mkdir("./file0", 0777 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6333] <... close resumed>) = 0 [pid 6332] <... mkdir resumed>) = 0 [pid 5062] getdents64(4, [pid 6333] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4 [pid 5060] newfstatat(4, "", [pid 5059] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 6333] <... symlink resumed>) = 0 [pid 5062] rmdir("./124/file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6333] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6333] <... futex resumed>) = 0 [pid 6333] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, [pid 5059] newfstatat(4, "", [pid 6333] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] getdents64(3, [pid 5060] getdents64(4, [pid 5059] getdents64(4, [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] close(3 [pid 5060] close(4 [pid 5059] getdents64(4, [pid 6333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./124" [pid 5060] rmdir("./124/file0" [pid 5059] close(4 [pid 6333] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6333] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] rmdir("./127/file0" [pid 6333] <... mprotect resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5062] mkdir("./125", 0777 [pid 5060] getdents64(3, [pid 5059] getdents64(3, [pid 6333] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6333] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] close(3 [pid 5060] close(3 [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 6334 attached [pid 6333] <... clone3 resumed> => {parent_tid=[6334]}, 88) = 6334 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5059] rmdir("./127" [pid 6334] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6333] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... openat resumed>) = 3 [pid 5060] rmdir("./124" [pid 5059] <... rmdir resumed>) = 0 [pid 6334] <... rseq resumed>) = 0 [pid 6333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6334] set_robust_list(0x7fe7c32469a0, 24 [pid 6333] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... rmdir resumed>) = 0 [pid 5059] mkdir("./128", 0777 [pid 6334] <... set_robust_list resumed>) = 0 [pid 6333] <... futex resumed>) = 0 [pid 6333] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] mkdir("./125", 0777 [pid 6334] memfd_create("syzkaller", 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6334] <... memfd_create resumed>) = 3 [pid 6332] <... mount resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6334] <... mmap resumed>) = 0x7fe7bae00000 [pid 6332] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 6332] chdir("./file0" [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6332] <... chdir resumed>) = 0 [pid 6332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 132.637956][ T6332] loop4: detected capacity change from 0 to 4096 [ 132.671645][ T6332] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6332] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6331] <... futex resumed>) = 0 [pid 6331] exit_group(0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6332] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6334] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6331] <... exit_group resumed>) = ? [pid 6332] <... futex resumed>) = ? [pid 5062] <... ioctl resumed>) = 0 [pid 6332] +++ exited with 0 +++ [pid 6331] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6331, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5063] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./124/binderfs") = 0 [pid 5063] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6335 attached [pid 6334] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 6334] munmap(0x7fe7bae00000, 138412032 [pid 5063] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6335] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6335 [pid 6334] <... munmap resumed>) = 0 [pid 6335] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./124/file0", [pid 6335] chdir("./125" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6335] <... chdir resumed>) = 0 [pid 5063] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6335] <... prctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6335] setpgid(0, 0 [pid 5063] <... openat resumed>) = 4 [pid 6335] <... setpgid resumed>) = 0 [pid 6334] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] newfstatat(4, "", [pid 6335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6334] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6334] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 6335] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6335] write(3, "1000", 4 [pid 5063] getdents64(4, [pid 6335] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6335] close(3 [pid 5063] close(4 [pid 6335] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6335] symlink("/dev/binderfs", "./binderfs" [pid 5063] rmdir("./124/file0" [pid 5060] <... ioctl resumed>) = 0 [pid 6335] <... symlink resumed>) = 0 [pid 6334] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6334] close(3) = 0 [pid 6335] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5060] close(3 [pid 5059] <... ioctl resumed>) = 0 [pid 6335] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6335] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6334] close(4 [pid 5063] close(3 [pid 5060] <... close resumed>) = 0 [pid 5059] close(3 [pid 6335] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6334] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... close resumed>) = 0 [pid 6335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6334] mkdir("./file0", 0777 [pid 5063] rmdir("./124" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6336 attached [pid 6335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6334] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6336] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6336] chdir("./125") = 0 [pid 6335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] mkdir("./125", 0777 [pid 6336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6335] <... mmap resumed>) = 0x7fe7c3226000 [pid 6334] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6336 ./strace-static-x86_64: Process 6337 attached [pid 6336] <... prctl resumed>) = 0 [pid 6335] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6337] set_robust_list(0x55558e6e36a0, 24 [pid 6336] setpgid(0, 0 [pid 6335] <... mprotect resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6337 [pid 6337] <... set_robust_list resumed>) = 0 [pid 6336] <... setpgid resumed>) = 0 [pid 6335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... openat resumed>) = 3 [pid 6337] chdir("./128" [pid 6336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6336] <... openat resumed>) = 3 [pid 6335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6338 attached [pid 6337] <... chdir resumed>) = 0 [pid 6338] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6336] write(3, "1000", 4 [pid 6335] <... clone3 resumed> => {parent_tid=[6338]}, 88) = 6338 [pid 6338] <... rseq resumed>) = 0 [pid 6337] <... prctl resumed>) = 0 [pid 6336] <... write resumed>) = 4 [pid 6335] rt_sigprocmask(SIG_SETMASK, [], [pid 6338] set_robust_list(0x7fe7c32469a0, 24 [pid 6337] setpgid(0, 0 [pid 6336] close(3 [pid 6335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6338] <... set_robust_list resumed>) = 0 [pid 6337] <... setpgid resumed>) = 0 [pid 6336] <... close resumed>) = 0 [pid 6335] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] rt_sigprocmask(SIG_SETMASK, [], [pid 6337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6336] symlink("/dev/binderfs", "./binderfs" [pid 6335] <... futex resumed>) = 0 [pid 6338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6338] memfd_create("syzkaller", 0 [pid 6337] <... openat resumed>) = 3 [pid 6336] <... symlink resumed>) = 0 [pid 6335] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6337] write(3, "1000", 4) = 4 [pid 6336] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] close(3 [pid 6336] <... futex resumed>) = 0 [pid 6338] <... memfd_create resumed>) = 3 [pid 6337] <... close resumed>) = 0 [pid 6336] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6337] symlink("/dev/binderfs", "./binderfs" [pid 6336] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6338] <... mmap resumed>) = 0x7fe7bae00000 [pid 6337] <... symlink resumed>) = 0 [pid 6336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6337] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6337] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6336] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6336] <... mprotect resumed>) = 0 [pid 6337] <... mmap resumed>) = 0x7fe7c3226000 [pid 6336] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6337] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6336] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6337] <... mprotect resumed>) = 0 [pid 6336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6339 attached [pid 6337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6336] <... clone3 resumed> => {parent_tid=[6339]}, 88) = 6339 [pid 6336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6339] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6340 attached [pid 6339] <... rseq resumed>) = 0 [pid 6337] <... clone3 resumed> => {parent_tid=[6340]}, 88) = 6340 [pid 6336] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] set_robust_list(0x7fe7c32469a0, 24 [pid 6337] rt_sigprocmask(SIG_SETMASK, [], [pid 6339] <... set_robust_list resumed>) = 0 [pid 6337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6336] <... futex resumed>) = 0 [pid 6340] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6339] rt_sigprocmask(SIG_SETMASK, [], [pid 6336] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6340] <... rseq resumed>) = 0 [pid 6339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] set_robust_list(0x7fe7c32469a0, 24) = 0 [ 132.799802][ T6334] loop2: detected capacity change from 0 to 4096 [ 132.833983][ T6334] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6340] rt_sigprocmask(SIG_SETMASK, [], [pid 6339] memfd_create("syzkaller", 0 [pid 6337] <... futex resumed>) = 0 [pid 6334] <... mount resumed>) = 0 [pid 6334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6340] memfd_create("syzkaller", 0 [pid 6334] <... openat resumed>) = 3 [pid 6334] chdir("./file0" [pid 6340] <... memfd_create resumed>) = 3 [pid 6339] <... memfd_create resumed>) = 3 [pid 6334] <... chdir resumed>) = 0 [pid 6340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6334] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6338] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6334] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... mmap resumed>) = 0x7fe7bae00000 [pid 6339] <... mmap resumed>) = 0x7fe7bae00000 [pid 6334] <... futex resumed>) = 1 [pid 6333] <... futex resumed>) = 0 [pid 6334] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6333] exit_group(0) = ? [pid 6334] <... futex resumed>) = ? [pid 6334] +++ exited with 0 +++ [pid 6333] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6333, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6338] <... write resumed>) = 2097152 [pid 5063] close(3 [pid 5061] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6338] munmap(0x7fe7bae00000, 138412032 [pid 5061] newfstatat(3, "", ./strace-static-x86_64: Process 6341 attached [pid 6339] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6338] <... munmap resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6341 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6341] set_robust_list(0x55558e6e36a0, 24 [pid 5061] getdents64(3, [pid 6338] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6341] <... set_robust_list resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6338] <... openat resumed>) = 4 [pid 5061] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./126/binderfs", [pid 6341] chdir("./125") = 0 [pid 6341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6338] ioctl(4, LOOP_SET_FD, 3 [pid 5061] unlink("./126/binderfs" [pid 6341] <... prctl resumed>) = 0 [pid 6341] setpgid(0, 0) = 0 [pid 6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6341] write(3, "1000", 4) = 4 [pid 6341] close(3) = 0 [pid 6341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6341] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6341] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6341] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6342 attached => {parent_tid=[6342]}, 88) = 6342 [pid 5061] <... umount2 resumed>) = 0 [pid 6341] rt_sigprocmask(SIG_SETMASK, [], [pid 6342] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6338] <... ioctl resumed>) = 0 [pid 5061] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6342] <... rseq resumed>) = 0 [pid 6341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6341] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6342] set_robust_list(0x7fe7c32469a0, 24 [pid 6341] <... futex resumed>) = 0 [pid 6342] <... set_robust_list resumed>) = 0 [pid 6341] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6342] memfd_create("syzkaller", 0 [pid 6338] close(3) = 0 [pid 6338] close(4 [pid 5061] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6338] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6342] <... memfd_create resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 6340] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6338] mkdir("./file0", 0777 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6342] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] getdents64(4, [pid 6338] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./126/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./126") = 0 [ 132.971496][ T6338] loop3: detected capacity change from 0 to 4096 [pid 5061] mkdir("./127", 0777 [pid 6339] <... write resumed>) = 2097152 [pid 6338] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6339] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6342] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6340] <... write resumed>) = 2097152 [pid 6339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6340] munmap(0x7fe7bae00000, 138412032 [pid 6339] <... openat resumed>) = 4 [pid 6339] ioctl(4, LOOP_SET_FD, 3 [pid 6340] <... munmap resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6342] <... write resumed>) = 2097152 [pid 6340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6339] <... ioctl resumed>) = 0 [ 133.019911][ T6338] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 133.057335][ T6339] loop1: detected capacity change from 0 to 4096 [pid 6339] close(3 [pid 6340] <... openat resumed>) = 4 [pid 6339] <... close resumed>) = 0 [pid 6340] ioctl(4, LOOP_SET_FD, 3 [pid 6339] close(4) = 0 [pid 6339] mkdir("./file0", 0777) = 0 [pid 6342] munmap(0x7fe7bae00000, 138412032 [pid 5061] close(3 [pid 6342] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6339] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6343 ./strace-static-x86_64: Process 6343 attached [pid 6340] <... ioctl resumed>) = 0 [pid 6343] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6342] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6340] close(3 [pid 6343] chdir("./127" [pid 6342] <... openat resumed>) = 4 [pid 6340] <... close resumed>) = 0 [pid 6342] ioctl(4, LOOP_SET_FD, 3 [pid 6340] close(4 [pid 6343] <... chdir resumed>) = 0 [pid 6340] <... close resumed>) = 0 [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6340] mkdir("./file0", 0777 [pid 6343] <... prctl resumed>) = 0 [pid 6342] <... ioctl resumed>) = 0 [pid 6343] setpgid(0, 0 [pid 6340] <... mkdir resumed>) = 0 [pid 6338] <... mount resumed>) = 0 [pid 6343] <... setpgid resumed>) = 0 [pid 6342] close(3 [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6342] <... close resumed>) = 0 [pid 6338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6342] close(4 [pid 6338] <... openat resumed>) = 3 [pid 6342] <... close resumed>) = 0 [pid 6340] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6343] <... openat resumed>) = 3 [pid 6342] mkdir("./file0", 0777) = 0 [pid 6342] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6338] chdir("./file0") = 0 [ 133.088371][ T6340] loop0: detected capacity change from 0 to 4096 [ 133.096086][ T6339] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 133.124720][ T6342] loop4: detected capacity change from 0 to 4096 [pid 6338] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6338] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6338] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6335] <... futex resumed>) = 0 [pid 6343] write(3, "1000", 4 [pid 6339] <... mount resumed>) = 0 [pid 6343] <... write resumed>) = 4 [pid 6339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6335] exit_group(0 [pid 6343] close(3 [pid 6339] <... openat resumed>) = 3 [pid 6338] <... futex resumed>) = ? [pid 6335] <... exit_group resumed>) = ? [pid 6343] <... close resumed>) = 0 [pid 6339] chdir("./file0" [pid 6338] +++ exited with 0 +++ [pid 6343] symlink("/dev/binderfs", "./binderfs" [pid 6339] <... chdir resumed>) = 0 [pid 6343] <... symlink resumed>) = 0 [pid 6339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6343] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6335] +++ exited with 0 +++ [pid 6343] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6339] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6335, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6343] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6339] <... futex resumed>) = 1 [pid 6336] <... futex resumed>) = 0 [pid 5062] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6339] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6343] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] <... openat resumed>) = 3 [pid 6336] exit_group(0 [pid 5062] newfstatat(3, "", [pid 6343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 133.153915][ T6340] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 133.167236][ T6342] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6339] <... futex resumed>) = ? [pid 6336] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6344 attached [pid 6342] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6344] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5062] getdents64(3, [pid 6344] <... rseq resumed>) = 0 [pid 6343] <... clone3 resumed> => {parent_tid=[6344]}, 88) = 6344 [pid 6342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6339] +++ exited with 0 +++ [pid 6336] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6344] set_robust_list(0x7fe7c32469a0, 24 [pid 6343] rt_sigprocmask(SIG_SETMASK, [], [pid 6342] <... openat resumed>) = 3 [pid 5062] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6336, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6344] <... set_robust_list resumed>) = 0 [pid 6343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6342] chdir("./file0" [pid 6344] rt_sigprocmask(SIG_SETMASK, [], [pid 6343] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6342] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6343] <... futex resumed>) = 0 [pid 6342] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./125/binderfs", [pid 6343] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6342] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6344] memfd_create("syzkaller", 0 [pid 6342] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6344] <... memfd_create resumed>) = 3 [pid 6342] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 5060] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6342] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6344] <... mmap resumed>) = 0x7fe7bae00000 [pid 6342] <... futex resumed>) = ? [pid 6341] <... exit_group resumed>) = ? [pid 5062] unlink("./125/binderfs" [pid 5060] <... openat resumed>) = 3 [pid 6342] +++ exited with 0 +++ [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./125/binderfs") = 0 [pid 5060] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] +++ exited with 0 +++ [pid 5060] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6341, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(4, "", [pid 5060] newfstatat(AT_FDCWD, "./125/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5060] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5060] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5062] close(4 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./125/file0" [pid 5060] newfstatat(4, "", [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6340] <... mount resumed>) = 0 [pid 6340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(4, [pid 6340] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5063] newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./125" [pid 5060] close(4 [pid 6340] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6340] <... chdir resumed>) = 0 [pid 5063] unlink("./125/binderfs" [pid 6340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] rmdir("./125/file0" [pid 6340] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... unlink resumed>) = 0 [pid 5062] mkdir("./126", 0777 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6340] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] rmdir("./125" [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... rmdir resumed>) = 0 [pid 6340] <... futex resumed>) = 1 [pid 6337] <... futex resumed>) = 0 [pid 6340] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6337] exit_group(0 [pid 5063] <... umount2 resumed>) = 0 [pid 6340] <... futex resumed>) = ? [pid 6337] <... exit_group resumed>) = ? [pid 5063] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] mkdir("./126", 0777 [pid 6340] +++ exited with 0 +++ [pid 5060] <... mkdir resumed>) = 0 [pid 6337] +++ exited with 0 +++ [pid 6344] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./125/file0", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6337, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./128/binderfs", [pid 5063] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./128/binderfs" [pid 5063] <... openat resumed>) = 4 [pid 5059] <... unlink resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5059] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./128/file0", [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] getdents64(4, [pid 5059] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5063] close(4 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 5063] rmdir("./125/file0" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./128/file0") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./128") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./125") = 0 [pid 5063] mkdir("./126", 0777) = 0 [pid 6344] <... write resumed>) = 2097152 [pid 6344] munmap(0x7fe7bae00000, 138412032 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] mkdir("./129", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6344] <... munmap resumed>) = 0 [pid 6344] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6344] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6345 [pid 6344] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6345 attached [pid 6345] set_robust_list(0x55558e6e36a0, 24 [pid 6344] close(3) = 0 [pid 6344] close(4 [pid 6345] <... set_robust_list resumed>) = 0 [pid 6344] <... close resumed>) = 0 [pid 6344] mkdir("./file0", 0777) = 0 [pid 6344] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6345] chdir("./126" [pid 5059] <... ioctl resumed>) = 0 [pid 6345] <... chdir resumed>) = 0 [pid 6345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... ioctl resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 6345] <... prctl resumed>) = 0 [pid 6345] setpgid(0, 0) = 0 [pid 5063] close(3 [pid 5059] <... close resumed>) = 0 [pid 6345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5060] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6346 attached [pid 6345] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6346 ./strace-static-x86_64: Process 6347 attached ./strace-static-x86_64: Process 6348 attached [pid 6346] set_robust_list(0x55558e6e36a0, 24 [pid 6345] write(3, "1000", 4 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6347 [ 133.333416][ T6344] loop2: detected capacity change from 0 to 4096 [ 133.367356][ T6344] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6348] set_robust_list(0x55558e6e36a0, 24 [pid 6347] set_robust_list(0x55558e6e36a0, 24 [pid 6346] <... set_robust_list resumed>) = 0 [pid 6345] <... write resumed>) = 4 [pid 6348] <... set_robust_list resumed>) = 0 [pid 6347] <... set_robust_list resumed>) = 0 [pid 6346] chdir("./129" [pid 6345] close(3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6348 [pid 6348] chdir("./126" [pid 6347] chdir("./126" [pid 6346] <... chdir resumed>) = 0 [pid 6345] <... close resumed>) = 0 [pid 6345] symlink("/dev/binderfs", "./binderfs" [pid 6348] <... chdir resumed>) = 0 [pid 6347] <... chdir resumed>) = 0 [pid 6345] <... symlink resumed>) = 0 [pid 6347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6345] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] <... prctl resumed>) = 0 [pid 6346] <... prctl resumed>) = 0 [pid 6345] <... futex resumed>) = 0 [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6347] setpgid(0, 0 [pid 6346] setpgid(0, 0 [pid 6345] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6348] <... prctl resumed>) = 0 [pid 6347] <... setpgid resumed>) = 0 [pid 6346] <... setpgid resumed>) = 0 [pid 6345] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6348] setpgid(0, 0 [pid 6347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6345] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6348] <... setpgid resumed>) = 0 [pid 6347] <... openat resumed>) = 3 [pid 6346] <... openat resumed>) = 3 [pid 6345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6344] <... mount resumed>) = 0 [pid 6345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6346] write(3, "1000", 4 [pid 6345] <... mmap resumed>) = 0x7fe7c3226000 [pid 6346] <... write resumed>) = 4 [pid 6345] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6346] close(3 [pid 6345] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6346] <... close resumed>) = 0 [pid 6345] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6346] symlink("/dev/binderfs", "./binderfs" [pid 6345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6346] <... symlink resumed>) = 0 [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6349 attached [pid 6347] write(3, "1000", 4 [pid 6344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6347] <... write resumed>) = 4 [pid 6346] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] <... clone3 resumed> => {parent_tid=[6349]}, 88) = 6349 [pid 6349] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6348] <... openat resumed>) = 3 [pid 6347] close(3 [pid 6346] <... futex resumed>) = 0 [pid 6345] rt_sigprocmask(SIG_SETMASK, [], [pid 6344] <... openat resumed>) = 3 [pid 6346] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6349] <... rseq resumed>) = 0 [pid 6348] write(3, "1000", 4 [pid 6347] <... close resumed>) = 0 [pid 6346] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6345] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6344] chdir("./file0" [pid 6346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6345] <... futex resumed>) = 0 [pid 6349] set_robust_list(0x7fe7c32469a0, 24 [pid 6348] <... write resumed>) = 4 [pid 6347] symlink("/dev/binderfs", "./binderfs" [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6345] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6344] <... chdir resumed>) = 0 [pid 6349] <... set_robust_list resumed>) = 0 [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6347] <... symlink resumed>) = 0 [pid 6349] rt_sigprocmask(SIG_SETMASK, [], [pid 6348] close(3 [pid 6344] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6348] <... close resumed>) = 0 [pid 6344] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6346] <... mmap resumed>) = 0x7fe7c3226000 [pid 6349] memfd_create("syzkaller", 0 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 6347] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6344] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6344] <... futex resumed>) = 1 [pid 6343] <... futex resumed>) = 0 [pid 6348] <... symlink resumed>) = 0 [pid 6347] <... futex resumed>) = 0 [pid 6346] <... mprotect resumed>) = 0 [pid 6344] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] exit_group(0 [pid 6348] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6346] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6344] <... futex resumed>) = ? [pid 6343] <... exit_group resumed>) = ? [pid 6349] <... memfd_create resumed>) = 3 [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6348] <... futex resumed>) = 0 [pid 6347] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6346] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6344] +++ exited with 0 +++ [pid 6348] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6349] <... mmap resumed>) = 0x7fe7bae00000 [pid 6348] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6343] +++ exited with 0 +++ ./strace-static-x86_64: Process 6350 attached [pid 6348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6350] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6347] <... mmap resumed>) = 0x7fe7c3226000 [pid 6346] <... clone3 resumed> => {parent_tid=[6350]}, 88) = 6350 [pid 6350] <... rseq resumed>) = 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6347] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6346] rt_sigprocmask(SIG_SETMASK, [], [pid 6350] set_robust_list(0x7fe7c32469a0, 24 [pid 6348] <... mmap resumed>) = 0x7fe7c3226000 [pid 6347] <... mprotect resumed>) = 0 [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6350] <... set_robust_list resumed>) = 0 [pid 6348] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6346] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] rt_sigprocmask(SIG_SETMASK, [], [pid 6348] <... mprotect resumed>) = 0 [pid 6347] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6347] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6346] <... futex resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6350] memfd_create("syzkaller", 0 [pid 6347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6346] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6351 attached [pid 6348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] newfstatat(3, "", [pid 6351] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6347] <... clone3 resumed> => {parent_tid=[6351]}, 88) = 6351 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6351] <... rseq resumed>) = 0 [pid 6347] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6352 attached NULL, 8) = 0 [pid 6351] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] getdents64(3, [pid 6352] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6351] <... set_robust_list resumed>) = 0 [pid 6350] <... memfd_create resumed>) = 3 [pid 6348] <... clone3 resumed> => {parent_tid=[6352]}, 88) = 6352 [pid 6347] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6352] <... rseq resumed>) = 0 [pid 6351] rt_sigprocmask(SIG_SETMASK, [], [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6348] rt_sigprocmask(SIG_SETMASK, [], [pid 6347] <... futex resumed>) = 0 [pid 5061] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] set_robust_list(0x7fe7c32469a0, 24 [pid 6351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6350] <... mmap resumed>) = 0x7fe7bae00000 [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6347] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6352] <... set_robust_list resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./127/binderfs", [pid 6352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6352] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] memfd_create("syzkaller", 0 [pid 6348] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] unlink("./127/binderfs" [pid 6352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6352] memfd_create("syzkaller", 0 [pid 6348] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] <... memfd_create resumed>) = 3 [pid 6351] <... memfd_create resumed>) = 3 [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6351] <... mmap resumed>) = 0x7fe7bae00000 [pid 6349] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6350] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./127/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 6351] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./127" [pid 6352] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./128", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6350] <... write resumed>) = 2097152 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6350] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6349] <... write resumed>) = 2097152 [pid 6352] <... write resumed>) = 2097152 [pid 6350] <... openat resumed>) = 4 [pid 6352] munmap(0x7fe7bae00000, 138412032 [pid 6349] munmap(0x7fe7bae00000, 138412032 [pid 6351] <... write resumed>) = 2097152 [pid 6350] ioctl(4, LOOP_SET_FD, 3 [pid 6352] <... munmap resumed>) = 0 [pid 6349] <... munmap resumed>) = 0 [pid 6352] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6352] ioctl(4, LOOP_SET_FD, 3 [pid 6351] munmap(0x7fe7bae00000, 138412032 [pid 6350] <... ioctl resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6352] <... ioctl resumed>) = 0 [pid 6351] <... munmap resumed>) = 0 [pid 6350] close(3 [pid 6349] <... openat resumed>) = 4 [pid 6352] close(3 [pid 6351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6350] <... close resumed>) = 0 [pid 6349] ioctl(4, LOOP_SET_FD, 3 [pid 6351] <... openat resumed>) = 4 [pid 6350] close(4 [pid 6352] <... close resumed>) = 0 [pid 6352] close(4) = 0 [pid 6352] mkdir("./file0", 0777 [pid 6351] ioctl(4, LOOP_SET_FD, 3 [pid 6350] <... close resumed>) = 0 [pid 6349] <... ioctl resumed>) = 0 [pid 6352] <... mkdir resumed>) = 0 [pid 6349] close(3) = 0 [pid 6349] close(4) = 0 [pid 6349] mkdir("./file0", 0777 [pid 6352] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6351] <... ioctl resumed>) = 0 [pid 6350] mkdir("./file0", 0777 [pid 6349] <... mkdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [ 133.599591][ T6350] loop0: detected capacity change from 0 to 4096 [ 133.604068][ T6352] loop1: detected capacity change from 0 to 4096 [ 133.616190][ T6349] loop3: detected capacity change from 0 to 4096 [ 133.629410][ T6351] loop4: detected capacity change from 0 to 4096 [pid 6349] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6351] close(3 [pid 6350] <... mkdir resumed>) = 0 [pid 5061] close(3 [pid 6351] <... close resumed>) = 0 [pid 6350] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6353 attached [pid 6351] close(4 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6353 [pid 6353] set_robust_list(0x55558e6e36a0, 24 [pid 6351] <... close resumed>) = 0 [pid 6353] <... set_robust_list resumed>) = 0 [pid 6351] mkdir("./file0", 0777 [pid 6353] chdir("./128" [pid 6351] <... mkdir resumed>) = 0 [pid 6353] <... chdir resumed>) = 0 [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6351] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6353] setpgid(0, 0) = 0 [ 133.642766][ T6349] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 133.652271][ T6352] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 133.665909][ T6350] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6353] write(3, "1000", 4) = 4 [pid 6353] close(3) = 0 [pid 6352] <... mount resumed>) = 0 [pid 6352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6352] chdir("./file0") = 0 [pid 6352] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6352] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6348] exit_group(0) = ? [pid 6349] <... mount resumed>) = 0 [pid 6349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6352] +++ exited with 0 +++ [pid 6349] <... openat resumed>) = 3 [pid 6348] +++ exited with 0 +++ [pid 6349] chdir("./file0" [pid 6353] symlink("/dev/binderfs", "./binderfs" [pid 6349] <... chdir resumed>) = 0 [pid 6353] <... symlink resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 6353] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6353] <... futex resumed>) = 0 [pid 6353] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6349] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6349] <... futex resumed>) = 1 [pid 6345] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6349] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6345] exit_group(0 [pid 5060] newfstatat(3, "", [pid 6353] <... mmap resumed>) = 0x7fe7c3226000 [pid 6349] <... futex resumed>) = ? [pid 6345] <... exit_group resumed>) = ? [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6353] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6349] +++ exited with 0 +++ [pid 6345] +++ exited with 0 +++ [pid 5060] getdents64(3, [pid 6353] <... mprotect resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6353] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6345, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6353] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6354 attached [pid 5062] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6353] <... clone3 resumed> => {parent_tid=[6354]}, 88) = 6354 [pid 5062] <... openat resumed>) = 3 [pid 6354] <... rseq resumed>) = 0 [pid 6353] rt_sigprocmask(SIG_SETMASK, [], [pid 6350] <... mount resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5060] newfstatat(AT_FDCWD, "./126/binderfs", [pid 6354] set_robust_list(0x7fe7c32469a0, 24 [pid 6353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6354] <... set_robust_list resumed>) = 0 [pid 6353] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 6354] rt_sigprocmask(SIG_SETMASK, [], [pid 6353] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] unlink("./126/binderfs" [pid 6354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6353] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6350] <... openat resumed>) = 3 [pid 5062] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] chdir("./file0" [pid 5060] <... unlink resumed>) = 0 [pid 6350] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6350] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [ 133.704295][ T6351] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5062] newfstatat(AT_FDCWD, "./126/binderfs", [pid 6354] memfd_create("syzkaller", 0 [pid 6350] <... futex resumed>) = 1 [pid 6350] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6354] <... memfd_create resumed>) = 3 [pid 6346] exit_group(0 [pid 5062] unlink("./126/binderfs" [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6350] <... futex resumed>) = ? [pid 6346] <... exit_group resumed>) = ? [pid 5062] <... unlink resumed>) = 0 [pid 6354] <... mmap resumed>) = 0x7fe7bae00000 [pid 6350] +++ exited with 0 +++ [pid 5062] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] <... mount resumed>) = 0 [pid 6346] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6346, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 6351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6351] <... openat resumed>) = 3 [pid 5059] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] chdir("./file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6351] <... chdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./129/binderfs", [pid 6351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] unlink("./129/binderfs" [pid 6351] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... unlink resumed>) = 0 [pid 6351] <... futex resumed>) = 1 [pid 6347] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./126/file0", [pid 5059] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] exit_group(0 [pid 5062] newfstatat(AT_FDCWD, "./126/file0", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6347] <... exit_group resumed>) = ? [pid 5060] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] <... futex resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6351] +++ exited with 0 +++ [pid 6347] +++ exited with 0 +++ [pid 5062] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6354] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6347, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(4, "", [pid 5063] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(4, "", [pid 5060] getdents64(4, [pid 5059] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5060] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(AT_FDCWD, "./129/file0", [pid 5063] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./126/binderfs", [pid 5059] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(4, "", [pid 5063] unlink("./126/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] close(4 [pid 5059] getdents64(4, [pid 5063] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] close(4 [pid 5060] rmdir("./126/file0" [pid 5059] getdents64(4, [pid 5063] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] close(4 [pid 6354] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./126/file0", [pid 5062] rmdir("./126/file0" [pid 5060] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] rmdir("./129/file0" [pid 6354] munmap(0x7fe7bae00000, 138412032 [pid 5063] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5059] getdents64(3, [pid 5063] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] rmdir("./126" [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5059] close(3 [pid 5063] newfstatat(4, "", [pid 5059] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] rmdir("./129" [pid 5063] getdents64(4, [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] mkdir("./130", 0777 [pid 5063] getdents64(4, [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5060] mkdir("./127", 0777 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] close(4 [pid 5062] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./126/file0") = 0 [pid 5063] getdents64(3, [pid 5062] rmdir("./126" [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./126") = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] mkdir("./127", 0777) = 0 [pid 5062] mkdir("./127", 0777 [pid 5060] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6354] <... munmap resumed>) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6354] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 6354] <... close resumed>) = 0 [pid 6354] close(4 [pid 5060] close(3 [pid 6354] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6354] mkdir("./file0", 0777 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6354] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6355 attached [pid 6354] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6355 [ 133.870578][ T6354] loop2: detected capacity change from 0 to 4096 [pid 6355] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6355] chdir("./127" [pid 5059] close(3 [pid 6355] <... chdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6355] <... prctl resumed>) = 0 [pid 6355] setpgid(0, 0) = 0 [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6355] write(3, "1000", 4) = 4 [pid 6355] close(3) = 0 ./strace-static-x86_64: Process 6356 attached [pid 6355] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6356 [pid 6356] set_robust_list(0x55558e6e36a0, 24 [pid 6355] <... symlink resumed>) = 0 [pid 6356] <... set_robust_list resumed>) = 0 [pid 6355] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 6355] <... futex resumed>) = 0 [pid 6356] chdir("./130" [pid 6355] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6356] <... chdir resumed>) = 0 [pid 6355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5062] close(3 [pid 6355] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... close resumed>) = 0 [pid 6355] <... mprotect resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6358 attached ./strace-static-x86_64: Process 6357 attached [pid 6356] <... prctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6356] setpgid(0, 0 [pid 6355] <... clone3 resumed> => {parent_tid=[6358]}, 88) = 6358 [pid 6357] set_robust_list(0x55558e6e36a0, 24 [pid 6355] rt_sigprocmask(SIG_SETMASK, [], [pid 6357] <... set_robust_list resumed>) = 0 [pid 6355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6357] chdir("./127" [pid 6355] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6357 [pid 6355] <... futex resumed>) = 0 [pid 6355] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6359 attached [pid 6358] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6357] <... chdir resumed>) = 0 [pid 6356] <... setpgid resumed>) = 0 [pid 6358] <... rseq resumed>) = 0 [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6359] set_robust_list(0x55558e6e36a0, 24 [pid 6358] set_robust_list(0x7fe7c32469a0, 24 [pid 6357] <... prctl resumed>) = 0 [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6359 [pid 6358] <... set_robust_list resumed>) = 0 [pid 6357] setpgid(0, 0 [pid 6359] <... set_robust_list resumed>) = 0 [pid 6356] <... openat resumed>) = 3 [pid 6359] chdir("./127" [pid 6358] rt_sigprocmask(SIG_SETMASK, [], [pid 6357] <... setpgid resumed>) = 0 [pid 6356] write(3, "1000", 4 [pid 6359] <... chdir resumed>) = 0 [pid 6358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6356] <... write resumed>) = 4 [ 133.921221][ T6354] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6357] write(3, "1000", 4) = 4 [pid 6358] memfd_create("syzkaller", 0 [pid 6356] close(3 [pid 6357] close(3) = 0 [pid 6356] <... close resumed>) = 0 [pid 6359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6357] symlink("/dev/binderfs", "./binderfs" [pid 6356] symlink("/dev/binderfs", "./binderfs" [pid 6359] <... prctl resumed>) = 0 [pid 6358] <... memfd_create resumed>) = 3 [pid 6357] <... symlink resumed>) = 0 [pid 6357] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6357] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6356] <... symlink resumed>) = 0 [pid 6359] setpgid(0, 0 [pid 6357] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6356] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6359] <... setpgid resumed>) = 0 [pid 6357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6356] <... futex resumed>) = 0 [pid 6357] <... mmap resumed>) = 0x7fe7c3226000 [pid 6359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6356] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6357] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6356] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6358] <... mmap resumed>) = 0x7fe7bae00000 [pid 6357] <... mprotect resumed>) = 0 [pid 6356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6359] <... openat resumed>) = 3 [pid 6357] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6357] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6359] write(3, "1000", 4 [pid 6357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6356] <... mmap resumed>) = 0x7fe7c3226000 ./strace-static-x86_64: Process 6360 attached [pid 6359] <... write resumed>) = 4 [pid 6356] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6360] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6359] close(3 [pid 6357] <... clone3 resumed> => {parent_tid=[6360]}, 88) = 6360 [pid 6356] <... mprotect resumed>) = 0 [pid 6360] <... rseq resumed>) = 0 [pid 6357] rt_sigprocmask(SIG_SETMASK, [], [pid 6360] set_robust_list(0x7fe7c32469a0, 24 [pid 6357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6360] <... set_robust_list resumed>) = 0 [pid 6357] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6360] rt_sigprocmask(SIG_SETMASK, [], [pid 6359] <... close resumed>) = 0 [pid 6357] <... futex resumed>) = 0 [pid 6356] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6359] symlink("/dev/binderfs", "./binderfs" [pid 6357] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6360] memfd_create("syzkaller", 0 [pid 6354] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6361 attached [pid 6359] <... symlink resumed>) = 0 [pid 6356] <... clone3 resumed> => {parent_tid=[6361]}, 88) = 6361 [pid 6361] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6360] <... memfd_create resumed>) = 3 [pid 6359] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] rt_sigprocmask(SIG_SETMASK, [], [pid 6354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6361] <... rseq resumed>) = 0 [pid 6360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6359] <... futex resumed>) = 0 [pid 6356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6354] <... openat resumed>) = 3 [pid 6361] set_robust_list(0x7fe7c32469a0, 24 [pid 6360] <... mmap resumed>) = 0x7fe7bae00000 [pid 6359] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6356] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] chdir("./file0" [pid 6361] <... set_robust_list resumed>) = 0 [pid 6359] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6356] <... futex resumed>) = 0 [pid 6354] <... chdir resumed>) = 0 [pid 6361] rt_sigprocmask(SIG_SETMASK, [], [pid 6359] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6356] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6354] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6354] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6353] <... futex resumed>) = 0 [pid 6353] exit_group(0) = ? [pid 6361] memfd_create("syzkaller", 0 [pid 6359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6361] <... memfd_create resumed>) = 3 [pid 6359] <... mmap resumed>) = 0x7fe7c3226000 [pid 6361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6359] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6358] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6359] <... mprotect resumed>) = 0 [pid 6359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6361] <... mmap resumed>) = 0x7fe7bae00000 [pid 6359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6362 attached [pid 6362] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6362] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6362] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6359] <... clone3 resumed> => {parent_tid=[6362]}, 88) = 6362 [pid 6359] rt_sigprocmask(SIG_SETMASK, [], [pid 6354] +++ exited with 0 +++ [pid 6353] +++ exited with 0 +++ [pid 6359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6353, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6359] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6362] <... futex resumed>) = 0 [pid 6359] <... futex resumed>) = 1 [pid 5061] <... restart_syscall resumed>) = 0 [pid 6362] memfd_create("syzkaller", 0 [pid 5061] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 6359] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6362] <... memfd_create resumed>) = 3 [pid 5061] getdents64(3, [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6362] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./128/binderfs") = 0 [pid 5061] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6358] <... write resumed>) = 2097152 [pid 5061] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6361] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6358] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./128/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./128") = 0 [pid 5061] mkdir("./129", 0777 [pid 6362] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6360] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6358] <... munmap resumed>) = 0 [pid 6358] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6362] <... write resumed>) = 2097152 [pid 6358] <... openat resumed>) = 4 [pid 6358] ioctl(4, LOOP_SET_FD, 3 [pid 6362] munmap(0x7fe7bae00000, 138412032 [pid 6358] <... ioctl resumed>) = 0 [pid 6358] close(3) = 0 [pid 6362] <... munmap resumed>) = 0 [pid 6361] <... write resumed>) = 2097152 [pid 6358] close(4 [pid 6360] <... write resumed>) = 2097152 [pid 6361] munmap(0x7fe7bae00000, 138412032 [pid 6362] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6361] <... munmap resumed>) = 0 [pid 6360] munmap(0x7fe7bae00000, 138412032 [pid 6358] <... close resumed>) = 0 [pid 6358] mkdir("./file0", 0777 [pid 6362] <... openat resumed>) = 4 [pid 6360] <... munmap resumed>) = 0 [pid 6358] <... mkdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6362] ioctl(4, LOOP_SET_FD, 3 [pid 6361] <... openat resumed>) = 4 [pid 6361] ioctl(4, LOOP_SET_FD, 3 [pid 6360] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] close(3) = 0 [ 134.125173][ T6358] loop1: detected capacity change from 0 to 4096 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6358] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6360] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6363 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6363 [pid 6360] ioctl(4, LOOP_SET_FD, 3 [pid 6363] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6361] <... ioctl resumed>) = 0 [pid 6361] close(3) = 0 [pid 6361] close(4) = 0 [pid 6361] mkdir("./file0", 0777) = 0 [pid 6363] chdir("./129") = 0 [pid 6363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6363] setpgid(0, 0) = 0 [pid 6363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6363] write(3, "1000", 4) = 4 [pid 6363] close(3 [pid 6361] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6363] <... close resumed>) = 0 [pid 6360] <... ioctl resumed>) = 0 [pid 6363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6362] <... ioctl resumed>) = 0 [pid 6360] close(3) = 0 [pid 6362] close(3 [pid 6360] close(4) = 0 [pid 6362] <... close resumed>) = 0 [pid 6363] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6360] mkdir("./file0", 0777 [pid 6363] <... futex resumed>) = 0 [ 134.170515][ T6361] loop0: detected capacity change from 0 to 4096 [ 134.171308][ T6362] loop4: detected capacity change from 0 to 4096 [ 134.178903][ T6358] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 134.199190][ T6360] loop3: detected capacity change from 0 to 4096 [ 134.207161][ T6361] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6362] close(4 [pid 6363] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6362] <... close resumed>) = 0 [pid 6360] <... mkdir resumed>) = 0 [pid 6363] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6362] mkdir("./file0", 0777 [pid 6360] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6363] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6364]}, 88) = 6364 [pid 6363] rt_sigprocmask(SIG_SETMASK, [], [pid 6362] <... mkdir resumed>) = 0 [pid 6363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6363] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"..../strace-static-x86_64: Process 6364 attached [pid 6363] <... futex resumed>) = 0 [pid 6364] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6363] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6364] <... rseq resumed>) = 0 [pid 6364] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6364] memfd_create("syzkaller", 0) = 3 [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6358] <... mount resumed>) = 0 [pid 6358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6358] chdir("./file0") = 0 [pid 6358] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6358] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6355] <... futex resumed>) = 0 [pid 6358] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6355] exit_group(0 [pid 6358] <... futex resumed>) = ? [pid 6355] <... exit_group resumed>) = ? [pid 6358] +++ exited with 0 +++ [pid 6360] <... mount resumed>) = 0 [pid 6360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6360] chdir("./file0") = 0 [pid 6360] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6360] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6357] <... futex resumed>) = 0 [ 134.243027][ T6360] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 134.263313][ T6362] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6361] <... mount resumed>) = 0 [pid 6360] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] exit_group(0 [pid 6361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6360] <... futex resumed>) = ? [pid 6357] <... exit_group resumed>) = ? [pid 6355] +++ exited with 0 +++ [pid 6361] <... openat resumed>) = 3 [pid 6362] <... mount resumed>) = 0 [pid 6360] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6355, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6357] +++ exited with 0 +++ [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6362] <... openat resumed>) = 3 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6357, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6361] chdir("./file0" [pid 5062] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6362] chdir("./file0") = 0 [pid 6361] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6362] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6362] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(3, "", [pid 5060] <... openat resumed>) = 3 [pid 6362] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", [pid 6362] <... futex resumed>) = 1 [pid 6361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6359] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6362] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6361] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] exit_group(0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6362] <... futex resumed>) = ? [pid 6361] <... futex resumed>) = 1 [pid 6359] <... exit_group resumed>) = ? [pid 6356] <... futex resumed>) = 0 [pid 5062] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 6362] +++ exited with 0 +++ [pid 6361] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./127/binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... unlink resumed>) = 0 [pid 6359] +++ exited with 0 +++ [pid 5062] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6356] exit_group(0 [pid 5060] newfstatat(AT_FDCWD, "./127/binderfs", [pid 6361] <... futex resumed>) = ? [pid 6356] <... exit_group resumed>) = ? [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6361] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6359, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5060] unlink("./127/binderfs" [pid 5063] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 6356] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6356, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6364] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] newfstatat(AT_FDCWD, "./127/binderfs", [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./127/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./127/file0", [pid 5060] newfstatat(AT_FDCWD, "./127/file0", [pid 5063] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 5060] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(3, "", [pid 5063] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5060] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 4 [pid 5059] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(4, "", [pid 5063] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(4, "", [pid 5062] getdents64(4, [pid 5059] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5060] getdents64(4, [pid 5059] newfstatat(AT_FDCWD, "./130/binderfs", [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5062] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] close(4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] unlink("./130/binderfs" [pid 5063] close(4 [pid 5062] rmdir("./127/file0" [pid 5060] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] rmdir("./127/file0" [pid 5062] getdents64(3, [pid 5060] rmdir("./127/file0" [pid 5059] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6364] <... write resumed>) = 2097152 [pid 5063] <... close resumed>) = 0 [pid 5062] close(3 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 5062] <... close resumed>) = 0 [pid 6364] munmap(0x7fe7bae00000, 138412032 [pid 5063] rmdir("./127" [pid 5062] rmdir("./127" [pid 5060] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6364] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./130/file0", [pid 5062] <... rmdir resumed>) = 0 [pid 5060] rmdir("./127" [pid 5062] mkdir("./128", 0777 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./128", 0777 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] mkdir("./128", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 5059] newfstatat(4, "", [pid 6364] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6364] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(4, [pid 6364] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./130/file0") = 0 [pid 5059] getdents64(3, [pid 6364] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6364] close(3 [pid 5059] close(3 [pid 6364] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6364] close(4 [pid 5059] rmdir("./130" [pid 6364] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6364] mkdir("./file0", 0777) = 0 [pid 6364] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] mkdir("./131", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 134.413866][ T6364] loop2: detected capacity change from 0 to 4096 [ 134.449162][ T6364] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 5063] close(3 [pid 5062] <... close resumed>) = 0 [pid 5060] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6365 attached ./strace-static-x86_64: Process 6367 attached ./strace-static-x86_64: Process 6366 attached [pid 6365] set_robust_list(0x55558e6e36a0, 24 [pid 6367] set_robust_list(0x55558e6e36a0, 24 [pid 6366] set_robust_list(0x55558e6e36a0, 24 [pid 6365] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6366 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6365 [pid 6367] <... set_robust_list resumed>) = 0 [pid 6366] <... set_robust_list resumed>) = 0 [pid 6367] chdir("./128" [pid 6365] chdir("./128" [pid 6366] chdir("./128" [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6367 [pid 6367] <... chdir resumed>) = 0 [pid 6366] <... chdir resumed>) = 0 [pid 6365] <... chdir resumed>) = 0 [pid 6367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6367] <... prctl resumed>) = 0 [pid 6366] <... prctl resumed>) = 0 [pid 6365] <... prctl resumed>) = 0 [pid 6367] setpgid(0, 0 [pid 6366] setpgid(0, 0 [pid 6365] setpgid(0, 0) = 0 [pid 6367] <... setpgid resumed>) = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6366] <... setpgid resumed>) = 0 [pid 6367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6367] <... openat resumed>) = 3 [pid 6365] <... openat resumed>) = 3 [pid 6365] write(3, "1000", 4) = 4 [pid 6367] write(3, "1000", 4) = 4 [pid 6365] close(3 [pid 6367] close(3 [pid 6365] <... close resumed>) = 0 [pid 6367] <... close resumed>) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs" [pid 6367] symlink("/dev/binderfs", "./binderfs" [pid 6365] <... symlink resumed>) = 0 [pid 6366] write(3, "1000", 4 [pid 6367] <... symlink resumed>) = 0 [pid 6367] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] <... write resumed>) = 4 [pid 6366] close(3) = 0 [pid 6367] <... futex resumed>) = 0 [pid 6366] symlink("/dev/binderfs", "./binderfs" [pid 6365] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6366] <... symlink resumed>) = 0 [pid 6367] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6365] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6367] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6366] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6365] <... mprotect resumed>) = 0 [pid 6367] <... mmap resumed>) = 0x7fe7c3226000 [pid 6366] <... futex resumed>) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... ioctl resumed>) = 0 [pid 6367] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6367] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6366] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] close(3 [pid 6367] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6366] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6364] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6368 attached [pid 6367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6368] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6366] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 6369 attached [pid 6368] set_robust_list(0x7fe7c32469a0, 24 [pid 6367] <... clone3 resumed> => {parent_tid=[6369]}, 88) = 6369 [pid 6366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6365] <... clone3 resumed> => {parent_tid=[6368]}, 88) = 6368 [pid 6364] <... openat resumed>) = 3 [pid 6369] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6368] <... set_robust_list resumed>) = 0 [pid 6367] rt_sigprocmask(SIG_SETMASK, [], [pid 6366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], [pid 6364] chdir("./file0" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6369] <... rseq resumed>) = 0 [pid 6368] rt_sigprocmask(SIG_SETMASK, [], [pid 6367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6366] <... mmap resumed>) = 0x7fe7c3226000 [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6364] <... chdir resumed>) = 0 [pid 6369] set_robust_list(0x7fe7c32469a0, 24 [pid 6368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6367] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6369] <... set_robust_list resumed>) = 0 [pid 6368] memfd_create("syzkaller", 0 [pid 6367] <... futex resumed>) = 0 [pid 6366] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6365] <... futex resumed>) = 0 [pid 6364] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6370 attached [pid 6369] rt_sigprocmask(SIG_SETMASK, [], [pid 6367] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6366] <... mprotect resumed>) = 0 [pid 6365] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6364] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6368] <... memfd_create resumed>) = 3 [pid 6366] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6364] <... futex resumed>) = 1 [pid 6363] <... futex resumed>) = 0 [pid 6370] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6369] memfd_create("syzkaller", 0 [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6366] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6364] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6363] exit_group(0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6370 [pid 6370] chdir("./131" [pid 6369] <... memfd_create resumed>) = 3 [pid 6368] <... mmap resumed>) = 0x7fe7bae00000 [pid 6366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6364] <... futex resumed>) = ? [pid 6363] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6371 attached [pid 6370] <... chdir resumed>) = 0 [pid 6364] +++ exited with 0 +++ [pid 6371] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6366] <... clone3 resumed> => {parent_tid=[6371]}, 88) = 6371 [pid 6371] <... rseq resumed>) = 0 [pid 6370] <... prctl resumed>) = 0 [pid 6366] rt_sigprocmask(SIG_SETMASK, [], [pid 6371] set_robust_list(0x7fe7c32469a0, 24 [pid 6370] setpgid(0, 0 [pid 6366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6371] <... set_robust_list resumed>) = 0 [pid 6370] <... setpgid resumed>) = 0 [pid 6366] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] rt_sigprocmask(SIG_SETMASK, [], [pid 6370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6366] <... futex resumed>) = 0 [pid 6371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6370] <... openat resumed>) = 3 [pid 6366] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6363] +++ exited with 0 +++ [pid 6369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6371] memfd_create("syzkaller", 0 [pid 6370] write(3, "1000", 4) = 4 [pid 6370] close(3 [pid 6369] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6363, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6370] <... close resumed>) = 0 [pid 6371] <... memfd_create resumed>) = 3 [pid 6370] symlink("/dev/binderfs", "./binderfs" [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6370] <... symlink resumed>) = 0 [pid 6371] <... mmap resumed>) = 0x7fe7bae00000 [pid 6370] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] <... futex resumed>) = 0 [pid 6370] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6370] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6372]}, 88) = 6372 [pid 6370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6370] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6370] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6372 attached [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6372] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6372] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6372] memfd_create("syzkaller", 0 [pid 5061] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6372] <... memfd_create resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 6371] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6368] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6368] <... write resumed>) = 2097152 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./129/binderfs", [pid 6369] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6368] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6368] <... munmap resumed>) = 0 [pid 5061] unlink("./129/binderfs") = 0 [pid 6372] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6371] <... write resumed>) = 2097152 [pid 6369] <... write resumed>) = 2097152 [pid 6368] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6369] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6371] munmap(0x7fe7bae00000, 138412032 [pid 6368] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 6368] ioctl(4, LOOP_SET_FD, 3 [pid 6369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6368] <... ioctl resumed>) = 0 [pid 6372] <... write resumed>) = 2097152 [pid 6371] <... munmap resumed>) = 0 [pid 6369] <... openat resumed>) = 4 [pid 5061] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6369] ioctl(4, LOOP_SET_FD, 3 [pid 6372] munmap(0x7fe7bae00000, 138412032 [pid 6368] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6372] <... munmap resumed>) = 0 [pid 6368] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6368] close(4) = 0 [pid 5061] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6368] mkdir("./file0", 0777) = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6371] <... openat resumed>) = 4 [pid 6369] <... ioctl resumed>) = 0 [ 134.704713][ T6368] loop1: detected capacity change from 0 to 4096 [ 134.723058][ T6369] loop4: detected capacity change from 0 to 4096 [ 134.741185][ T6368] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6368] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6372] <... openat resumed>) = 4 [pid 6371] ioctl(4, LOOP_SET_FD, 3 [pid 6369] close(3 [pid 5061] <... openat resumed>) = 4 [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6369] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 6369] close(4) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 6369] mkdir("./file0", 0777 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 6369] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./129/file0" [pid 6369] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./129") = 0 [pid 5061] mkdir("./130", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6372] <... ioctl resumed>) = 0 [pid 6371] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6372] close(3 [pid 6371] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6371] <... close resumed>) = 0 [pid 6371] close(4) = 0 [pid 6371] mkdir("./file0", 0777) = 0 [pid 6371] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6368] <... mount resumed>) = 0 [pid 6372] <... close resumed>) = 0 [pid 6368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6368] chdir("./file0" [pid 6372] close(4 [pid 6368] <... chdir resumed>) = 0 [pid 6368] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6372] <... close resumed>) = 0 [pid 6368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6372] mkdir("./file0", 0777) = 0 [pid 6372] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6368] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 134.742213][ T6371] loop3: detected capacity change from 0 to 4096 [ 134.758387][ T6372] loop0: detected capacity change from 0 to 4096 [ 134.776227][ T6369] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 134.792932][ T6371] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6365] <... futex resumed>) = 0 [pid 6368] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] exit_group(0 [pid 6368] <... futex resumed>) = ? [pid 6365] <... exit_group resumed>) = ? [pid 6368] +++ exited with 0 +++ [pid 6365] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6365, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5060] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./128/binderfs") = 0 [pid 6371] <... mount resumed>) = 0 [pid 5060] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] close(3 [pid 5060] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] chdir("./file0" [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] <... chdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6373 attached [pid 6371] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6373] set_robust_list(0x55558e6e36a0, 24 [pid 6371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6373 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6373] <... set_robust_list resumed>) = 0 [pid 6373] chdir("./130" [pid 5060] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6371] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] <... chdir resumed>) = 0 [pid 6371] <... futex resumed>) = 1 [pid 6366] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6366] exit_group(0 [ 134.818939][ T6372] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] newfstatat(4, "", [pid 6373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6372] <... mount resumed>) = 0 [pid 6366] <... exit_group resumed>) = ? [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6373] <... prctl resumed>) = 0 [pid 6371] +++ exited with 0 +++ [pid 6369] <... mount resumed>) = 0 [pid 5060] getdents64(4, [pid 6373] setpgid(0, 0 [pid 6369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6369] <... openat resumed>) = 3 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6373] <... setpgid resumed>) = 0 [pid 5060] close(4 [pid 6372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6369] chdir("./file0" [pid 5060] <... close resumed>) = 0 [pid 6373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6372] <... openat resumed>) = 3 [pid 6369] <... chdir resumed>) = 0 [pid 5060] rmdir("./128/file0" [pid 6369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6373] <... openat resumed>) = 3 [pid 6369] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6372] chdir("./file0" [pid 6366] +++ exited with 0 +++ [pid 6373] write(3, "1000", 4 [pid 5060] <... rmdir resumed>) = 0 [pid 6372] <... chdir resumed>) = 0 [pid 6373] <... write resumed>) = 4 [pid 5060] getdents64(3, [pid 6372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6372] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6369] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(3) = 0 [pid 6373] close(3 [pid 6372] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... futex resumed>) = 1 [pid 6367] <... futex resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6366, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6373] <... close resumed>) = 0 [pid 6372] <... futex resumed>) = 1 [pid 6370] <... futex resumed>) = 0 [pid 6369] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6367] exit_group(0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5060] rmdir("./128" [pid 6373] symlink("/dev/binderfs", "./binderfs" [pid 6372] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6370] exit_group(0 [pid 6369] <... futex resumed>) = ? [pid 6367] <... exit_group resumed>) = ? [pid 5062] <... restart_syscall resumed>) = 0 [pid 6373] <... symlink resumed>) = 0 [pid 6372] <... futex resumed>) = ? [pid 6370] <... exit_group resumed>) = ? [pid 6369] +++ exited with 0 +++ [pid 6367] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 6372] +++ exited with 0 +++ [pid 5062] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6367, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5062] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... restart_syscall resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] mkdir("./129", 0777 [pid 6373] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 5063] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6373] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./128/binderfs", [pid 5063] newfstatat(3, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6373] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] unlink("./128/binderfs" [pid 5060] <... mkdir resumed>) = 0 [pid 6373] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [pid 6373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6370] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6370, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6373] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] newfstatat(AT_FDCWD, "./128/binderfs", [pid 6373] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6373] <... mprotect resumed>) = 0 [pid 5063] unlink("./128/binderfs" [pid 5062] newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5059] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./128/file0" [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5062] getdents64(3, [pid 6373] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6373] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] getdents64(3, [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] close(3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./128" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5059] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6374 attached [pid 6373] <... clone3 resumed> => {parent_tid=[6374]}, 88) = 6374 [pid 5063] newfstatat(AT_FDCWD, "./128/file0", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6373] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(AT_FDCWD, "./131/binderfs", [pid 6373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6373] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] mkdir("./129", 0777 [pid 6374] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6373] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6373] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6374] <... rseq resumed>) = 0 [pid 5063] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] unlink("./131/binderfs" [pid 6374] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5059] <... unlink resumed>) = 0 [pid 6374] <... set_robust_list resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6374] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... openat resumed>) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 5059] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6374] memfd_create("syzkaller", 0) = 3 [pid 5063] getdents64(4, [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./128/file0" [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6374] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5060] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 4 [pid 5063] rmdir("./128" [pid 5059] newfstatat(4, "", [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6375 attached [pid 5063] mkdir("./129", 0777 [pid 5059] getdents64(4, [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6375 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 6375] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] rmdir("./131/file0" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5059] close(3 [pid 5062] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] rmdir("./131") = 0 ./strace-static-x86_64: Process 6376 attached [pid 5059] mkdir("./132", 0777 [pid 6376] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6375] <... set_robust_list resumed>) = 0 [pid 6376] chdir("./129") = 0 [pid 6375] chdir("./129" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6376 [pid 5059] <... mkdir resumed>) = 0 [pid 6375] <... chdir resumed>) = 0 [pid 6375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6375] setpgid(0, 0 [pid 6376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6376] <... prctl resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6376] setpgid(0, 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6376] <... setpgid resumed>) = 0 [pid 6376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6376] write(3, "1000", 4) = 4 [pid 6376] close(3) = 0 [pid 6376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6376] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6375] <... setpgid resumed>) = 0 [pid 6376] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6375] <... openat resumed>) = 3 [pid 6376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6375] write(3, "1000", 4 [pid 6376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6375] <... write resumed>) = 4 [pid 6376] <... mmap resumed>) = 0x7fe7c3226000 [pid 6375] close(3 [pid 6376] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6375] <... close resumed>) = 0 [pid 6376] <... mprotect resumed>) = 0 [pid 6375] symlink("/dev/binderfs", "./binderfs" [pid 6376] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6375] <... symlink resumed>) = 0 [pid 6376] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6375] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6375] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6375] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6375] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6374] <... write resumed>) = 2097152 [pid 6376] <... clone3 resumed> => {parent_tid=[6377]}, 88) = 6377 ./strace-static-x86_64: Process 6377 attached [pid 6376] rt_sigprocmask(SIG_SETMASK, [], [pid 6377] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6377] <... rseq resumed>) = 0 [pid 6377] set_robust_list(0x7fe7c32469a0, 24 [pid 6376] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] <... set_robust_list resumed>) = 0 [pid 6376] <... futex resumed>) = 0 [pid 6377] rt_sigprocmask(SIG_SETMASK, [], [pid 6376] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6374] munmap(0x7fe7bae00000, 138412032 [pid 6377] memfd_create("syzkaller", 0 [pid 6375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6377] <... memfd_create resumed>) = 3 [pid 6375] <... mmap resumed>) = 0x7fe7c3226000 [pid 6374] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6375] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] close(3 [pid 6375] <... mprotect resumed>) = 0 [pid 6377] <... mmap resumed>) = 0x7fe7bae00000 [pid 6374] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 6375] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6374] ioctl(4, LOOP_SET_FD, 3 [pid 6375] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6374] <... ioctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6378 attached [pid 5059] <... ioctl resumed>) = 0 [pid 6378] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6375] <... clone3 resumed> => {parent_tid=[6378]}, 88) = 6378 [pid 6378] <... rseq resumed>) = 0 [pid 6375] rt_sigprocmask(SIG_SETMASK, [], [pid 6378] set_robust_list(0x7fe7c32469a0, 24 [pid 6375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6374] close(3 [pid 6378] <... set_robust_list resumed>) = 0 [pid 6375] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] rt_sigprocmask(SIG_SETMASK, [], [pid 6374] <... close resumed>) = 0 [pid 6375] <... futex resumed>) = 0 [pid 6378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6374] close(4 [pid 6375] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6378] memfd_create("syzkaller", 0 [pid 6374] <... close resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6374] mkdir("./file0", 0777./strace-static-x86_64: Process 6379 attached [pid 6379] set_robust_list(0x55558e6e36a0, 24 [pid 6378] <... memfd_create resumed>) = 3 [pid 6374] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6380 attached [pid 6380] set_robust_list(0x55558e6e36a0, 24 [pid 6379] <... set_robust_list resumed>) = 0 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6379 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6380 [pid 6380] <... set_robust_list resumed>) = 0 [pid 6374] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6378] <... mmap resumed>) = 0x7fe7bae00000 [pid 6380] chdir("./132" [pid 6379] chdir("./129") = 0 [pid 6379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6379] setpgid(0, 0) = 0 [pid 6379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6379] write(3, "1000", 4 [pid 6380] <... chdir resumed>) = 0 [pid 6379] <... write resumed>) = 4 [pid 6379] close(3) = 0 [pid 6379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6379] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6379] <... futex resumed>) = 0 [pid 6379] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6380] <... prctl resumed>) = 0 [pid 6379] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6380] setpgid(0, 0 [pid 6379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6380] <... setpgid resumed>) = 0 [pid 6379] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6381]}, 88) = 6381 ./strace-static-x86_64: Process 6381 attached [pid 6379] rt_sigprocmask(SIG_SETMASK, [], [pid 6381] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6381] <... rseq resumed>) = 0 [pid 6379] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] set_robust_list(0x7fe7c32469a0, 24 [pid 6379] <... futex resumed>) = 0 [pid 6381] <... set_robust_list resumed>) = 0 [pid 6379] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6381] memfd_create("syzkaller", 0 [pid 6377] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6380] <... openat resumed>) = 3 [pid 6380] write(3, "1000", 4 [pid 6381] <... memfd_create resumed>) = 3 [pid 6380] <... write resumed>) = 4 [pid 6380] close(3) = 0 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6381] <... mmap resumed>) = 0x7fe7bae00000 [pid 6380] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.100535][ T6374] loop2: detected capacity change from 0 to 4096 [ 135.128693][ T6374] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6380] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6378] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6380] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6382 attached => {parent_tid=[6382]}, 88) = 6382 [pid 6382] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6380] rt_sigprocmask(SIG_SETMASK, [], [pid 6382] <... rseq resumed>) = 0 [pid 6380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6382] set_robust_list(0x7fe7c32469a0, 24 [pid 6380] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... set_robust_list resumed>) = 0 [pid 6380] <... futex resumed>) = 0 [pid 6382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6380] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6382] memfd_create("syzkaller", 0) = 3 [pid 6382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6377] <... write resumed>) = 2097152 [pid 6381] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6374] <... mount resumed>) = 0 [pid 6374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6377] munmap(0x7fe7bae00000, 138412032 [pid 6374] <... openat resumed>) = 3 [pid 6374] chdir("./file0" [pid 6378] <... write resumed>) = 2097152 [pid 6377] <... munmap resumed>) = 0 [pid 6374] <... chdir resumed>) = 0 [pid 6378] munmap(0x7fe7bae00000, 138412032 [pid 6374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6374] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6373] <... futex resumed>) = 0 [pid 6374] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6373] exit_group(0 [pid 6374] <... futex resumed>) = ? [pid 6373] <... exit_group resumed>) = ? [pid 6374] +++ exited with 0 +++ [pid 6378] <... munmap resumed>) = 0 [pid 6373] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6373, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6381] <... write resumed>) = 2097152 [pid 6378] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6377] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] newfstatat(3, "", [pid 6378] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6377] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 6378] ioctl(4, LOOP_SET_FD, 3 [pid 6377] ioctl(4, LOOP_SET_FD, 3 [pid 6382] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6381] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6378] <... ioctl resumed>) = 0 [pid 6381] <... munmap resumed>) = 0 [pid 6377] <... ioctl resumed>) = 0 [pid 5061] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6381] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6377] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./130/binderfs", [pid 6377] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6377] close(4 [pid 5061] unlink("./130/binderfs" [pid 6377] <... close resumed>) = 0 [pid 6382] <... write resumed>) = 2097152 [pid 6381] <... openat resumed>) = 4 [pid 6378] close(3 [pid 5061] <... unlink resumed>) = 0 [pid 6377] mkdir("./file0", 0777 [pid 6382] munmap(0x7fe7bae00000, 138412032 [pid 6381] ioctl(4, LOOP_SET_FD, 3 [pid 6378] <... close resumed>) = 0 [pid 6378] close(4) = 0 [pid 6378] mkdir("./file0", 0777) = 0 [pid 6378] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6382] <... munmap resumed>) = 0 [pid 6382] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6377] <... mkdir resumed>) = 0 [pid 5061] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... umount2 resumed>) = 0 [ 135.267280][ T6378] loop1: detected capacity change from 0 to 4096 [ 135.271206][ T6377] loop3: detected capacity change from 0 to 4096 [ 135.297510][ T6381] loop4: detected capacity change from 0 to 4096 [ 135.300962][ T6378] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6382] <... openat resumed>) = 4 [pid 6381] <... ioctl resumed>) = 0 [pid 5061] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6381] close(3) = 0 [pid 5061] newfstatat(AT_FDCWD, "./130/file0", [pid 6382] ioctl(4, LOOP_SET_FD, 3 [pid 6381] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6381] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6381] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6382] <... ioctl resumed>) = 0 [pid 6382] close(3 [pid 6381] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6382] <... close resumed>) = 0 [pid 6381] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] newfstatat(4, "", [pid 6382] close(4) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6382] mkdir("./file0", 0777) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./130/file0") = 0 [pid 6382] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [ 135.320922][ T6377] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 135.340074][ T6382] loop0: detected capacity change from 0 to 4096 [ 135.354085][ T6381] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5061] rmdir("./130") = 0 [pid 5061] mkdir("./131", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6377] <... mount resumed>) = 0 [pid 6377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6377] chdir("./file0") = 0 [pid 6377] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6377] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6376] <... futex resumed>) = 0 [pid 6376] exit_group(0) = ? [pid 6378] <... mount resumed>) = 0 [pid 6377] +++ exited with 0 +++ [pid 6376] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6376, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6378] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6378] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 6378] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(3, "", [pid 6378] <... futex resumed>) = 1 [pid 6375] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6378] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6375] exit_group(0 [pid 5062] getdents64(3, [pid 6378] <... futex resumed>) = ? [pid 6375] <... exit_group resumed>) = ? [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./129/binderfs") = 0 [pid 6378] +++ exited with 0 +++ [pid 6375] +++ exited with 0 +++ [pid 5062] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] <... ioctl resumed>) = 0 [ 135.374227][ T6382] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./129/binderfs") = 0 [pid 5060] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] close(3 [pid 5062] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./129/file0", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6383 attached [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./129/file0", [pid 6383] set_robust_list(0x55558e6e36a0, 24 [pid 5062] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6383] <... set_robust_list resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6383 [pid 5060] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] chdir("./131" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... chdir resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5060] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... openat resumed>) = 4 [pid 6383] <... prctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 6383] setpgid(0, 0 [pid 5062] getdents64(4, [pid 6383] <... setpgid resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] getdents64(4, [pid 6383] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6383] write(3, "1000", 4 [pid 5062] getdents64(4, [pid 6382] <... mount resumed>) = 0 [pid 5060] getdents64(4, [pid 6383] <... write resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6383] close(3 [pid 5062] close(4 [pid 5060] close(4 [pid 6383] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6383] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./129/file0" [pid 5060] rmdir("./129/file0" [pid 6382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 6383] <... symlink resumed>) = 0 [pid 6382] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 6382] chdir("./file0" [pid 6383] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... chdir resumed>) = 0 [pid 5062] getdents64(3, [pid 6382] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6383] <... futex resumed>) = 0 [pid 6382] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(3, [pid 6383] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6382] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] close(3 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6383] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6382] <... futex resumed>) = 1 [pid 6381] <... mount resumed>) = 0 [pid 6380] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] close(3 [pid 6383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6382] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6380] exit_group(0 [pid 5062] rmdir("./129" [pid 5060] <... close resumed>) = 0 [pid 6383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6382] <... futex resumed>) = ? [pid 6381] <... openat resumed>) = 3 [pid 6380] <... exit_group resumed>) = ? [pid 5062] <... rmdir resumed>) = 0 [pid 5060] rmdir("./129" [pid 6383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6382] +++ exited with 0 +++ [pid 6381] chdir("./file0" [pid 5062] mkdir("./130", 0777 [pid 5060] <... rmdir resumed>) = 0 [pid 6383] <... mmap resumed>) = 0x7fe7c3226000 [pid 6381] <... chdir resumed>) = 0 [pid 6383] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6380] +++ exited with 0 +++ [pid 6383] <... mprotect resumed>) = 0 [pid 6381] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 6383] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6381] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] mkdir("./130", 0777 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6380, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 6381] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6381] <... futex resumed>) = 1 [pid 6379] <... futex resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6379] exit_group(0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6379] <... exit_group resumed>) = ? [pid 5059] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6384 attached [pid 6381] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 6384] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6383] <... clone3 resumed> => {parent_tid=[6384]}, 88) = 6384 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] newfstatat(3, "", [pid 6384] <... rseq resumed>) = 0 [pid 6383] rt_sigprocmask(SIG_SETMASK, [], [pid 6379] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6384] set_robust_list(0x7fe7c32469a0, 24 [pid 6383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6379, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(3, [pid 6384] <... set_robust_list resumed>) = 0 [pid 6383] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6384] rt_sigprocmask(SIG_SETMASK, [], [pid 6383] <... futex resumed>) = 0 [pid 5059] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6383] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5063] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6384] memfd_create("syzkaller", 0 [pid 5063] newfstatat(3, "", [pid 5059] unlink("./132/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6384] <... memfd_create resumed>) = 3 [pid 5063] getdents64(3, [pid 5059] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 6384] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./129/binderfs") = 0 [pid 5059] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5063] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] close(4) = 0 [pid 5059] rmdir("./132/file0") = 0 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5059] getdents64(3, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] rmdir("./132" [pid 5063] close(4 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./129/file0") = 0 [pid 5059] mkdir("./133", 0777 [pid 5063] getdents64(3, [pid 5059] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./129") = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] mkdir("./130", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6384] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6385 ./strace-static-x86_64: Process 6385 attached [pid 6385] set_robust_list(0x55558e6e36a0, 24 [pid 5060] close(3) = 0 [pid 6385] <... set_robust_list resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6385] chdir("./130") = 0 ./strace-static-x86_64: Process 6386 attached [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6386 [pid 6386] set_robust_list(0x55558e6e36a0, 24 [pid 6385] <... prctl resumed>) = 0 [pid 6386] <... set_robust_list resumed>) = 0 [pid 6385] setpgid(0, 0 [pid 6386] chdir("./130" [pid 6385] <... setpgid resumed>) = 0 [pid 6386] <... chdir resumed>) = 0 [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6385] write(3, "1000", 4) = 4 [pid 6386] setpgid(0, 0 [pid 6385] close(3 [pid 6384] <... write resumed>) = 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 6386] <... setpgid resumed>) = 0 [pid 6385] <... close resumed>) = 0 [pid 6384] munmap(0x7fe7bae00000, 138412032 [pid 5059] close(3 [pid 6385] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6385] <... symlink resumed>) = 0 [pid 6386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6384] <... munmap resumed>) = 0 [pid 6385] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... openat resumed>) = 3 [pid 6385] <... futex resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6387 ./strace-static-x86_64: Process 6387 attached [pid 6385] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6387] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6387] chdir("./133") = 0 [pid 6387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6387] setpgid(0, 0) = 0 [pid 6387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6387] write(3, "1000", 4) = 4 [pid 6387] close(3 [pid 6385] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6386] write(3, "1000", 4 [pid 6385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6386] <... write resumed>) = 4 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6386] close(3 [pid 6387] <... close resumed>) = 0 [pid 6385] <... mmap resumed>) = 0x7fe7c3226000 [pid 6386] <... close resumed>) = 0 [pid 6385] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6387] symlink("/dev/binderfs", "./binderfs" [pid 6385] <... mprotect resumed>) = 0 [pid 6387] <... symlink resumed>) = 0 [pid 6386] symlink("/dev/binderfs", "./binderfs" [pid 6385] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6387] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... symlink resumed>) = 0 [pid 6385] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 6387] <... futex resumed>) = 0 [pid 6385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6387] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6386] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... openat resumed>) = 4 [pid 5063] close(3 [pid 6387] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6387] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6387] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6388 attached ) = 0 [pid 6388] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6387] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6386] <... futex resumed>) = 0 [pid 6385] <... clone3 resumed> => {parent_tid=[6388]}, 88) = 6388 [pid 6384] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 6388] <... rseq resumed>) = 0 [pid 6387] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6386] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6388] set_robust_list(0x7fe7c32469a0, 24 [pid 6387] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6389 attached [pid 6388] <... set_robust_list resumed>) = 0 [pid 6389] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6388] rt_sigprocmask(SIG_SETMASK, [], [pid 6387] <... clone3 resumed> => {parent_tid=[6389]}, 88) = 6389 [pid 6389] <... rseq resumed>) = 0 [pid 6388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6389] set_robust_list(0x7fe7c32469a0, 24 [pid 6388] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6387] rt_sigprocmask(SIG_SETMASK, [], [pid 6389] <... set_robust_list resumed>) = 0 [pid 6387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6387] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] memfd_create("syzkaller", 0 [pid 6387] <... futex resumed>) = 0 [pid 6387] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6389] <... memfd_create resumed>) = 3 [pid 6386] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6385] rt_sigprocmask(SIG_SETMASK, [], [pid 6384] <... ioctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6384] close(3 [pid 6385] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... close resumed>) = 0 [pid 6386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6385] <... futex resumed>) = 1 [pid 6386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6384] close(4 [pid 6386] <... mmap resumed>) = 0x7fe7c3226000 [pid 6386] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6385] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6384] <... close resumed>) = 0 [pid 6386] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6390 attached [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6388] <... futex resumed>) = 0 [pid 6384] mkdir("./file0", 0777 [pid 6390] set_robust_list(0x55558e6e36a0, 24 [pid 6389] <... mmap resumed>) = 0x7fe7bae00000 [pid 6388] memfd_create("syzkaller", 0 [pid 6386] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6384] <... mkdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6390 [pid 6390] <... set_robust_list resumed>) = 0 [pid 6386] <... rt_sigprocmask resumed>[], 8) = 0 [ 135.662249][ T6384] loop2: detected capacity change from 0 to 4096 [pid 6390] chdir("./130" [pid 6386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6384] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6390] <... chdir resumed>) = 0 [pid 6388] <... memfd_create resumed>) = 3 [pid 6390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6390] <... prctl resumed>) = 0 [pid 6386] <... clone3 resumed> => {parent_tid=[6391]}, 88) = 6391 ./strace-static-x86_64: Process 6391 attached [pid 6386] rt_sigprocmask(SIG_SETMASK, [], [pid 6390] setpgid(0, 0 [pid 6386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6391] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6390] <... setpgid resumed>) = 0 [pid 6386] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6391] <... rseq resumed>) = 0 [pid 6390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6386] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6391] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6391] memfd_create("syzkaller", 0 [pid 6390] <... openat resumed>) = 3 [pid 6390] write(3, "1000", 4) = 4 [pid 6390] close(3 [pid 6388] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6390] <... close resumed>) = 0 [pid 6391] <... memfd_create resumed>) = 3 [pid 6390] symlink("/dev/binderfs", "./binderfs" [pid 6391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6390] <... symlink resumed>) = 0 [pid 6391] <... mmap resumed>) = 0x7fe7bae00000 [pid 6390] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6390] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [ 135.716527][ T6384] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6390] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6388] <... write resumed>) = 2097152 [pid 6384] <... mount resumed>) = 0 [pid 6390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6390] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6390] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6384] <... openat resumed>) = 3 [pid 6388] munmap(0x7fe7bae00000, 138412032 [pid 6390] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6389] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6388] <... munmap resumed>) = 0 [pid 6384] chdir("./file0" [pid 6391] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6384] <... chdir resumed>) = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6390] <... clone3 resumed> => {parent_tid=[6392]}, 88) = 6392 ./strace-static-x86_64: Process 6392 attached [pid 6388] <... openat resumed>) = 4 [pid 6390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6388] ioctl(4, LOOP_SET_FD, 3 [pid 6390] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6392] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6384] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] memfd_create("syzkaller", 0 [pid 6384] <... futex resumed>) = 1 [pid 6384] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] <... futex resumed>) = 0 [pid 6383] exit_group(0 [pid 6384] <... futex resumed>) = ? [pid 6383] <... exit_group resumed>) = ? [pid 6384] +++ exited with 0 +++ [pid 6390] <... futex resumed>) = 0 [pid 6390] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6392] <... memfd_create resumed>) = 3 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6388] <... ioctl resumed>) = 0 [pid 6388] close(3) = 0 [pid 6388] close(4 [pid 6383] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6383, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 6388] <... close resumed>) = 0 [pid 6388] mkdir("./file0", 0777 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6388] <... mkdir resumed>) = 0 [pid 6388] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6389] <... write resumed>) = 2097152 [pid 5061] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./131/binderfs") = 0 [pid 5061] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] <... write resumed>) = 2097152 [pid 6389] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6391] munmap(0x7fe7bae00000, 138412032 [pid 5061] getdents64(4, [pid 6391] <... munmap resumed>) = 0 [pid 6389] <... munmap resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6392] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6389] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] close(4 [pid 6389] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./131/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [ 135.800065][ T6388] loop3: detected capacity change from 0 to 4096 [ 135.829935][ T6388] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6389] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... close resumed>) = 0 [pid 6391] <... openat resumed>) = 4 [pid 5061] rmdir("./131" [pid 6391] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./132", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6391] <... ioctl resumed>) = 0 [pid 6392] <... write resumed>) = 2097152 [pid 6389] <... ioctl resumed>) = 0 [pid 6392] munmap(0x7fe7bae00000, 138412032 [pid 6391] close(3 [pid 6389] close(3 [pid 6388] <... mount resumed>) = 0 [pid 6389] <... close resumed>) = 0 [pid 6388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6391] <... close resumed>) = 0 [pid 6389] close(4 [pid 6391] close(4 [pid 6389] <... close resumed>) = 0 [pid 6388] <... openat resumed>) = 3 [pid 6391] <... close resumed>) = 0 [pid 6389] mkdir("./file0", 0777) = 0 [pid 6388] chdir("./file0") = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6391] mkdir("./file0", 0777 [pid 6388] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6392] <... munmap resumed>) = 0 [pid 6388] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6388] <... futex resumed>) = 1 [pid 6385] <... futex resumed>) = 0 [pid 6388] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] exit_group(0 [pid 6391] <... mkdir resumed>) = 0 [pid 6385] <... exit_group resumed>) = ? [pid 6392] <... openat resumed>) = 4 [pid 6388] <... futex resumed>) = ? [pid 6392] ioctl(4, LOOP_SET_FD, 3 [pid 6391] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 135.862732][ T6389] loop0: detected capacity change from 0 to 4096 [ 135.872238][ T6391] loop1: detected capacity change from 0 to 4096 [pid 6389] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6392] <... ioctl resumed>) = 0 [pid 6388] +++ exited with 0 +++ [pid 6385] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 6392] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] close(4 [pid 5062] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6392] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] close(3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./130/binderfs" [pid 6392] mkdir("./file0", 0777 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./130/file0", ./strace-static-x86_64: Process 6393 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 135.915199][ T6392] loop4: detected capacity change from 0 to 4096 [ 135.930258][ T6389] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 135.939447][ T6391] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5062] newfstatat(4, "", [pid 6393] set_robust_list(0x55558e6e36a0, 24 [pid 6392] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6393 [pid 6393] <... set_robust_list resumed>) = 0 [pid 6393] chdir("./132" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6393] <... chdir resumed>) = 0 [pid 5062] close(4 [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./130/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6393] <... prctl resumed>) = 0 [pid 5062] close(3 [pid 6393] setpgid(0, 0 [pid 6389] <... mount resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 6393] <... setpgid resumed>) = 0 [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] rmdir("./130" [pid 6393] <... openat resumed>) = 3 [pid 6389] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 6393] write(3, "1000", 4) = 4 [pid 6389] chdir("./file0" [pid 6393] close(3 [pid 6391] <... mount resumed>) = 0 [pid 6389] <... chdir resumed>) = 0 [pid 5062] mkdir("./131", 0777 [pid 6393] <... close resumed>) = 0 [pid 6389] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 6393] symlink("/dev/binderfs", "./binderfs" [pid 6391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6389] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6393] <... symlink resumed>) = 0 [pid 6391] <... openat resumed>) = 3 [pid 6389] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6393] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] chdir("./file0" [pid 6389] <... futex resumed>) = 1 [pid 6387] <... futex resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 6393] <... futex resumed>) = 0 [pid 6391] <... chdir resumed>) = 0 [pid 6389] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6393] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6387] exit_group(0 [pid 6393] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6391] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6389] <... futex resumed>) = ? [pid 6387] <... exit_group resumed>) = ? [pid 6393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6393] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6391] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6391] <... futex resumed>) = 1 [ 135.987301][ T6392] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6386] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6394 attached [pid 6391] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] exit_group(0 [pid 6394] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6393] <... clone3 resumed> => {parent_tid=[6394]}, 88) = 6394 [pid 6391] <... futex resumed>) = ? [pid 6389] +++ exited with 0 +++ [pid 6387] +++ exited with 0 +++ [pid 6386] <... exit_group resumed>) = ? [pid 6394] <... rseq resumed>) = 0 [pid 6393] rt_sigprocmask(SIG_SETMASK, [], [pid 6394] set_robust_list(0x7fe7c32469a0, 24 [pid 6393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6392] <... mount resumed>) = 0 [pid 6394] <... set_robust_list resumed>) = 0 [pid 6393] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6387, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6394] rt_sigprocmask(SIG_SETMASK, [], [pid 6393] <... futex resumed>) = 0 [pid 6394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6392] <... openat resumed>) = 3 [pid 6392] chdir("./file0" [pid 6394] memfd_create("syzkaller", 0 [pid 6393] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6392] <... chdir resumed>) = 0 [pid 6392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6392] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(3, "", [pid 6394] <... memfd_create resumed>) = 3 [pid 6392] <... futex resumed>) = 1 [pid 6390] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6390] exit_group(0 [pid 5059] getdents64(3, [pid 6394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6391] +++ exited with 0 +++ [pid 6390] <... exit_group resumed>) = ? [pid 6386] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6394] <... mmap resumed>) = 0x7fe7bae00000 [pid 6392] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6386, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6390, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] unlink("./133/binderfs" [pid 5063] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5060] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = 0 [pid 5063] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6394] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] unlink("./130/binderfs") = 0 [pid 5060] getdents64(3, [pid 5063] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./130/binderfs") = 0 [pid 5060] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./133/file0") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./133") = 0 [pid 5059] mkdir("./134", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./130/file0", [pid 5062] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./130/file0", [pid 5063] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6395 attached [pid 5063] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] <... set_robust_list resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5060] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6395] chdir("./131" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6395 [pid 6394] <... write resumed>) = 2097152 [pid 6395] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5060] <... openat resumed>) = 4 [pid 6395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6394] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] newfstatat(4, "", [pid 6395] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6395] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6395] <... setpgid resumed>) = 0 [pid 6394] <... munmap resumed>) = 0 [pid 5063] close(4 [pid 5060] getdents64(4, [pid 6394] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 6394] <... openat resumed>) = 4 [pid 5063] rmdir("./130/file0" [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6394] ioctl(4, LOOP_SET_FD, 3 [pid 6395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, [pid 6395] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5063] close(3 [pid 5060] <... close resumed>) = 0 [pid 6395] write(3, "1000", 4 [pid 5063] <... close resumed>) = 0 [pid 5060] rmdir("./130/file0" [pid 6395] <... write resumed>) = 4 [pid 5063] rmdir("./130" [pid 5060] <... rmdir resumed>) = 0 [pid 6395] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6395] <... close resumed>) = 0 [pid 5063] mkdir("./131", 0777 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6395] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... mkdir resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./130" [pid 6395] <... symlink resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6395] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] mkdir("./131", 0777 [pid 6395] <... futex resumed>) = 0 [pid 6394] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] <... mkdir resumed>) = 0 [pid 6395] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6395] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6394] close(3 [pid 6395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6394] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6394] close(4 [pid 6395] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6394] <... close resumed>) = 0 [pid 6395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6394] mkdir("./file0", 0777) = 0 [pid 6394] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"..../strace-static-x86_64: Process 6396 attached [pid 6396] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6395] <... clone3 resumed> => {parent_tid=[6396]}, 88) = 6396 [pid 6395] rt_sigprocmask(SIG_SETMASK, [], [pid 6396] <... rseq resumed>) = 0 [pid 6395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6396] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6395] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6395] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6396] memfd_create("syzkaller", 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6397 [pid 6396] <... memfd_create resumed>) = 3 [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6397 attached [pid 6397] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6397] chdir("./134") = 0 [pid 6397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6397] setpgid(0, 0) = 0 [pid 6397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 136.162126][ T6394] loop2: detected capacity change from 0 to 4096 [ 136.201956][ T6394] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6397] write(3, "1000", 4) = 4 [pid 6397] close(3) = 0 [pid 6397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6397] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6397] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6396] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... ioctl resumed>) = 0 [pid 6397] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] close(3 [pid 6397] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... close resumed>) = 0 [pid 6397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6398 attached [pid 6397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6397] <... mmap resumed>) = 0x7fe7c3226000 [pid 6398] set_robust_list(0x55558e6e36a0, 24 [pid 6397] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6398 [pid 6398] <... set_robust_list resumed>) = 0 [pid 6397] <... mprotect resumed>) = 0 [pid 5063] close(3 [pid 6398] chdir("./131" [pid 6397] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6398] <... chdir resumed>) = 0 [pid 6397] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6398] <... prctl resumed>) = 0 [pid 6398] setpgid(0, 0 [pid 6397] <... clone3 resumed> => {parent_tid=[6399]}, 88) = 6399 [pid 6398] <... setpgid resumed>) = 0 [pid 6397] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6399 attached [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 6399] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6398] <... openat resumed>) = 3 [pid 6397] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6399] <... rseq resumed>) = 0 [pid 6398] write(3, "1000", 4 [pid 6397] <... futex resumed>) = 0 [pid 6399] set_robust_list(0x7fe7c32469a0, 24 [pid 6398] <... write resumed>) = 4 [pid 6397] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6400 attached [pid 6399] <... set_robust_list resumed>) = 0 [pid 6398] close(3 [pid 6400] set_robust_list(0x55558e6e36a0, 24 [pid 6399] rt_sigprocmask(SIG_SETMASK, [], [pid 6398] <... close resumed>) = 0 [pid 6400] <... set_robust_list resumed>) = 0 [pid 6399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6398] symlink("/dev/binderfs", "./binderfs" [pid 6394] <... mount resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6400 [pid 6398] <... symlink resumed>) = 0 [pid 6394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6400] chdir("./131" [pid 6399] memfd_create("syzkaller", 0 [pid 6398] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] <... openat resumed>) = 3 [pid 6398] <... futex resumed>) = 0 [pid 6394] chdir("./file0" [pid 6398] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6394] <... chdir resumed>) = 0 [pid 6398] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6394] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6394] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6394] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6394] <... futex resumed>) = 1 [pid 6398] <... mmap resumed>) = 0x7fe7c3226000 [pid 6394] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6398] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6393] <... futex resumed>) = 0 [pid 6398] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6393] exit_group(0 [pid 6398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6394] <... futex resumed>) = ? [pid 6393] <... exit_group resumed>) = ? [pid 6400] <... chdir resumed>) = 0 [pid 6399] <... memfd_create resumed>) = 3 [pid 6394] +++ exited with 0 +++ [pid 6393] +++ exited with 0 +++ [pid 6400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6398] <... clone3 resumed> => {parent_tid=[6401]}, 88) = 6401 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6399] <... mmap resumed>) = 0x7fe7bae00000 [pid 6398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6398] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6401 attached [pid 6400] <... prctl resumed>) = 0 [pid 6398] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6401] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6400] setpgid(0, 0 [pid 6398] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6401] <... rseq resumed>) = 0 [pid 6400] <... setpgid resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6401] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] newfstatat(3, "", [pid 6401] <... set_robust_list resumed>) = 0 [pid 6400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6401] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] getdents64(3, [pid 6401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6401] memfd_create("syzkaller", 0 [pid 6400] <... openat resumed>) = 3 [pid 6396] <... write resumed>) = 2097152 [pid 5061] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] <... memfd_create resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6400] write(3, "1000", 4 [pid 5061] unlink("./132/binderfs" [pid 6400] <... write resumed>) = 4 [pid 5061] <... unlink resumed>) = 0 [pid 6400] close(3 [pid 5061] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6400] <... close resumed>) = 0 [pid 6401] <... mmap resumed>) = 0x7fe7bae00000 [pid 6400] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... umount2 resumed>) = 0 [pid 6400] <... symlink resumed>) = 0 [pid 6396] munmap(0x7fe7bae00000, 138412032 [pid 6400] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] <... munmap resumed>) = 0 [pid 6400] <... futex resumed>) = 0 [pid 6400] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6401] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6399] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6396] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./132/file0", [pid 6396] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6396] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6400] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6400] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 6400] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] getdents64(4, ./strace-static-x86_64: Process 6402 attached [pid 6396] <... ioctl resumed>) = 0 [pid 6402] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6396] close(3 [pid 5061] close(4 [pid 6396] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6396] close(4 [pid 5061] rmdir("./132/file0" [pid 6396] <... close resumed>) = 0 [pid 6402] <... rseq resumed>) = 0 [pid 6401] <... write resumed>) = 2097152 [pid 6396] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 6402] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6402] rt_sigprocmask(SIG_SETMASK, [], [pid 6400] <... clone3 resumed> => {parent_tid=[6402]}, 88) = 6402 [pid 5061] getdents64(3, [pid 6402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6400] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6402] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] close(3 [pid 6396] <... mkdir resumed>) = 0 [pid 6402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6401] munmap(0x7fe7bae00000, 138412032 [ 136.386573][ T6396] loop3: detected capacity change from 0 to 4096 [pid 6400] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... close resumed>) = 0 [pid 6402] memfd_create("syzkaller", 0 [pid 6400] <... futex resumed>) = 0 [pid 6399] <... write resumed>) = 2097152 [pid 5061] rmdir("./132" [pid 6402] <... memfd_create resumed>) = 3 [pid 6400] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6399] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./133", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] <... openat resumed>) = 3 [pid 6401] <... munmap resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6401] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6401] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6401] close(3 [pid 6399] <... munmap resumed>) = 0 [pid 6401] <... close resumed>) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 136.431293][ T6396] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 136.448729][ T6401] loop1: detected capacity change from 0 to 4096 [pid 6399] ioctl(4, LOOP_SET_FD, 3 [pid 6396] <... mount resumed>) = 0 [pid 6396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6402] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6401] close(4 [pid 6396] <... openat resumed>) = 3 [pid 6396] chdir("./file0" [pid 6401] <... close resumed>) = 0 [pid 6401] mkdir("./file0", 0777 [pid 6396] <... chdir resumed>) = 0 [pid 6401] <... mkdir resumed>) = 0 [pid 6396] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6401] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6396] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6396] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... ioctl resumed>) = 0 [pid 6396] <... futex resumed>) = 1 [pid 5061] <... ioctl resumed>) = 0 [pid 6396] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] <... futex resumed>) = 0 [pid 6399] close(3 [pid 5061] close(3 [pid 6399] <... close resumed>) = 0 [pid 6395] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 6399] close(4 [pid 6396] <... futex resumed>) = ? [pid 6395] <... exit_group resumed>) = ? [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6399] <... close resumed>) = 0 [pid 6396] +++ exited with 0 +++ [pid 6395] +++ exited with 0 +++ [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6403 ./strace-static-x86_64: Process 6403 attached [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6395, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6403] set_robust_list(0x55558e6e36a0, 24 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6403] <... set_robust_list resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 6403] chdir("./133" [pid 6399] mkdir("./file0", 0777 [pid 6403] <... chdir resumed>) = 0 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] <... prctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6403] setpgid(0, 0 [pid 5062] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6403] <... setpgid resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6403] write(3, "1000", 4) = 4 [pid 5062] newfstatat(3, "", [pid 6403] close(3) = 0 [pid 6403] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6403] <... symlink resumed>) = 0 [pid 6403] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 6399] <... mkdir resumed>) = 0 [pid 6403] <... futex resumed>) = 0 [pid 6399] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6403] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6403] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [ 136.480972][ T6399] loop0: detected capacity change from 0 to 4096 [ 136.499631][ T6401] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6403] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6404]}, 88) = 6404 [pid 6403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6403] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6404 attached ) = 0 [pid 6403] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6404] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6404] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6404] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./131/binderfs" [pid 6404] <... memfd_create resumed>) = 3 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6402] <... write resumed>) = 2097152 [pid 6402] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6402] <... munmap resumed>) = 0 [ 136.532601][ T6399] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5062] newfstatat(4, "", [pid 6402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6401] <... mount resumed>) = 0 [pid 6399] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 6401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6401] <... openat resumed>) = 3 [pid 6401] chdir("./file0" [pid 6402] <... openat resumed>) = 4 [pid 6401] <... chdir resumed>) = 0 [pid 6399] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 6399] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6402] ioctl(4, LOOP_SET_FD, 3 [pid 6401] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] close(4 [pid 6399] <... chdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./131/file0" [pid 6401] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6401] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6398] <... futex resumed>) = 0 [pid 6401] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] exit_group(0 [pid 6401] <... futex resumed>) = ? [pid 6398] <... exit_group resumed>) = ? [pid 6401] +++ exited with 0 +++ [pid 6399] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6398] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6398, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6399] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6404] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6399] <... futex resumed>) = 1 [pid 6397] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... openat resumed>) = 3 [pid 6399] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6397] exit_group(0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(3, "", [pid 6399] <... futex resumed>) = ? [pid 6397] <... exit_group resumed>) = ? [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6399] +++ exited with 0 +++ [pid 6397] +++ exited with 0 +++ [pid 5062] close(3 [pid 5060] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6397, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] rmdir("./131" [pid 6402] <... ioctl resumed>) = 0 [pid 5060] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6402] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6402] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./131/binderfs", [pid 5062] <... rmdir resumed>) = 0 [pid 6402] close(4 [pid 5062] mkdir("./132", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6404] <... write resumed>) = 2097152 [pid 6402] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] unlink("./131/binderfs" [pid 6402] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... unlink resumed>) = 0 [pid 6402] <... mkdir resumed>) = 0 [ 136.602344][ T6402] loop4: detected capacity change from 0 to 4096 [pid 5060] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6402] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5060] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(3, "", [pid 6404] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6404] <... munmap resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(3, [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6404] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] close(4) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6404] <... openat resumed>) = 4 [pid 5060] rmdir("./131/file0" [pid 5059] newfstatat(AT_FDCWD, "./134/binderfs", [pid 6404] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./134/binderfs") = 0 [ 136.648890][ T6402] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5059] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6404] <... ioctl resumed>) = 0 [pid 6402] <... mount resumed>) = 0 [pid 5060] close(3 [pid 5059] <... umount2 resumed>) = 0 [pid 6404] close(3 [pid 6402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 6404] <... close resumed>) = 0 [pid 6402] <... openat resumed>) = 3 [pid 5060] rmdir("./131" [pid 6404] close(4 [pid 6402] chdir("./file0" [pid 6404] <... close resumed>) = 0 [pid 6402] <... chdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./134/file0" [pid 6404] mkdir("./file0", 0777 [pid 6402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] close(3 [pid 5060] mkdir("./132", 0777 [pid 5059] <... rmdir resumed>) = 0 [pid 6402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... close resumed>) = 0 [pid 6402] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... mkdir resumed>) = 0 [pid 6402] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6405 attached [pid 6404] <... mkdir resumed>) = 0 [pid 6402] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6400] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6405] set_robust_list(0x55558e6e36a0, 24 [pid 6400] exit_group(0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6405 [pid 6400] <... exit_group resumed>) = ? [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6402] <... futex resumed>) = ? [pid 6402] +++ exited with 0 +++ [pid 5059] getdents64(3, [pid 6405] <... set_robust_list resumed>) = 0 [pid 6404] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./134" [ 136.691280][ T6404] loop2: detected capacity change from 0 to 4096 [pid 6405] chdir("./132") = 0 [pid 6400] +++ exited with 0 +++ [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./135", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6400, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6405] <... prctl resumed>) = 0 [pid 6405] setpgid(0, 0) = 0 [pid 5063] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6405] <... openat resumed>) = 3 [pid 5063] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6405] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6405] <... write resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./131/binderfs", [pid 6405] close(3) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6405] symlink("/dev/binderfs", "./binderfs" [pid 5063] unlink("./131/binderfs" [pid 6405] <... symlink resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 6405] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6405] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6404] <... mount resumed>) = 0 [pid 6405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6404] <... openat resumed>) = 3 [ 136.734060][ T6404] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6405] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6404] chdir("./file0") = 0 [pid 6404] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6405] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6404] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6405] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6404] <... futex resumed>) = 1 [pid 6403] <... futex resumed>) = 0 [pid 6405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6404] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] exit_group(0./strace-static-x86_64: Process 6406 attached [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6405] <... clone3 resumed> => {parent_tid=[6406]}, 88) = 6406 [pid 6403] <... exit_group resumed>) = ? [pid 5063] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 6406] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6405] rt_sigprocmask(SIG_SETMASK, [], [pid 6404] <... futex resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(3 [pid 5059] <... close resumed>) = 0 [pid 6406] <... rseq resumed>) = 0 [pid 6405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6404] +++ exited with 0 +++ [pid 6403] +++ exited with 0 +++ [pid 5063] newfstatat(AT_FDCWD, "./131/file0", [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6406] set_robust_list(0x7fe7c32469a0, 24 [pid 6405] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6403, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 6406] <... set_robust_list resumed>) = 0 [pid 6405] <... futex resumed>) = 0 [pid 5063] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] rt_sigprocmask(SIG_SETMASK, [], [pid 6405] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 6406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6407 attached [pid 5063] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] set_robust_list(0x55558e6e36a0, 24 [pid 5063] newfstatat(4, "", [pid 5061] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6407] <... set_robust_list resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6407 [pid 6407] chdir("./135" [pid 5061] newfstatat(3, "", [pid 6407] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6407] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6407] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] <... setpgid resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./133/binderfs", [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6407] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5061] unlink("./133/binderfs"./strace-static-x86_64: Process 6408 attached [pid 6406] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6408] set_robust_list(0x55558e6e36a0, 24 [pid 6407] write(3, "1000", 4 [pid 5063] close(4 [pid 5061] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6408] <... set_robust_list resumed>) = 0 [pid 6407] <... write resumed>) = 4 [pid 6406] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6408 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] rmdir("./131/file0" [pid 5061] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6406] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 6407] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6407] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 6407] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(3, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6408] chdir("./132" [pid 6407] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 6407] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6408] <... chdir resumed>) = 0 [pid 6407] <... futex resumed>) = 0 [pid 5061] close(4 [pid 6408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6407] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... close resumed>) = 0 [pid 6408] <... prctl resumed>) = 0 [pid 6407] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] rmdir("./133/file0" [pid 6408] setpgid(0, 0 [pid 6407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6408] <... setpgid resumed>) = 0 [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./131" [pid 5061] <... rmdir resumed>) = 0 [pid 6408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5061] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 6408] <... openat resumed>) = 3 [pid 6407] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6407] <... mprotect resumed>) = 0 [pid 5061] close(3 [pid 6408] write(3, "1000", 4 [pid 6407] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] mkdir("./132", 0777 [pid 5061] <... close resumed>) = 0 [pid 6408] <... write resumed>) = 4 [pid 6408] close(3 [pid 6407] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] rmdir("./133" [pid 6408] <... close resumed>) = 0 [pid 6407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6408] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6409 attached ) = 0 [pid 6409] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6408] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] <... clone3 resumed> => {parent_tid=[6409]}, 88) = 6409 [pid 5061] mkdir("./134", 0777 [pid 6409] set_robust_list(0x7fe7c32469a0, 24 [pid 6408] <... futex resumed>) = 0 [pid 6407] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... mkdir resumed>) = 0 [pid 6409] <... set_robust_list resumed>) = 0 [pid 6408] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6409] rt_sigprocmask(SIG_SETMASK, [], [pid 6408] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6407] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6407] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6409] memfd_create("syzkaller", 0 [pid 6408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6407] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6408] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6408] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6409] <... memfd_create resumed>) = 3 [pid 6409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6408] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6409] <... mmap resumed>) = 0x7fe7bae00000 [pid 6408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6410 attached => {parent_tid=[6410]}, 88) = 6410 [pid 6410] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6408] rt_sigprocmask(SIG_SETMASK, [], [pid 6410] <... rseq resumed>) = 0 [pid 6408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6408] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] set_robust_list(0x7fe7c32469a0, 24 [pid 6408] <... futex resumed>) = 0 [pid 6410] <... set_robust_list resumed>) = 0 [pid 6408] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6410] memfd_create("syzkaller", 0) = 3 [pid 6410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6406] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6409] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6410] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6406] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6406] munmap(0x7fe7bae00000, 138412032 [pid 5061] close(3 [pid 5063] close(3 [pid 5061] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6411 attached [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6412 [pid 6411] set_robust_list(0x55558e6e36a0, 24) = 0 ./strace-static-x86_64: Process 6412 attached [pid 6411] chdir("./134" [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6411 [pid 6411] <... chdir resumed>) = 0 [pid 6411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6411] setpgid(0, 0 [pid 6412] set_robust_list(0x55558e6e36a0, 24 [pid 6411] <... setpgid resumed>) = 0 [pid 6412] <... set_robust_list resumed>) = 0 [pid 6411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6406] <... munmap resumed>) = 0 [pid 6411] <... openat resumed>) = 3 [pid 6411] write(3, "1000", 4 [pid 6412] chdir("./132" [pid 6411] <... write resumed>) = 4 [pid 6411] close(3 [pid 6412] <... chdir resumed>) = 0 [pid 6411] <... close resumed>) = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6411] symlink("/dev/binderfs", "./binderfs" [pid 6406] <... openat resumed>) = 4 [pid 6412] <... prctl resumed>) = 0 [pid 6406] ioctl(4, LOOP_SET_FD, 3 [pid 6412] setpgid(0, 0) = 0 [pid 6412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6411] <... symlink resumed>) = 0 [pid 6411] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6411] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6411] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6411] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6413]}, 88) = 6413 [pid 6411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6413 attached [pid 6411] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6411] <... futex resumed>) = 0 [pid 6413] <... rseq resumed>) = 0 [pid 6411] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6413] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6413] memfd_create("syzkaller", 0 [pid 6412] <... openat resumed>) = 3 [pid 6412] write(3, "1000", 4) = 4 [pid 6412] close(3) = 0 [pid 6412] symlink("/dev/binderfs", "./binderfs" [pid 6413] <... memfd_create resumed>) = 3 [pid 6413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6412] <... symlink resumed>) = 0 [pid 6410] <... write resumed>) = 2097152 [pid 6409] <... write resumed>) = 2097152 [pid 6406] <... ioctl resumed>) = 0 [pid 6413] <... mmap resumed>) = 0x7fe7bae00000 [pid 6410] munmap(0x7fe7bae00000, 138412032 [pid 6406] close(3 [pid 6412] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] munmap(0x7fe7bae00000, 138412032 [pid 6406] <... close resumed>) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6409] <... munmap resumed>) = 0 [pid 6412] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6412] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6410] <... munmap resumed>) = 0 [pid 6406] close(4 [pid 6410] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6406] <... close resumed>) = 0 [pid 6406] mkdir("./file0", 0777 [pid 6412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6410] <... openat resumed>) = 4 [pid 6406] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6414 attached [pid 6410] ioctl(4, LOOP_SET_FD, 3 [pid 6406] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6414] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6412] <... clone3 resumed> => {parent_tid=[6414]}, 88) = 6414 [ 136.975804][ T6406] loop3: detected capacity change from 0 to 4096 [pid 6412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6412] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6412] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6409] ioctl(4, LOOP_SET_FD, 3 [pid 6414] <... rseq resumed>) = 0 [pid 6414] set_robust_list(0x7fe7c32469a0, 24 [pid 6413] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6410] <... ioctl resumed>) = 0 [pid 6409] <... ioctl resumed>) = 0 [pid 6414] <... set_robust_list resumed>) = 0 [pid 6410] close(3 [pid 6409] close(3 [pid 6414] rt_sigprocmask(SIG_SETMASK, [], [pid 6410] <... close resumed>) = 0 [pid 6409] <... close resumed>) = 0 [pid 6414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6409] close(4 [pid 6410] close(4 [pid 6414] memfd_create("syzkaller", 0 [pid 6409] <... close resumed>) = 0 [pid 6409] mkdir("./file0", 0777) = 0 [ 137.022539][ T6410] loop1: detected capacity change from 0 to 4096 [ 137.027251][ T6409] loop0: detected capacity change from 0 to 4096 [ 137.035664][ T6406] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6409] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6414] <... memfd_create resumed>) = 3 [pid 6413] <... write resumed>) = 2097152 [pid 6410] <... close resumed>) = 0 [pid 6414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6413] munmap(0x7fe7bae00000, 138412032 [pid 6410] mkdir("./file0", 0777 [pid 6414] <... mmap resumed>) = 0x7fe7bae00000 [pid 6410] <... mkdir resumed>) = 0 [pid 6410] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6406] <... mount resumed>) = 0 [pid 6406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6406] chdir("./file0") = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6406] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6405] <... futex resumed>) = 0 [pid 6405] exit_group(0) = ? [pid 6406] +++ exited with 0 +++ [pid 6405] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6405, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 6413] <... munmap resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./132/binderfs", [pid 6413] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./132/binderfs") = 0 [pid 5062] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 6413] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 137.073193][ T6409] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 137.095465][ T6410] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5062] newfstatat(AT_FDCWD, "./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6413] <... ioctl resumed>) = 0 [pid 6413] close(3 [pid 5062] getdents64(4, [pid 6413] <... close resumed>) = 0 [pid 6413] close(4 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./132/file0" [pid 6413] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6413] mkdir("./file0", 0777 [pid 5062] getdents64(3, [pid 6413] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6413] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] close(3) = 0 [pid 5062] rmdir("./132" [pid 6414] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... rmdir resumed>) = 0 [ 137.136354][ T6413] loop2: detected capacity change from 0 to 4096 [pid 6410] <... mount resumed>) = 0 [pid 5062] mkdir("./133", 0777) = 0 [pid 6410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6410] chdir("./file0") = 0 [pid 5062] <... openat resumed>) = 3 [pid 6410] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6410] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6408] <... futex resumed>) = 0 [pid 6410] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] exit_group(0 [pid 6410] <... futex resumed>) = ? [pid 6408] <... exit_group resumed>) = ? [pid 6410] +++ exited with 0 +++ [pid 6408] +++ exited with 0 +++ [pid 6409] <... mount resumed>) = 0 [pid 6409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6408, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6409] <... openat resumed>) = 3 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6409] chdir("./file0" [pid 5060] <... restart_syscall resumed>) = 0 [pid 6414] <... write resumed>) = 2097152 [pid 6409] <... chdir resumed>) = 0 [pid 6414] munmap(0x7fe7bae00000, 138412032 [pid 6409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6409] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6409] <... futex resumed>) = 1 [pid 5060] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6409] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6407] <... futex resumed>) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./132/binderfs", [pid 6414] <... munmap resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./132/binderfs" [pid 6407] exit_group(0 [pid 5060] <... unlink resumed>) = 0 [pid 6409] <... futex resumed>) = ? [pid 6407] <... exit_group resumed>) = ? [pid 5060] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6409] +++ exited with 0 +++ [pid 5060] <... umount2 resumed>) = 0 [pid 6414] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6407] +++ exited with 0 +++ [pid 6414] <... openat resumed>) = 4 [pid 5060] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6407, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6414] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 137.179947][ T6413] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5060] newfstatat(AT_FDCWD, "./132/file0", [pid 5062] <... ioctl resumed>) = 0 [pid 5059] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(3, "", [pid 5060] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5060] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] newfstatat(4, "", [pid 5059] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6414] <... ioctl resumed>) = 0 [pid 6414] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6414] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./135/binderfs", [pid 6414] close(4 [pid 5060] getdents64(4, [pid 6414] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./132/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5062] close(3 [pid 5060] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] rmdir("./132" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./133", 0777 [pid 6414] mkdir("./file0", 0777 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./135/binderfs"./strace-static-x86_64: Process 6415 attached [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6415 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6414] <... mkdir resumed>) = 0 [pid 6415] set_robust_list(0x55558e6e36a0, 24 [pid 6414] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... openat resumed>) = 3 [pid 5059] <... unlink resumed>) = 0 [pid 6415] <... set_robust_list resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6415] chdir("./133" [pid 5059] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] <... chdir resumed>) = 0 [pid 6415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6415] setpgid(0, 0) = 0 [pid 6415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6415] write(3, "1000", 4) = 4 [pid 6415] close(3) = 0 [pid 6415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6415] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6415] <... futex resumed>) = 0 [pid 6413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6413] <... openat resumed>) = 3 [pid 6415] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6413] chdir("./file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6413] <... chdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./135/file0", [pid 6415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6413] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6413] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] <... mmap resumed>) = 0x7fe7c3226000 [pid 6413] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6415] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6413] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6415] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6413] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] exit_group(0) = ? [pid 5059] newfstatat(4, "", [pid 6413] <... futex resumed>) = ? [ 137.239876][ T6414] loop4: detected capacity change from 0 to 4096 [ 137.275044][ T6414] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6413] +++ exited with 0 +++ [pid 6411] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6411, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 5061] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(4 [pid 5061] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 6415] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] rmdir("./135/file0" [pid 6415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6416 attached [pid 6415] <... clone3 resumed> => {parent_tid=[6416]}, 88) = 6416 [pid 5061] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6416] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 6416] <... rseq resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./134/binderfs", [pid 5059] <... close resumed>) = 0 [pid 6416] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6416] <... set_robust_list resumed>) = 0 [pid 5059] rmdir("./135" [pid 6416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6415] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] unlink("./134/binderfs" [pid 5059] <... rmdir resumed>) = 0 [pid 6416] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] mkdir("./136", 0777 [pid 6415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6415] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... futex resumed>) = 0 [pid 6415] <... futex resumed>) = 1 [pid 6414] <... mount resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6415] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6416] memfd_create("syzkaller", 0 [pid 6414] chdir("./file0" [pid 5061] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] <... memfd_create resumed>) = 3 [pid 6414] <... chdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6414] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6416] <... mmap resumed>) = 0x7fe7bae00000 [pid 6414] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6412] <... futex resumed>) = 0 [pid 6414] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] exit_group(0) = ? [pid 6414] <... futex resumed>) = ? [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6414] +++ exited with 0 +++ [pid 6412] +++ exited with 0 +++ [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6412, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] newfstatat(AT_FDCWD, "./134/file0", [pid 5060] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 5063] newfstatat(3, "", ./strace-static-x86_64: Process 6417 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5061] getdents64(4, [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6417] set_robust_list(0x55558e6e36a0, 24 [pid 5063] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6417 [pid 6417] <... set_robust_list resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./132/binderfs", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 6417] chdir("./133" [pid 5063] unlink("./132/binderfs" [pid 6417] <... chdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... unlink resumed>) = 0 [pid 5061] rmdir("./134/file0" [pid 6417] <... prctl resumed>) = 0 [pid 5063] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5063] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./134" [pid 6417] setpgid(0, 0 [pid 5063] newfstatat(AT_FDCWD, "./132/file0", [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6417] <... setpgid resumed>) = 0 [pid 5061] mkdir("./135", 0777 [pid 5063] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5061] <... mkdir resumed>) = 0 [pid 6416] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 6417] <... openat resumed>) = 3 [pid 6416] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6417] write(3, "1000", 4) = 4 [pid 6417] close(3) = 0 [pid 6417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6417] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 5061] <... openat resumed>) = 3 [pid 6417] <... futex resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6417] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6417] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] close(4 [pid 6417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... close resumed>) = 0 [pid 6417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./132/file0" [pid 6417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6417] <... mmap resumed>) = 0x7fe7c3226000 [pid 6417] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6417] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] getdents64(3, [pid 6417] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 6417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] rmdir("./132"./strace-static-x86_64: Process 6418 attached [pid 6416] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] close(3 [pid 6418] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6417] <... clone3 resumed> => {parent_tid=[6418]}, 88) = 6418 [pid 6418] <... rseq resumed>) = 0 [pid 6417] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... close resumed>) = 0 [pid 6418] set_robust_list(0x7fe7c32469a0, 24 [pid 6417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6416] <... munmap resumed>) = 0 [pid 5063] mkdir("./133", 0777 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6418] <... set_robust_list resumed>) = 0 [pid 6417] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6418] rt_sigprocmask(SIG_SETMASK, [], [pid 6417] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6416] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6419 attached [pid 6418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6416] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6419] set_robust_list(0x55558e6e36a0, 24 [pid 6416] ioctl(4, LOOP_SET_FD, 3 [pid 6419] <... set_robust_list resumed>) = 0 [pid 6418] memfd_create("syzkaller", 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6419 [pid 6419] chdir("./136") = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6419] setpgid(0, 0) = 0 [pid 6418] <... memfd_create resumed>) = 3 [pid 6419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6416] <... ioctl resumed>) = 0 [pid 6419] <... openat resumed>) = 3 [pid 6416] close(3 [pid 6419] write(3, "1000", 4 [pid 6416] <... close resumed>) = 0 [pid 6419] <... write resumed>) = 4 [pid 6416] close(4 [pid 6419] close(3 [pid 6416] <... close resumed>) = 0 [pid 6416] mkdir("./file0", 0777 [pid 6419] <... close resumed>) = 0 [pid 6416] <... mkdir resumed>) = 0 [pid 6419] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6416] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6419] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 6419] <... futex resumed>) = 0 [pid 6419] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6419] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6419] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6419] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6419] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6420]}, 88) = 6420 [ 137.437479][ T6416] loop3: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 6420 attached [pid 6419] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 6420] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6420] <... rseq resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6420] set_robust_list(0x7fe7c32469a0, 24 [pid 6419] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6419] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6420] <... set_robust_list resumed>) = 0 [pid 6420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6421 [pid 6420] memfd_create("syzkaller", 0) = 3 [pid 6420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6421 attached [pid 5063] close(3 [pid 6421] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... close resumed>) = 0 [pid 6421] <... set_robust_list resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6421] chdir("./135") = 0 ./strace-static-x86_64: Process 6422 attached [pid 6421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6418] <... write resumed>) = 2097152 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6422 [pid 6421] <... prctl resumed>) = 0 [pid 6421] setpgid(0, 0 [pid 6422] set_robust_list(0x55558e6e36a0, 24 [pid 6421] <... setpgid resumed>) = 0 [pid 6421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6422] <... set_robust_list resumed>) = 0 [pid 6422] chdir("./133" [ 137.487856][ T6416] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6418] munmap(0x7fe7bae00000, 138412032 [pid 6421] <... openat resumed>) = 3 [pid 6422] <... chdir resumed>) = 0 [pid 6421] write(3, "1000", 4 [pid 6418] <... munmap resumed>) = 0 [pid 6421] <... write resumed>) = 4 [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6421] close(3 [pid 6422] <... prctl resumed>) = 0 [pid 6422] setpgid(0, 0) = 0 [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6422] write(3, "1000", 4) = 4 [pid 6422] close(3) = 0 [pid 6422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6422] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6422] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6421] <... close resumed>) = 0 [pid 6421] symlink("/dev/binderfs", "./binderfs" [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6418] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6422] <... mmap resumed>) = 0x7fe7c3226000 [pid 6421] <... symlink resumed>) = 0 [pid 6418] <... openat resumed>) = 4 [pid 6422] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6418] ioctl(4, LOOP_SET_FD, 3 [pid 6422] <... mprotect resumed>) = 0 [pid 6421] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6422] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6422] <... clone3 resumed> => {parent_tid=[6423]}, 88) = 6423 [pid 6422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6422] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6423 attached ) = 0 [pid 6421] <... mmap resumed>) = 0x7fe7c3226000 [pid 6420] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6418] <... ioctl resumed>) = 0 [pid 6423] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6422] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6421] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6423] <... rseq resumed>) = 0 [pid 6421] <... mprotect resumed>) = 0 [pid 6423] set_robust_list(0x7fe7c32469a0, 24 [pid 6421] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6423] <... set_robust_list resumed>) = 0 [pid 6421] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6416] <... mount resumed>) = 0 [pid 6421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6424]}, 88) = 6424 [pid 6421] rt_sigprocmask(SIG_SETMASK, [], [pid 6418] close(3 [pid 6416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6424 attached [pid 6421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6416] <... openat resumed>) = 3 [pid 6424] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6421] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... rseq resumed>) = 0 [pid 6421] <... futex resumed>) = 0 [pid 6418] <... close resumed>) = 0 [pid 6424] set_robust_list(0x7fe7c32469a0, 24 [pid 6421] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6418] close(4 [pid 6424] <... set_robust_list resumed>) = 0 [pid 6423] rt_sigprocmask(SIG_SETMASK, [], [pid 6418] <... close resumed>) = 0 [pid 6416] chdir("./file0" [pid 6418] mkdir("./file0", 0777 [pid 6416] <... chdir resumed>) = 0 [pid 6424] rt_sigprocmask(SIG_SETMASK, [], [pid 6423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6423] memfd_create("syzkaller", 0 [pid 6418] <... mkdir resumed>) = 0 [pid 6416] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6416] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6416] <... futex resumed>) = 1 [pid 6415] <... futex resumed>) = 0 [ 137.563698][ T6418] loop1: detected capacity change from 0 to 4096 [pid 6416] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] exit_group(0 [pid 6424] memfd_create("syzkaller", 0 [pid 6423] <... memfd_create resumed>) = 3 [pid 6416] <... futex resumed>) = ? [pid 6415] <... exit_group resumed>) = ? [pid 6424] <... memfd_create resumed>) = 3 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6423] <... mmap resumed>) = 0x7fe7bae00000 [pid 6424] <... mmap resumed>) = 0x7fe7bae00000 [pid 6420] <... write resumed>) = 2097152 [pid 6416] +++ exited with 0 +++ [pid 6415] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6415, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./133/binderfs") = 0 [pid 6424] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 137.606263][ T6418] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6420] munmap(0x7fe7bae00000, 138412032 [pid 5062] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] <... munmap resumed>) = 0 [pid 6420] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 6420] <... openat resumed>) = 4 [pid 5062] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6423] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6418] <... mount resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./133/file0", [pid 6418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6418] <... openat resumed>) = 3 [pid 5062] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6418] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6424] <... write resumed>) = 2097152 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 6424] munmap(0x7fe7bae00000, 138412032 [pid 6418] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6418] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] close(4 [pid 6418] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... close resumed>) = 0 [pid 6418] <... futex resumed>) = 1 [pid 6417] <... futex resumed>) = 0 [pid 5062] rmdir("./133/file0" [pid 6418] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] exit_group(0 [pid 5062] <... rmdir resumed>) = 0 [pid 6417] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 6418] <... futex resumed>) = ? [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./133" [pid 6424] <... munmap resumed>) = 0 [pid 6420] <... ioctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6420] close(3 [pid 5062] mkdir("./134", 0777 [pid 6424] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6420] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6420] close(4 [pid 6424] <... openat resumed>) = 4 [pid 6420] <... close resumed>) = 0 [pid 6424] ioctl(4, LOOP_SET_FD, 3 [pid 6420] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6420] <... mkdir resumed>) = 0 [pid 6420] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6418] +++ exited with 0 +++ [pid 6417] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6417, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./133/binderfs" [pid 6424] <... ioctl resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6424] close(3 [pid 5060] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] close(4 [pid 6423] <... write resumed>) = 2097152 [pid 6424] <... close resumed>) = 0 [pid 6423] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6423] <... munmap resumed>) = 0 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 6424] mkdir("./file0", 0777 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6424] <... mkdir resumed>) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./133/file0" [pid 6424] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [ 137.690796][ T6420] loop0: detected capacity change from 0 to 4096 [ 137.717285][ T6424] loop2: detected capacity change from 0 to 4096 [ 137.724872][ T6420] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] close(3) = 0 [pid 5060] rmdir("./133" [pid 6423] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./134", 0777) = 0 [pid 6423] <... openat resumed>) = 4 [pid 6420] <... mount resumed>) = 0 [pid 6423] ioctl(4, LOOP_SET_FD, 3 [pid 6420] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6420] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 6420] chdir("./file0" [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6420] <... chdir resumed>) = 0 [pid 6420] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6420] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6419] <... futex resumed>) = 0 [pid 6420] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6419] exit_group(0 [pid 6420] <... futex resumed>) = ? [pid 6419] <... exit_group resumed>) = ? [pid 6420] +++ exited with 0 +++ [pid 6419] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6419, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./136/binderfs") = 0 [pid 5059] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6423] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6423] close(3) = 0 [pid 5059] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6423] close(4) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6423] mkdir("./file0", 0777) = 0 [pid 5059] newfstatat(AT_FDCWD, "./136/file0", [pid 6423] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... ioctl resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(3 [pid 5059] <... openat resumed>) = 4 [ 137.775620][ T6424] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 137.793141][ T6423] loop4: detected capacity change from 0 to 4096 [pid 5062] <... close resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6425 attached [pid 5059] close(4 [pid 6425] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... close resumed>) = 0 [pid 6425] <... set_robust_list resumed>) = 0 [pid 5059] rmdir("./136/file0" [pid 6425] chdir("./134" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6425 [pid 5059] <... rmdir resumed>) = 0 [pid 6425] <... chdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] close(3 [pid 6425] <... prctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6425] setpgid(0, 0 [pid 5059] rmdir("./136" [pid 6425] <... setpgid resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] mkdir("./137", 0777 [pid 6425] write(3, "1000", 4 [pid 5059] <... mkdir resumed>) = 0 [pid 6425] <... write resumed>) = 4 [pid 6425] close(3) = 0 [pid 6425] symlink("/dev/binderfs", "./binderfs" [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6425] <... symlink resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6425] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6425] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6425] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6426]}, 88) = 6426 [pid 6425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6425] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6426 attached [pid 6425] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6426] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6426] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 137.816587][ T6423] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6426] memfd_create("syzkaller", 0) = 3 [pid 6424] <... mount resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] close(3 [pid 6423] <... mount resumed>) = 0 [pid 6424] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6424] chdir("./file0") = 0 [pid 6424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6424] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6427 attached [pid 6424] <... futex resumed>) = 1 [pid 6423] <... openat resumed>) = 3 [pid 6421] <... futex resumed>) = 0 [pid 6427] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6424] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6423] chdir("./file0" [pid 6427] chdir("./134" [pid 6423] <... chdir resumed>) = 0 [pid 6421] exit_group(0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6427 [pid 5059] <... ioctl resumed>) = 0 [pid 6427] <... chdir resumed>) = 0 [pid 6423] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6421] <... exit_group resumed>) = ? [pid 6424] <... futex resumed>) = ? [pid 6424] +++ exited with 0 +++ [pid 6421] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6421, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6423] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6423] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6427] <... prctl resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6427] setpgid(0, 0 [pid 5061] <... openat resumed>) = 3 [pid 6427] <... setpgid resumed>) = 0 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6423] <... futex resumed>) = 1 [pid 6422] <... futex resumed>) = 0 [pid 5061] getdents64(3, [pid 6423] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] <... openat resumed>) = 3 [pid 6422] exit_group(0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6427] write(3, "1000", 4 [pid 6423] <... futex resumed>) = ? [pid 6422] <... exit_group resumed>) = ? [pid 5061] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6427] <... write resumed>) = 4 [pid 6423] +++ exited with 0 +++ [pid 6422] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 6427] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6422, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5059] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6427] <... close resumed>) = 0 [pid 5061] unlink("./135/binderfs" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6428 attached [pid 6427] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6428] set_robust_list(0x55558e6e36a0, 24 [pid 6427] <... symlink resumed>) = 0 [pid 6428] <... set_robust_list resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6427] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] chdir("./137" [pid 6427] <... futex resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 6428] <... chdir resumed>) = 0 [pid 6427] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6428 [pid 6428] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6427] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] getdents64(3, [pid 6428] <... prctl resumed>) = 0 [pid 6427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6428] setpgid(0, 0 [pid 6427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6428] <... setpgid resumed>) = 0 [pid 6427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6427] <... mmap resumed>) = 0x7fe7c3226000 [pid 6428] <... openat resumed>) = 3 [pid 6427] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6428] write(3, "1000", 4 [pid 6427] <... mprotect resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./133/binderfs", [pid 6427] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6428] <... write resumed>) = 4 [pid 6427] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6428] close(3 [pid 6427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] unlink("./133/binderfs" [pid 6428] <... close resumed>) = 0 [pid 6428] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 6427] <... clone3 resumed> => {parent_tid=[6429]}, 88) = 6429 ./strace-static-x86_64: Process 6429 attached [pid 6429] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6427] rt_sigprocmask(SIG_SETMASK, [], [pid 6429] <... rseq resumed>) = 0 [pid 5063] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6429] set_robust_list(0x7fe7c32469a0, 24 [pid 6428] <... symlink resumed>) = 0 [pid 6427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6426] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6429] <... set_robust_list resumed>) = 0 [pid 6427] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6429] rt_sigprocmask(SIG_SETMASK, [], [pid 6427] <... futex resumed>) = 0 [pid 5063] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6428] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6429] memfd_create("syzkaller", 0 [pid 6428] <... futex resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./133/file0", [pid 5061] newfstatat(AT_FDCWD, "./135/file0", [pid 6429] <... memfd_create resumed>) = 3 [pid 6428] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6428] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6429] <... mmap resumed>) = 0x7fe7bae00000 [pid 6428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 6428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6426] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 6428] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] newfstatat(4, "", [pid 6428] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6428] <... mprotect resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] getdents64(4, [pid 6428] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6428] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] getdents64(4, [pid 5061] getdents64(4, [pid 6428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6426] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./133/file0"./strace-static-x86_64: Process 6430 attached [pid 6426] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6430] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6428] <... clone3 resumed> => {parent_tid=[6430]}, 88) = 6430 [pid 5061] close(4 [pid 6430] <... rseq resumed>) = 0 [pid 6428] rt_sigprocmask(SIG_SETMASK, [], [pid 6430] set_robust_list(0x7fe7c32469a0, 24 [pid 6428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6430] <... set_robust_list resumed>) = 0 [pid 6428] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] rmdir("./135/file0" [pid 6430] rt_sigprocmask(SIG_SETMASK, [], [pid 6428] <... futex resumed>) = 0 [pid 6428] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] rmdir("./133" [pid 6430] memfd_create("syzkaller", 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6426] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] mkdir("./134", 0777 [pid 5061] getdents64(3, [pid 6426] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 6430] <... memfd_create resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6429] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6426] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6430] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] rmdir("./135") = 0 [pid 5061] mkdir("./136", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6426] <... ioctl resumed>) = 0 [pid 6426] close(3) = 0 [pid 6426] close(4) = 0 [pid 6426] mkdir("./file0", 0777) = 0 [pid 6426] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6430] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6429] <... write resumed>) = 2097152 [pid 6429] munmap(0x7fe7bae00000, 138412032) = 0 [ 138.017594][ T6426] loop3: detected capacity change from 0 to 4096 [ 138.050116][ T6426] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6429] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6429] ioctl(4, LOOP_SET_FD, 3 [pid 6430] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6426] <... mount resumed>) = 0 [pid 5061] close(3 [pid 6426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 6426] <... openat resumed>) = 3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6426] chdir("./file0" [pid 6429] <... ioctl resumed>) = 0 [pid 6429] close(3./strace-static-x86_64: Process 6431 attached ) = 0 [pid 6426] <... chdir resumed>) = 0 [pid 6431] set_robust_list(0x55558e6e36a0, 24 [pid 6429] close(4) = 0 [pid 6426] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6429] mkdir("./file0", 0777) = 0 [pid 6429] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6431] <... set_robust_list resumed>) = 0 [pid 6426] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6431 [pid 6431] chdir("./136" [pid 6430] munmap(0x7fe7bae00000, 138412032 [pid 6426] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... chdir resumed>) = 0 [pid 6426] <... futex resumed>) = 1 [pid 6425] <... futex resumed>) = 0 [pid 6431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6426] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6425] exit_group(0 [pid 6431] <... prctl resumed>) = 0 [pid 6426] <... futex resumed>) = ? [pid 6425] <... exit_group resumed>) = ? [pid 6430] <... munmap resumed>) = 0 [pid 5063] close(3) = 0 [pid 6430] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6426] +++ exited with 0 +++ [pid 6425] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6425, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6431] setpgid(0, 0 [pid 6430] ioctl(4, LOOP_SET_FD, 3 [ 138.101022][ T6429] loop1: detected capacity change from 0 to 4096 [ 138.137852][ T6429] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6432 attached [pid 6431] <... setpgid resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 6432] set_robust_list(0x55558e6e36a0, 24 [pid 6431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6432] <... set_robust_list resumed>) = 0 [pid 5062] getdents64(3, [pid 6432] chdir("./134" [pid 6430] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6432] <... chdir resumed>) = 0 [pid 5062] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6431] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6432 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./134/binderfs", [pid 6432] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./134/binderfs" [pid 6432] <... prctl resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6431] write(3, "1000", 4 [pid 5062] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6432] setpgid(0, 0 [pid 6431] <... write resumed>) = 4 [pid 6432] <... setpgid resumed>) = 0 [pid 6431] close(3) = 0 [pid 6432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6432] write(3, "1000", 4) = 4 [pid 6432] close(3 [pid 6431] symlink("/dev/binderfs", "./binderfs" [pid 6432] <... close resumed>) = 0 [pid 6432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6431] <... symlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./134/file0", [pid 6432] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6432] <... futex resumed>) = 0 [pid 6431] <... futex resumed>) = 0 [pid 6430] close(3 [pid 5062] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6432] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6431] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6430] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6432] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6431] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6430] close(4 [pid 5062] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6432] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6430] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 6432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6430] mkdir("./file0", 0777 [pid 5062] newfstatat(4, "", [pid 6432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6432] <... mmap resumed>) = 0x7fe7c3226000 [pid 6431] <... mmap resumed>) = 0x7fe7c3226000 [pid 6430] <... mkdir resumed>) = 0 [pid 5062] getdents64(4, [pid 6432] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6431] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6432] <... mprotect resumed>) = 0 [pid 6431] <... mprotect resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6430] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] getdents64(4, [pid 6432] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6432] <... rt_sigprocmask resumed>[], 8) = 0 [ 138.168689][ T6430] loop0: detected capacity change from 0 to 4096 [pid 6431] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6431] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] close(4 [pid 6431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6433 attached [pid 6433] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6431] <... clone3 resumed> => {parent_tid=[6433]}, 88) = 6433 [pid 6432] <... clone3 resumed> => {parent_tid=[6434]}, 88) = 6434 [pid 6433] <... rseq resumed>) = 0 [pid 6431] rt_sigprocmask(SIG_SETMASK, [], [pid 6433] set_robust_list(0x7fe7c32469a0, 24 [pid 6432] rt_sigprocmask(SIG_SETMASK, [], [pid 6431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] <... set_robust_list resumed>) = 0 [pid 6432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6431] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] rt_sigprocmask(SIG_SETMASK, [], [pid 6432] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... futex resumed>) = 0 [pid 6433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6432] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6434 attached [pid 6432] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 6434] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5062] rmdir("./134/file0" [pid 6434] <... rseq resumed>) = 0 [pid 6433] memfd_create("syzkaller", 0 [pid 6431] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6429] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6434] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 6433] <... memfd_create resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 6434] <... set_robust_list resumed>) = 0 [pid 6429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] rmdir("./134" [pid 6434] rt_sigprocmask(SIG_SETMASK, [], [pid 6429] <... openat resumed>) = 3 [pid 6434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6429] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 6434] memfd_create("syzkaller", 0 [pid 6433] <... mmap resumed>) = 0x7fe7bae00000 [pid 6429] <... chdir resumed>) = 0 [pid 5062] mkdir("./135", 0777 [pid 6434] <... memfd_create resumed>) = 3 [pid 6429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 6434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6434] <... mmap resumed>) = 0x7fe7bae00000 [pid 6429] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 6429] <... futex resumed>) = 1 [pid 6427] <... futex resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6427] exit_group(0) = ? [pid 6429] +++ exited with 0 +++ [pid 6427] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6427, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./134/binderfs") = 0 [ 138.211728][ T6430] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6430] <... mount resumed>) = 0 [pid 5060] close(4) = 0 [pid 6434] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] rmdir("./134/file0" [pid 6430] <... openat resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 6430] chdir("./file0") = 0 [pid 6430] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6430] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(3 [pid 6430] <... futex resumed>) = 1 [pid 5060] <... close resumed>) = 0 [pid 6430] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] rmdir("./134") = 0 [pid 5060] mkdir("./135", 0777) = 0 [pid 6428] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6428] exit_group(0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6428] <... exit_group resumed>) = ? [pid 5062] <... ioctl resumed>) = 0 [pid 6430] <... futex resumed>) = ? [pid 6430] +++ exited with 0 +++ [pid 6428] +++ exited with 0 +++ [pid 5062] close(3) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6428, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6435 [pid 5059] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", ./strace-static-x86_64: Process 6435 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6435] set_robust_list(0x55558e6e36a0, 24 [pid 5059] getdents64(3, [pid 6435] <... set_robust_list resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6435] chdir("./135" [pid 5059] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6435] <... chdir resumed>) = 0 [pid 6433] <... write resumed>) = 2097152 [pid 5059] newfstatat(AT_FDCWD, "./137/binderfs", [pid 6435] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6435] <... prctl resumed>) = 0 [pid 5059] unlink("./137/binderfs" [pid 6435] setpgid(0, 0 [pid 6433] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... unlink resumed>) = 0 [pid 6435] <... setpgid resumed>) = 0 [pid 5059] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6435] write(3, "1000", 4) = 4 [pid 6435] close(3) = 0 [pid 6435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6435] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6435] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6434] <... write resumed>) = 2097152 [pid 6435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6435] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6433] <... munmap resumed>) = 0 [pid 6435] <... mprotect resumed>) = 0 [pid 6435] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6434] munmap(0x7fe7bae00000, 138412032 [pid 6433] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... umount2 resumed>) = 0 [pid 6434] <... munmap resumed>) = 0 [pid 6433] <... openat resumed>) = 4 [pid 6435] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6436 attached [pid 6435] <... clone3 resumed> => {parent_tid=[6436]}, 88) = 6436 [pid 6433] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6435] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(AT_FDCWD, "./137/file0", [pid 6435] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6435] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6434] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6434] <... openat resumed>) = 4 [pid 5059] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./137/file0" [pid 6436] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6433] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6436] <... rseq resumed>) = 0 [pid 6433] close(3 [pid 6436] set_robust_list(0x7fe7c32469a0, 24 [pid 6433] <... close resumed>) = 0 [pid 5059] getdents64(3, [pid 6436] <... set_robust_list resumed>) = 0 [pid 6434] ioctl(4, LOOP_SET_FD, 3 [pid 6433] close(4 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6436] rt_sigprocmask(SIG_SETMASK, [], [pid 6433] <... close resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 6436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6434] <... ioctl resumed>) = 0 [pid 6433] mkdir("./file0", 0777 [pid 5060] close(3 [pid 5059] <... close resumed>) = 0 [pid 6436] memfd_create("syzkaller", 0 [pid 5060] <... close resumed>) = 0 [pid 5059] rmdir("./137" [pid 6434] close(3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6437 attached [pid 6436] <... memfd_create resumed>) = 3 [pid 6434] <... close resumed>) = 0 [pid 6433] <... mkdir resumed>) = 0 [pid 5059] mkdir("./138", 0777 [pid 6437] set_robust_list(0x55558e6e36a0, 24 [pid 6436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6434] close(4 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6437 [pid 5059] <... mkdir resumed>) = 0 [pid 6437] <... set_robust_list resumed>) = 0 [pid 6434] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6437] chdir("./135" [pid 6436] <... mmap resumed>) = 0x7fe7bae00000 [ 138.401641][ T6433] loop2: detected capacity change from 0 to 4096 [ 138.412361][ T6434] loop4: detected capacity change from 0 to 4096 [pid 6434] mkdir("./file0", 0777 [pid 6433] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... openat resumed>) = 3 [pid 6437] <... chdir resumed>) = 0 [pid 6434] <... mkdir resumed>) = 0 [pid 6437] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6434] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6437] <... prctl resumed>) = 0 [pid 6437] setpgid(0, 0) = 0 [pid 6437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6437] write(3, "1000", 4) = 4 [pid 6437] close(3) = 0 [pid 6437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6437] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6437] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6437] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6437] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6437] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6438 attached => {parent_tid=[6438]}, 88) = 6438 [pid 6438] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6437] rt_sigprocmask(SIG_SETMASK, [], [pid 6438] <... rseq resumed>) = 0 [pid 6437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6438] set_robust_list(0x7fe7c32469a0, 24 [pid 6437] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] <... set_robust_list resumed>) = 0 [pid 6437] <... futex resumed>) = 0 [pid 6438] rt_sigprocmask(SIG_SETMASK, [], [pid 6437] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6438] memfd_create("syzkaller", 0) = 3 [pid 6438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 138.461357][ T6434] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 138.469483][ T6433] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6436] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6434] <... mount resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6433] <... mount resumed>) = 0 [pid 6433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6434] chdir("./file0") = 0 [pid 6438] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6433] <... openat resumed>) = 3 [pid 5059] close(3 [pid 6434] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6433] chdir("./file0" [pid 6434] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6433] <... chdir resumed>) = 0 [pid 6433] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6434] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... close resumed>) = 0 [pid 6434] <... futex resumed>) = 1 [pid 6433] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6433] <... futex resumed>) = 1 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6433] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6432] <... futex resumed>) = 0 [pid 6431] <... futex resumed>) = 0 [pid 6432] exit_group(0 [pid 6431] exit_group(0 [pid 6434] <... futex resumed>) = ? [pid 6433] <... futex resumed>) = ? [pid 6432] <... exit_group resumed>) = ? [pid 6431] <... exit_group resumed>) = ? [pid 6434] +++ exited with 0 +++ [pid 6433] +++ exited with 0 +++ [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6439 [pid 6431] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6431, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6439 attached [pid 6432] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6432, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] <... openat resumed>) = 3 [pid 6439] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5061] newfstatat(3, "", [pid 6439] chdir("./138" [pid 5063] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 6439] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6436] <... write resumed>) = 2097152 [pid 5063] unlink("./134/binderfs" [pid 6439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6439] <... prctl resumed>) = 0 [pid 5063] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] setpgid(0, 0 [pid 5061] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6439] <... setpgid resumed>) = 0 [pid 6439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6439] <... openat resumed>) = 3 [pid 5061] unlink("./136/binderfs" [pid 6439] write(3, "1000", 4 [pid 5061] <... unlink resumed>) = 0 [pid 6439] <... write resumed>) = 4 [pid 5061] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] close(3 [pid 6436] munmap(0x7fe7bae00000, 138412032 [pid 6439] <... close resumed>) = 0 [pid 6439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6439] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6439] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6440]}, 88) = 6440 [pid 6439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6440 attached [pid 6439] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6439] <... futex resumed>) = 0 [pid 6440] <... rseq resumed>) = 0 [pid 6439] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6440] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6440] memfd_create("syzkaller", 0 [pid 6438] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 6440] <... memfd_create resumed>) = 3 [pid 6440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6438] munmap(0x7fe7bae00000, 138412032 [pid 6436] <... munmap resumed>) = 0 [pid 5063] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 6436] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6436] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6436] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(AT_FDCWD, "./136/file0", [pid 6438] <... munmap resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5063] close(4 [pid 5061] newfstatat(4, "", [pid 5063] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6436] <... ioctl resumed>) = 0 [pid 5063] rmdir("./134/file0" [pid 5061] getdents64(4, [pid 6438] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6436] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 6438] <... openat resumed>) = 4 [pid 6436] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6436] close(4 [pid 5061] getdents64(4, [pid 6438] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./134") = 0 [pid 5063] mkdir("./135", 0777) = 0 [pid 6436] <... close resumed>) = 0 [pid 6438] <... ioctl resumed>) = 0 [pid 6436] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] rmdir("./136/file0" [pid 5063] <... openat resumed>) = 3 [pid 6436] <... mkdir resumed>) = 0 [pid 6438] close(3 [pid 6436] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 6438] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [ 138.650914][ T6436] loop3: detected capacity change from 0 to 4096 [ 138.670453][ T6438] loop1: detected capacity change from 0 to 4096 [ 138.692366][ T6436] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6438] close(4 [pid 5061] close(3) = 0 [pid 6438] <... close resumed>) = 0 [pid 5061] rmdir("./136" [pid 6438] mkdir("./file0", 0777) = 0 [pid 6438] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./137", 0777) = 0 [pid 6440] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 138.713398][ T6438] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6440] <... write resumed>) = 2097152 [pid 6440] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6440] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6440] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5061] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 6438] <... mount resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6440] close(3) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6441 [pid 6440] close(4./strace-static-x86_64: Process 6442 attached ) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6442 [pid 6442] set_robust_list(0x55558e6e36a0, 24 [pid 6440] mkdir("./file0", 0777 [pid 6442] <... set_robust_list resumed>) = 0 [pid 6440] <... mkdir resumed>) = 0 [pid 6442] chdir("./137") = 0 [ 138.782168][ T6440] loop0: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 6441 attached [pid 6442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6440] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6442] <... prctl resumed>) = 0 [pid 6441] set_robust_list(0x55558e6e36a0, 24 [pid 6438] <... openat resumed>) = 3 [pid 6442] setpgid(0, 0 [pid 6441] <... set_robust_list resumed>) = 0 [pid 6441] chdir("./135") = 0 [pid 6442] <... setpgid resumed>) = 0 [pid 6441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6438] chdir("./file0" [pid 6442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6438] <... chdir resumed>) = 0 [pid 6441] <... prctl resumed>) = 0 [pid 6442] write(3, "1000", 4) = 4 [pid 6442] close(3 [pid 6441] setpgid(0, 0 [pid 6438] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6442] <... close resumed>) = 0 [pid 6441] <... setpgid resumed>) = 0 [pid 6438] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6442] symlink("/dev/binderfs", "./binderfs" [pid 6438] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... symlink resumed>) = 0 [pid 6441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6442] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] <... openat resumed>) = 3 [pid 6442] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6438] <... futex resumed>) = 1 [pid 6442] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6441] write(3, "1000", 4 [pid 6438] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6437] <... futex resumed>) = 0 [pid 6442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6441] <... write resumed>) = 4 [pid 6437] exit_group(0 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6441] close(3 [pid 6438] <... futex resumed>) = ? [pid 6437] <... exit_group resumed>) = ? [pid 6442] <... mmap resumed>) = 0x7fe7c3226000 [pid 6441] <... close resumed>) = 0 [pid 6438] +++ exited with 0 +++ [pid 6442] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6441] symlink("/dev/binderfs", "./binderfs" [pid 6437] +++ exited with 0 +++ [pid 6442] <... mprotect resumed>) = 0 [pid 6442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6437, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6443 attached [pid 6441] <... symlink resumed>) = 0 [pid 6443] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6442] <... clone3 resumed> => {parent_tid=[6443]}, 88) = 6443 [pid 6442] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] <... rseq resumed>) = 0 [pid 6442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6441] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6443] set_robust_list(0x7fe7c32469a0, 24 [pid 6442] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6443] <... set_robust_list resumed>) = 0 [pid 6442] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6443] rt_sigprocmask(SIG_SETMASK, [], [pid 6442] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6441] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6441] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6436] <... mount resumed>) = 0 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./135/binderfs") = 0 [pid 6443] memfd_create("syzkaller", 0 [pid 6441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6436] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6436] <... openat resumed>) = 3 [pid 5060] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] <... memfd_create resumed>) = 3 [pid 6441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 138.834401][ T6440] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6436] chdir("./file0" [pid 6443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6441] <... mmap resumed>) = 0x7fe7c3226000 [pid 6436] <... chdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6443] <... mmap resumed>) = 0x7fe7bae00000 [pid 6441] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6436] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6441] <... mprotect resumed>) = 0 [pid 6436] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6436] <... futex resumed>) = 1 [pid 6435] <... futex resumed>) = 0 [pid 6436] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6435] exit_group(0 [pid 6441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6436] <... futex resumed>) = ? [pid 6435] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6444 attached [pid 6436] +++ exited with 0 +++ [pid 6435] +++ exited with 0 +++ [pid 6444] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6441] <... clone3 resumed> => {parent_tid=[6444]}, 88) = 6444 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6435, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./135/file0", [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5060] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./135/binderfs", [pid 5060] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./135/binderfs" [pid 5060] <... openat resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6444] <... rseq resumed>) = 0 [pid 6441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6444] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6444] <... set_robust_list resumed>) = 0 [pid 6441] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, [pid 6444] rt_sigprocmask(SIG_SETMASK, [], [pid 6441] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6441] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6444] memfd_create("syzkaller", 0 [pid 6443] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 6444] <... memfd_create resumed>) = 3 [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] close(4 [pid 6444] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./135/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./135") = 0 [pid 5060] mkdir("./136", 0777) = 0 [pid 5062] newfstatat(AT_FDCWD, "./135/file0", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5062] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./135/file0") = 0 [pid 5062] getdents64(3, [pid 6440] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 6440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] rmdir("./135" [pid 6440] <... openat resumed>) = 3 [pid 6440] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 6443] <... write resumed>) = 2097152 [pid 6440] <... chdir resumed>) = 0 [pid 5062] mkdir("./136", 0777 [pid 6440] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6440] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 6440] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6443] munmap(0x7fe7bae00000, 138412032 [pid 6440] <... futex resumed>) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6443] <... munmap resumed>) = 0 [pid 6440] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] exit_group(0 [pid 6444] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6443] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6440] <... futex resumed>) = ? [pid 6439] <... exit_group resumed>) = ? [pid 6440] +++ exited with 0 +++ [pid 6443] <... openat resumed>) = 4 [pid 6443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6439] +++ exited with 0 +++ [pid 5060] <... ioctl resumed>) = 0 [pid 6443] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6439, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5060] close(3 [pid 6443] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6443] close(4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6443] <... close resumed>) = 0 [pid 5059] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] mkdir("./file0", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6443] <... mkdir resumed>) = 0 [pid 6443] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6445 [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6445 attached [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6445] set_robust_list(0x55558e6e36a0, 24 [pid 5062] close(3 [pid 6445] <... set_robust_list resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6446 attached [pid 6445] chdir("./136" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6446] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6446 [pid 5059] newfstatat(AT_FDCWD, "./138/binderfs", [pid 6446] <... set_robust_list resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6446] chdir("./136" [pid 5059] unlink("./138/binderfs") = 0 [pid 6445] <... chdir resumed>) = 0 [pid 5059] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6446] <... chdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./138/file0", [pid 6446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6445] <... prctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6446] <... prctl resumed>) = 0 [pid 6445] setpgid(0, 0 [pid 5059] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] setpgid(0, 0 [pid 6445] <... setpgid resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6446] <... setpgid resumed>) = 0 [pid 6445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... openat resumed>) = 4 [pid 6446] <... openat resumed>) = 3 [pid 6445] <... openat resumed>) = 3 [pid 6444] <... write resumed>) = 2097152 [pid 5059] newfstatat(4, "", [pid 6446] write(3, "1000", 4 [pid 6445] write(3, "1000", 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6446] <... write resumed>) = 4 [pid 6445] <... write resumed>) = 4 [pid 5059] getdents64(4, [pid 6446] close(3 [ 139.028954][ T6443] loop2: detected capacity change from 0 to 4096 [ 139.068969][ T6443] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6445] close(3 [pid 6444] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6446] <... close resumed>) = 0 [pid 6445] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 6445] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6446] symlink("/dev/binderfs", "./binderfs" [pid 5059] close(4) = 0 [pid 5059] rmdir("./138/file0" [pid 6446] <... symlink resumed>) = 0 [pid 6445] <... symlink resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6444] <... munmap resumed>) = 0 [pid 5059] getdents64(3, [pid 6446] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./138" [pid 6446] <... futex resumed>) = 0 [pid 6445] <... futex resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6446] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6445] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6444] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6446] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6445] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6444] <... openat resumed>) = 4 [pid 5059] mkdir("./139", 0777 [pid 6446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6445] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6444] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... mkdir resumed>) = 0 [pid 6446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6446] <... mmap resumed>) = 0x7fe7c3226000 [pid 6445] <... mmap resumed>) = 0x7fe7c3226000 [pid 6446] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6445] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6446] <... mprotect resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6446] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6446] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6445] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6447 attached [pid 6445] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6447] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6446] <... clone3 resumed> => {parent_tid=[6447]}, 88) = 6447 [pid 6445] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6446] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6446] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6447] <... rseq resumed>) = 0 [pid 6445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6447] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6445] <... clone3 resumed> => {parent_tid=[6448]}, 88) = 6448 [pid 6447] rt_sigprocmask(SIG_SETMASK, [], [pid 6445] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6448 attached [pid 6447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6444] <... ioctl resumed>) = 0 [pid 6448] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6445] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] close(3 [pid 6445] <... futex resumed>) = 0 [pid 6448] <... rseq resumed>) = 0 [pid 6444] <... close resumed>) = 0 [pid 6445] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6448] set_robust_list(0x7fe7c32469a0, 24 [pid 6444] close(4 [pid 6448] <... set_robust_list resumed>) = 0 [pid 6444] <... close resumed>) = 0 [pid 6448] rt_sigprocmask(SIG_SETMASK, [], [pid 6444] mkdir("./file0", 0777 [pid 6448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6447] memfd_create("syzkaller", 0 [pid 6444] <... mkdir resumed>) = 0 [pid 6444] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6448] memfd_create("syzkaller", 0 [pid 6447] <... memfd_create resumed>) = 3 [pid 6447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6448] <... memfd_create resumed>) = 3 [pid 6447] <... mmap resumed>) = 0x7fe7bae00000 [ 139.134420][ T6444] loop4: detected capacity change from 0 to 4096 [pid 6448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6449 attached [pid 6449] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6449 [ 139.175452][ T6444] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6449] chdir("./139") = 0 [pid 6443] <... mount resumed>) = 0 [pid 6449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6447] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6449] setpgid(0, 0) = 0 [pid 6443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6443] <... openat resumed>) = 3 [pid 6449] <... openat resumed>) = 3 [pid 6449] write(3, "1000", 4 [pid 6443] chdir("./file0" [pid 6449] <... write resumed>) = 4 [pid 6449] close(3 [pid 6443] <... chdir resumed>) = 0 [pid 6443] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6449] <... close resumed>) = 0 [pid 6443] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6449] symlink("/dev/binderfs", "./binderfs" [pid 6443] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... symlink resumed>) = 0 [pid 6443] <... futex resumed>) = 1 [pid 6442] <... futex resumed>) = 0 [pid 6449] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] exit_group(0 [pid 6449] <... futex resumed>) = 0 [pid 6449] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6443] <... futex resumed>) = ? [pid 6442] <... exit_group resumed>) = ? [pid 6449] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6443] +++ exited with 0 +++ [pid 6442] +++ exited with 0 +++ [pid 6449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6442, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6449] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6450 attached [pid 6449] <... clone3 resumed> => {parent_tid=[6450]}, 88) = 6450 [pid 5061] newfstatat(3, "", [pid 6450] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6449] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6450] <... rseq resumed>) = 0 [pid 6449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] getdents64(3, [pid 6450] set_robust_list(0x7fe7c32469a0, 24 [pid 6449] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6450] <... set_robust_list resumed>) = 0 [pid 6449] <... futex resumed>) = 0 [pid 5061] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] rt_sigprocmask(SIG_SETMASK, [], [pid 6449] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] newfstatat(AT_FDCWD, "./137/binderfs", [pid 6450] memfd_create("syzkaller", 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./137/binderfs" [pid 6450] <... memfd_create resumed>) = 3 [pid 5061] <... unlink resumed>) = 0 [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] <... mmap resumed>) = 0x7fe7bae00000 [pid 6448] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./137/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 6447] <... write resumed>) = 2097152 [pid 5061] rmdir("./137" [pid 6447] munmap(0x7fe7bae00000, 138412032 [pid 6444] <... mount resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6444] chdir("./file0") = 0 [pid 6444] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6444] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [pid 6444] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] exit_group(0 [pid 5061] mkdir("./138", 0777 [pid 6444] <... futex resumed>) = ? [pid 6441] <... exit_group resumed>) = ? [pid 5061] <... mkdir resumed>) = 0 [pid 6444] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6441] +++ exited with 0 +++ [pid 6450] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6448] <... write resumed>) = 2097152 [pid 6447] <... munmap resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6441, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6447] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6447] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 6448] munmap(0x7fe7bae00000, 138412032 [pid 6447] ioctl(4, LOOP_SET_FD, 3 [pid 6448] <... munmap resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6448] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6450] <... write resumed>) = 2097152 [pid 6448] <... openat resumed>) = 4 [pid 6447] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 6450] munmap(0x7fe7bae00000, 138412032 [pid 6448] ioctl(4, LOOP_SET_FD, 3 [pid 6447] close(3 [pid 6450] <... munmap resumed>) = 0 [pid 6447] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6447] close(4 [pid 5063] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6447] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./135/binderfs", [pid 6447] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6448] <... ioctl resumed>) = 0 [pid 6447] <... mkdir resumed>) = 0 [pid 5063] unlink("./135/binderfs" [pid 6448] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6448] <... close resumed>) = 0 [pid 5063] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 139.370713][ T6447] loop3: detected capacity change from 0 to 4096 [ 139.394681][ T6448] loop1: detected capacity change from 0 to 4096 [pid 6448] close(4 [pid 6450] ioctl(4, LOOP_SET_FD, 3 [pid 6448] <... close resumed>) = 0 [pid 6448] mkdir("./file0", 0777 [pid 6447] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6450] <... ioctl resumed>) = 0 [pid 6448] <... mkdir resumed>) = 0 [pid 6450] close(3 [pid 6448] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... ioctl resumed>) = 0 [pid 6450] <... close resumed>) = 0 [pid 6450] close(4 [pid 5063] <... umount2 resumed>) = 0 [pid 6450] <... close resumed>) = 0 [pid 6450] mkdir("./file0", 0777) = 0 [ 139.422155][ T6450] loop0: detected capacity change from 0 to 4096 [ 139.423409][ T6447] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 139.454734][ T6448] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6450] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] close(3 [pid 5063] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6451 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", ./strace-static-x86_64: Process 6451 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6451] set_robust_list(0x55558e6e36a0, 24 [pid 5063] getdents64(4, [pid 6451] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6451] chdir("./138" [pid 5063] getdents64(4, [pid 6451] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./135/file0" [pid 6451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... rmdir resumed>) = 0 [pid 6451] <... prctl resumed>) = 0 [pid 5063] getdents64(3, [pid 6451] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6451] <... setpgid resumed>) = 0 [pid 5063] close(3 [pid 6451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 6451] <... openat resumed>) = 3 [pid 5063] rmdir("./135" [pid 6451] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 6451] <... write resumed>) = 4 [pid 5063] mkdir("./136", 0777 [pid 6451] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 6451] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6451] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... openat resumed>) = 3 [pid 6451] <... symlink resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6451] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6451] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6451] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6451] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [ 139.464419][ T6450] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6451] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6451] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6452]}, 88) = 6452 [pid 6451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6451] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6452 attached [pid 6451] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6452] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6452] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6447] <... mount resumed>) = 0 [pid 6452] memfd_create("syzkaller", 0 [pid 6447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6452] <... memfd_create resumed>) = 3 [pid 6452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6447] chdir("./file0") = 0 [pid 6447] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6447] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6447] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] <... futex resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6446] exit_group(0 [pid 6447] <... futex resumed>) = ? [pid 6446] <... exit_group resumed>) = ? [pid 6447] +++ exited with 0 +++ [pid 5063] close(3 [pid 6446] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 6450] <... mount resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6446, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6450] <... openat resumed>) = 3 [pid 5062] <... restart_syscall resumed>) = 0 [pid 6450] chdir("./file0"./strace-static-x86_64: Process 6453 attached ) = 0 [pid 6453] set_robust_list(0x55558e6e36a0, 24 [pid 6450] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] <... set_robust_list resumed>) = 0 [pid 6450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6453 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6453] chdir("./136" [pid 6450] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6450] <... futex resumed>) = 1 [pid 5062] newfstatat(3, "", [pid 6450] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 6449] <... futex resumed>) = 0 [pid 6449] exit_group(0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./136/binderfs" [pid 6453] <... chdir resumed>) = 0 [pid 6450] <... futex resumed>) = ? [pid 6449] <... exit_group resumed>) = ? [pid 5062] <... unlink resumed>) = 0 [pid 6453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6450] +++ exited with 0 +++ [pid 6449] +++ exited with 0 +++ [pid 5062] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] <... prctl resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6449, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6453] setpgid(0, 0) = 0 [pid 6453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... umount2 resumed>) = 0 [pid 6448] <... mount resumed>) = 0 [pid 5062] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./136/file0", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(3, "", [pid 6453] <... openat resumed>) = 3 [pid 6452] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6453] write(3, "1000", 4 [pid 6448] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 4 [pid 5059] getdents64(3, [pid 6453] <... write resumed>) = 4 [pid 6448] chdir("./file0" [pid 5062] newfstatat(4, "", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6453] close(3 [pid 6448] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] <... close resumed>) = 0 [pid 6448] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6453] symlink("/dev/binderfs", "./binderfs" [pid 6448] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] newfstatat(AT_FDCWD, "./139/binderfs", [pid 6448] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6453] <... symlink resumed>) = 0 [pid 6448] <... futex resumed>) = 1 [pid 6445] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] unlink("./139/binderfs" [pid 6453] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] exit_group(0 [pid 5062] close(4 [pid 5059] <... unlink resumed>) = 0 [pid 6453] <... futex resumed>) = 0 [pid 6448] <... futex resumed>) = ? [pid 6445] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5059] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6448] +++ exited with 0 +++ [pid 6445] +++ exited with 0 +++ [pid 5062] rmdir("./136/file0" [pid 5059] <... umount2 resumed>) = 0 [pid 6453] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6445, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... rmdir resumed>) = 0 [pid 6453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] getdents64(3, [pid 5060] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6453] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] close(3 [pid 5060] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6453] <... mprotect resumed>) = 0 [pid 5062] rmdir("./136" [pid 5060] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6453] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(AT_FDCWD, "./139/file0", [pid 5062] mkdir("./137", 0777 [pid 5060] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6452] <... write resumed>) = 2097152 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] unlink("./136/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6452] munmap(0x7fe7bae00000, 138412032 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6454 attached [pid 5060] <... unlink resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6454] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6453] <... clone3 resumed> => {parent_tid=[6454]}, 88) = 6454 [pid 5062] <... openat resumed>) = 3 [pid 6454] <... rseq resumed>) = 0 [pid 5060] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 4 [pid 6454] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6454] rt_sigprocmask(SIG_SETMASK, [], [pid 6453] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] newfstatat(4, "", [pid 6454] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6454] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6453] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6453] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] getdents64(4, [pid 6452] <... munmap resumed>) = 0 [pid 5060] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6452] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] getdents64(4, [pid 6452] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6454] memfd_create("syzkaller", 0 [pid 6452] ioctl(4, LOOP_SET_FD, 3 [pid 5060] newfstatat(AT_FDCWD, "./136/file0", [pid 5059] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 6454] <... memfd_create resumed>) = 3 [pid 5060] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./139/file0" [pid 6454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... rmdir resumed>) = 0 [pid 6454] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] getdents64(3, [pid 6452] <... ioctl resumed>) = 0 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 6452] close(3 [pid 5060] rmdir("./136/file0" [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./139" [pid 6452] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./136" [pid 6452] close(4 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] mkdir("./140", 0777 [pid 6452] <... close resumed>) = 0 [pid 6452] mkdir("./file0", 0777 [pid 5059] <... mkdir resumed>) = 0 [pid 5060] mkdir("./137", 0777 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6452] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6452] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6454] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = 0 [ 139.662342][ T6452] loop2: detected capacity change from 0 to 4096 [ 139.690221][ T6452] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5062] close(3 [pid 6454] <... write resumed>) = 2097152 [pid 6452] <... mount resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 6452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6452] <... openat resumed>) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6455 ./strace-static-x86_64: Process 6455 attached [pid 6454] munmap(0x7fe7bae00000, 138412032 [pid 6452] chdir("./file0" [pid 6455] set_robust_list(0x55558e6e36a0, 24 [pid 6452] <... chdir resumed>) = 0 [pid 6455] <... set_robust_list resumed>) = 0 [pid 6452] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6455] chdir("./137" [pid 6452] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6452] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6455] <... chdir resumed>) = 0 [pid 6452] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6451] <... futex resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6455] setpgid(0, 0 [pid 6454] <... munmap resumed>) = 0 [pid 6451] exit_group(0 [pid 5060] close(3 [pid 6455] <... setpgid resumed>) = 0 [pid 6454] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6451] <... exit_group resumed>) = ? [pid 6455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6454] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 6454] ioctl(4, LOOP_SET_FD, 3 [pid 6452] <... futex resumed>) = ? [pid 6455] <... openat resumed>) = 3 [pid 6452] +++ exited with 0 +++ [pid 6451] +++ exited with 0 +++ [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6451, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6455] write(3, "1000", 4 [pid 5061] <... openat resumed>) = 3 [pid 6455] <... write resumed>) = 4 [pid 6455] close(3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6456 ./strace-static-x86_64: Process 6456 attached [pid 6455] <... close resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 6456] set_robust_list(0x55558e6e36a0, 24 [pid 6455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6455] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 6456] <... set_robust_list resumed>) = 0 [pid 6455] <... futex resumed>) = 0 [pid 6455] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6456] chdir("./137" [pid 6455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5059] <... close resumed>) = 0 [pid 6455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6456] <... chdir resumed>) = 0 [pid 6455] <... mmap resumed>) = 0x7fe7c3226000 [pid 5061] unlink("./138/binderfs" [pid 6455] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6456] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6457 attached ) = 0 [pid 6455] <... mprotect resumed>) = 0 [pid 6454] <... ioctl resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6457 [pid 6457] set_robust_list(0x55558e6e36a0, 24 [pid 6456] setpgid(0, 0 [pid 6454] close(3 [pid 6455] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6456] <... setpgid resumed>) = 0 [pid 6455] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6457] <... set_robust_list resumed>) = 0 [pid 6456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6454] <... close resumed>) = 0 [pid 5061] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6458 attached [pid 6457] chdir("./140" [pid 6456] <... openat resumed>) = 3 [pid 6454] close(4 [pid 6458] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6457] <... chdir resumed>) = 0 [pid 6456] write(3, "1000", 4 [pid 6455] <... clone3 resumed> => {parent_tid=[6458]}, 88) = 6458 [pid 6454] <... close resumed>) = 0 [pid 6458] <... rseq resumed>) = 0 [pid 6457] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6456] <... write resumed>) = 4 [pid 6455] rt_sigprocmask(SIG_SETMASK, [], [pid 6454] mkdir("./file0", 0777 [pid 6458] set_robust_list(0x7fe7c32469a0, 24 [pid 6457] <... prctl resumed>) = 0 [pid 6456] close(3 [pid 6455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6454] <... mkdir resumed>) = 0 [pid 6458] <... set_robust_list resumed>) = 0 [pid 6457] setpgid(0, 0 [pid 6456] <... close resumed>) = 0 [pid 6455] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] rt_sigprocmask(SIG_SETMASK, [], [pid 6457] <... setpgid resumed>) = 0 [pid 6454] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 139.783688][ T6454] loop4: detected capacity change from 0 to 4096 [pid 5061] <... umount2 resumed>) = 0 [pid 6458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6456] symlink("/dev/binderfs", "./binderfs" [pid 6455] <... futex resumed>) = 0 [pid 6458] memfd_create("syzkaller", 0 [pid 6457] <... openat resumed>) = 3 [pid 6455] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6458] <... memfd_create resumed>) = 3 [pid 6456] <... symlink resumed>) = 0 [pid 6458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6457] write(3, "1000", 4 [pid 5061] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6457] <... write resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6457] close(3 [pid 5061] newfstatat(AT_FDCWD, "./138/file0", [pid 6457] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6457] symlink("/dev/binderfs", "./binderfs" [pid 5061] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6457] <... symlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6457] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6457] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6457] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] newfstatat(4, "", [pid 6457] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6457] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] getdents64(4, [pid 6457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] getdents64(4, [pid 6457] <... mmap resumed>) = 0x7fe7c3226000 [pid 6456] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6456] <... futex resumed>) = 0 [pid 6457] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6456] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] close(4 [pid 6457] <... mprotect resumed>) = 0 [pid 6456] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6457] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] rmdir("./138/file0" [pid 6457] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... rmdir resumed>) = 0 [pid 6457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] getdents64(3, ./strace-static-x86_64: Process 6459 attached 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6459] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6458] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6457] <... clone3 resumed> => {parent_tid=[6459]}, 88) = 6459 [pid 6456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6454] <... mount resumed>) = 0 [pid 5061] close(3 [pid 6459] <... rseq resumed>) = 0 [pid 6456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [ 139.833251][ T6454] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6456] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6459] set_robust_list(0x7fe7c32469a0, 24 [pid 6457] rt_sigprocmask(SIG_SETMASK, [], [pid 6456] <... mprotect resumed>) = 0 [pid 6454] <... openat resumed>) = 3 [pid 5061] rmdir("./138" [pid 6457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6456] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6454] chdir("./file0" [pid 5061] <... rmdir resumed>) = 0 [pid 6456] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6454] <... chdir resumed>) = 0 [pid 6456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6454] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6459] <... set_robust_list resumed>) = 0 [pid 6457] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] mkdir("./139", 0777 [pid 6459] rt_sigprocmask(SIG_SETMASK, [], [pid 6457] <... futex resumed>) = 0 [pid 6454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6460 attached [pid 6459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6457] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6456] <... clone3 resumed> => {parent_tid=[6460]}, 88) = 6460 [pid 6454] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6460] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6456] rt_sigprocmask(SIG_SETMASK, [], [pid 6454] <... futex resumed>) = 1 [pid 6453] <... futex resumed>) = 0 [pid 6460] <... rseq resumed>) = 0 [pid 6459] memfd_create("syzkaller", 0 [pid 6456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6454] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6453] exit_group(0 [pid 5061] <... openat resumed>) = 3 [pid 6460] set_robust_list(0x7fe7c32469a0, 24 [pid 6456] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6454] <... futex resumed>) = ? [pid 6453] <... exit_group resumed>) = ? [pid 6460] <... set_robust_list resumed>) = 0 [pid 6454] +++ exited with 0 +++ [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6460] rt_sigprocmask(SIG_SETMASK, [], [pid 6459] <... memfd_create resumed>) = 3 [pid 6460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6460] memfd_create("syzkaller", 0 [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6456] <... futex resumed>) = 0 [pid 6456] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6459] <... mmap resumed>) = 0x7fe7bae00000 [pid 6453] +++ exited with 0 +++ [pid 6458] <... write resumed>) = 2097152 [pid 6458] munmap(0x7fe7bae00000, 138412032 [pid 6460] <... memfd_create resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6453, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6460] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./136/binderfs") = 0 [pid 5063] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6458] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./136/file0", [pid 6458] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6458] <... openat resumed>) = 4 [pid 6458] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./136/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./136" [pid 6459] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6460] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6458] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./137", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6458] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6458] <... close resumed>) = 0 [pid 6458] close(4) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6461 attached , child_tidptr=0x55558e6e3690) = 6461 [pid 6461] set_robust_list(0x55558e6e36a0, 24 [pid 6458] mkdir("./file0", 0777 [pid 6461] <... set_robust_list resumed>) = 0 [pid 6461] chdir("./139" [pid 6458] <... mkdir resumed>) = 0 [pid 6461] <... chdir resumed>) = 0 [pid 6461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6461] setpgid(0, 0) = 0 [ 139.939527][ T6458] loop3: detected capacity change from 0 to 4096 [pid 6461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6461] write(3, "1000", 4) = 4 [pid 6461] close(3) = 0 [pid 6461] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6458] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6461] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6461] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6459] <... write resumed>) = 2097152 [pid 6461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6461] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6462 attached [pid 6462] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6462] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6461] <... clone3 resumed> => {parent_tid=[6462]}, 88) = 6462 [pid 6462] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6461] rt_sigprocmask(SIG_SETMASK, [], [pid 6459] munmap(0x7fe7bae00000, 138412032 [pid 6461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6460] <... write resumed>) = 2097152 [pid 6459] <... munmap resumed>) = 0 [pid 6461] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6461] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6460] munmap(0x7fe7bae00000, 138412032 [pid 6462] <... futex resumed>) = 0 [pid 6462] memfd_create("syzkaller", 0) = 3 [pid 6459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6459] <... openat resumed>) = 4 [pid 6462] <... mmap resumed>) = 0x7fe7bae00000 [pid 6459] ioctl(4, LOOP_SET_FD, 3 [pid 6460] <... munmap resumed>) = 0 [ 140.015814][ T6458] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6460] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 6460] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3) = 0 [pid 6459] <... ioctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6459] close(3) = 0 [pid 6459] close(4) = 0 [pid 6459] mkdir("./file0", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6463 [pid 6459] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6463 attached [pid 6463] set_robust_list(0x55558e6e36a0, 24 [pid 6459] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6463] <... set_robust_list resumed>) = 0 [pid 6460] <... ioctl resumed>) = 0 [pid 6463] chdir("./137" [pid 6460] close(3) = 0 [pid 6463] <... chdir resumed>) = 0 [pid 6462] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6460] close(4 [pid 6463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6460] <... close resumed>) = 0 [pid 6463] <... prctl resumed>) = 0 [pid 6460] mkdir("./file0", 0777 [pid 6463] setpgid(0, 0) = 0 [pid 6460] <... mkdir resumed>) = 0 [pid 6463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6463] write(3, "1000", 4) = 4 [pid 6460] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 140.069852][ T6459] loop0: detected capacity change from 0 to 4096 [ 140.086515][ T6460] loop1: detected capacity change from 0 to 4096 [ 140.109440][ T6459] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6463] close(3) = 0 [pid 6463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6463] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6458] <... mount resumed>) = 0 [pid 6463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6463] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6463] <... mprotect resumed>) = 0 [pid 6458] <... openat resumed>) = 3 [pid 6463] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6458] chdir("./file0" [pid 6463] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6458] <... chdir resumed>) = 0 [pid 6463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6458] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6458] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 ./strace-static-x86_64: Process 6464 attached [pid 6463] <... clone3 resumed> => {parent_tid=[6464]}, 88) = 6464 [pid 6458] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6455] <... futex resumed>) = 0 [pid 6464] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6463] rt_sigprocmask(SIG_SETMASK, [], [pid 6464] <... rseq resumed>) = 0 [pid 6463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6455] exit_group(0 [pid 6464] set_robust_list(0x7fe7c32469a0, 24 [pid 6463] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] <... futex resumed>) = ? [pid 6455] <... exit_group resumed>) = ? [pid 6464] <... set_robust_list resumed>) = 0 [pid 6463] <... futex resumed>) = 0 [pid 6458] +++ exited with 0 +++ [pid 6464] rt_sigprocmask(SIG_SETMASK, [], [pid 6463] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6464] memfd_create("syzkaller", 0) = 3 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6455] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6455, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6462] <... write resumed>) = 2097152 [pid 5062] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 140.139677][ T6460] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5062] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./137/binderfs") = 0 [pid 5062] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6459] <... mount resumed>) = 0 [pid 6459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6459] chdir("./file0") = 0 [pid 6459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6462] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = 0 [pid 6462] <... openat resumed>) = 4 [pid 6459] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] ioctl(4, LOOP_SET_FD, 3 [pid 6459] <... futex resumed>) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6464] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6459] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6462] <... ioctl resumed>) = 0 [pid 6460] <... mount resumed>) = 0 [pid 6457] exit_group(0 [pid 5062] newfstatat(AT_FDCWD, "./137/file0", [pid 6462] close(3 [pid 6460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6459] <... futex resumed>) = ? [pid 6457] <... exit_group resumed>) = ? [pid 6462] <... close resumed>) = 0 [pid 6460] <... openat resumed>) = 3 [pid 6459] +++ exited with 0 +++ [pid 6457] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6462] close(4 [pid 6460] chdir("./file0" [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6457, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6462] <... close resumed>) = 0 [pid 6460] <... chdir resumed>) = 0 [pid 5062] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] mkdir("./file0", 0777 [pid 6460] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6460] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 4 [pid 6460] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(4, "", [pid 5059] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] <... mkdir resumed>) = 0 [pid 6460] <... futex resumed>) = 1 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6462] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6460] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] getdents64(4, [pid 5059] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6456] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... openat resumed>) = 3 [pid 6456] exit_group(0 [pid 5062] getdents64(4, [pid 5059] newfstatat(3, "", [pid 6460] <... futex resumed>) = ? [pid 6456] <... exit_group resumed>) = ? [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(4) = 0 [pid 5059] getdents64(3, [pid 5062] rmdir("./137/file0" [pid 6460] +++ exited with 0 +++ [pid 6456] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(3, [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6456, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5059] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5059] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5060] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./137" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./140/binderfs") = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./138", 0777 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5059] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5059] newfstatat(AT_FDCWD, "./140/file0", [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./137/binderfs", [pid 5059] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] unlink("./137/binderfs" [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = 0 [pid 5059] getdents64(4, [pid 6464] <... write resumed>) = 2097152 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6464] munmap(0x7fe7bae00000, 138412032 [pid 5059] close(4) = 0 [pid 5059] rmdir("./140/file0" [pid 6464] <... munmap resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6464] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 140.240160][ T6462] loop2: detected capacity change from 0 to 4096 [ 140.262327][ T6462] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6464] ioctl(4, LOOP_SET_FD, 3 [pid 5060] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./137/file0", [pid 5059] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./140" [pid 5060] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6464] <... ioctl resumed>) = 0 [pid 6462] <... mount resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5059] mkdir("./141", 0777 [pid 6464] close(3 [pid 5059] <... mkdir resumed>) = 0 [pid 6462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 6464] <... close resumed>) = 0 [pid 6462] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6462] chdir("./file0" [pid 5060] getdents64(4, [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6464] close(4) = 0 [pid 6462] <... chdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6462] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] close(4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 6462] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./137/file0" [pid 6464] mkdir("./file0", 0777 [pid 6462] <... futex resumed>) = 1 [pid 6461] <... futex resumed>) = 0 [pid 6462] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6461] exit_group(0 [pid 5060] <... rmdir resumed>) = 0 [pid 6464] <... mkdir resumed>) = 0 [pid 6462] <... futex resumed>) = ? [pid 6461] <... exit_group resumed>) = ? [pid 6464] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6462] +++ exited with 0 +++ [pid 6461] +++ exited with 0 +++ [pid 5060] getdents64(3, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6461, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5060] close(3) = 0 [pid 5060] rmdir("./137" [pid 5061] <... restart_syscall resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5061] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 5060] mkdir("./138", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5060] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./139/binderfs" [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] <... unlink resumed>) = 0 [ 140.304394][ T6464] loop4: detected capacity change from 0 to 4096 [ 140.329030][ T6464] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5061] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6465 attached [pid 5061] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6465 [pid 6465] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6465] <... set_robust_list resumed>) = 0 [pid 6464] <... mount resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6465] chdir("./138" [pid 6464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 6465] <... chdir resumed>) = 0 [pid 6464] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6464] chdir("./file0" [pid 5061] getdents64(4, [pid 6464] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6464] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] getdents64(4, [pid 6465] setpgid(0, 0 [pid 6464] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6463] <... futex resumed>) = 0 [pid 6464] <... futex resumed>) = 1 [pid 6465] <... setpgid resumed>) = 0 [pid 6464] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6463] exit_group(0 [pid 5061] close(4 [pid 6464] <... futex resumed>) = ? [pid 6463] <... exit_group resumed>) = ? [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./139/file0" [pid 6465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6464] +++ exited with 0 +++ [pid 6463] +++ exited with 0 +++ [pid 5061] <... rmdir resumed>) = 0 [pid 5059] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6463, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5061] getdents64(3, [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6465] <... openat resumed>) = 3 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] close(3 [pid 6465] write(3, "1000", 4 [pid 5063] <... restart_syscall resumed>) = 0 [pid 6465] <... write resumed>) = 4 [pid 6465] close(3 [pid 5061] <... close resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6466 [pid 6465] <... close resumed>) = 0 [pid 5063] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6465] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6465] <... symlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] rmdir("./139" [pid 6465] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6466 attached [pid 5063] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] close(3 [pid 6466] set_robust_list(0x55558e6e36a0, 24 [pid 6465] <... futex resumed>) = 0 [pid 5061] mkdir("./140", 0777 [pid 5060] <... close resumed>) = 0 [pid 6466] <... set_robust_list resumed>) = 0 [pid 6465] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] newfstatat(3, "", [pid 5061] <... mkdir resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6466] chdir("./141" [pid 6465] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6467 attached [pid 6466] <... chdir resumed>) = 0 [pid 6465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6467 [pid 6467] set_robust_list(0x55558e6e36a0, 24 [pid 6466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6467] <... set_robust_list resumed>) = 0 [pid 6466] <... prctl resumed>) = 0 [pid 6465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] chdir("./138" [pid 6466] setpgid(0, 0 [pid 6465] <... mmap resumed>) = 0x7fe7c3226000 [pid 6467] <... chdir resumed>) = 0 [pid 6466] <... setpgid resumed>) = 0 [pid 6465] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6465] <... mprotect resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./137/binderfs", [pid 6467] <... prctl resumed>) = 0 [pid 6466] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6467] setpgid(0, 0 [pid 6466] write(3, "1000", 4 [pid 6465] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] unlink("./137/binderfs" [pid 6467] <... setpgid resumed>) = 0 [pid 6466] <... write resumed>) = 4 [pid 6465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6466] close(3 [pid 6467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6466] <... close resumed>) = 0 [pid 6465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... unlink resumed>) = 0 [pid 6466] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6468 attached [pid 6467] <... openat resumed>) = 3 [pid 6466] <... symlink resumed>) = 0 [pid 5063] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6468] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6466] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... clone3 resumed> => {parent_tid=[6468]}, 88) = 6468 [pid 6468] <... rseq resumed>) = 0 [pid 6467] write(3, "1000", 4 [pid 6466] <... futex resumed>) = 0 [pid 6468] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6468] rt_sigprocmask(SIG_SETMASK, [], [pid 6467] <... write resumed>) = 4 [pid 6468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6466] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6468] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6467] close(3 [pid 6466] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], [pid 6467] <... close resumed>) = 0 [pid 6466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6465] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 6468] <... futex resumed>) = 0 [pid 6465] <... futex resumed>) = 1 [pid 5063] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] <... futex resumed>) = 0 [pid 6466] <... mmap resumed>) = 0x7fe7c3226000 [pid 6465] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6467] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6466] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] newfstatat(AT_FDCWD, "./137/file0", [pid 6468] memfd_create("syzkaller", 0 [pid 6467] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6466] <... mprotect resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6468] <... memfd_create resumed>) = 3 [pid 5063] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6466] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6468] <... mmap resumed>) = 0x7fe7bae00000 [pid 6467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6467] <... mmap resumed>) = 0x7fe7c3226000 [pid 6466] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6467] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... openat resumed>) = 4 [pid 6467] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6467] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] getdents64(4, ./strace-static-x86_64: Process 6469 attached [pid 6467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6466] <... clone3 resumed> => {parent_tid=[6469]}, 88) = 6469 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6470 attached [pid 6469] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6466] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] getdents64(4, [pid 6470] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6469] <... rseq resumed>) = 0 [pid 6466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6469] set_robust_list(0x7fe7c32469a0, 24 [pid 6467] <... clone3 resumed> => {parent_tid=[6470]}, 88) = 6470 [pid 6470] <... rseq resumed>) = 0 [pid 6466] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... set_robust_list resumed>) = 0 [pid 6467] rt_sigprocmask(SIG_SETMASK, [], [pid 6470] set_robust_list(0x7fe7c32469a0, 24 [pid 6469] rt_sigprocmask(SIG_SETMASK, [], [pid 6467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6466] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6470] <... set_robust_list resumed>) = 0 [pid 6469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6467] <... futex resumed>) = 0 [pid 6467] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6470] rt_sigprocmask(SIG_SETMASK, [], [pid 6469] memfd_create("syzkaller", 0 [pid 6468] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] close(4 [pid 6470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6469] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 6470] memfd_create("syzkaller", 0 [pid 5063] rmdir("./137/file0" [pid 6469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6469] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6470] <... memfd_create resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 6470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3 [pid 6470] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./137") = 0 [pid 5063] mkdir("./138", 0777 [pid 5061] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6471 ./strace-static-x86_64: Process 6471 attached [pid 6471] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6471] chdir("./140") = 0 [pid 6468] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6470] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6469] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6468] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... openat resumed>) = 3 [pid 6471] <... prctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6471] setpgid(0, 0) = 0 [pid 6471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6468] <... munmap resumed>) = 0 [pid 6471] <... openat resumed>) = 3 [pid 6468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6471] write(3, "1000", 4 [pid 6468] <... openat resumed>) = 4 [pid 6471] <... write resumed>) = 4 [pid 6468] ioctl(4, LOOP_SET_FD, 3 [pid 6471] close(3) = 0 [pid 6471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6468] <... ioctl resumed>) = 0 [pid 6468] close(3 [pid 6471] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] <... close resumed>) = 0 [pid 6471] <... futex resumed>) = 0 [pid 6468] close(4 [pid 6471] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6468] <... close resumed>) = 0 [pid 6468] mkdir("./file0", 0777 [pid 6471] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6470] <... write resumed>) = 2097152 [pid 6469] <... write resumed>) = 2097152 [pid 6471] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6468] <... mkdir resumed>) = 0 [pid 6470] munmap(0x7fe7bae00000, 138412032 [pid 6471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6470] <... munmap resumed>) = 0 [pid 6468] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6469] munmap(0x7fe7bae00000, 138412032 [pid 6470] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6471] <... mmap resumed>) = 0x7fe7c3226000 [pid 6471] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... ioctl resumed>) = 0 [pid 6471] <... mprotect resumed>) = 0 [pid 5063] close(3 [pid 6470] <... openat resumed>) = 4 [pid 6471] rt_sigprocmask(SIG_BLOCK, ~[], [ 140.615558][ T6468] loop3: detected capacity change from 0 to 4096 [ 140.649098][ T6468] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6470] ioctl(4, LOOP_SET_FD, 3 [pid 6469] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6471] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6469] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6472 attached [pid 6472] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6471] <... clone3 resumed> => {parent_tid=[6472]}, 88) = 6472 [pid 6471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6471] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6473 attached [pid 6472] <... rseq resumed>) = 0 [pid 6471] <... futex resumed>) = 0 [pid 6469] <... openat resumed>) = 4 [pid 6471] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6469] ioctl(4, LOOP_SET_FD, 3 [pid 6473] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6472] set_robust_list(0x7fe7c32469a0, 24 [pid 6470] <... ioctl resumed>) = 0 [pid 6469] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6473 [pid 6473] chdir("./138" [pid 6472] <... set_robust_list resumed>) = 0 [pid 6469] close(3 [pid 6473] <... chdir resumed>) = 0 [pid 6472] rt_sigprocmask(SIG_SETMASK, [], [pid 6470] close(3 [pid 6469] <... close resumed>) = 0 [pid 6473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6470] <... close resumed>) = 0 [pid 6469] close(4 [pid 6472] memfd_create("syzkaller", 0 [pid 6469] <... close resumed>) = 0 [pid 6473] <... prctl resumed>) = 0 [pid 6472] <... memfd_create resumed>) = 3 [pid 6470] close(4 [pid 6472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6473] setpgid(0, 0 [pid 6472] <... mmap resumed>) = 0x7fe7bae00000 [pid 6470] <... close resumed>) = 0 [pid 6473] <... setpgid resumed>) = 0 [pid 6470] mkdir("./file0", 0777 [pid 6469] mkdir("./file0", 0777 [pid 6473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6470] <... mkdir resumed>) = 0 [pid 6469] <... mkdir resumed>) = 0 [pid 6473] <... openat resumed>) = 3 [pid 6473] write(3, "1000", 4 [pid 6470] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6473] <... write resumed>) = 4 [ 140.664700][ T6470] loop1: detected capacity change from 0 to 4096 [ 140.680420][ T6469] loop0: detected capacity change from 0 to 4096 [pid 6473] close(3 [pid 6469] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6468] <... mount resumed>) = 0 [pid 6473] <... close resumed>) = 0 [pid 6473] symlink("/dev/binderfs", "./binderfs" [pid 6468] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6473] <... symlink resumed>) = 0 [pid 6473] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6468] chdir("./file0" [pid 6473] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6468] <... chdir resumed>) = 0 [pid 6468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6472] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6473] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6468] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6473] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6468] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6470] <... mount resumed>) = 0 [pid 6468] <... futex resumed>) = 1 [pid 6473] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6470] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6468] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] <... mprotect resumed>) = 0 [pid 6470] <... openat resumed>) = 3 [pid 6465] <... futex resumed>) = 0 [pid 6473] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6470] chdir("./file0" [ 140.719633][ T6470] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 140.731577][ T6469] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6465] exit_group(0 [pid 6473] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6470] <... chdir resumed>) = 0 [pid 6468] <... futex resumed>) = ? [pid 6465] <... exit_group resumed>) = ? [pid 6469] <... mount resumed>) = 0 [pid 6468] +++ exited with 0 +++ [pid 6470] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6469] chdir("./file0") = 0 [pid 6469] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6470] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6469] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6470] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6467] <... futex resumed>) = 0 [pid 6467] exit_group(0 [pid 6470] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6469] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6466] <... futex resumed>) = 0 [pid 6469] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6466] exit_group(0 [pid 6465] +++ exited with 0 +++ [pid 6470] <... futex resumed>) = ? [pid 6469] <... futex resumed>) = ? [pid 6467] <... exit_group resumed>) = ? [pid 6466] <... exit_group resumed>) = ? [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6465, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6470] +++ exited with 0 +++ [pid 6467] +++ exited with 0 +++ [pid 5062] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6467, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 6473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6472] <... write resumed>) = 2097152 [pid 6469] +++ exited with 0 +++ [pid 6466] +++ exited with 0 +++ ./strace-static-x86_64: Process 6474 attached [pid 6472] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6466, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6474] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6473] <... clone3 resumed> => {parent_tid=[6474]}, 88) = 6474 [pid 5062] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6474] <... rseq resumed>) = 0 [pid 6473] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... openat resumed>) = 3 [pid 5060] <... restart_syscall resumed>) = 0 [pid 6474] set_robust_list(0x7fe7c32469a0, 24 [pid 6473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] newfstatat(3, "", [pid 6474] <... set_robust_list resumed>) = 0 [pid 6473] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] rt_sigprocmask(SIG_SETMASK, [], [pid 6473] <... futex resumed>) = 0 [pid 6472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] getdents64(3, [pid 5060] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6473] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6472] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6472] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 3 [pid 6474] memfd_create("syzkaller", 0 [pid 5062] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./138/binderfs") = 0 [pid 5062] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] <... memfd_create resumed>) = 3 [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6472] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5059] newfstatat(3, "", [pid 5062] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6472] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6472] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./138/file0", [pid 5060] getdents64(3, [pid 5059] getdents64(3, [pid 6472] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6472] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6472] mkdir("./file0", 0777 [pid 5060] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./141/binderfs") = 0 [pid 6472] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6472] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] newfstatat(AT_FDCWD, "./138/binderfs", [pid 5062] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5060] unlink("./138/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./138/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./138" [pid 5060] <... unlink resumed>) = 0 [pid 5059] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] mkdir("./139", 0777) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./141/file0", [pid 5060] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./138/file0", [pid 5062] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(4, "", [pid 5060] <... openat resumed>) = 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5060] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5060] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5060] close(4) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] rmdir("./138/file0" [pid 5059] rmdir("./141/file0" [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5060] close(3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] close(3) = 0 [pid 5060] rmdir("./138" [pid 5059] rmdir("./141") = 0 [pid 5059] mkdir("./142", 0777) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] mkdir("./139", 0777) = 0 [ 140.831401][ T6472] loop2: detected capacity change from 0 to 4096 [ 140.864527][ T6472] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6474] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6472] <... mount resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6472] chdir("./file0" [pid 5060] <... openat resumed>) = 3 [pid 6472] <... chdir resumed>) = 0 [pid 6472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6472] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6472] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] exit_group(0 [pid 6472] <... futex resumed>) = ? [pid 6471] <... exit_group resumed>) = ? [pid 6472] +++ exited with 0 +++ [pid 6471] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6471, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./140/binderfs") = 0 [pid 5061] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 6474] <... write resumed>) = 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./140/file0", [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6474] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... close resumed>) = 0 [pid 5061] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... ioctl resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6474] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6475 attached [pid 6474] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6475 [pid 5061] <... openat resumed>) = 4 [pid 6475] set_robust_list(0x55558e6e36a0, 24 [pid 6474] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 6475] <... set_robust_list resumed>) = 0 [pid 6474] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6475] chdir("./139" [pid 5061] getdents64(4, [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6475] <... chdir resumed>) = 0 [pid 6474] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... ioctl resumed>) = 0 [pid 6475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6474] close(3) = 0 [pid 6475] <... prctl resumed>) = 0 [pid 6474] close(4 [pid 6475] setpgid(0, 0 [pid 6474] <... close resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6476 [pid 6475] <... setpgid resumed>) = 0 [pid 6474] mkdir("./file0", 0777./strace-static-x86_64: Process 6476 attached [pid 6475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6476] set_robust_list(0x55558e6e36a0, 24 [pid 6474] <... mkdir resumed>) = 0 [pid 6476] <... set_robust_list resumed>) = 0 [pid 6476] chdir("./142" [pid 6475] <... openat resumed>) = 3 [pid 6474] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] close(3 [pid 6476] <... chdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6476] setpgid(0, 0) = 0 [pid 6476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6475] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6477 attached [pid 6476] write(3, "1000", 4 [pid 6477] set_robust_list(0x55558e6e36a0, 24 [pid 6476] <... write resumed>) = 4 [pid 6476] close(3 [pid 6477] <... set_robust_list resumed>) = 0 [pid 6476] <... close resumed>) = 0 [pid 6477] chdir("./139" [pid 6476] symlink("/dev/binderfs", "./binderfs" [pid 6477] <... chdir resumed>) = 0 [pid 6476] <... symlink resumed>) = 0 [pid 6477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6476] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6477 [pid 6475] close(3 [pid 5061] getdents64(4, [pid 6476] <... futex resumed>) = 0 [pid 6477] <... prctl resumed>) = 0 [pid 6476] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6477] setpgid(0, 0 [pid 6476] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6477] <... setpgid resumed>) = 0 [pid 6476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6476] <... mmap resumed>) = 0x7fe7c3226000 [pid 6477] <... openat resumed>) = 3 [pid 6476] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6475] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6476] <... mprotect resumed>) = 0 [pid 6475] symlink("/dev/binderfs", "./binderfs" [pid 5061] close(4 [pid 6476] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... close resumed>) = 0 [pid 6477] write(3, "1000", 4 [pid 6476] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6475] <... symlink resumed>) = 0 [pid 5061] rmdir("./140/file0" [pid 6477] <... write resumed>) = 4 [pid 6476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6478 attached [pid 6477] close(3 [pid 6475] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... rmdir resumed>) = 0 [pid 6478] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6477] <... close resumed>) = 0 [pid 6476] <... clone3 resumed> => {parent_tid=[6478]}, 88) = 6478 [pid 6475] <... futex resumed>) = 0 [pid 5061] getdents64(3, [pid 6478] <... rseq resumed>) = 0 [pid 6477] symlink("/dev/binderfs", "./binderfs" [pid 6476] rt_sigprocmask(SIG_SETMASK, [], [pid 6475] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6478] set_robust_list(0x7fe7c32469a0, 24 [pid 6477] <... symlink resumed>) = 0 [pid 6476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6475] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] close(3 [pid 6478] <... set_robust_list resumed>) = 0 [pid 6475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... close resumed>) = 0 [pid 6478] rt_sigprocmask(SIG_SETMASK, [], [pid 6477] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6477] <... futex resumed>) = 0 [pid 6476] <... futex resumed>) = 0 [pid 6475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] rmdir("./140" [pid 6478] memfd_create("syzkaller", 0 [pid 6477] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6476] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6477] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6477] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] mkdir("./141", 0777 [pid 6477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6478] <... memfd_create resumed>) = 3 [pid 6477] <... mmap resumed>) = 0x7fe7c3226000 [pid 6478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6477] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6475] <... mmap resumed>) = 0x7fe7c3226000 [pid 5061] <... mkdir resumed>) = 0 [pid 6478] <... mmap resumed>) = 0x7fe7bae00000 [pid 6475] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6477] <... mprotect resumed>) = 0 [pid 6475] <... mprotect resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6479 attached [pid 6477] <... clone3 resumed> => {parent_tid=[6479]}, 88) = 6479 ./strace-static-x86_64: Process 6480 attached [pid 6479] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6477] rt_sigprocmask(SIG_SETMASK, [], [pid 6480] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6479] <... rseq resumed>) = 0 [pid 6477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6475] <... clone3 resumed> => {parent_tid=[6480]}, 88) = 6480 [pid 6480] <... rseq resumed>) = 0 [pid 6479] set_robust_list(0x7fe7c32469a0, 24 [pid 6477] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] set_robust_list(0x7fe7c32469a0, 24 [pid 6479] <... set_robust_list resumed>) = 0 [pid 6477] <... futex resumed>) = 0 [pid 6475] rt_sigprocmask(SIG_SETMASK, [], [pid 6480] <... set_robust_list resumed>) = 0 [ 140.999986][ T6474] loop4: detected capacity change from 0 to 4096 [ 141.018958][ T6474] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6479] rt_sigprocmask(SIG_SETMASK, [], [pid 6477] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6480] rt_sigprocmask(SIG_SETMASK, [], [pid 6479] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6479] memfd_create("syzkaller", 0 [pid 6475] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... memfd_create resumed>) = 3 [pid 6480] memfd_create("syzkaller", 0 [pid 6475] <... futex resumed>) = 0 [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6478] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6480] <... memfd_create resumed>) = 3 [pid 6475] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6481 ./strace-static-x86_64: Process 6481 attached [pid 6474] <... mount resumed>) = 0 [pid 6481] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6478] <... write resumed>) = 2097152 [pid 6474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6481] chdir("./141" [pid 6479] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6474] <... openat resumed>) = 3 [pid 6481] <... chdir resumed>) = 0 [pid 6480] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6478] munmap(0x7fe7bae00000, 138412032 [pid 6474] chdir("./file0" [pid 6481] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6478] <... munmap resumed>) = 0 [pid 6481] <... prctl resumed>) = 0 [pid 6481] setpgid(0, 0) = 0 [pid 6481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6474] <... chdir resumed>) = 0 [pid 6481] write(3, "1000", 4 [pid 6474] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6481] <... write resumed>) = 4 [pid 6481] close(3 [pid 6474] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6481] <... close resumed>) = 0 [pid 6474] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6481] symlink("/dev/binderfs", "./binderfs" [pid 6474] <... futex resumed>) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6481] <... symlink resumed>) = 0 [pid 6474] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] exit_group(0 [pid 6481] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6474] <... futex resumed>) = ? [pid 6473] <... exit_group resumed>) = ? [pid 6481] <... futex resumed>) = 0 [pid 6479] <... write resumed>) = 2097152 [pid 6478] <... openat resumed>) = 4 [pid 6474] +++ exited with 0 +++ [pid 6481] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6478] ioctl(4, LOOP_SET_FD, 3 [pid 6481] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6479] munmap(0x7fe7bae00000, 138412032 [pid 6473] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6473, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6481] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6481] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6481] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 6481] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./138/binderfs", [pid 6479] <... munmap resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./138/binderfs" [pid 6481] <... clone3 resumed> => {parent_tid=[6482]}, 88) = 6482 [pid 6479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6482 attached [pid 6481] rt_sigprocmask(SIG_SETMASK, [], [pid 6479] <... openat resumed>) = 4 [pid 5063] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6482] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6480] <... write resumed>) = 2097152 [pid 6479] ioctl(4, LOOP_SET_FD, 3 [pid 6478] <... ioctl resumed>) = 0 [pid 6482] <... rseq resumed>) = 0 [pid 6481] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 6482] set_robust_list(0x7fe7c32469a0, 24 [pid 6481] <... futex resumed>) = 0 [pid 5063] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6482] <... set_robust_list resumed>) = 0 [pid 6481] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6482] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6482] memfd_create("syzkaller", 0 [pid 5063] newfstatat(AT_FDCWD, "./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6482] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6480] munmap(0x7fe7bae00000, 138412032 [pid 6479] <... ioctl resumed>) = 0 [pid 6478] close(3 [pid 5063] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6482] <... mmap resumed>) = 0x7fe7bae00000 [pid 6479] close(3 [pid 6478] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6480] <... munmap resumed>) = 0 [pid 6479] <... close resumed>) = 0 [pid 6478] close(4 [pid 5063] newfstatat(4, "", [pid 6478] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6480] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6479] close(4 [pid 6478] mkdir("./file0", 0777 [pid 6479] <... close resumed>) = 0 [pid 6478] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, [pid 6479] mkdir("./file0", 0777 [pid 6478] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6479] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [ 141.204493][ T6478] loop0: detected capacity change from 0 to 4096 [ 141.225723][ T6479] loop1: detected capacity change from 0 to 4096 [pid 6480] <... openat resumed>) = 4 [pid 6479] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] close(4 [pid 6480] ioctl(4, LOOP_SET_FD, 3 [pid 6482] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./138/file0" [pid 6480] <... ioctl resumed>) = 0 [pid 6480] close(3) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6480] close(4) = 0 [pid 6480] mkdir("./file0", 0777) = 0 [pid 6480] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./138") = 0 [pid 5063] mkdir("./139", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 141.253897][ T6478] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 141.265707][ T6480] loop3: detected capacity change from 0 to 4096 [ 141.272208][ T6479] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 141.288200][ T6480] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6482] <... write resumed>) = 2097152 [pid 6482] munmap(0x7fe7bae00000, 138412032 [pid 6478] <... mount resumed>) = 0 [pid 6478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6479] <... mount resumed>) = 0 [pid 6479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6478] chdir("./file0" [pid 6479] <... openat resumed>) = 3 [pid 6478] <... chdir resumed>) = 0 [pid 6479] chdir("./file0" [pid 6478] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6479] <... chdir resumed>) = 0 [pid 6478] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6478] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6478] <... futex resumed>) = 1 [pid 6476] <... futex resumed>) = 0 [pid 6479] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] exit_group(0 [pid 6479] <... futex resumed>) = 1 [pid 6477] <... futex resumed>) = 0 [pid 6482] <... munmap resumed>) = 0 [pid 6479] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] exit_group(0 [pid 6482] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6479] <... futex resumed>) = ? [pid 6477] <... exit_group resumed>) = ? [pid 6482] <... openat resumed>) = 4 [pid 6479] +++ exited with 0 +++ [pid 6482] ioctl(4, LOOP_SET_FD, 3 [pid 6480] <... mount resumed>) = 0 [pid 6478] <... futex resumed>) = ? [pid 6477] +++ exited with 0 +++ [pid 6476] <... exit_group resumed>) = ? [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6477, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6478] +++ exited with 0 +++ [pid 5060] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6476] +++ exited with 0 +++ [pid 5063] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] close(3 [pid 5060] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6476, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] <... close resumed>) = 0 [pid 6480] chdir("./file0" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... openat resumed>) = 3 [pid 6480] <... chdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 6480] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6480] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(3, [pid 5059] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6483 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6480] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] unlink("./139/binderfs" [pid 5059] getdents64(3, [pid 6480] <... futex resumed>) = 1 [pid 6475] <... futex resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6480] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6475] exit_group(0 [pid 5060] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] <... futex resumed>) = ? [pid 6475] <... exit_group resumed>) = ? [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6483 attached [pid 6480] +++ exited with 0 +++ [pid 6475] +++ exited with 0 +++ [pid 5060] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./142/binderfs", [pid 6483] set_robust_list(0x55558e6e36a0, 24 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6475, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6483] <... set_robust_list resumed>) = 0 [pid 6483] chdir("./139" [pid 5060] newfstatat(AT_FDCWD, "./139/file0", [pid 5059] unlink("./142/binderfs" [pid 6483] <... chdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6483] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6483] <... prctl resumed>) = 0 [pid 6482] <... ioctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6483] setpgid(0, 0 [pid 6482] close(3 [pid 5062] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6483] <... setpgid resumed>) = 0 [pid 6482] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 4 [pid 6483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6482] close(4 [pid 5062] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6483] <... openat resumed>) = 3 [pid 6482] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] newfstatat(4, "", [pid 6483] write(3, "1000", 4 [pid 6482] mkdir("./file0", 0777 [pid 5062] newfstatat(3, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6483] <... write resumed>) = 4 [pid 6482] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 6483] close(3 [pid 6482] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 141.379871][ T6482] loop2: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6483] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./142/file0", [pid 5062] newfstatat(AT_FDCWD, "./139/binderfs", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./139/binderfs" [pid 5060] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6483] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6483] <... symlink resumed>) = 0 [pid 5062] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(4 [pid 5059] newfstatat(4, "", [pid 6483] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6483] <... futex resumed>) = 0 [pid 5060] rmdir("./139/file0" [pid 6483] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... rmdir resumed>) = 0 [pid 6483] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] getdents64(3, [pid 6483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] close(3 [pid 5059] getdents64(4, [pid 5062] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 6483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6483] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] rmdir("./139" [pid 5059] close(4 [pid 6483] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./142/file0" [pid 6483] <... mprotect resumed>) = 0 [pid 5060] mkdir("./140", 0777 [pid 6483] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] newfstatat(AT_FDCWD, "./139/file0", [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6483] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5062] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(3, [pid 6483] <... clone3 resumed> => {parent_tid=[6484]}, 88) = 6484 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6484 attached [pid 6483] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6484] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6484] <... rseq resumed>) = 0 [pid 6483] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] set_robust_list(0x7fe7c32469a0, 24 [pid 6483] <... futex resumed>) = 0 [pid 6484] <... set_robust_list resumed>) = 0 [pid 6484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6484] memfd_create("syzkaller", 0 [pid 6483] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... openat resumed>) = 4 [pid 5059] close(3) = 0 [pid 6484] <... memfd_create resumed>) = 3 [pid 5062] newfstatat(4, "", [pid 6484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] rmdir("./142") = 0 [pid 5062] getdents64(4, [pid 5059] mkdir("./143", 0777 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] getdents64(4, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./139/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./139") = 0 [pid 5062] mkdir("./140", 0777) = 0 [ 141.426928][ T6482] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6484] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6482] <... mount resumed>) = 0 [pid 6482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 6482] chdir("./file0") = 0 [pid 6482] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6482] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6481] <... futex resumed>) = 0 [pid 6481] exit_group(0) = ? [pid 5060] close(3) = 0 [pid 6482] +++ exited with 0 +++ [pid 6481] +++ exited with 0 +++ [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6485 ./strace-static-x86_64: Process 6485 attached [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6481, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6485] set_robust_list(0x55558e6e36a0, 24 [pid 5061] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] <... set_robust_list resumed>) = 0 [pid 6485] chdir("./140" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6485] <... chdir resumed>) = 0 [pid 6485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6485] setpgid(0, 0) = 0 [pid 6485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6485] write(3, "1000", 4) = 4 [pid 6485] close(3) = 0 [pid 5061] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6484] <... write resumed>) = 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... ioctl resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5059] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... close resumed>) = 0 [pid 6485] symlink("/dev/binderfs", "./binderfs" [pid 5061] getdents64(3, [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6485] <... symlink resumed>) = 0 [pid 6485] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6484] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6486 attached [pid 6485] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] close(3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6486 [pid 6486] set_robust_list(0x55558e6e36a0, 24 [pid 6485] <... mprotect resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6486] <... set_robust_list resumed>) = 0 [pid 6485] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6486] chdir("./143" [pid 6485] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] newfstatat(AT_FDCWD, "./141/binderfs", ./strace-static-x86_64: Process 6487 attached [pid 6485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6487] set_robust_list(0x55558e6e36a0, 24 [pid 6486] <... chdir resumed>) = 0 [pid 5061] unlink("./141/binderfs" [pid 6487] <... set_robust_list resumed>) = 0 [pid 6486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6485] <... clone3 resumed> => {parent_tid=[6488]}, 88) = 6488 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6487 [pid 6487] chdir("./140" [pid 6486] <... prctl resumed>) = 0 [pid 6485] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6488 attached [pid 6487] <... chdir resumed>) = 0 [pid 6486] setpgid(0, 0 [pid 6485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6488] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6486] <... setpgid resumed>) = 0 [pid 6485] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] <... rseq resumed>) = 0 [pid 6487] <... prctl resumed>) = 0 [pid 6486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6485] <... futex resumed>) = 0 [pid 6488] set_robust_list(0x7fe7c32469a0, 24 [pid 6487] setpgid(0, 0 [pid 6486] <... openat resumed>) = 3 [pid 6485] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6488] <... set_robust_list resumed>) = 0 [pid 6488] rt_sigprocmask(SIG_SETMASK, [], [pid 6487] <... setpgid resumed>) = 0 [pid 6488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6486] write(3, "1000", 4 [pid 6487] <... openat resumed>) = 3 [pid 6486] <... write resumed>) = 4 [pid 6487] write(3, "1000", 4 [pid 6486] close(3 [pid 6488] memfd_create("syzkaller", 0 [pid 6487] <... write resumed>) = 4 [pid 6486] <... close resumed>) = 0 [pid 6487] close(3 [pid 6486] symlink("/dev/binderfs", "./binderfs" [pid 6488] <... memfd_create resumed>) = 3 [pid 6484] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6487] <... close resumed>) = 0 [pid 6486] <... symlink resumed>) = 0 [pid 6484] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6487] symlink("/dev/binderfs", "./binderfs" [pid 6488] <... mmap resumed>) = 0x7fe7bae00000 [pid 6487] <... symlink resumed>) = 0 [pid 6486] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] <... openat resumed>) = 4 [pid 5061] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6486] <... futex resumed>) = 0 [pid 6487] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] ioctl(4, LOOP_SET_FD, 3 [pid 6487] <... futex resumed>) = 0 [pid 6486] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6484] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6486] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] newfstatat(AT_FDCWD, "./141/file0", [pid 6486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6487] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6486] <... mmap resumed>) = 0x7fe7c3226000 [pid 6487] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6486] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6486] <... mprotect resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6487] <... mmap resumed>) = 0x7fe7c3226000 [pid 6486] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6487] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6486] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6487] <... mprotect resumed>) = 0 [pid 6486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] newfstatat(4, "", [pid 6487] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6489 attached [], 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6489] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6486] <... clone3 resumed> => {parent_tid=[6489]}, 88) = 6489 [pid 5061] getdents64(4, ./strace-static-x86_64: Process 6490 attached [pid 6489] <... rseq resumed>) = 0 [pid 6486] rt_sigprocmask(SIG_SETMASK, [], [pid 6484] close(3 [pid 6490] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6489] set_robust_list(0x7fe7c32469a0, 24 [pid 6487] <... clone3 resumed> => {parent_tid=[6490]}, 88) = 6490 [pid 6484] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6490] <... rseq resumed>) = 0 [pid 6489] <... set_robust_list resumed>) = 0 [pid 6487] rt_sigprocmask(SIG_SETMASK, [], [pid 6484] close(4 [pid 6486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] getdents64(4, [pid 6490] set_robust_list(0x7fe7c32469a0, 24 [pid 6489] rt_sigprocmask(SIG_SETMASK, [], [pid 6488] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6490] <... set_robust_list resumed>) = 0 [pid 6489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6487] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... futex resumed>) = 0 [pid 6484] mkdir("./file0", 0777 [pid 6487] <... futex resumed>) = 0 [pid 6490] rt_sigprocmask(SIG_SETMASK, [], [pid 6489] memfd_create("syzkaller", 0 [pid 6487] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6486] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6484] <... mkdir resumed>) = 0 [pid 5061] close(4 [pid 6490] memfd_create("syzkaller", 0 [pid 6484] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./141/file0") = 0 [pid 6489] <... memfd_create resumed>) = 3 [pid 5061] getdents64(3, [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6489] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] close(3) = 0 [pid 5061] rmdir("./141") = 0 [pid 6490] <... memfd_create resumed>) = 3 [pid 6490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] mkdir("./142", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 141.608992][ T6484] loop4: detected capacity change from 0 to 4096 [ 141.648227][ T6484] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6484] <... mount resumed>) = 0 [pid 6488] <... write resumed>) = 2097152 [pid 6484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6484] chdir("./file0" [pid 6488] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6484] <... chdir resumed>) = 0 [pid 6490] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6489] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6488] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6484] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6488] <... openat resumed>) = 4 [pid 6484] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6488] ioctl(4, LOOP_SET_FD, 3 [pid 6484] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6483] <... futex resumed>) = 0 [pid 6484] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6483] exit_group(0) = ? [pid 6484] <... futex resumed>) = ? [pid 6484] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 6483] +++ exited with 0 +++ [pid 5061] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6483, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6491 attached [pid 5063] unlink("./139/binderfs" [pid 6491] set_robust_list(0x55558e6e36a0, 24 [pid 6488] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 6491] <... set_robust_list resumed>) = 0 [pid 6490] <... write resumed>) = 2097152 [pid 6488] close(3 [pid 5063] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6491 [pid 6491] chdir("./142") = 0 [pid 6491] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6490] munmap(0x7fe7bae00000, 138412032 [pid 6489] <... write resumed>) = 2097152 [pid 6488] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 6491] <... prctl resumed>) = 0 [pid 6489] munmap(0x7fe7bae00000, 138412032 [pid 6488] close(4 [pid 5063] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6491] setpgid(0, 0 [pid 6490] <... munmap resumed>) = 0 [pid 6489] <... munmap resumed>) = 0 [pid 6488] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6491] <... setpgid resumed>) = 0 [pid 6488] mkdir("./file0", 0777 [pid 5063] newfstatat(AT_FDCWD, "./139/file0", [ 141.745049][ T6488] loop1: detected capacity change from 0 to 4096 [pid 6491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6490] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6491] <... openat resumed>) = 3 [pid 6490] <... openat resumed>) = 4 [pid 6489] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6491] write(3, "1000", 4 [pid 6490] ioctl(4, LOOP_SET_FD, 3 [pid 6489] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6491] <... write resumed>) = 4 [pid 6490] <... ioctl resumed>) = 0 [pid 6488] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6491] close(3 [pid 6489] ioctl(4, LOOP_SET_FD, 3 [pid 6491] <... close resumed>) = 0 [pid 6491] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6491] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6488] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] newfstatat(4, "", [pid 6491] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6491] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6489] <... ioctl resumed>) = 0 [pid 5063] getdents64(4, [pid 6491] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] getdents64(4, [pid 6491] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6491] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] close(4 [pid 6491] <... mprotect resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] rmdir("./139/file0" [pid 6491] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6491] <... clone3 resumed> => {parent_tid=[6492]}, 88) = 6492 [pid 5063] close(3 [pid 6491] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... close resumed>) = 0 [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./139" [pid 6491] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 6491] <... futex resumed>) = 0 [pid 6490] close(3 [pid 5063] mkdir("./140", 0777 [pid 6491] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6490] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6490] close(4) = 0 [pid 6490] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6492 attached [pid 6490] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6492] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6492] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6490] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6489] close(3 [pid 6492] rt_sigprocmask(SIG_SETMASK, [], [pid 6489] <... close resumed>) = 0 [pid 6492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6489] close(4 [pid 6492] memfd_create("syzkaller", 0 [pid 6489] <... close resumed>) = 0 [pid 6489] mkdir("./file0", 0777 [pid 6492] <... memfd_create resumed>) = 3 [pid 6492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6489] <... mkdir resumed>) = 0 [pid 6489] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6492] <... mmap resumed>) = 0x7fe7bae00000 [ 141.800508][ T6490] loop3: detected capacity change from 0 to 4096 [ 141.811730][ T6489] loop0: detected capacity change from 0 to 4096 [ 141.814252][ T6488] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 141.841284][ T6490] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6492] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 6488] <... mount resumed>) = 0 [pid 6488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] close(3) = 0 [ 141.868928][ T6489] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6488] chdir("./file0"./strace-static-x86_64: Process 6493 attached [pid 6493] set_robust_list(0x55558e6e36a0, 24 [pid 6488] <... chdir resumed>) = 0 [pid 6493] <... set_robust_list resumed>) = 0 [pid 6488] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6493] chdir("./140" [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6493 [pid 6488] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6493] <... chdir resumed>) = 0 [pid 6493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6488] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... prctl resumed>) = 0 [pid 6493] setpgid(0, 0) = 0 [pid 6493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6488] <... futex resumed>) = 1 [pid 6493] write(3, "1000", 4 [pid 6488] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6493] <... write resumed>) = 4 [pid 6485] <... futex resumed>) = 0 [pid 6493] close(3) = 0 [pid 6493] symlink("/dev/binderfs", "./binderfs" [pid 6490] <... mount resumed>) = 0 [pid 6485] exit_group(0 [pid 6493] <... symlink resumed>) = 0 [pid 6493] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6485] <... exit_group resumed>) = ? [pid 6488] <... futex resumed>) = ? [pid 6493] <... futex resumed>) = 0 [pid 6490] <... openat resumed>) = 3 [pid 6488] +++ exited with 0 +++ [pid 6493] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6490] chdir("./file0" [pid 6493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6490] <... chdir resumed>) = 0 [pid 6493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6490] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6490] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6493] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6490] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... mprotect resumed>) = 0 [pid 6490] <... futex resumed>) = 1 [pid 6490] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6493] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6489] <... mount resumed>) = 0 [pid 6487] <... futex resumed>) = 0 [pid 6485] +++ exited with 0 +++ [pid 6493] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6489] <... openat resumed>) = 3 [pid 6489] chdir("./file0") = 0 [pid 6489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6493] <... clone3 resumed> => {parent_tid=[6494]}, 88) = 6494 [pid 6489] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] rt_sigprocmask(SIG_SETMASK, [], [pid 6489] <... futex resumed>) = 1 [pid 6486] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6494 attached [pid 6493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] exit_group(0 [pid 6494] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6493] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6487] exit_group(0 [pid 6486] <... exit_group resumed>) = ? [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6485, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6493] <... futex resumed>) = 0 [pid 6494] <... rseq resumed>) = 0 [pid 6490] <... futex resumed>) = ? [pid 6487] <... exit_group resumed>) = ? [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6494] set_robust_list(0x7fe7c32469a0, 24 [pid 6493] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6490] +++ exited with 0 +++ [pid 5060] <... restart_syscall resumed>) = 0 [pid 6494] <... set_robust_list resumed>) = 0 [pid 6489] +++ exited with 0 +++ [pid 6487] +++ exited with 0 +++ [pid 6486] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6486, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6494] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6492] <... write resumed>) = 2097152 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6487, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6492] munmap(0x7fe7bae00000, 138412032 [pid 6494] memfd_create("syzkaller", 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6494] <... memfd_create resumed>) = 3 [pid 5060] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] newfstatat(3, "", [pid 5059] <... openat resumed>) = 3 [pid 6494] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6492] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6492] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] getdents64(3, [pid 6492] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5060] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(3, "", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6492] ioctl(4, LOOP_SET_FD, 3 [pid 5062] getdents64(3, [pid 5059] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5060] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./143/binderfs" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] unlink("./140/binderfs" [pid 5059] <... unlink resumed>) = 0 [pid 5062] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5059] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] <... ioctl resumed>) = 0 [pid 6494] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6492] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] <... close resumed>) = 0 [pid 6492] close(4 [pid 6494] <... write resumed>) = 2097152 [pid 5062] unlink("./140/binderfs" [pid 6492] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6494] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... unlink resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./140/file0", [pid 5062] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./143/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6494] <... munmap resumed>) = 0 [pid 6492] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 5059] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 5059] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5059] newfstatat(4, "", [pid 5062] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 5059] getdents64(4, [pid 5062] newfstatat(AT_FDCWD, "./140/file0", [pid 6492] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./140/file0" [pid 5059] getdents64(4, [pid 5062] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5059] close(4 [pid 5062] newfstatat(4, "", [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5060] getdents64(3, [pid 5059] rmdir("./143/file0" [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5062] getdents64(4, [pid 5060] close(3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] close(4) = 0 [pid 5060] rmdir("./140" [pid 5059] getdents64(3, [ 142.004460][ T6492] loop2: detected capacity change from 0 to 4096 [pid 5062] rmdir("./140/file0") = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./143" [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] mkdir("./141", 0777 [pid 6494] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6492] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] close(3 [pid 5060] <... mkdir resumed>) = 0 [pid 6494] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 5059] mkdir("./144", 0777 [pid 6494] ioctl(4, LOOP_SET_FD, 3 [pid 5062] rmdir("./140" [pid 5059] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] mkdir("./141", 0777 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... mkdir resumed>) = 0 [pid 6494] <... ioctl resumed>) = 0 [pid 6494] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6494] <... close resumed>) = 0 [pid 6494] close(4) = 0 [pid 5062] <... openat resumed>) = 3 [pid 6494] mkdir("./file0", 0777) = 0 [pid 6494] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 142.071322][ T6492] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 142.079287][ T6494] loop4: detected capacity change from 0 to 4096 [ 142.093421][ T6494] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5060] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6495 attached , child_tidptr=0x55558e6e3690) = 6496 [pid 6495] set_robust_list(0x55558e6e36a0, 24./strace-static-x86_64: Process 6496 attached ) = 0 [pid 6492] <... mount resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6495 [pid 6496] set_robust_list(0x55558e6e36a0, 24 [pid 6495] chdir("./144" [pid 6492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6495] <... chdir resumed>) = 0 [pid 6492] <... openat resumed>) = 3 [pid 6495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6492] chdir("./file0" [pid 6495] <... prctl resumed>) = 0 [pid 6492] <... chdir resumed>) = 0 [pid 6495] setpgid(0, 0 [pid 6492] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6495] <... setpgid resumed>) = 0 [pid 6492] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6492] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... set_robust_list resumed>) = 0 [pid 6495] <... openat resumed>) = 3 [pid 6492] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6494] <... mount resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6496] chdir("./141" [pid 6492] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] exit_group(0 [pid 6496] <... chdir resumed>) = 0 [pid 6495] write(3, "1000", 4 [pid 6494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6492] <... futex resumed>) = ? [pid 6491] <... exit_group resumed>) = ? [pid 6496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6495] <... write resumed>) = 4 [pid 6494] <... openat resumed>) = 3 [pid 6492] +++ exited with 0 +++ [pid 5062] close(3 [pid 6495] close(3) = 0 [pid 6494] chdir("./file0" [pid 5062] <... close resumed>) = 0 [pid 6495] symlink("/dev/binderfs", "./binderfs" [pid 6494] <... chdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6495] <... symlink resumed>) = 0 [pid 6494] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6496] <... prctl resumed>) = 0 [pid 6495] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6491] +++ exited with 0 +++ ./strace-static-x86_64: Process 6497 attached [pid 6496] setpgid(0, 0 [pid 6495] <... futex resumed>) = 0 [pid 6494] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6491, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6497 [pid 6497] set_robust_list(0x55558e6e36a0, 24 [pid 6496] <... setpgid resumed>) = 0 [pid 6495] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6494] <... futex resumed>) = 1 [pid 6497] <... set_robust_list resumed>) = 0 [pid 6495] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6494] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] chdir("./141" [pid 6496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6495] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6493] <... futex resumed>) = 0 [pid 6497] <... chdir resumed>) = 0 [pid 6495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6496] <... openat resumed>) = 3 [pid 6495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6493] exit_group(0 [pid 5061] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] <... prctl resumed>) = 0 [pid 6496] write(3, "1000", 4 [pid 6495] <... mmap resumed>) = 0x7fe7c3226000 [pid 6494] <... futex resumed>) = ? [pid 6493] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6497] setpgid(0, 0 [pid 6496] <... write resumed>) = 4 [pid 6495] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6494] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] <... setpgid resumed>) = 0 [pid 6495] <... mprotect resumed>) = 0 [pid 6497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6496] close(3 [pid 6495] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... openat resumed>) = 3 [pid 6497] <... openat resumed>) = 3 [pid 6496] <... close resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 6496] symlink("/dev/binderfs", "./binderfs" [pid 6495] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6493] +++ exited with 0 +++ [pid 6497] write(3, "1000", 4 [pid 6496] <... symlink resumed>) = 0 [pid 6495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6498 attached [pid 6497] <... write resumed>) = 4 [pid 6496] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6493, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] getdents64(3, [pid 6498] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6497] close(3 [pid 6496] <... futex resumed>) = 0 [pid 6495] <... clone3 resumed> => {parent_tid=[6498]}, 88) = 6498 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6498] <... rseq resumed>) = 0 [pid 6497] <... close resumed>) = 0 [pid 6496] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6495] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6498] set_robust_list(0x7fe7c32469a0, 24 [pid 6497] symlink("/dev/binderfs", "./binderfs" [pid 6496] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6498] <... set_robust_list resumed>) = 0 [pid 6496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] newfstatat(AT_FDCWD, "./142/binderfs", [pid 6498] rt_sigprocmask(SIG_SETMASK, [], [pid 6496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./142/binderfs" [pid 6498] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] <... symlink resumed>) = 0 [pid 6496] <... mmap resumed>) = 0x7fe7c3226000 [pid 6495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... unlink resumed>) = 0 [pid 6498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6495] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] <... futex resumed>) = 0 [pid 6496] <... mprotect resumed>) = 0 [pid 6495] <... futex resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 6497] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6495] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6497] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] getdents64(3, [pid 6497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6496] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6499 attached [pid 6498] memfd_create("syzkaller", 0 [pid 6496] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] newfstatat(AT_FDCWD, "./140/binderfs", [pid 5061] <... umount2 resumed>) = 0 [pid 6499] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6498] <... memfd_create resumed>) = 3 [pid 6497] <... clone3 resumed> => {parent_tid=[6499]}, 88) = 6499 [pid 6496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6500 attached [pid 6499] <... rseq resumed>) = 0 [pid 6498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6497] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] unlink("./140/binderfs" [pid 6500] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6499] set_robust_list(0x7fe7c32469a0, 24 [pid 6498] <... mmap resumed>) = 0x7fe7bae00000 [pid 6497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6496] <... clone3 resumed> => {parent_tid=[6500]}, 88) = 6500 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] <... rseq resumed>) = 0 [pid 6499] <... set_robust_list resumed>) = 0 [pid 6497] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./142/file0", [pid 6500] set_robust_list(0x7fe7c32469a0, 24 [pid 6499] rt_sigprocmask(SIG_SETMASK, [], [pid 6497] <... futex resumed>) = 0 [pid 6496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6500] <... set_robust_list resumed>) = 0 [pid 6499] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6497] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6500] rt_sigprocmask(SIG_SETMASK, [], [pid 6499] memfd_create("syzkaller", 0 [pid 6496] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6500] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6500] memfd_create("syzkaller", 0 [pid 6496] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./140/file0", [pid 5061] newfstatat(4, "", [pid 6496] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6499] <... memfd_create resumed>) = 3 [pid 5063] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 6499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6500] <... memfd_create resumed>) = 3 [pid 6499] <... mmap resumed>) = 0x7fe7bae00000 [pid 6500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] rmdir("./142/file0" [pid 6500] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] newfstatat(4, "", [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./142" [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5061] mkdir("./143", 0777 [pid 5063] rmdir("./140/file0") = 0 [pid 5063] getdents64(3, [pid 5061] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] close(3) = 0 [pid 5063] rmdir("./140") = 0 [pid 5063] mkdir("./141", 0777) = 0 [pid 6499] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6498] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6500] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6499] <... write resumed>) = 2097152 [pid 6499] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6500] <... write resumed>) = 2097152 [pid 6498] <... write resumed>) = 2097152 [pid 6499] ioctl(4, LOOP_SET_FD, 3 [pid 6500] munmap(0x7fe7bae00000, 138412032 [pid 6498] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... ioctl resumed>) = 0 [pid 6500] <... munmap resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6500] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6500] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6501 attached [pid 6498] <... munmap resumed>) = 0 [pid 6501] set_robust_list(0x55558e6e36a0, 24 [pid 6498] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6501] <... set_robust_list resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6501 [pid 6498] <... openat resumed>) = 4 [pid 6501] chdir("./143" [pid 6498] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = 0 [pid 6501] <... chdir resumed>) = 0 [pid 6500] <... ioctl resumed>) = 0 [pid 6499] <... ioctl resumed>) = 0 [pid 6498] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 6500] close(3 [pid 6499] close(3 [pid 6500] <... close resumed>) = 0 [pid 6498] close(3 [pid 6500] close(4 [pid 6499] <... close resumed>) = 0 [pid 6498] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6500] <... close resumed>) = 0 [pid 6499] close(4 [pid 6498] close(4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6502 attached [pid 6501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6500] mkdir("./file0", 0777 [pid 6499] <... close resumed>) = 0 [pid 6498] <... close resumed>) = 0 [pid 6501] <... prctl resumed>) = 0 [pid 6500] <... mkdir resumed>) = 0 [pid 6499] mkdir("./file0", 0777 [pid 6498] mkdir("./file0", 0777 [pid 6502] set_robust_list(0x55558e6e36a0, 24 [pid 6501] setpgid(0, 0 [pid 6500] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6499] <... mkdir resumed>) = 0 [pid 6498] <... mkdir resumed>) = 0 [pid 6502] <... set_robust_list resumed>) = 0 [pid 6501] <... setpgid resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6502 [ 142.375184][ T6499] loop3: detected capacity change from 0 to 4096 [ 142.400543][ T6500] loop1: detected capacity change from 0 to 4096 [ 142.410506][ T6498] loop0: detected capacity change from 0 to 4096 [pid 6501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6499] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6498] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6502] chdir("./141") = 0 [pid 6502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6502] setpgid(0, 0) = 0 [pid 6502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6501] <... openat resumed>) = 3 [pid 6502] <... openat resumed>) = 3 [pid 6502] write(3, "1000", 4) = 4 [pid 6502] close(3) = 0 [pid 6502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6502] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] write(3, "1000", 4) = 4 [pid 6501] close(3) = 0 [pid 6501] symlink("/dev/binderfs", "./binderfs" [pid 6502] <... futex resumed>) = 0 [pid 6502] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6502] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6501] <... symlink resumed>) = 0 [pid 6502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6501] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] <... mmap resumed>) = 0x7fe7c3226000 [pid 6501] <... futex resumed>) = 0 [pid 6502] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6501] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6502] <... mprotect resumed>) = 0 [pid 6501] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6502] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6501] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6500] <... mount resumed>) = 0 [pid 6502] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6501] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6500] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6503 attached [pid 6501] <... mprotect resumed>) = 0 [pid 6500] chdir("./file0" [pid 6503] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6502] <... clone3 resumed> => {parent_tid=[6503]}, 88) = 6503 [pid 6500] <... chdir resumed>) = 0 [pid 6502] rt_sigprocmask(SIG_SETMASK, [], [ 142.433783][ T6500] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 142.445899][ T6498] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 142.455771][ T6499] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6501] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6503] <... rseq resumed>) = 0 [pid 6502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6500] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6499] <... mount resumed>) = 0 [pid 6498] <... mount resumed>) = 0 [pid 6503] set_robust_list(0x7fe7c32469a0, 24 [pid 6502] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6500] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6503] <... set_robust_list resumed>) = 0 [pid 6502] <... futex resumed>) = 0 [pid 6501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6500] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... openat resumed>) = 3 [pid 6498] <... openat resumed>) = 3 [pid 6503] rt_sigprocmask(SIG_SETMASK, [], [pid 6498] chdir("./file0" [pid 6503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6498] <... chdir resumed>) = 0 [pid 6502] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6499] chdir("./file0" [pid 6498] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6499] <... chdir resumed>) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6504 attached [pid 6501] <... clone3 resumed> => {parent_tid=[6504]}, 88) = 6504 [pid 6500] <... futex resumed>) = 1 [pid 6499] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 0 [pid 6501] rt_sigprocmask(SIG_SETMASK, [], [pid 6500] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] <... futex resumed>) = 1 [pid 6496] exit_group(0 [pid 6498] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6504] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6500] <... futex resumed>) = ? [pid 6496] <... exit_group resumed>) = ? [pid 6498] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] <... rseq resumed>) = 0 [pid 6503] memfd_create("syzkaller", 0 [pid 6501] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] +++ exited with 0 +++ [pid 6499] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] <... futex resumed>) = 1 [pid 6497] <... futex resumed>) = 0 [pid 6495] <... futex resumed>) = 0 [pid 6497] exit_group(0 [pid 6495] exit_group(0 [pid 6504] set_robust_list(0x7fe7c32469a0, 24 [pid 6498] +++ exited with 0 +++ [pid 6495] <... exit_group resumed>) = ? [pid 6499] <... futex resumed>) = ? [pid 6503] <... memfd_create resumed>) = 3 [pid 6497] <... exit_group resumed>) = ? [pid 6504] <... set_robust_list resumed>) = 0 [pid 6503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6501] <... futex resumed>) = 0 [pid 6499] +++ exited with 0 +++ [pid 6497] +++ exited with 0 +++ [pid 6495] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6497, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6495, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6503] <... mmap resumed>) = 0x7fe7bae00000 [pid 6504] rt_sigprocmask(SIG_SETMASK, [], [pid 6501] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6496] +++ exited with 0 +++ [pid 5062] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... restart_syscall resumed>) = 0 [pid 6504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6496, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5062] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(3, [pid 5059] <... openat resumed>) = 3 [pid 6504] memfd_create("syzkaller", 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(3, "", [pid 6504] <... memfd_create resumed>) = 3 [pid 5062] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 6504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5060] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6504] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./141/binderfs" [pid 5060] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... unlink resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5062] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 5059] unlink("./144/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5060] newfstatat(AT_FDCWD, "./141/binderfs", [pid 5062] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./141/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5060] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./141/file0") = 0 [pid 5059] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./144/file0", [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3 [pid 5059] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] rmdir("./141" [pid 5059] <... openat resumed>) = 4 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(4, "", [pid 5062] mkdir("./142", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6503] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./141/file0", [pid 5059] getdents64(4, [pid 6504] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(4) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] rmdir("./144/file0") = 0 [pid 5060] <... openat resumed>) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5059] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(4, [pid 5059] close(3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] close(4 [pid 5059] rmdir("./144" [pid 5060] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] rmdir("./141/file0" [pid 5059] mkdir("./145", 0777 [pid 6504] <... write resumed>) = 2097152 [pid 6503] <... write resumed>) = 2097152 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6504] munmap(0x7fe7bae00000, 138412032 [pid 6503] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... openat resumed>) = 3 [pid 5060] close(3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./141") = 0 [pid 5060] mkdir("./142", 0777) = 0 [pid 6503] <... munmap resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6504] <... munmap resumed>) = 0 [pid 6503] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6503] <... openat resumed>) = 4 [pid 6503] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6504] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6504] ioctl(4, LOOP_SET_FD, 3 [pid 6503] close(3) = 0 [pid 6503] close(4) = 0 [pid 6503] mkdir("./file0", 0777 [pid 5062] <... ioctl resumed>) = 0 [pid 6503] <... mkdir resumed>) = 0 [pid 6503] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6504] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 6504] close(3 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6504] <... close resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6505 ./strace-static-x86_64: Process 6505 attached [pid 6504] close(4 [pid 5059] <... ioctl resumed>) = 0 [pid 6505] set_robust_list(0x55558e6e36a0, 24 [pid 6504] <... close resumed>) = 0 [pid 6505] <... set_robust_list resumed>) = 0 [pid 6504] mkdir("./file0", 0777 [pid 5059] close(3 [pid 6505] chdir("./142" [pid 6504] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6506 ./strace-static-x86_64: Process 6506 attached [pid 6506] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6506] chdir("./145") = 0 [pid 6506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6506] setpgid(0, 0) = 0 [pid 6506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6504] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6505] <... chdir resumed>) = 0 [ 142.670458][ T6503] loop4: detected capacity change from 0 to 4096 [ 142.689087][ T6504] loop2: detected capacity change from 0 to 4096 [ 142.698096][ T6503] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6506] <... openat resumed>) = 3 [pid 6506] write(3, "1000", 4) = 4 [pid 6506] close(3) = 0 [pid 6506] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6506] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6505] <... prctl resumed>) = 0 [pid 6505] setpgid(0, 0) = 0 [pid 6506] <... mmap resumed>) = 0x7fe7c3226000 [pid 6505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6506] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6506] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6505] <... openat resumed>) = 3 [pid 6506] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6507 attached [pid 6507] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6506] <... clone3 resumed> => {parent_tid=[6507]}, 88) = 6507 [pid 5060] <... ioctl resumed>) = 0 [pid 6507] <... rseq resumed>) = 0 [pid 6506] rt_sigprocmask(SIG_SETMASK, [], [pid 6507] set_robust_list(0x7fe7c32469a0, 24 [pid 6506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] close(3 [pid 6506] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] write(3, "1000", 4 [pid 6507] <... set_robust_list resumed>) = 0 [pid 6506] <... futex resumed>) = 0 [pid 6505] <... write resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 6507] rt_sigprocmask(SIG_SETMASK, [], [pid 6506] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6507] memfd_create("syzkaller", 0 [pid 6505] close(3) = 0 [pid 6505] symlink("/dev/binderfs", "./binderfs" [pid 6503] <... mount resumed>) = 0 [pid 6505] <... symlink resumed>) = 0 [pid 6503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6505] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... openat resumed>) = 3 [pid 6505] <... futex resumed>) = 0 [pid 6503] chdir("./file0" [pid 6505] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6503] <... chdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6508 ./strace-static-x86_64: Process 6508 attached [pid 6507] <... memfd_create resumed>) = 3 [pid 6505] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6503] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6508] set_robust_list(0x55558e6e36a0, 24 [pid 6507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6503] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6508] <... set_robust_list resumed>) = 0 [pid 6507] <... mmap resumed>) = 0x7fe7bae00000 [pid 6503] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [ 142.741080][ T6504] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6508] chdir("./142" [pid 6505] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6508] <... chdir resumed>) = 0 [pid 6503] <... futex resumed>) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6502] exit_group(0 [pid 6505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6502] <... exit_group resumed>) = ? [pid 6508] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6505] <... mmap resumed>) = 0x7fe7c3226000 [pid 6503] +++ exited with 0 +++ [pid 6502] +++ exited with 0 +++ [pid 6508] <... prctl resumed>) = 0 [pid 6505] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6502, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6508] setpgid(0, 0 [pid 6505] <... mprotect resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6509 attached [pid 6508] <... setpgid resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6509] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6505] <... clone3 resumed> => {parent_tid=[6509]}, 88) = 6509 [pid 5063] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6509] <... rseq resumed>) = 0 [pid 6508] <... openat resumed>) = 3 [pid 6505] rt_sigprocmask(SIG_SETMASK, [], [pid 6509] set_robust_list(0x7fe7c32469a0, 24 [pid 6505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6505] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 6508] write(3, "1000", 4 [pid 5063] newfstatat(3, "", [pid 6508] <... write resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6508] close(3 [pid 5063] unlink("./141/binderfs" [pid 6508] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 6508] symlink("/dev/binderfs", "./binderfs" [pid 6505] <... futex resumed>) = 0 [pid 5063] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6508] <... symlink resumed>) = 0 [pid 6508] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6505] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6509] <... set_robust_list resumed>) = 0 [pid 6508] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6509] rt_sigprocmask(SIG_SETMASK, [], [pid 6508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6504] <... mount resumed>) = 0 [pid 6509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6509] memfd_create("syzkaller", 0 [pid 6508] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6504] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 6508] <... mprotect resumed>) = 0 [pid 6504] chdir("./file0" [pid 6508] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6504] <... chdir resumed>) = 0 [pid 6509] <... memfd_create resumed>) = 3 [pid 6508] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6510 attached [pid 5063] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6510] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6508] <... clone3 resumed> => {parent_tid=[6510]}, 88) = 6510 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6510] <... rseq resumed>) = 0 [pid 6508] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] newfstatat(AT_FDCWD, "./141/file0", [pid 6510] set_robust_list(0x7fe7c32469a0, 24 [pid 6508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6510] <... set_robust_list resumed>) = 0 [pid 6509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6508] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6510] rt_sigprocmask(SIG_SETMASK, [], [pid 6509] <... mmap resumed>) = 0x7fe7bae00000 [pid 6508] <... futex resumed>) = 0 [pid 6504] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6510] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6508] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6504] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] memfd_create("syzkaller", 0 [pid 6504] <... futex resumed>) = 1 [pid 6501] <... futex resumed>) = 0 [pid 6510] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 6510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] newfstatat(4, "", [pid 6504] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6501] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6504] <... futex resumed>) = ? [pid 6501] <... exit_group resumed>) = ? [pid 6504] +++ exited with 0 +++ [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 6501] +++ exited with 0 +++ [pid 5063] rmdir("./141/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6501, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6507] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./141") = 0 [pid 5063] mkdir("./142", 0777) = 0 [pid 5061] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(3, "", [pid 6509] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./143/binderfs") = 0 [pid 5061] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6507] <... write resumed>) = 2097152 [pid 5061] close(4 [pid 6510] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6509] <... write resumed>) = 2097152 [pid 6507] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./143/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./143") = 0 [pid 6507] <... munmap resumed>) = 0 [pid 5061] mkdir("./144", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6509] munmap(0x7fe7bae00000, 138412032 [pid 6507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6507] ioctl(4, LOOP_SET_FD, 3 [pid 6509] <... munmap resumed>) = 0 [pid 6509] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6507] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6509] <... openat resumed>) = 4 [pid 6507] close(3 [pid 6509] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 6507] <... close resumed>) = 0 [pid 6507] close(4) = 0 [pid 6507] mkdir("./file0", 0777 [pid 6510] <... write resumed>) = 2097152 [pid 6507] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6510] munmap(0x7fe7bae00000, 138412032 [pid 6509] <... ioctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6507] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6510] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6511 attached [pid 6510] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6509] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6511 [pid 6510] <... openat resumed>) = 4 [pid 6510] ioctl(4, LOOP_SET_FD, 3 [pid 6509] <... close resumed>) = 0 [pid 6511] set_robust_list(0x55558e6e36a0, 24 [ 142.957619][ T6507] loop0: detected capacity change from 0 to 4096 [ 142.974929][ T6509] loop3: detected capacity change from 0 to 4096 [ 142.993859][ T6507] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6509] close(4 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 6511] <... set_robust_list resumed>) = 0 [pid 6510] <... ioctl resumed>) = 0 [pid 6509] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6511] chdir("./142" [pid 6509] mkdir("./file0", 0777 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6511] <... chdir resumed>) = 0 [pid 6509] <... mkdir resumed>) = 0 [pid 6511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6509] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6512 ./strace-static-x86_64: Process 6512 attached [pid 6512] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6512] chdir("./144") = 0 [pid 6512] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6511] <... prctl resumed>) = 0 [pid 6510] close(3 [pid 6512] <... prctl resumed>) = 0 [pid 6511] setpgid(0, 0 [pid 6510] <... close resumed>) = 0 [pid 6512] setpgid(0, 0 [pid 6511] <... setpgid resumed>) = 0 [pid 6510] close(4 [pid 6512] <... setpgid resumed>) = 0 [pid 6511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6510] <... close resumed>) = 0 [pid 6512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6511] <... openat resumed>) = 3 [pid 6512] <... openat resumed>) = 3 [pid 6511] write(3, "1000", 4 [pid 6510] mkdir("./file0", 0777 [pid 6512] write(3, "1000", 4 [pid 6511] <... write resumed>) = 4 [pid 6512] <... write resumed>) = 4 [pid 6511] close(3 [pid 6510] <... mkdir resumed>) = 0 [pid 6512] close(3 [pid 6511] <... close resumed>) = 0 [pid 6510] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6512] <... close resumed>) = 0 [pid 6511] symlink("/dev/binderfs", "./binderfs" [pid 6512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6511] <... symlink resumed>) = 0 [ 143.009502][ T6510] loop1: detected capacity change from 0 to 4096 [ 143.022781][ T6509] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6512] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6511] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6511] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6512] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6511] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6512] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6511] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6509] <... mount resumed>) = 0 [pid 6511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6511] <... mmap resumed>) = 0x7fe7c3226000 [pid 6512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6511] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6509] <... openat resumed>) = 3 [pid 6507] <... mount resumed>) = 0 [pid 6512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6509] chdir("./file0" [pid 6507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6509] <... chdir resumed>) = 0 [pid 6507] <... openat resumed>) = 3 [pid 6512] <... mmap resumed>) = 0x7fe7c3226000 [pid 6509] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6512] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6507] chdir("./file0" [pid 6512] <... mprotect resumed>) = 0 [pid 6509] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6507] <... chdir resumed>) = 0 [pid 6512] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6511] <... mprotect resumed>) = 0 [pid 6509] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6507] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6512] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6511] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6509] <... futex resumed>) = 1 [pid 6507] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6505] <... futex resumed>) = 0 [pid 6512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6511] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6509] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6507] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] exit_group(0./strace-static-x86_64: Process 6513 attached [pid 6511] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6509] <... futex resumed>) = ? [pid 6507] <... futex resumed>) = 1 [pid 6506] <... futex resumed>) = 0 [pid 6505] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6514 attached [pid 6513] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6509] +++ exited with 0 +++ [pid 6507] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6506] exit_group(0 [pid 6514] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6513] <... rseq resumed>) = 0 [pid 6512] <... clone3 resumed> => {parent_tid=[6513]}, 88) = 6513 [pid 6507] <... futex resumed>) = ? [pid 6506] <... exit_group resumed>) = ? [pid 6514] <... rseq resumed>) = 0 [pid 6513] set_robust_list(0x7fe7c32469a0, 24 [pid 6512] rt_sigprocmask(SIG_SETMASK, [], [pid 6511] <... clone3 resumed> => {parent_tid=[6514]}, 88) = 6514 [pid 6507] +++ exited with 0 +++ [pid 6506] +++ exited with 0 +++ [pid 6514] set_robust_list(0x7fe7c32469a0, 24 [pid 6513] <... set_robust_list resumed>) = 0 [pid 6512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6511] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6506, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6514] <... set_robust_list resumed>) = 0 [pid 6513] rt_sigprocmask(SIG_SETMASK, [], [pid 6512] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6514] rt_sigprocmask(SIG_SETMASK, [], [pid 6513] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6512] <... futex resumed>) = 0 [pid 6511] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6513] memfd_create("syzkaller", 0 [pid 6512] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6511] <... futex resumed>) = 0 [pid 6505] +++ exited with 0 +++ [pid 6511] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6505, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6514] memfd_create("syzkaller", 0 [pid 5059] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6513] <... memfd_create resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 6514] <... memfd_create resumed>) = 3 [ 143.053970][ T6510] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] newfstatat(3, "", [pid 6514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6513] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6514] <... mmap resumed>) = 0x7fe7bae00000 [pid 6510] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5062] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... openat resumed>) = 3 [pid 5059] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6510] <... openat resumed>) = 3 [pid 5059] unlink("./145/binderfs" [pid 6510] chdir("./file0") = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6510] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] getdents64(3, [pid 5059] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6510] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6510] <... futex resumed>) = 1 [pid 5062] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6510] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./142/binderfs", [pid 6508] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6508] exit_group(0 [pid 5062] unlink("./142/binderfs" [pid 5059] <... umount2 resumed>) = 0 [pid 6508] <... exit_group resumed>) = ? [pid 5062] <... unlink resumed>) = 0 [pid 5059] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6510] <... futex resumed>) = ? [pid 5062] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 5062] newfstatat(AT_FDCWD, "./142/file0", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, [pid 5062] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6510] +++ exited with 0 +++ [pid 6508] +++ exited with 0 +++ [pid 5059] getdents64(4, [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6508, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(4 [pid 5062] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./145/file0" [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5059] <... rmdir resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5060] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5060] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 5062] getdents64(4, [pid 5060] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(3 [pid 5062] close(4 [pid 5060] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... close resumed>) = 0 [pid 5062] rmdir("./142/file0" [pid 5060] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./145" [pid 5060] newfstatat(AT_FDCWD, "./142/binderfs", [pid 5059] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] mkdir("./146", 0777 [pid 6513] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] unlink("./142/binderfs" [pid 5059] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 5060] <... unlink resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5062] rmdir("./142" [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... rmdir resumed>) = 0 [pid 6514] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... umount2 resumed>) = 0 [pid 6513] <... write resumed>) = 2097152 [pid 5062] mkdir("./143", 0777 [pid 5060] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./142/file0", [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5060] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... openat resumed>) = 4 [pid 6513] munmap(0x7fe7bae00000, 138412032 [pid 5060] newfstatat(4, "", [pid 6513] <... munmap resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./142/file0" [pid 6513] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6513] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6513] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 6513] close(3 [pid 6514] <... write resumed>) = 2097152 [pid 6513] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6513] close(4 [pid 6514] munmap(0x7fe7bae00000, 138412032 [pid 6513] <... close resumed>) = 0 [pid 5059] close(3 [pid 5060] rmdir("./142" [pid 6513] mkdir("./file0", 0777) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6513] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] mkdir("./143", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6514] <... munmap resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6515 [pid 6514] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 143.239399][ T6513] loop2: detected capacity change from 0 to 4096 [ 143.271236][ T6513] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6514] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6515 attached [pid 5062] <... ioctl resumed>) = 0 [pid 6515] set_robust_list(0x55558e6e36a0, 24 [pid 5062] close(3 [pid 6515] <... set_robust_list resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 6515] chdir("./146" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6514] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6516 attached [pid 6515] <... chdir resumed>) = 0 [pid 6514] close(3 [pid 6516] set_robust_list(0x55558e6e36a0, 24 [pid 6515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6514] <... close resumed>) = 0 [pid 6516] <... set_robust_list resumed>) = 0 [pid 6514] close(4 [pid 6516] chdir("./143" [pid 6515] <... prctl resumed>) = 0 [pid 6514] <... close resumed>) = 0 [pid 6514] mkdir("./file0", 0777 [pid 6515] setpgid(0, 0 [pid 6514] <... mkdir resumed>) = 0 [pid 6515] <... setpgid resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6516 [pid 6516] <... chdir resumed>) = 0 [pid 6515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 143.286865][ T6514] loop4: detected capacity change from 0 to 4096 [pid 6516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6515] <... openat resumed>) = 3 [pid 6514] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6516] setpgid(0, 0) = 0 [pid 6516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6516] write(3, "1000", 4) = 4 [pid 6516] close(3) = 0 [pid 6516] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6516] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] write(3, "1000", 4 [pid 6513] <... mount resumed>) = 0 [pid 6515] <... write resumed>) = 4 [pid 6513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6515] close(3 [pid 6513] chdir("./file0") = 0 [pid 6513] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6515] <... close resumed>) = 0 [pid 6516] <... futex resumed>) = 0 [pid 6515] symlink("/dev/binderfs", "./binderfs" [pid 6513] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6516] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6516] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6513] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6515] <... symlink resumed>) = 0 [pid 6513] <... futex resumed>) = 1 [pid 6512] <... futex resumed>) = 0 [pid 5060] close(3 [pid 6513] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6516] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6512] exit_group(0 [pid 5060] <... close resumed>) = 0 [pid 6516] <... mprotect resumed>) = 0 [pid 6515] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6513] <... futex resumed>) = ? [pid 6512] <... exit_group resumed>) = ? [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6516] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6515] <... futex resumed>) = 0 [pid 6513] +++ exited with 0 +++ [pid 6512] +++ exited with 0 +++ ./strace-static-x86_64: Process 6517 attached [pid 6516] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6515] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6512, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=4 /* 0.04 s */} --- [pid 6517] set_robust_list(0x55558e6e36a0, 24 [pid 6516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6515] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6517 [pid 6517] <... set_robust_list resumed>) = 0 [pid 6515] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 6518 attached [pid 6517] chdir("./143" [pid 6515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6518] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6517] <... chdir resumed>) = 0 [pid 6516] <... clone3 resumed> => {parent_tid=[6518]}, 88) = 6518 [pid 6515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6518] <... rseq resumed>) = 0 [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6516] rt_sigprocmask(SIG_SETMASK, [], [pid 6515] <... mmap resumed>) = 0x7fe7c3226000 [ 143.338103][ T6514] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6518] set_robust_list(0x7fe7c32469a0, 24 [pid 6517] <... prctl resumed>) = 0 [pid 6516] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6515] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6518] <... set_robust_list resumed>) = 0 [pid 6517] setpgid(0, 0 [pid 6516] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] <... mprotect resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6518] rt_sigprocmask(SIG_SETMASK, [], [pid 6517] <... setpgid resumed>) = 0 [pid 6516] <... futex resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6518] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6516] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6515] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... openat resumed>) = 3 [pid 6518] memfd_create("syzkaller", 0 [pid 6517] <... openat resumed>) = 3 [pid 6515] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] newfstatat(3, "", [pid 6518] <... memfd_create resumed>) = 3 [pid 6515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6514] <... mount resumed>) = 0 [pid 5061] getdents64(3, [pid 6518] <... mmap resumed>) = 0x7fe7bae00000 [pid 6517] write(3, "1000", 4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6517] <... write resumed>) = 4 [pid 6514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6517] close(3 [pid 6514] <... openat resumed>) = 3 [pid 5061] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6517] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6517] symlink("/dev/binderfs", "./binderfs" [pid 6514] chdir("./file0" [pid 5061] newfstatat(AT_FDCWD, "./144/binderfs", [pid 6517] <... symlink resumed>) = 0 [pid 6514] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./144/binderfs" [pid 6514] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6515] <... clone3 resumed> => {parent_tid=[6519]}, 88) = 6519 [pid 5061] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6519 attached [pid 6515] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6519] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6517] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6517] <... futex resumed>) = 0 [pid 6515] <... futex resumed>) = 0 [pid 6514] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... rseq resumed>) = 0 [pid 6519] set_robust_list(0x7fe7c32469a0, 24 [pid 6517] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6515] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6514] <... futex resumed>) = 1 [pid 6511] <... futex resumed>) = 0 [pid 6517] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6514] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] exit_group(0 [pid 6517] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6514] <... futex resumed>) = ? [pid 6511] <... exit_group resumed>) = ? [pid 6517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6514] +++ exited with 0 +++ [pid 6519] <... set_robust_list resumed>) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6511] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 6519] rt_sigprocmask(SIG_SETMASK, [], [pid 6517] <... mmap resumed>) = 0x7fe7c3226000 [pid 5061] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6517] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6517] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6519] memfd_create("syzkaller", 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6519] <... memfd_create resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./144/file0", [pid 6519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6518] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6517] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6511, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6519] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6520]}, 88) = 6520 [pid 5061] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6520 attached [pid 6517] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 6520] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6520] <... rseq resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 6520] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6520] <... set_robust_list resumed>) = 0 [pid 6520] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] getdents64(4, [pid 6520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6520] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6517] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6517] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] unlink("./142/binderfs" [pid 5061] close(4 [pid 6520] memfd_create("syzkaller", 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./144/file0" [pid 5063] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6520] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 6520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6519] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6518] <... write resumed>) = 2097152 [pid 5063] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 6518] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 6518] <... munmap resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./142/file0", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5063] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] rmdir("./144" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./142/file0") = 0 [pid 5061] mkdir("./145", 0777 [pid 6518] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] getdents64(3, [pid 5061] <... mkdir resumed>) = 0 [pid 6518] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6518] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./142" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 6520] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6518] <... ioctl resumed>) = 0 [pid 5063] mkdir("./143", 0777 [pid 5061] <... openat resumed>) = 3 [pid 6519] <... write resumed>) = 2097152 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6519] munmap(0x7fe7bae00000, 138412032 [pid 6518] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 6518] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6518] close(4 [pid 5063] <... openat resumed>) = 3 [pid 6518] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6518] mkdir("./file0", 0777) = 0 [pid 6518] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6519] <... munmap resumed>) = 0 [pid 6519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6520] <... write resumed>) = 2097152 [ 143.487264][ T6518] loop3: detected capacity change from 0 to 4096 [ 143.527038][ T6518] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6519] ioctl(4, LOOP_SET_FD, 3 [pid 6520] munmap(0x7fe7bae00000, 138412032 [pid 6519] <... ioctl resumed>) = 0 [pid 6519] close(3) = 0 [pid 6519] close(4) = 0 [pid 6519] mkdir("./file0", 0777) = 0 [pid 6519] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6520] <... munmap resumed>) = 0 [pid 6520] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6520] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6520] close(3) = 0 [pid 6520] close(4) = 0 [pid 6520] mkdir("./file0", 0777 [pid 6518] <... mount resumed>) = 0 [pid 6520] <... mkdir resumed>) = 0 [pid 6518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... ioctl resumed>) = 0 [pid 6518] <... openat resumed>) = 3 [ 143.540610][ T6519] loop0: detected capacity change from 0 to 4096 [ 143.566231][ T6519] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 143.580157][ T6520] loop1: detected capacity change from 0 to 4096 [pid 6518] chdir("./file0" [pid 6520] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6518] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 6518] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6518] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6518] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6518] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6516] <... futex resumed>) = 0 [pid 6516] exit_group(0 [pid 6518] <... futex resumed>) = ? [pid 6516] <... exit_group resumed>) = ? [pid 6518] +++ exited with 0 +++ [pid 6516] +++ exited with 0 +++ [pid 5061] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6516, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6521 attached [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6521 [pid 5062] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6522 [pid 6521] set_robust_list(0x55558e6e36a0, 24./strace-static-x86_64: Process 6522 attached [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6522] set_robust_list(0x55558e6e36a0, 24 [pid 6521] <... set_robust_list resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6522] <... set_robust_list resumed>) = 0 [pid 6521] chdir("./143" [pid 5062] <... openat resumed>) = 3 [pid 6522] chdir("./145" [pid 5062] newfstatat(3, "", [pid 6522] <... chdir resumed>) = 0 [pid 6521] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] getdents64(3, [pid 6522] <... prctl resumed>) = 0 [pid 6521] <... prctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6522] setpgid(0, 0 [pid 6521] setpgid(0, 0 [pid 5062] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6522] <... setpgid resumed>) = 0 [pid 6521] <... setpgid resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] newfstatat(AT_FDCWD, "./143/binderfs", [pid 6522] <... openat resumed>) = 3 [pid 6521] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6522] write(3, "1000", 4 [pid 6521] write(3, "1000", 4 [pid 5062] unlink("./143/binderfs" [pid 6522] <... write resumed>) = 4 [pid 6521] <... write resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 6521] close(3) = 0 [pid 6521] symlink("/dev/binderfs", "./binderfs" [pid 5062] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6522] close(3 [pid 6521] <... symlink resumed>) = 0 [pid 6520] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6521] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] <... close resumed>) = 0 [pid 6521] <... futex resumed>) = 0 [pid 6520] <... openat resumed>) = 3 [pid 6522] symlink("/dev/binderfs", "./binderfs" [pid 6521] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6520] chdir("./file0" [pid 6521] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6520] <... chdir resumed>) = 0 [ 143.634310][ T6520] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6522] <... symlink resumed>) = 0 [pid 6521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6520] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6519] <... mount resumed>) = 0 [pid 5062] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6520] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6522] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... mmap resumed>) = 0x7fe7c3226000 [pid 6520] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6522] <... futex resumed>) = 0 [pid 6521] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6520] <... futex resumed>) = 1 [pid 6519] <... openat resumed>) = 3 [pid 6517] <... futex resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./143/file0", [pid 6521] <... mprotect resumed>) = 0 [pid 6520] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] chdir("./file0" [pid 6517] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6522] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6521] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6520] <... futex resumed>) = ? [pid 6519] <... chdir resumed>) = 0 [pid 6517] <... exit_group resumed>) = ? [pid 5062] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6522] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6519] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6519] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6519] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 4 [pid 6522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6519] <... futex resumed>) = 1 [pid 6515] <... futex resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 6522] <... mmap resumed>) = 0x7fe7c3226000 [pid 6521] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6515] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6522] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6515] <... exit_group resumed>) = ? [pid 5062] getdents64(4, ./strace-static-x86_64: Process 6523 attached [pid 6522] <... mprotect resumed>) = 0 [pid 6520] +++ exited with 0 +++ [pid 6517] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6523] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6522] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] getdents64(4, [pid 6521] <... clone3 resumed> => {parent_tid=[6523]}, 88) = 6523 [pid 6523] <... rseq resumed>) = 0 [pid 6522] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6521] rt_sigprocmask(SIG_SETMASK, [], [pid 6519] +++ exited with 0 +++ [pid 6515] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6517, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 6523] set_robust_list(0x7fe7c32469a0, 24 [pid 6522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] close(4 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6515, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 6524 attached [pid 6523] <... set_robust_list resumed>) = 0 [pid 6521] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... close resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6524] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6523] rt_sigprocmask(SIG_SETMASK, [], [pid 6522] <... clone3 resumed> => {parent_tid=[6524]}, 88) = 6524 [pid 6521] <... futex resumed>) = 0 [pid 5062] rmdir("./143/file0" [pid 5059] <... restart_syscall resumed>) = 0 [pid 6524] <... rseq resumed>) = 0 [pid 6523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6521] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6524] set_robust_list(0x7fe7c32469a0, 24 [pid 6523] memfd_create("syzkaller", 0 [pid 6522] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... rmdir resumed>) = 0 [pid 5060] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6524] <... set_robust_list resumed>) = 0 [pid 6522] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6524] rt_sigprocmask(SIG_SETMASK, [], [pid 6523] <... memfd_create resumed>) = 3 [pid 6522] <... futex resumed>) = 0 [pid 5062] close(3 [pid 5060] <... openat resumed>) = 3 [pid 5059] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6522] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6523] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] rmdir("./143" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] <... openat resumed>) = 3 [pid 6524] memfd_create("syzkaller", 0 [pid 5062] mkdir("./144", 0777 [pid 6524] <... memfd_create resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(3, "", [pid 6524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6524] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./143/binderfs", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] unlink("./143/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] unlink("./146/binderfs") = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5059] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./143/file0" [pid 5059] newfstatat(AT_FDCWD, "./146/file0", [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(3, [pid 6524] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5060] rmdir("./143" [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] getdents64(4, [pid 5060] mkdir("./144", 0777 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./146/file0" [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 6523] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./146") = 0 [pid 5059] mkdir("./147", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 6524] <... write resumed>) = 2097152 [pid 6523] <... write resumed>) = 2097152 [pid 6524] munmap(0x7fe7bae00000, 138412032 [pid 6523] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6525 attached [pid 6525] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6525] chdir("./144" [pid 6524] <... munmap resumed>) = 0 [pid 6523] <... munmap resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6525 [pid 6524] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6523] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6525] <... chdir resumed>) = 0 [pid 6525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6524] <... openat resumed>) = 4 [pid 6525] <... prctl resumed>) = 0 [pid 6523] <... openat resumed>) = 4 [pid 6525] setpgid(0, 0) = 0 [pid 6525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6524] ioctl(4, LOOP_SET_FD, 3 [pid 6523] ioctl(4, LOOP_SET_FD, 3 [pid 6525] write(3, "1000", 4) = 4 [pid 6525] close(3) = 0 [pid 6525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6525] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6525] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6523] <... ioctl resumed>) = 0 [pid 6525] <... mprotect resumed>) = 0 [pid 6524] <... ioctl resumed>) = 0 [pid 6523] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 6524] close(3 [pid 6523] <... close resumed>) = 0 [pid 5060] close(3 [pid 6524] <... close resumed>) = 0 [pid 6523] close(4) = 0 [pid 6524] close(4) = 0 [pid 6523] mkdir("./file0", 0777 [pid 5060] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6524] mkdir("./file0", 0777 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6525] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6523] <... mkdir resumed>) = 0 [pid 6525] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6526]}, 88) = 6526 [pid 6525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6525] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6527 attached [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6527 [ 143.829772][ T6523] loop4: detected capacity change from 0 to 4096 [ 143.836736][ T6524] loop2: detected capacity change from 0 to 4096 [pid 6527] set_robust_list(0x55558e6e36a0, 24 [pid 6524] <... mkdir resumed>) = 0 [pid 6523] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] close(3 [pid 6527] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6526 attached [pid 6526] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6527] chdir("./144" [pid 6526] <... rseq resumed>) = 0 [pid 6526] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6526] memfd_create("syzkaller", 0 [pid 5059] <... close resumed>) = 0 [pid 6527] <... chdir resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6526] <... memfd_create resumed>) = 3 [pid 6526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6528 attached [pid 6527] <... prctl resumed>) = 0 [pid 6524] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6528] set_robust_list(0x55558e6e36a0, 24 [pid 6527] setpgid(0, 0 [pid 6528] <... set_robust_list resumed>) = 0 [pid 6528] chdir("./147") = 0 [pid 6528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6528 [pid 6528] setpgid(0, 0 [pid 6527] <... setpgid resumed>) = 0 [pid 6528] <... setpgid resumed>) = 0 [pid 6528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6528] <... openat resumed>) = 3 [pid 6528] write(3, "1000", 4 [pid 6527] write(3, "1000", 4 [pid 6528] <... write resumed>) = 4 [pid 6527] <... write resumed>) = 4 [pid 6528] close(3) = 0 [pid 6527] close(3 [pid 6528] symlink("/dev/binderfs", "./binderfs" [pid 6527] <... close resumed>) = 0 [pid 6528] <... symlink resumed>) = 0 [pid 6527] symlink("/dev/binderfs", "./binderfs" [pid 6528] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6527] <... symlink resumed>) = 0 [pid 6528] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6527] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] <... mount resumed>) = 0 [pid 6528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6528] <... mmap resumed>) = 0x7fe7c3226000 [pid 6523] <... openat resumed>) = 3 [pid 6528] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6527] <... futex resumed>) = 0 [pid 6528] <... mprotect resumed>) = 0 [pid 6527] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6523] chdir("./file0" [pid 6527] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6528] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6523] <... chdir resumed>) = 0 [pid 6528] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6527] <... mmap resumed>) = 0x7fe7c3226000 [pid 6523] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6529 attached [pid 6527] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6523] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 143.875492][ T6523] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 143.897058][ T6524] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6527] <... mprotect resumed>) = 0 [pid 6529] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6528] <... clone3 resumed> => {parent_tid=[6529]}, 88) = 6529 [pid 6526] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6524] <... mount resumed>) = 0 [pid 6523] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... rseq resumed>) = 0 [pid 6528] rt_sigprocmask(SIG_SETMASK, [], [pid 6527] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6523] <... futex resumed>) = 1 [pid 6521] <... futex resumed>) = 0 [pid 6529] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6521] exit_group(0 [pid 6529] rt_sigprocmask(SIG_SETMASK, [], [pid 6528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6523] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6524] <... openat resumed>) = 3 [pid 6529] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] chdir("./file0" [pid 6529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6528] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6524] <... chdir resumed>) = 0 [pid 6523] <... futex resumed>) = ? [pid 6521] <... exit_group resumed>) = ? [pid 6524] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6523] +++ exited with 0 +++ [pid 6524] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6524] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] <... futex resumed>) = 0 [pid 6524] <... futex resumed>) = 1 [pid 6522] <... futex resumed>) = 0 [pid 6528] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6524] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6522] exit_group(0 [pid 6527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6524] <... futex resumed>) = ? [pid 6522] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6530 attached [pid 6529] memfd_create("syzkaller", 0 [pid 6524] +++ exited with 0 +++ [pid 6522] +++ exited with 0 +++ [pid 6530] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6522, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6530] <... rseq resumed>) = 0 [pid 6530] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 5061] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6530] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6530] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6527] <... clone3 resumed> => {parent_tid=[6530]}, 88) = 6530 [pid 5061] getdents64(3, [pid 6527] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./145/binderfs", [pid 6527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6529] <... memfd_create resumed>) = 3 [pid 6527] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] +++ exited with 0 +++ [pid 6526] <... write resumed>) = 2097152 [pid 5061] unlink("./145/binderfs" [pid 6530] <... futex resumed>) = 0 [pid 6529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6527] <... futex resumed>) = 1 [pid 6526] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... unlink resumed>) = 0 [pid 6530] memfd_create("syzkaller", 0 [pid 6529] <... mmap resumed>) = 0x7fe7bae00000 [pid 6527] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6526] <... munmap resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6521, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6530] <... memfd_create resumed>) = 3 [pid 5063] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6526] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = 0 [pid 6530] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6526] <... openat resumed>) = 4 [pid 6526] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./145/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./145") = 0 [pid 5061] mkdir("./146", 0777 [pid 5063] newfstatat(3, "", [pid 5061] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6529] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6526] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 6530] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6526] close(3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6526] <... close resumed>) = 0 [pid 6526] close(4) = 0 [pid 6526] mkdir("./file0", 0777 [pid 6529] <... write resumed>) = 2097152 [pid 6526] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./143/binderfs", [pid 6526] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 144.019241][ T6526] loop3: detected capacity change from 0 to 4096 [pid 5063] unlink("./143/binderfs" [pid 6530] <... write resumed>) = 2097152 [pid 6529] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6530] munmap(0x7fe7bae00000, 138412032 [pid 6529] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... unlink resumed>) = 0 [pid 6530] <... munmap resumed>) = 0 [pid 6529] <... openat resumed>) = 4 [pid 5063] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [ 144.064001][ T6526] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6529] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 5063] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6531 [pid 5063] newfstatat(AT_FDCWD, "./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6531 attached [pid 6530] <... openat resumed>) = 4 [pid 6529] <... ioctl resumed>) = 0 [pid 6526] <... mount resumed>) = 0 [pid 5063] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6530] ioctl(4, LOOP_SET_FD, 3 [pid 6526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6531] set_robust_list(0x55558e6e36a0, 24 [pid 6526] <... openat resumed>) = 3 [pid 6531] <... set_robust_list resumed>) = 0 [pid 6531] chdir("./146") = 0 [pid 6531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6531] setpgid(0, 0) = 0 [pid 6531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6531] write(3, "1000", 4) = 4 [pid 6531] close(3) = 0 [pid 6531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6531] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6531] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5063] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6531] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... openat resumed>) = 4 [pid 6531] <... mprotect resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6531] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6526] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6529] close(3) = 0 [pid 6526] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 6531] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6529] close(4 [pid 6526] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6531] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6529] <... close resumed>) = 0 [pid 6526] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, ./strace-static-x86_64: Process 6532 attached [pid 6531] <... clone3 resumed> => {parent_tid=[6532]}, 88) = 6532 [pid 6529] mkdir("./file0", 0777 [pid 6526] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6532] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6526] <... futex resumed>) = 1 [pid 6525] <... futex resumed>) = 0 [pid 6532] <... rseq resumed>) = 0 [pid 6529] <... mkdir resumed>) = 0 [pid 6526] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] exit_group(0 [pid 5063] close(4 [pid 6532] set_robust_list(0x7fe7c32469a0, 24 [pid 6531] rt_sigprocmask(SIG_SETMASK, [], [pid 6529] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6526] <... futex resumed>) = ? [pid 6525] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 6532] <... set_robust_list resumed>) = 0 [pid 6531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6530] <... ioctl resumed>) = 0 [pid 5063] rmdir("./143/file0" [pid 6532] rt_sigprocmask(SIG_SETMASK, [], [pid 6531] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 6532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6531] <... futex resumed>) = 0 [pid 6532] memfd_create("syzkaller", 0 [pid 6531] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./143" [pid 6530] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 6530] <... close resumed>) = 0 [pid 6526] +++ exited with 0 +++ [pid 6525] +++ exited with 0 +++ [pid 6532] <... memfd_create resumed>) = 3 [pid 6530] close(4 [pid 6532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6530] <... close resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6525, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5063] mkdir("./144", 0777 [pid 5062] <... restart_syscall resumed>) = 0 [pid 6530] mkdir("./file0", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 6532] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6530] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [ 144.110269][ T6529] loop0: detected capacity change from 0 to 4096 [ 144.123209][ T6530] loop1: detected capacity change from 0 to 4096 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6530] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./144/binderfs") = 0 [ 144.168913][ T6529] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 144.183392][ T6530] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5062] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6532] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 6529] <... mount resumed>) = 0 [pid 6529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6529] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./144/file0", [pid 6529] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6529] <... chdir resumed>) = 0 [pid 5062] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6529] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6529] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6529] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 4 [pid 6529] <... futex resumed>) = 1 [pid 6528] <... futex resumed>) = 0 [pid 6528] exit_group(0 [pid 6529] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6528] <... exit_group resumed>) = ? [pid 6529] <... futex resumed>) = ? [pid 6529] +++ exited with 0 +++ [pid 6528] +++ exited with 0 +++ [pid 5062] newfstatat(4, "", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6528, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5059] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] getdents64(4, [pid 5059] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(4 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] getdents64(3, [pid 5063] close(3 [pid 5062] rmdir("./144/file0" [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [pid 5059] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6533 attached [pid 5062] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./147/binderfs", [pid 6533] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6533 [pid 6533] <... set_robust_list resumed>) = 0 [pid 6530] <... mount resumed>) = 0 [pid 5062] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6533] chdir("./144" [pid 6530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] unlink("./147/binderfs") = 0 [pid 5062] close(3 [pid 6533] <... chdir resumed>) = 0 [pid 6530] <... openat resumed>) = 3 [pid 5059] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 6533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6532] <... write resumed>) = 2097152 [pid 6530] chdir("./file0" [pid 5062] rmdir("./144" [pid 5059] <... umount2 resumed>) = 0 [pid 6533] <... prctl resumed>) = 0 [pid 6532] munmap(0x7fe7bae00000, 138412032 [pid 6530] <... chdir resumed>) = 0 [pid 5059] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] setpgid(0, 0 [pid 6530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6533] <... setpgid resumed>) = 0 [pid 6530] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6530] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6533] <... openat resumed>) = 3 [pid 6530] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6533] write(3, "1000", 4 [pid 6532] <... munmap resumed>) = 0 [pid 6527] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./147/file0", [pid 6533] <... write resumed>) = 4 [pid 6532] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] mkdir("./145", 0777 [pid 6533] close(3 [pid 6532] <... openat resumed>) = 4 [pid 6527] exit_group(0 [pid 5062] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6533] <... close resumed>) = 0 [pid 6532] ioctl(4, LOOP_SET_FD, 3 [pid 6530] <... futex resumed>) = ? [pid 6527] <... exit_group resumed>) = ? [pid 5059] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] symlink("/dev/binderfs", "./binderfs" [pid 6530] +++ exited with 0 +++ [pid 6527] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] <... symlink resumed>) = 0 [pid 6533] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6527, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6532] close(3) = 0 [pid 6532] close(4 [pid 6533] <... futex resumed>) = 0 [pid 6532] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] <... openat resumed>) = 4 [pid 6532] mkdir("./file0", 0777) = 0 [pid 6532] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6533] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] newfstatat(4, "", [pid 5060] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 5060] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 5060] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(4) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] rmdir("./147/file0" [pid 5060] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... rmdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./144/binderfs", [pid 6533] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6533] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(3, [pid 5060] unlink("./144/binderfs" [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5059] close(3) = 0 [pid 6533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./147") = 0 [pid 6533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6533] <... mmap resumed>) = 0x7fe7c3226000 [pid 6533] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] mkdir("./148", 0777 [pid 6533] <... mprotect resumed>) = 0 [pid 6533] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... mkdir resumed>) = 0 [pid 6533] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6533] <... clone3 resumed> => {parent_tid=[6534]}, 88) = 6534 [pid 5060] newfstatat(AT_FDCWD, "./144/file0", [pid 5059] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6534 attached [pid 6533] rt_sigprocmask(SIG_SETMASK, [], [pid 6534] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6532] <... mount resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6533] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6534] <... rseq resumed>) = 0 [pid 6533] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6534] set_robust_list(0x7fe7c32469a0, 24 [pid 6532] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6534] <... set_robust_list resumed>) = 0 [pid 6534] rt_sigprocmask(SIG_SETMASK, [], [pid 6532] chdir("./file0" [pid 5060] <... openat resumed>) = 4 [pid 6534] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6532] <... chdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6532] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6532] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6532] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6532] <... futex resumed>) = 1 [pid 6531] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 6532] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6531] exit_group(0 [pid 6532] <... futex resumed>) = ? [ 144.311507][ T6532] loop2: detected capacity change from 0 to 4096 [ 144.343806][ T6532] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6531] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6532] +++ exited with 0 +++ [pid 6531] +++ exited with 0 +++ [pid 5062] <... ioctl resumed>) = 0 [pid 5060] close(4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6531, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] <... close resumed>) = 0 [pid 6534] memfd_create("syzkaller", 0 [pid 5060] rmdir("./144/file0" [pid 6534] <... memfd_create resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 6534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] getdents64(3, [pid 5061] newfstatat(3, "", [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(3) = 0 [pid 5062] close(3 [pid 5061] getdents64(3, [pid 5060] rmdir("./144" [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... rmdir resumed>) = 0 [pid 6534] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... close resumed>) = 0 [pid 5061] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./146/binderfs") = 0 [pid 5060] mkdir("./145", 0777./strace-static-x86_64: Process 6535 attached ) = 0 [pid 6535] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6535 [pid 5061] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6535] <... set_robust_list resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6535] chdir("./145") = 0 [pid 6535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6534] <... write resumed>) = 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6535] setpgid(0, 0) = 0 [pid 6534] munmap(0x7fe7bae00000, 138412032 [pid 5061] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 6535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6535] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./146/file0", [pid 5059] <... close resumed>) = 0 [pid 6535] write(3, "1000", 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6535] <... write resumed>) = 4 [pid 6535] close(3) = 0 [pid 6535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6535] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6535] <... futex resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6535] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, ./strace-static-x86_64: Process 6536 attached NULL, 8) = 0 [pid 6534] <... munmap resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6535] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6534] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6536] set_robust_list(0x55558e6e36a0, 24 [pid 6535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6534] <... openat resumed>) = 4 [pid 6536] <... set_robust_list resumed>) = 0 [pid 6535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6534] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(4, "", [pid 6535] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6536 [pid 6535] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6536] chdir("./148" [pid 6535] <... mprotect resumed>) = 0 [pid 6536] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6535] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6536] <... prctl resumed>) = 0 [pid 6535] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./146/file0") = 0 [pid 5061] getdents64(3, [pid 6536] setpgid(0, 0 [pid 6535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6536] <... setpgid resumed>) = 0 [pid 5061] close(3./strace-static-x86_64: Process 6537 attached ) = 0 [pid 6536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6537] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6535] <... clone3 resumed> => {parent_tid=[6537]}, 88) = 6537 [pid 6537] <... rseq resumed>) = 0 [pid 6535] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] rmdir("./146" [pid 6537] set_robust_list(0x7fe7c32469a0, 24 [pid 6535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6537] <... set_robust_list resumed>) = 0 [pid 6535] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... rmdir resumed>) = 0 [pid 6536] <... openat resumed>) = 3 [pid 5061] mkdir("./147", 0777) = 0 [pid 6537] rt_sigprocmask(SIG_SETMASK, [], [pid 6536] write(3, "1000", 4 [pid 6535] <... futex resumed>) = 0 [pid 6537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6536] <... write resumed>) = 4 [pid 6535] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6537] memfd_create("syzkaller", 0 [pid 6536] close(3) = 0 [pid 6534] <... ioctl resumed>) = 0 [pid 6536] symlink("/dev/binderfs", "./binderfs" [pid 6534] close(3 [pid 6536] <... symlink resumed>) = 0 [pid 6534] <... close resumed>) = 0 [pid 6536] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] close(4 [pid 6536] <... futex resumed>) = 0 [pid 6537] <... memfd_create resumed>) = 3 [pid 6536] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6534] <... close resumed>) = 0 [pid 6537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6536] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6537] <... mmap resumed>) = 0x7fe7bae00000 [pid 6536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6534] mkdir("./file0", 0777) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6534] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6536] <... mmap resumed>) = 0x7fe7c3226000 [pid 6536] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... ioctl resumed>) = 0 [pid 6536] <... mprotect resumed>) = 0 [ 144.497377][ T6534] loop4: detected capacity change from 0 to 4096 [pid 5060] close(3 [pid 6536] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... close resumed>) = 0 [pid 6536] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6538 attached [pid 6537] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 6539 attached [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6538 [pid 6538] set_robust_list(0x55558e6e36a0, 24 [pid 6539] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6538] <... set_robust_list resumed>) = 0 [pid 6536] <... clone3 resumed> => {parent_tid=[6539]}, 88) = 6539 [pid 6539] <... rseq resumed>) = 0 [pid 6539] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6539] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] chdir("./145" [pid 6536] rt_sigprocmask(SIG_SETMASK, [], [pid 6538] <... chdir resumed>) = 0 [pid 6536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6536] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [ 144.542909][ T6534] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6538] setpgid(0, 0 [pid 6536] <... futex resumed>) = 1 [pid 6539] memfd_create("syzkaller", 0 [pid 6538] <... setpgid resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6539] <... memfd_create resumed>) = 3 [pid 6539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6536] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6538] <... openat resumed>) = 3 [pid 6538] write(3, "1000", 4) = 4 [pid 6538] close(3) = 0 [pid 6538] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6537] <... write resumed>) = 2097152 [pid 6538] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] munmap(0x7fe7bae00000, 138412032 [pid 6538] <... futex resumed>) = 0 [pid 6538] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5061] close(3 [pid 6538] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6538] <... mprotect resumed>) = 0 [pid 6538] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6537] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6540 attached [pid 6538] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6537] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6540] set_robust_list(0x55558e6e36a0, 24 [pid 6538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6537] <... openat resumed>) = 4 [pid 6540] <... set_robust_list resumed>) = 0 [pid 6537] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6541 attached [pid 6540] chdir("./147" [pid 6538] <... clone3 resumed> => {parent_tid=[6541]}, 88) = 6541 [pid 6541] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6540 [pid 6541] <... rseq resumed>) = 0 [pid 6541] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6541] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6540] <... chdir resumed>) = 0 [pid 6538] rt_sigprocmask(SIG_SETMASK, [], [pid 6540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6537] <... ioctl resumed>) = 0 [pid 6540] <... prctl resumed>) = 0 [pid 6538] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] close(3 [pid 6541] <... futex resumed>) = 0 [pid 6540] setpgid(0, 0 [pid 6538] <... futex resumed>) = 1 [pid 6537] <... close resumed>) = 0 [pid 6540] <... setpgid resumed>) = 0 [pid 6538] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6537] close(4 [pid 6540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6541] memfd_create("syzkaller", 0 [pid 6540] <... openat resumed>) = 3 [pid 6537] <... close resumed>) = 0 [pid 6540] write(3, "1000", 4 [pid 6537] mkdir("./file0", 0777 [pid 6541] <... memfd_create resumed>) = 3 [pid 6540] <... write resumed>) = 4 [pid 6540] close(3) = 0 [pid 6537] <... mkdir resumed>) = 0 [pid 6540] symlink("/dev/binderfs", "./binderfs" [pid 6541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6540] <... symlink resumed>) = 0 [pid 6540] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6541] <... mmap resumed>) = 0x7fe7bae00000 [pid 6540] <... futex resumed>) = 0 [pid 6540] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6539] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6540] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6534] <... mount resumed>) = 0 [pid 6540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6542]}, 88) = 6542 [pid 6540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6540] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6540] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6542 attached [pid 6542] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6534] chdir("./file0") = 0 [pid 6534] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6542] <... rseq resumed>) = 0 [pid 6534] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6542] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6542] rt_sigprocmask(SIG_SETMASK, [], [pid 6534] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6534] <... futex resumed>) = 1 [pid 6533] <... futex resumed>) = 0 [pid 6534] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] memfd_create("syzkaller", 0) = 3 [pid 6542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6533] exit_group(0 [pid 6542] <... mmap resumed>) = 0x7fe7bae00000 [pid 6534] <... futex resumed>) = ? [pid 6533] <... exit_group resumed>) = ? [pid 6534] +++ exited with 0 +++ [ 144.634108][ T6537] loop3: detected capacity change from 0 to 4096 [ 144.666203][ T6537] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6533] +++ exited with 0 +++ [pid 6537] <... mount resumed>) = 0 [pid 6537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6541] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6533, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 6537] chdir("./file0") = 0 [pid 6537] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6537] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6535] <... futex resumed>) = 0 [pid 6537] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6535] exit_group(0 [pid 6537] <... futex resumed>) = ? [pid 6535] <... exit_group resumed>) = ? [pid 6537] +++ exited with 0 +++ [pid 6535] +++ exited with 0 +++ [pid 5063] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6535, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6539] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6539] munmap(0x7fe7bae00000, 138412032 [pid 6542] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6541] <... write resumed>) = 2097152 [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 6541] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(3, "", [pid 6541] <... munmap resumed>) = 0 [pid 6539] <... munmap resumed>) = 0 [pid 5063] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6539] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./144/binderfs", [pid 5062] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./144/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6539] <... openat resumed>) = 4 [pid 6539] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6541] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6542] <... write resumed>) = 2097152 [pid 6539] <... ioctl resumed>) = 0 [pid 5063] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./145/binderfs" [pid 6542] munmap(0x7fe7bae00000, 138412032 [pid 6541] <... openat resumed>) = 4 [pid 6539] close(3 [pid 6541] ioctl(4, LOOP_SET_FD, 3 [pid 6539] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6539] close(4 [pid 5063] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6539] <... close resumed>) = 0 [pid 6539] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6539] <... mkdir resumed>) = 0 [pid 6539] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] newfstatat(AT_FDCWD, "./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 6542] <... munmap resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6542] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6541] <... ioctl resumed>) = 0 [pid 6542] <... openat resumed>) = 4 [pid 6541] close(3 [pid 6542] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./144/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] rmdir("./144" [pid 5062] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./145", 0777 [pid 5062] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6541] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6541] close(4 [pid 6542] <... ioctl resumed>) = 0 [pid 6541] <... close resumed>) = 0 [pid 6542] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./145/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./145") = 0 [pid 5062] mkdir("./146", 0777 [pid 6542] <... close resumed>) = 0 [pid 6542] close(4 [pid 6541] mkdir("./file0", 0777 [pid 5062] <... mkdir resumed>) = 0 [pid 6542] <... close resumed>) = 0 [pid 6541] <... mkdir resumed>) = 0 [pid 6542] mkdir("./file0", 0777 [ 144.788526][ T6539] loop0: detected capacity change from 0 to 4096 [ 144.806529][ T6541] loop1: detected capacity change from 0 to 4096 [ 144.814043][ T6539] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 144.824464][ T6542] loop2: detected capacity change from 0 to 4096 [pid 6541] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6542] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6542] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6539] <... mount resumed>) = 0 [pid 6539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6539] chdir("./file0") = 0 [ 144.871985][ T6541] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 144.881780][ T6542] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... ioctl resumed>) = 0 [pid 6539] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6536] <... futex resumed>) = 0 [pid 6539] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] exit_group(0) = ? [pid 6539] <... futex resumed>) = ? [pid 6539] +++ exited with 0 +++ [pid 6536] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6536, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6543 attached [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6543 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6543] set_robust_list(0x55558e6e36a0, 24 [pid 5059] newfstatat(AT_FDCWD, "./148/binderfs", [pid 6543] <... set_robust_list resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6543] chdir("./145" [pid 5059] unlink("./148/binderfs") = 0 [pid 6543] <... chdir resumed>) = 0 [pid 5059] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6543] <... prctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6543] setpgid(0, 0 [pid 5059] newfstatat(AT_FDCWD, "./148/file0", [pid 6543] <... setpgid resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6543] <... openat resumed>) = 3 [pid 6543] write(3, "1000", 4 [pid 5059] newfstatat(4, "", [pid 6543] <... write resumed>) = 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6543] close(3 [pid 6542] <... mount resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] getdents64(4, [pid 6543] <... close resumed>) = 0 [pid 6543] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6543] <... symlink resumed>) = 0 [pid 6541] <... mount resumed>) = 0 [pid 6543] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 6543] <... futex resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6543] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6542] <... openat resumed>) = 3 [pid 6541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6544 attached [pid 6543] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6542] chdir("./file0" [pid 6541] <... openat resumed>) = 3 [pid 5059] close(4 [pid 6544] set_robust_list(0x55558e6e36a0, 24 [pid 6543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6542] <... chdir resumed>) = 0 [pid 6541] chdir("./file0" [pid 5059] <... close resumed>) = 0 [pid 6544] <... set_robust_list resumed>) = 0 [pid 6543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6542] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6544 [pid 5059] rmdir("./148/file0" [pid 6544] chdir("./146" [pid 6543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6542] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6541] <... chdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6543] <... mmap resumed>) = 0x7fe7c3226000 [pid 6541] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6542] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] <... chdir resumed>) = 0 [pid 6544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6543] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6542] <... futex resumed>) = 1 [pid 6541] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6540] <... futex resumed>) = 0 [pid 5059] getdents64(3, [pid 6544] <... prctl resumed>) = 0 [pid 6543] <... mprotect resumed>) = 0 [pid 6542] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] exit_group(0 [pid 6544] setpgid(0, 0 [pid 6543] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6542] <... futex resumed>) = ? [pid 6541] <... futex resumed>) = 1 [pid 6540] <... exit_group resumed>) = ? [pid 6538] <... futex resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6544] <... setpgid resumed>) = 0 [pid 6543] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6542] +++ exited with 0 +++ [pid 6538] exit_group(0 [pid 5059] close(3 [pid 6543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... close resumed>) = 0 [pid 6543] <... clone3 resumed> => {parent_tid=[6545]}, 88) = 6545 [pid 6543] rt_sigprocmask(SIG_SETMASK, [], [pid 6540] +++ exited with 0 +++ [pid 6538] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6545 attached [pid 6544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6540, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6545] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6543] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... rseq resumed>) = 0 [pid 6543] <... futex resumed>) = 0 [pid 5059] rmdir("./148" [pid 6545] set_robust_list(0x7fe7c32469a0, 24 [pid 6543] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... rmdir resumed>) = 0 [pid 6545] <... set_robust_list resumed>) = 0 [pid 6545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6545] memfd_create("syzkaller", 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6544] <... openat resumed>) = 3 [pid 6541] +++ exited with 0 +++ [pid 6538] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] mkdir("./149", 0777 [pid 6545] <... memfd_create resumed>) = 3 [pid 6544] write(3, "1000", 4 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 6545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6544] <... write resumed>) = 4 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6538, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6544] close(3 [pid 5061] newfstatat(3, "", [pid 5060] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6544] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6544] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6545] <... mmap resumed>) = 0x7fe7bae00000 [pid 6544] <... symlink resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6544] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... openat resumed>) = 3 [pid 6544] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] newfstatat(3, "", [pid 6544] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] getdents64(3, [pid 6544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./145/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./147/binderfs", [pid 6544] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6544] <... mprotect resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./145/binderfs" [pid 6544] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] unlink("./147/binderfs" [pid 6544] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] <... unlink resumed>) = 0 [pid 6544] <... clone3 resumed> => {parent_tid=[6546]}, 88) = 6546 [pid 5061] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6546 attached [pid 5060] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6546] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6544] rt_sigprocmask(SIG_SETMASK, [], [pid 6546] <... rseq resumed>) = 0 [pid 6544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6546] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] <... umount2 resumed>) = 0 [pid 6546] <... set_robust_list resumed>) = 0 [pid 6546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6544] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = 0 [pid 6546] memfd_create("syzkaller", 0 [pid 5061] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./145/file0", [pid 6546] <... memfd_create resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6545] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6546] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5061] getdents64(4, [pid 5059] close(3 [pid 5060] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] getdents64(4, [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] close(4) = 0 [pid 5061] rmdir("./147/file0" [pid 5060] getdents64(4, [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6547 ./strace-static-x86_64: Process 6547 attached [pid 6545] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6547] set_robust_list(0x55558e6e36a0, 24 [pid 5061] getdents64(3, [pid 5060] close(4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 5061] close(3 [pid 5060] rmdir("./145/file0" [pid 6547] <... set_robust_list resumed>) = 0 [pid 6547] chdir("./149" [pid 5061] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6547] <... chdir resumed>) = 0 [pid 6545] munmap(0x7fe7bae00000, 138412032 [pid 5061] rmdir("./147" [pid 5060] getdents64(3, [pid 6547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] mkdir("./148", 0777 [pid 5060] close(3 [pid 6547] setpgid(0, 0 [pid 5060] <... close resumed>) = 0 [pid 6547] <... setpgid resumed>) = 0 [pid 5060] rmdir("./145" [pid 6547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6547] write(3, "1000", 4) = 4 [pid 6547] close(3) = 0 [pid 6547] symlink("/dev/binderfs", "./binderfs" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] mkdir("./146", 0777 [pid 6547] <... symlink resumed>) = 0 [pid 6545] <... munmap resumed>) = 0 [pid 6547] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... mkdir resumed>) = 0 [pid 6547] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6547] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6545] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] <... openat resumed>) = 4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... openat resumed>) = 3 [pid 6547] <... mmap resumed>) = 0x7fe7c3226000 [pid 6545] ioctl(4, LOOP_SET_FD, 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6546] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6547] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6545] <... ioctl resumed>) = 0 [pid 6547] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6545] close(3 [pid 6547] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6545] <... close resumed>) = 0 [pid 6547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6545] close(4) = 0 [pid 6547] <... clone3 resumed> => {parent_tid=[6548]}, 88) = 6548 [pid 6545] mkdir("./file0", 0777 [pid 6547] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6548 attached [pid 6548] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6548] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6548] rt_sigprocmask(SIG_SETMASK, [], [pid 6545] <... mkdir resumed>) = 0 [pid 6547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6547] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] memfd_create("syzkaller", 0 [pid 6547] <... futex resumed>) = 0 [pid 6548] <... memfd_create resumed>) = 3 [pid 6548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6547] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6546] <... write resumed>) = 2097152 [pid 6546] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6546] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6545] <... mount resumed>) = 0 [ 145.124471][ T6545] loop4: detected capacity change from 0 to 4096 [ 145.143351][ T6545] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6548] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6546] <... openat resumed>) = 4 [pid 6545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... ioctl resumed>) = 0 [pid 6546] ioctl(4, LOOP_SET_FD, 3 [pid 6545] <... openat resumed>) = 3 [pid 6546] <... ioctl resumed>) = 0 [pid 6545] chdir("./file0" [pid 5060] close(3 [pid 6546] close(3 [pid 6545] <... chdir resumed>) = 0 [pid 6546] <... close resumed>) = 0 [pid 6545] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 6546] close(4 [pid 6545] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... ioctl resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6546] <... close resumed>) = 0 [pid 6545] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] mkdir("./file0", 0777 [pid 6545] <... futex resumed>) = 1 [pid 6543] <... futex resumed>) = 0 [pid 5061] close(3./strace-static-x86_64: Process 6549 attached [pid 6546] <... mkdir resumed>) = 0 [pid 6545] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6546] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6549 [pid 6549] chdir("./146") = 0 [pid 6549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6543] exit_group(0 [pid 6549] <... prctl resumed>) = 0 [pid 6545] <... futex resumed>) = ? [pid 6543] <... exit_group resumed>) = ? [pid 6549] setpgid(0, 0 [pid 6545] +++ exited with 0 +++ [pid 6543] +++ exited with 0 +++ [pid 6549] <... setpgid resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6543, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6549] write(3, "1000", 4) = 4 [pid 6549] close(3) = 0 [pid 6549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6549] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6549] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6549] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] getdents64(3, [pid 6549] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6549] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] newfstatat(AT_FDCWD, "./145/binderfs", [pid 6549] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6550 attached [pid 6549] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] unlink("./145/binderfs" [pid 6549] <... mprotect resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6550 [pid 6550] set_robust_list(0x55558e6e36a0, 24) = 0 [ 145.214797][ T6546] loop3: detected capacity change from 0 to 4096 [ 145.254441][ T6546] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6549] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6548] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 6550] chdir("./148" [pid 6549] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6550] <... chdir resumed>) = 0 [pid 6546] <... mount resumed>) = 0 [pid 6550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6548] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6551 attached [pid 6550] setpgid(0, 0 [pid 6548] <... munmap resumed>) = 0 [pid 6546] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./145/file0", [pid 6549] <... clone3 resumed> => {parent_tid=[6551]}, 88) = 6551 [pid 6546] chdir("./file0") = 0 [pid 6550] <... setpgid resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6551] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 4 [pid 6546] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6551] <... rseq resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6551] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6546] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6551] rt_sigprocmask(SIG_SETMASK, [], [pid 6546] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] <... openat resumed>) = 3 [pid 6549] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(4, [pid 6551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6549] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6549] <... futex resumed>) = 0 [pid 6549] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6544] exit_group(0 [pid 6550] write(3, "1000", 4 [pid 6546] <... futex resumed>) = ? [pid 6544] <... exit_group resumed>) = ? [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 6548] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 6548] <... openat resumed>) = 4 [pid 5063] rmdir("./145/file0") = 0 [pid 6548] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(3, [pid 6551] memfd_create("syzkaller", 0 [pid 6550] <... write resumed>) = 4 [pid 6546] +++ exited with 0 +++ [pid 6544] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6551] <... memfd_create resumed>) = 3 [pid 6550] close(3) = 0 [pid 6550] symlink("/dev/binderfs", "./binderfs" [pid 6551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6550] <... symlink resumed>) = 0 [pid 6548] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6544, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6551] <... mmap resumed>) = 0x7fe7bae00000 [pid 6550] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] close(3 [pid 5063] <... close resumed>) = 0 [pid 6550] <... futex resumed>) = 0 [pid 6548] <... close resumed>) = 0 [pid 5063] rmdir("./145" [pid 6550] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6548] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 6550] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6548] <... close resumed>) = 0 [pid 5063] mkdir("./146", 0777 [pid 6550] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6548] mkdir("./file0", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 6550] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6548] <... mkdir resumed>) = 0 [pid 5062] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6548] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6550] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6550] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 6550] <... mprotect resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 6550] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6550] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] unlink("./146/binderfs" [pid 6550] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6552 attached [pid 5062] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6552] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6550] <... clone3 resumed> => {parent_tid=[6552]}, 88) = 6552 [pid 6552] <... rseq resumed>) = 0 [pid 6550] rt_sigprocmask(SIG_SETMASK, [], [pid 6552] set_robust_list(0x7fe7c32469a0, 24 [pid 6550] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6552] <... set_robust_list resumed>) = 0 [pid 6550] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] rt_sigprocmask(SIG_SETMASK, [], [pid 6550] <... futex resumed>) = 0 [pid 6552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6550] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6552] memfd_create("syzkaller", 0 [pid 6551] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./146/file0", [pid 6552] <... memfd_create resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6552] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 145.310577][ T6548] loop0: detected capacity change from 0 to 4096 [ 145.332314][ T6548] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5062] getdents64(4, [pid 6548] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./146/file0") = 0 [pid 6548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] getdents64(3, [pid 6548] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6548] <... chdir resumed>) = 0 [pid 5062] close(3 [pid 6548] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 6548] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./146" [pid 6548] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 6548] <... futex resumed>) = 1 [pid 6547] <... futex resumed>) = 0 [pid 6548] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] mkdir("./147", 0777 [pid 6547] exit_group(0 [pid 6548] <... futex resumed>) = ? [pid 6547] <... exit_group resumed>) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6548] +++ exited with 0 +++ [pid 6547] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6547, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5062] <... openat resumed>) = 3 [pid 5059] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6553 attached [pid 6552] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6551] <... write resumed>) = 2097152 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6553] set_robust_list(0x55558e6e36a0, 24 [pid 6551] munmap(0x7fe7bae00000, 138412032 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6553 [pid 6553] <... set_robust_list resumed>) = 0 [pid 6551] <... munmap resumed>) = 0 [pid 5059] unlink("./149/binderfs" [pid 6551] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5059] <... unlink resumed>) = 0 [pid 6551] ioctl(4, LOOP_SET_FD, 3 [pid 5059] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6553] chdir("./146" [pid 6551] <... ioctl resumed>) = 0 [pid 6553] <... chdir resumed>) = 0 [pid 6551] close(3 [pid 6553] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6551] <... close resumed>) = 0 [pid 6553] <... prctl resumed>) = 0 [pid 6551] close(4 [pid 6553] setpgid(0, 0 [pid 6551] <... close resumed>) = 0 [pid 6553] <... setpgid resumed>) = 0 [pid 6551] mkdir("./file0", 0777) = 0 [pid 6553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6552] <... write resumed>) = 2097152 [pid 6551] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... umount2 resumed>) = 0 [pid 6553] <... openat resumed>) = 3 [pid 5059] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6553] write(3, "1000", 4 [pid 6552] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... ioctl resumed>) = 0 [pid 6553] <... write resumed>) = 4 [pid 6552] <... munmap resumed>) = 0 [pid 6551] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6553] close(3 [pid 6552] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6553] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./149/file0", [pid 6553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] close(3 [pid 6553] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... close resumed>) = 0 [pid 6553] <... futex resumed>) = 0 [pid 6553] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6552] <... openat resumed>) = 4 [pid 6553] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6553] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6552] ioctl(4, LOOP_SET_FD, 3 [pid 6551] <... openat resumed>) = 3 [pid 5059] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6553] <... mmap resumed>) = 0x7fe7c3226000 [ 145.443682][ T6551] loop1: detected capacity change from 0 to 4096 [ 145.464584][ T6551] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6551] chdir("./file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6554 attached [pid 6554] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6554] chdir("./147") = 0 [pid 6554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6554] setpgid(0, 0) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6554 [pid 6554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6553] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6551] <... chdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6554] write(3, "1000", 4) = 4 [pid 6554] close(3) = 0 [pid 6553] <... mprotect resumed>) = 0 [pid 6551] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... openat resumed>) = 4 [pid 6554] symlink("/dev/binderfs", "./binderfs" [pid 6551] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6554] <... symlink resumed>) = 0 [pid 6553] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6552] <... ioctl resumed>) = 0 [pid 6551] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(4, "", [pid 6554] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6552] close(3 [pid 6551] <... futex resumed>) = 1 [pid 6549] <... futex resumed>) = 0 [pid 6554] <... futex resumed>) = 0 [pid 6553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6552] <... close resumed>) = 0 [pid 6551] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] exit_group(0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6554] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6552] close(4 [pid 6551] <... futex resumed>) = ? [pid 6549] <... exit_group resumed>) = ? [pid 5059] getdents64(4, ./strace-static-x86_64: Process 6555 attached [pid 6554] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6553] <... clone3 resumed> => {parent_tid=[6555]}, 88) = 6555 [pid 6552] <... close resumed>) = 0 [pid 6551] +++ exited with 0 +++ [pid 6549] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6555] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6554] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] getdents64(4, [pid 6555] <... rseq resumed>) = 0 [pid 6554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6552] mkdir("./file0", 0777 [pid 6555] set_robust_list(0x7fe7c32469a0, 24 [pid 6554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6553] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6549, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6555] <... set_robust_list resumed>) = 0 [pid 6554] <... mmap resumed>) = 0x7fe7c3226000 [pid 6555] rt_sigprocmask(SIG_SETMASK, [], [pid 6554] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6554] <... mprotect resumed>) = 0 [pid 6555] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] close(4./strace-static-x86_64: Process 6556 attached [pid 6553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6552] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6556] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6554] <... clone3 resumed> => {parent_tid=[6556]}, 88) = 6556 [pid 6553] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [ 145.500269][ T6552] loop2: detected capacity change from 0 to 4096 [pid 6552] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6556] <... rseq resumed>) = 0 [pid 6554] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] rmdir("./149/file0" [pid 6556] set_robust_list(0x7fe7c32469a0, 24 [pid 6555] <... futex resumed>) = 0 [pid 6554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6553] <... futex resumed>) = 1 [pid 6556] <... set_robust_list resumed>) = 0 [pid 6555] memfd_create("syzkaller", 0 [pid 6554] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... rmdir resumed>) = 0 [pid 6554] <... futex resumed>) = 0 [pid 6554] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6555] <... memfd_create resumed>) = 3 [pid 6556] rt_sigprocmask(SIG_SETMASK, [], [ 145.556526][ T6552] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6553] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 6556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6556] memfd_create("syzkaller", 0 [pid 5059] close(3 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... close resumed>) = 0 [pid 5060] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./149" [pid 6556] <... memfd_create resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] unlink("./146/binderfs" [pid 6555] <... mmap resumed>) = 0x7fe7bae00000 [pid 6556] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] mkdir("./150", 0777 [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./146/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./146") = 0 [pid 5060] mkdir("./147", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6556] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6555] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6552] <... mount resumed>) = 0 [pid 6552] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6552] chdir("./file0") = 0 [pid 6552] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6552] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6550] <... futex resumed>) = 0 [pid 6552] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6550] exit_group(0 [pid 6552] <... futex resumed>) = ? [pid 6550] <... exit_group resumed>) = ? [pid 6552] +++ exited with 0 +++ [pid 6550] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6550, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6556] <... write resumed>) = 2097152 [pid 5061] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 6556] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 5061] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./148/binderfs") = 0 [pid 5060] close(3 [pid 5061] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6555] <... write resumed>) = 2097152 [pid 5060] <... close resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6557 ./strace-static-x86_64: Process 6557 attached [pid 5061] <... umount2 resumed>) = 0 [pid 6557] set_robust_list(0x55558e6e36a0, 24 [pid 5061] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] <... set_robust_list resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] chdir("./150" [pid 5061] newfstatat(AT_FDCWD, "./148/file0", [pid 6557] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] setpgid(0, 0) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6557] <... openat resumed>) = 3 [pid 6557] write(3, "1000", 4 [pid 5061] <... openat resumed>) = 4 [pid 6557] <... write resumed>) = 4 [pid 6557] close(3 [pid 5061] newfstatat(4, "", [pid 6557] <... close resumed>) = 0 [pid 6556] <... munmap resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6558 attached [pid 6557] symlink("/dev/binderfs", "./binderfs" [pid 6556] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] getdents64(4, [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6558 [pid 6557] <... symlink resumed>) = 0 [pid 6558] set_robust_list(0x55558e6e36a0, 24 [pid 6557] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6558] <... set_robust_list resumed>) = 0 [pid 6557] <... futex resumed>) = 0 [pid 6556] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(4, [pid 6558] chdir("./147" [pid 6557] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6555] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6557] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6555] <... munmap resumed>) = 0 [pid 5061] close(4 [pid 6557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6558] <... chdir resumed>) = 0 [pid 6557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5061] rmdir("./148/file0" [pid 6557] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] getdents64(3, ./strace-static-x86_64: Process 6559 attached [pid 6558] <... prctl resumed>) = 0 [pid 6557] <... clone3 resumed> => {parent_tid=[6559]}, 88) = 6559 [pid 6556] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6559] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6558] setpgid(0, 0 [pid 6557] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] close(3 [pid 6559] <... rseq resumed>) = 0 [pid 6558] <... setpgid resumed>) = 0 [pid 6557] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6559] set_robust_list(0x7fe7c32469a0, 24 [pid 6558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6557] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] close(3 [pid 6555] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] rmdir("./148" [pid 6559] <... set_robust_list resumed>) = 0 [pid 6558] <... openat resumed>) = 3 [pid 6557] <... futex resumed>) = 0 [pid 6556] <... close resumed>) = 0 [pid 6555] <... openat resumed>) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 6558] write(3, "1000", 4 [pid 6557] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6556] close(4 [pid 6558] <... write resumed>) = 4 [pid 6555] ioctl(4, LOOP_SET_FD, 3 [pid 6559] rt_sigprocmask(SIG_SETMASK, [], [pid 6558] close(3 [pid 6556] <... close resumed>) = 0 [pid 5061] mkdir("./149", 0777 [pid 6559] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6558] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 6558] symlink("/dev/binderfs", "./binderfs" [pid 6556] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6558] <... symlink resumed>) = 0 [pid 6556] <... mkdir resumed>) = 0 [pid 6559] memfd_create("syzkaller", 0 [pid 6558] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... openat resumed>) = 3 [pid 6559] <... memfd_create resumed>) = 3 [pid 6558] <... futex resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6558] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6556] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6559] <... mmap resumed>) = 0x7fe7bae00000 [pid 6558] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6555] <... ioctl resumed>) = 0 [pid 6558] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 145.701719][ T6556] loop3: detected capacity change from 0 to 4096 [ 145.728426][ T6555] loop4: detected capacity change from 0 to 4096 [pid 6558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6555] close(3 [pid 6558] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6558] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6555] <... close resumed>) = 0 [pid 6558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6555] close(4) = 0 [pid 6558] <... clone3 resumed> => {parent_tid=[6560]}, 88) = 6560 [pid 6558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6558] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6558] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6560 attached [pid 6560] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6560] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6560] memfd_create("syzkaller", 0) = 3 [pid 6555] mkdir("./file0", 0777 [pid 6560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6555] <... mkdir resumed>) = 0 [ 145.747613][ T6556] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6555] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6561 attached [pid 6561] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6561 [pid 6559] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6561] <... set_robust_list resumed>) = 0 [pid 6561] chdir("./149") = 0 [pid 6561] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6561] setpgid(0, 0) = 0 [pid 6561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6561] write(3, "1000", 4) = 4 [pid 6561] close(3) = 0 [pid 6561] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6561] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 145.787477][ T6555] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6560] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6561] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6561] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6561] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6561] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6562]}, 88) = 6562 [pid 6561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6561] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6562 attached ) = 0 [pid 6556] <... mount resumed>) = 0 [pid 6555] <... mount resumed>) = 0 [pid 6562] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6561] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6555] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6562] <... rseq resumed>) = 0 [pid 6556] <... openat resumed>) = 3 [pid 6555] <... openat resumed>) = 3 [pid 6562] set_robust_list(0x7fe7c32469a0, 24 [pid 6556] chdir("./file0" [pid 6555] chdir("./file0" [pid 6562] <... set_robust_list resumed>) = 0 [pid 6556] <... chdir resumed>) = 0 [pid 6562] rt_sigprocmask(SIG_SETMASK, [], [pid 6556] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6559] <... write resumed>) = 2097152 [pid 6555] <... chdir resumed>) = 0 [pid 6555] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6562] memfd_create("syzkaller", 0 [pid 6555] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6555] <... futex resumed>) = 1 [pid 6555] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6556] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] <... futex resumed>) = 0 [pid 6556] <... futex resumed>) = 1 [pid 6554] <... futex resumed>) = 0 [pid 6553] exit_group(0 [pid 6559] munmap(0x7fe7bae00000, 138412032 [pid 6556] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] <... futex resumed>) = ? [pid 6554] exit_group(0 [pid 6553] <... exit_group resumed>) = ? [pid 6555] +++ exited with 0 +++ [pid 6553] +++ exited with 0 +++ [pid 6554] <... exit_group resumed>) = ? [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6553, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6556] <... futex resumed>) = ? [pid 6556] +++ exited with 0 +++ [pid 6562] <... memfd_create resumed>) = 3 [pid 6562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6562] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6559] <... munmap resumed>) = 0 [pid 6554] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6554, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5062] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6559] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6560] <... write resumed>) = 2097152 [pid 6559] <... openat resumed>) = 4 [pid 5063] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6560] munmap(0x7fe7bae00000, 138412032 [pid 5063] newfstatat(AT_FDCWD, "./146/binderfs", [pid 5062] newfstatat(AT_FDCWD, "./147/binderfs", [pid 6562] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6559] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6560] <... munmap resumed>) = 0 [pid 5063] unlink("./146/binderfs" [pid 5062] unlink("./147/binderfs" [pid 6560] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6560] <... openat resumed>) = 4 [pid 5063] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6560] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6559] <... ioctl resumed>) = 0 [pid 6560] close(3) = 0 [pid 6560] close(4) = 0 [pid 6559] close(3) = 0 [pid 6559] close(4) = 0 [pid 6562] <... write resumed>) = 2097152 [pid 6560] mkdir("./file0", 0777 [pid 6559] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6560] <... mkdir resumed>) = 0 [pid 6559] <... mkdir resumed>) = 0 [pid 5063] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6562] munmap(0x7fe7bae00000, 138412032 [pid 6560] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6562] <... munmap resumed>) = 0 [pid 6559] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] newfstatat(AT_FDCWD, "./146/file0", [pid 5062] newfstatat(AT_FDCWD, "./147/file0", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 145.923460][ T6559] loop0: detected capacity change from 0 to 4096 [ 145.929689][ T6560] loop1: detected capacity change from 0 to 4096 [ 145.962899][ T6560] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5062] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5062] close(4 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] rmdir("./146/file0" [pid 5062] rmdir("./147/file0" [pid 6562] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] getdents64(3, [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6562] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5062] close(3 [pid 6562] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] rmdir("./146" [pid 5062] rmdir("./147" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] mkdir("./147", 0777) = 0 [pid 6562] <... ioctl resumed>) = 0 [pid 5062] mkdir("./148", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6562] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6562] <... close resumed>) = 0 [pid 6562] close(4) = 0 [pid 6562] mkdir("./file0", 0777) = 0 [ 145.978726][ T6559] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 145.993783][ T6562] loop2: detected capacity change from 0 to 4096 [pid 6562] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6560] <... mount resumed>) = 0 [pid 6559] <... mount resumed>) = 0 [pid 6560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6560] <... openat resumed>) = 3 [pid 6559] <... openat resumed>) = 3 [pid 6559] chdir("./file0") = 0 [pid 6560] chdir("./file0" [pid 6559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6559] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6557] <... futex resumed>) = 0 [pid 6557] exit_group(0) = ? [pid 6560] <... chdir resumed>) = 0 [pid 6559] +++ exited with 0 +++ [pid 6557] +++ exited with 0 +++ [pid 6560] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6557, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6560] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6560] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] unlink("./150/binderfs") = 0 [pid 5059] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6558] <... futex resumed>) = 0 [pid 6560] <... futex resumed>) = 1 [pid 6558] exit_group(0) = ? [pid 6560] +++ exited with 0 +++ [pid 6558] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6558, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] newfstatat(AT_FDCWD, "./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 4 [ 146.041108][ T6562] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5063] close(3) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(4, "", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6563 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5060] getdents64(3, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] close(3 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] getdents64(4, [pid 5060] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(4 [pid 5062] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./147/binderfs", [pid 5059] rmdir("./150/file0" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] unlink("./147/binderfs" [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6563 attached [pid 6563] set_robust_list(0x55558e6e36a0, 24 [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3./strace-static-x86_64: Process 6564 attached [pid 6563] <... set_robust_list resumed>) = 0 [pid 6564] set_robust_list(0x55558e6e36a0, 24 [pid 6563] chdir("./147" [pid 5059] <... close resumed>) = 0 [pid 6564] <... set_robust_list resumed>) = 0 [pid 6563] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6564 [pid 5059] rmdir("./150" [pid 6564] chdir("./148") = 0 [pid 6563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... rmdir resumed>) = 0 [pid 6564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6563] <... prctl resumed>) = 0 [pid 6563] setpgid(0, 0 [pid 6564] <... prctl resumed>) = 0 [pid 6563] <... setpgid resumed>) = 0 [pid 6564] setpgid(0, 0 [pid 5059] mkdir("./151", 0777 [pid 6563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... umount2 resumed>) = 0 [pid 6564] <... setpgid resumed>) = 0 [pid 6563] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 6564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6564] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(AT_FDCWD, "./147/file0", [pid 6564] write(3, "1000", 4) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6564] close(3) = 0 [pid 6564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6564] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6564] <... futex resumed>) = 0 [pid 6564] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6564] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6563] write(3, "1000", 4 [pid 6564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6563] <... write resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6564] <... mmap resumed>) = 0x7fe7c3226000 [pid 6563] close(3) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6563] symlink("/dev/binderfs", "./binderfs" [pid 5060] newfstatat(4, "", [pid 6563] <... symlink resumed>) = 0 [pid 6562] <... mount resumed>) = 0 [pid 6563] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6563] <... futex resumed>) = 0 [pid 6562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6564] <... mprotect resumed>) = 0 [pid 6563] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6564] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6563] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6562] <... openat resumed>) = 3 [pid 5060] getdents64(4, [pid 6563] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6564] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6562] chdir("./file0" [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6564] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6562] <... chdir resumed>) = 0 [pid 5060] getdents64(4, ./strace-static-x86_64: Process 6565 attached [pid 6563] <... mmap resumed>) = 0x7fe7c3226000 [pid 6562] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6565] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6564] <... clone3 resumed> => {parent_tid=[6565]}, 88) = 6565 [pid 6563] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6562] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] close(4 [pid 6565] <... rseq resumed>) = 0 [pid 6564] rt_sigprocmask(SIG_SETMASK, [], [pid 6563] <... mprotect resumed>) = 0 [pid 6562] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 6565] set_robust_list(0x7fe7c32469a0, 24 [pid 6564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6562] <... futex resumed>) = 1 [pid 6561] <... futex resumed>) = 0 [pid 5060] rmdir("./147/file0" [pid 6565] <... set_robust_list resumed>) = 0 [pid 6564] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6563] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6562] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6561] exit_group(0 [pid 6565] rt_sigprocmask(SIG_SETMASK, [], [pid 6564] <... futex resumed>) = 0 [pid 6563] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6562] <... futex resumed>) = ? [pid 6561] <... exit_group resumed>) = ? [pid 6565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6564] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6562] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 6565] memfd_create("syzkaller", 0 [pid 6563] <... clone3 resumed> => {parent_tid=[6566]}, 88) = 6566 [pid 6563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6563] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6563] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6565] <... memfd_create resumed>) = 3 [pid 6565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6566 attached [pid 6561] +++ exited with 0 +++ [pid 5060] getdents64(3, [pid 5059] <... ioctl resumed>) = 0 [pid 6566] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6561, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6566] <... rseq resumed>) = 0 [pid 5060] close(3 [pid 5059] close(3 [pid 6566] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6566] <... set_robust_list resumed>) = 0 [pid 5060] rmdir("./147" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6566] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... rmdir resumed>) = 0 [pid 6566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] mkdir("./148", 0777 [pid 5061] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 6566] memfd_create("syzkaller", 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6567 attached [pid 5061] unlink("./149/binderfs" [pid 5060] <... mkdir resumed>) = 0 [pid 6567] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... unlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6567 [pid 5061] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 6566] <... memfd_create resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6567] <... set_robust_list resumed>) = 0 [pid 6566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6567] chdir("./151" [pid 6566] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... umount2 resumed>) = 0 [pid 6567] <... chdir resumed>) = 0 [pid 6567] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] <... prctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6567] setpgid(0, 0) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6565] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] newfstatat(4, "", [pid 6567] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6567] write(3, "1000", 4 [pid 6566] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6565] <... write resumed>) = 2097152 [pid 6567] <... write resumed>) = 4 [pid 5061] getdents64(4, [pid 6567] close(3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6567] <... close resumed>) = 0 [pid 6567] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6567] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] getdents64(4, [pid 6567] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6567] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] close(4 [pid 6567] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6567] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6567] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6568 attached [pid 6565] munmap(0x7fe7bae00000, 138412032 [pid 5061] rmdir("./149/file0" [pid 6567] <... clone3 resumed> => {parent_tid=[6568]}, 88) = 6568 [pid 6568] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6567] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... rmdir resumed>) = 0 [pid 6568] <... rseq resumed>) = 0 [pid 6567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6568] set_robust_list(0x7fe7c32469a0, 24 [pid 6567] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... munmap resumed>) = 0 [pid 6568] <... set_robust_list resumed>) = 0 [pid 6567] <... futex resumed>) = 0 [pid 6568] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6567] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6568] memfd_create("syzkaller", 0 [pid 6565] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6566] <... write resumed>) = 2097152 [pid 6565] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 5060] <... ioctl resumed>) = 0 [pid 6568] <... memfd_create resumed>) = 3 [pid 6565] ioctl(4, LOOP_SET_FD, 3 [pid 6568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6566] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5061] close(3 [pid 5060] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6569 attached [pid 6568] <... mmap resumed>) = 0x7fe7bae00000 [pid 6566] <... munmap resumed>) = 0 [pid 5061] rmdir("./149" [pid 6569] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6569 [pid 6569] chdir("./148") = 0 [pid 5061] mkdir("./150", 0777 [pid 6569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6569] setpgid(0, 0 [pid 6566] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6569] <... setpgid resumed>) = 0 [pid 6566] <... openat resumed>) = 4 [pid 5061] <... mkdir resumed>) = 0 [pid 6569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6566] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6569] <... openat resumed>) = 3 [pid 6565] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6569] write(3, "1000", 4 [pid 6565] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6569] <... write resumed>) = 4 [pid 6565] <... close resumed>) = 0 [pid 6569] close(3 [pid 6568] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6566] <... ioctl resumed>) = 0 [pid 6565] close(4 [pid 6569] <... close resumed>) = 0 [pid 6566] close(3 [pid 6565] <... close resumed>) = 0 [pid 6565] mkdir("./file0", 0777 [pid 6566] <... close resumed>) = 0 [pid 6566] close(4) = 0 [pid 6565] <... mkdir resumed>) = 0 [pid 6566] mkdir("./file0", 0777) = 0 [pid 6569] symlink("/dev/binderfs", "./binderfs") = 0 [ 146.283200][ T6565] loop3: detected capacity change from 0 to 4096 [ 146.312136][ T6566] loop4: detected capacity change from 0 to 4096 [pid 6566] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6565] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6569] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6569] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6570 attached [pid 6570] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6569] <... clone3 resumed> => {parent_tid=[6570]}, 88) = 6570 [pid 6569] rt_sigprocmask(SIG_SETMASK, [], [pid 6570] <... rseq resumed>) = 0 [pid 6569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6570] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6569] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] rt_sigprocmask(SIG_SETMASK, [], [pid 6569] <... futex resumed>) = 0 [pid 6570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6569] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 146.339817][ T6566] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 146.350203][ T6565] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6570] memfd_create("syzkaller", 0) = 3 [pid 6568] <... write resumed>) = 2097152 [pid 6566] <... mount resumed>) = 0 [pid 6566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6566] <... openat resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 6570] <... mmap resumed>) = 0x7fe7bae00000 [pid 6568] munmap(0x7fe7bae00000, 138412032 [pid 6566] chdir("./file0") = 0 [pid 6566] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6566] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... mount resumed>) = 0 [pid 5061] close(3 [pid 6566] <... futex resumed>) = 1 [pid 5061] <... close resumed>) = 0 [pid 6565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6566] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6565] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6571 attached [pid 6563] <... futex resumed>) = 0 [pid 6571] set_robust_list(0x55558e6e36a0, 24 [pid 6563] exit_group(0 [pid 6571] <... set_robust_list resumed>) = 0 [pid 6563] <... exit_group resumed>) = ? [pid 6566] <... futex resumed>) = ? [pid 6571] chdir("./150" [pid 6565] chdir("./file0" [pid 6571] <... chdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6571 [pid 6571] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6566] +++ exited with 0 +++ [pid 6565] <... chdir resumed>) = 0 [pid 6563] +++ exited with 0 +++ [pid 6571] <... prctl resumed>) = 0 [pid 6565] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6563, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6568] <... munmap resumed>) = 0 [pid 6565] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6568] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6565] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6571] setpgid(0, 0 [pid 6568] <... openat resumed>) = 4 [pid 6565] <... futex resumed>) = 1 [pid 6564] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6568] ioctl(4, LOOP_SET_FD, 3 [pid 6565] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6564] exit_group(0) = ? [pid 6571] <... setpgid resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 3 [pid 6571] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 6571] write(3, "1000", 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6571] <... write resumed>) = 4 [pid 5063] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6571] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6571] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./147/binderfs", [pid 6571] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6571] <... symlink resumed>) = 0 [pid 5063] unlink("./147/binderfs") = 0 [pid 6571] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6571] <... futex resumed>) = 0 [pid 6565] <... futex resumed>) = ? [pid 6571] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... umount2 resumed>) = 0 [pid 6571] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6565] +++ exited with 0 +++ [pid 6564] +++ exited with 0 +++ [pid 6571] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6564, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6571] <... mmap resumed>) = 0x7fe7c3226000 [pid 6571] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6571] <... mprotect resumed>) = 0 [pid 6571] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6568] <... ioctl resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./147/file0", [pid 6568] close(3) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6571] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6568] close(4 [pid 5063] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6568] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6572 attached [pid 5063] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 6568] mkdir("./file0", 0777 [pid 6572] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6571] <... clone3 resumed> => {parent_tid=[6572]}, 88) = 6572 [pid 5063] <... openat resumed>) = 4 [pid 5062] newfstatat(3, "", [pid 6572] <... rseq resumed>) = 0 [pid 6571] rt_sigprocmask(SIG_SETMASK, [], [pid 6568] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6572] set_robust_list(0x7fe7c32469a0, 24 [pid 6571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 5062] getdents64(3, [pid 6572] <... set_robust_list resumed>) = 0 [pid 6571] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] rt_sigprocmask(SIG_SETMASK, [], [pid 6571] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6571] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(4, [pid 5062] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6572] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5062] newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] rmdir("./147/file0") = 0 [pid 6570] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6568] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] unlink("./148/binderfs") = 0 [pid 6572] <... memfd_create resumed>) = 3 [pid 6572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] getdents64(3, [ 146.450227][ T6568] loop0: detected capacity change from 0 to 4096 [pid 5062] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6572] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./147") = 0 [pid 5062] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./148", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./148/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./148") = 0 [pid 5062] mkdir("./149", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6572] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6570] <... write resumed>) = 2097152 [ 146.492036][ T6568] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6570] munmap(0x7fe7bae00000, 138412032) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6572] <... write resumed>) = 2097152 [pid 6570] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6568] <... mount resumed>) = 0 [pid 6570] <... openat resumed>) = 4 [pid 6568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6570] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3) = 0 [pid 6572] munmap(0x7fe7bae00000, 138412032 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6572] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6573 attached [pid 6573] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6568] <... openat resumed>) = 3 [pid 6573] chdir("./148") = 0 [pid 6573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6568] chdir("./file0" [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6573 [pid 6573] setpgid(0, 0 [pid 6568] <... chdir resumed>) = 0 [pid 6573] <... setpgid resumed>) = 0 [pid 6568] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6572] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6568] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6573] write(3, "1000", 4 [pid 6568] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6573] <... write resumed>) = 4 [pid 6572] <... openat resumed>) = 4 [pid 6568] <... futex resumed>) = 1 [pid 6567] <... futex resumed>) = 0 [pid 6573] close(3 [pid 6568] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6567] exit_group(0 [pid 6573] <... close resumed>) = 0 [pid 6572] ioctl(4, LOOP_SET_FD, 3 [pid 6568] <... futex resumed>) = ? [pid 6567] <... exit_group resumed>) = ? [pid 6573] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6570] <... ioctl resumed>) = 0 [pid 6568] +++ exited with 0 +++ [pid 6567] +++ exited with 0 +++ [pid 5062] <... ioctl resumed>) = 0 [pid 6573] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... ioctl resumed>) = 0 [pid 6570] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6567, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6573] <... futex resumed>) = 0 [pid 6572] close(3 [pid 6573] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6572] <... close resumed>) = 0 [pid 6573] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6572] close(4 [pid 6573] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6572] <... close resumed>) = 0 [pid 6570] <... close resumed>) = 0 [pid 6573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6570] close(4 [pid 5062] close(3 [pid 5059] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6573] <... mmap resumed>) = 0x7fe7c3226000 [pid 6572] mkdir("./file0", 0777 [pid 6570] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6573] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6572] <... mkdir resumed>) = 0 [pid 6570] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6573] <... mprotect resumed>) = 0 [pid 6573] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... openat resumed>) = 3 [pid 6573] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] newfstatat(3, "", [pid 6570] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6574 attached [pid 6573] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [ 146.590922][ T6570] loop1: detected capacity change from 0 to 4096 [ 146.615008][ T6572] loop2: detected capacity change from 0 to 4096 [pid 6572] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6570] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6574] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6574 [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6575 attached [pid 6574] chdir("./149" [pid 6573] <... clone3 resumed> => {parent_tid=[6575]}, 88) = 6575 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6574] <... chdir resumed>) = 0 [pid 5059] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6574] <... prctl resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./151/binderfs", [pid 6575] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6574] setpgid(0, 0 [pid 6573] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./151/binderfs" [pid 6574] <... setpgid resumed>) = 0 [pid 6575] <... rseq resumed>) = 0 [pid 6573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6575] set_robust_list(0x7fe7c32469a0, 24 [pid 6573] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6575] <... set_robust_list resumed>) = 0 [pid 6573] <... futex resumed>) = 0 [pid 6575] rt_sigprocmask(SIG_SETMASK, [], [pid 6573] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6575] memfd_create("syzkaller", 0 [pid 5059] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6575] <... memfd_create resumed>) = 3 [pid 6575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5059] <... umount2 resumed>) = 0 [pid 6574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6574] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6574] write(3, "1000", 4 [pid 5059] newfstatat(AT_FDCWD, "./151/file0", [pid 6574] <... write resumed>) = 4 [pid 6574] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6574] <... close resumed>) = 0 [pid 6574] symlink("/dev/binderfs", "./binderfs" [pid 5059] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6574] <... symlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6574] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] newfstatat(4, "", [pid 6574] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 146.653502][ T6572] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 146.669699][ T6570] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5059] getdents64(4, [pid 6574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6574] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] getdents64(4, [pid 6574] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6574] <... mprotect resumed>) = 0 [pid 5059] close(4 [pid 6574] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./151/file0" [pid 6574] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6576 attached [pid 5059] getdents64(3, [pid 6576] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6574] <... clone3 resumed> => {parent_tid=[6576]}, 88) = 6576 [pid 6576] <... rseq resumed>) = 0 [pid 6574] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6576] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] close(3 [pid 6576] rt_sigprocmask(SIG_SETMASK, [], [pid 6574] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6574] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6576] memfd_create("syzkaller", 0 [pid 6574] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] rmdir("./151" [pid 6576] <... memfd_create resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 6576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] mkdir("./152", 0777 [pid 6576] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] <... mkdir resumed>) = 0 [pid 6575] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6572] <... mount resumed>) = 0 [pid 6572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... openat resumed>) = 3 [pid 6572] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6572] chdir("./file0") = 0 [pid 6572] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6572] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6571] <... futex resumed>) = 0 [pid 6572] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6571] exit_group(0 [pid 6572] <... futex resumed>) = ? [pid 6571] <... exit_group resumed>) = ? [pid 6570] <... mount resumed>) = 0 [pid 6572] +++ exited with 0 +++ [pid 6571] +++ exited with 0 +++ [pid 6570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6571, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6570] <... openat resumed>) = 3 [pid 6570] chdir("./file0" [pid 5061] <... restart_syscall resumed>) = 0 [pid 6576] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6570] <... chdir resumed>) = 0 [pid 6570] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6570] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6570] <... futex resumed>) = 1 [pid 6569] <... futex resumed>) = 0 [pid 6570] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6569] exit_group(0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6570] <... futex resumed>) = ? [pid 6569] <... exit_group resumed>) = ? [pid 5061] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6570] +++ exited with 0 +++ [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./150/binderfs") = 0 [pid 5061] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5061] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6575] <... write resumed>) = 2097152 [pid 5061] newfstatat(4, "", [pid 6569] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6569, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6575] munmap(0x7fe7bae00000, 138412032 [pid 5061] rmdir("./150/file0" [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] close(3 [pid 5060] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./150") = 0 [pid 5061] mkdir("./151", 0777 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6577 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", ./strace-static-x86_64: Process 6577 attached [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6577] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... openat resumed>) = 3 [pid 5060] getdents64(3, [pid 6577] <... set_robust_list resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6577] chdir("./152" [pid 5060] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6577] <... chdir resumed>) = 0 [pid 6575] <... munmap resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./148/binderfs", [pid 6577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6575] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6577] <... prctl resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6577] setpgid(0, 0 [pid 6575] <... openat resumed>) = 4 [pid 6576] <... write resumed>) = 2097152 [pid 5060] unlink("./148/binderfs" [pid 6577] <... setpgid resumed>) = 0 [pid 6577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6576] munmap(0x7fe7bae00000, 138412032 [pid 6575] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... unlink resumed>) = 0 [pid 6577] write(3, "1000", 4) = 4 [pid 6577] close(3) = 0 [pid 6577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6577] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... munmap resumed>) = 0 [pid 6575] <... ioctl resumed>) = 0 [pid 5060] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6577] <... futex resumed>) = 0 [pid 6576] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6577] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6576] <... openat resumed>) = 4 [pid 6577] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6577] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6576] ioctl(4, LOOP_SET_FD, 3 [pid 6577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6575] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 6577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6575] <... close resumed>) = 0 [pid 6577] <... mmap resumed>) = 0x7fe7c3226000 [pid 6575] close(4 [pid 5060] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6577] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6575] <... close resumed>) = 0 [pid 6577] <... mprotect resumed>) = 0 [pid 6576] <... ioctl resumed>) = 0 [pid 6575] mkdir("./file0", 0777 [pid 5061] <... ioctl resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./148/file0", [pid 6575] <... mkdir resumed>) = 0 [pid 6577] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6576] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6577] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6576] <... close resumed>) = 0 [pid 6575] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] close(3 [pid 6576] close(4) = 0 [pid 5061] <... close resumed>) = 0 [ 146.840370][ T6575] loop4: detected capacity change from 0 to 4096 [ 146.855406][ T6576] loop3: detected capacity change from 0 to 4096 [pid 6577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6576] mkdir("./file0", 0777 [pid 5060] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6576] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6577] <... clone3 resumed> => {parent_tid=[6578]}, 88) = 6578 [pid 5060] <... openat resumed>) = 4 [pid 6577] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] newfstatat(4, "", [pid 6577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6576] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6578 attached [pid 6577] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6577] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 6577] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./148/file0" [pid 6578] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5060] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6579 attached [pid 6579] set_robust_list(0x55558e6e36a0, 24 [pid 6578] <... rseq resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6579 [pid 5060] getdents64(3, [pid 6578] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6578] <... set_robust_list resumed>) = 0 [pid 5060] close(3 [pid 6578] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./148" [pid 6578] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6579] <... set_robust_list resumed>) = 0 [pid 6579] chdir("./151" [pid 5060] <... rmdir resumed>) = 0 [pid 6579] <... chdir resumed>) = 0 [pid 6578] memfd_create("syzkaller", 0 [pid 6579] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6578] <... memfd_create resumed>) = 3 [pid 5060] mkdir("./149", 0777 [pid 6579] <... prctl resumed>) = 0 [pid 6579] setpgid(0, 0) = 0 [pid 6579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... mkdir resumed>) = 0 [pid 6579] <... openat resumed>) = 3 [pid 6578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6578] <... mmap resumed>) = 0x7fe7bae00000 [pid 6579] write(3, "1000", 4) = 4 [pid 6579] close(3) = 0 [pid 6579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6579] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6579] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... openat resumed>) = 3 [pid 6579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6575] <... mount resumed>) = 0 [pid 6579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6579] <... mmap resumed>) = 0x7fe7c3226000 [pid 6579] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [ 146.885233][ T6575] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 146.901555][ T6576] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6575] <... openat resumed>) = 3 [pid 6579] <... mprotect resumed>) = 0 [pid 6575] chdir("./file0") = 0 [pid 6575] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6579] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6575] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6575] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6573] <... futex resumed>) = 0 [pid 6575] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6580 attached [pid 6579] <... clone3 resumed> => {parent_tid=[6580]}, 88) = 6580 [pid 6575] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6573] exit_group(0 [pid 6580] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6579] rt_sigprocmask(SIG_SETMASK, [], [pid 6575] <... futex resumed>) = ? [pid 6573] <... exit_group resumed>) = ? [pid 6580] <... rseq resumed>) = 0 [pid 6579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6575] +++ exited with 0 +++ [pid 6579] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] set_robust_list(0x7fe7c32469a0, 24 [pid 6579] <... futex resumed>) = 0 [pid 6580] <... set_robust_list resumed>) = 0 [pid 6579] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6580] rt_sigprocmask(SIG_SETMASK, [], [pid 6573] +++ exited with 0 +++ [pid 6580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6580] memfd_create("syzkaller", 0 [pid 6578] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6573, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6580] <... memfd_create resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6576] <... mount resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6576] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6576] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./148/binderfs", [pid 6580] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./148/binderfs") = 0 [pid 5063] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6576] chdir("./file0") = 0 [pid 6576] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = 0 [pid 6576] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] <... futex resumed>) = 0 [pid 6574] exit_group(0) = ? [pid 6578] <... write resumed>) = 2097152 [pid 5063] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6580] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6576] +++ exited with 0 +++ [pid 6574] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6574, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5063] newfstatat(AT_FDCWD, "./148/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./149/binderfs") = 0 [pid 5063] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6578] munmap(0x7fe7bae00000, 138412032 [pid 5063] newfstatat(4, "", [pid 5060] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./148/file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5062] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5062] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./148" [pid 5062] newfstatat(4, "", [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./149/file0" [pid 5063] mkdir("./149", 0777 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, ./strace-static-x86_64: Process 6581 attached 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6581] set_robust_list(0x55558e6e36a0, 24 [pid 6578] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6581 [pid 6578] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6581] <... set_robust_list resumed>) = 0 [pid 6578] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5062] close(3 [pid 6578] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] rmdir("./149" [pid 6581] chdir("./149" [pid 5062] <... rmdir resumed>) = 0 [pid 6581] <... chdir resumed>) = 0 [pid 5062] mkdir("./150", 0777 [pid 6581] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6578] <... ioctl resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6581] <... prctl resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6581] setpgid(0, 0) = 0 [pid 6581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6581] write(3, "1000", 4) = 4 [pid 6581] close(3) = 0 [pid 6581] symlink("/dev/binderfs", "./binderfs" [pid 6578] close(3 [pid 6581] <... symlink resumed>) = 0 [pid 6578] <... close resumed>) = 0 [pid 6578] close(4 [pid 6581] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... write resumed>) = 2097152 [pid 6581] <... futex resumed>) = 0 [pid 6581] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6580] munmap(0x7fe7bae00000, 138412032 [pid 6578] <... close resumed>) = 0 [pid 6578] mkdir("./file0", 0777) = 0 [pid 6578] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6580] <... munmap resumed>) = 0 [pid 6581] <... rt_sigaction resumed>NULL, 8) = 0 [ 147.061847][ T6578] loop0: detected capacity change from 0 to 4096 [pid 6581] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6580] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6580] <... openat resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 6580] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 6581] <... mmap resumed>) = 0x7fe7c3226000 [pid 6580] <... ioctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... ioctl resumed>) = 0 [pid 6581] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6580] close(3 [pid 5062] close(3 [pid 6581] <... mprotect resumed>) = 0 [pid 6580] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6582 [pid 5062] <... close resumed>) = 0 [pid 6580] close(4./strace-static-x86_64: Process 6582 attached [pid 6581] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6580] <... close resumed>) = 0 [pid 6581] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6580] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6582] set_robust_list(0x55558e6e36a0, 24 [pid 6580] <... mkdir resumed>) = 0 [pid 6582] <... set_robust_list resumed>) = 0 [ 147.103737][ T6578] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 147.123207][ T6580] loop2: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 6583 attached [pid 6582] chdir("./149" [pid 6581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6580] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6583] set_robust_list(0x55558e6e36a0, 24 [pid 6582] <... chdir resumed>) = 0 [pid 6582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6583] <... set_robust_list resumed>) = 0 [pid 6582] <... prctl resumed>) = 0 [pid 6583] chdir("./150" [pid 6582] setpgid(0, 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6583 [pid 6583] <... chdir resumed>) = 0 [pid 6582] <... setpgid resumed>) = 0 [pid 6583] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6584 attached [pid 6582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6584] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6582] <... openat resumed>) = 3 [pid 6584] <... rseq resumed>) = 0 [pid 6584] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6584] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] write(3, "1000", 4) = 4 [pid 6582] close(3 [pid 6583] <... prctl resumed>) = 0 [pid 6581] <... clone3 resumed> => {parent_tid=[6584]}, 88) = 6584 [pid 6583] setpgid(0, 0) = 0 [pid 6582] <... close resumed>) = 0 [pid 6581] rt_sigprocmask(SIG_SETMASK, [], [pid 6583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6582] symlink("/dev/binderfs", "./binderfs" [pid 6581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6583] <... openat resumed>) = 3 [pid 6582] <... symlink resumed>) = 0 [pid 6581] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] <... futex resumed>) = 0 [pid 6583] write(3, "1000", 4 [pid 6582] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] <... futex resumed>) = 1 [pid 6584] memfd_create("syzkaller", 0 [pid 6583] <... write resumed>) = 4 [pid 6582] <... futex resumed>) = 0 [pid 6583] close(3 [pid 6581] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6582] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6583] <... close resumed>) = 0 [pid 6582] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6584] <... memfd_create resumed>) = 3 [pid 6583] symlink("/dev/binderfs", "./binderfs" [pid 6582] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] <... mmap resumed>) = 0x7fe7bae00000 [pid 6582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6583] <... symlink resumed>) = 0 [pid 6582] <... mmap resumed>) = 0x7fe7c3226000 [pid 6583] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6583] <... futex resumed>) = 0 [pid 6582] <... mprotect resumed>) = 0 [pid 6583] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6582] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6583] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6585 attached [pid 6583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6582] <... clone3 resumed> => {parent_tid=[6585]}, 88) = 6585 [pid 6585] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6583] <... mmap resumed>) = 0x7fe7c3226000 [pid 6582] rt_sigprocmask(SIG_SETMASK, [], [pid 6585] <... rseq resumed>) = 0 [pid 6582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6585] set_robust_list(0x7fe7c32469a0, 24 [pid 6582] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6582] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6585] <... set_robust_list resumed>) = 0 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6583] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6585] memfd_create("syzkaller", 0 [pid 6583] <... mprotect resumed>) = 0 [pid 6585] <... memfd_create resumed>) = 3 [pid 6578] <... mount resumed>) = 0 [ 147.159193][ T6580] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6586 attached [pid 6578] <... openat resumed>) = 3 [pid 6586] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6583] <... clone3 resumed> => {parent_tid=[6586]}, 88) = 6586 [pid 6580] <... mount resumed>) = 0 [pid 6578] chdir("./file0") = 0 [pid 6586] <... rseq resumed>) = 0 [pid 6583] rt_sigprocmask(SIG_SETMASK, [], [pid 6580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6586] set_robust_list(0x7fe7c32469a0, 24 [pid 6583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6586] <... set_robust_list resumed>) = 0 [pid 6583] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... openat resumed>) = 3 [pid 6578] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6584] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6586] rt_sigprocmask(SIG_SETMASK, [], [pid 6583] <... futex resumed>) = 0 [pid 6586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6583] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6578] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6586] memfd_create("syzkaller", 0 [pid 6580] chdir("./file0" [pid 6578] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6577] <... futex resumed>) = 0 [pid 6580] <... chdir resumed>) = 0 [pid 6578] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] exit_group(0 [pid 6586] <... memfd_create resumed>) = 3 [pid 6584] <... write resumed>) = 2097152 [pid 6580] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6578] <... futex resumed>) = ? [pid 6577] <... exit_group resumed>) = ? [pid 6586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6585] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6584] munmap(0x7fe7bae00000, 138412032 [pid 6580] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6578] +++ exited with 0 +++ [pid 6586] <... mmap resumed>) = 0x7fe7bae00000 [pid 6584] <... munmap resumed>) = 0 [pid 6580] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] +++ exited with 0 +++ [pid 6580] <... futex resumed>) = 1 [pid 6580] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6577, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./152/binderfs") = 0 [pid 5059] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6585] <... write resumed>) = 2097152 [pid 5059] <... umount2 resumed>) = 0 [pid 6585] munmap(0x7fe7bae00000, 138412032 [pid 6579] <... futex resumed>) = 0 [pid 6579] exit_group(0 [pid 6580] <... futex resumed>) = ? [pid 6579] <... exit_group resumed>) = ? [pid 5059] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6580] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] getdents64(4, [pid 6584] <... openat resumed>) = 4 [pid 6579] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6584] ioctl(4, LOOP_SET_FD, 3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6579, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5059] getdents64(4, [pid 6585] <... munmap resumed>) = 0 [pid 5061] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6585] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] close(4) = 0 [pid 5059] rmdir("./152/file0" [pid 5061] <... openat resumed>) = 3 [pid 6585] <... openat resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 6585] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./152") = 0 [pid 5059] mkdir("./153", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6584] <... ioctl resumed>) = 0 [pid 6586] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6585] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 6585] close(3) = 0 [pid 6585] close(4 [pid 6584] close(3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6585] <... close resumed>) = 0 [pid 5061] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6585] mkdir("./file0", 0777 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6585] <... mkdir resumed>) = 0 [pid 6584] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./151/binderfs" [pid 6584] close(4 [pid 5061] <... unlink resumed>) = 0 [pid 6584] <... close resumed>) = 0 [pid 5061] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6584] mkdir("./file0", 0777 [pid 5061] <... umount2 resumed>) = 0 [pid 6585] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6584] <... mkdir resumed>) = 0 [ 147.296899][ T6584] loop1: detected capacity change from 0 to 4096 [ 147.309187][ T6585] loop4: detected capacity change from 0 to 4096 [pid 5061] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6584] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./151/file0") = 0 [pid 6586] <... write resumed>) = 2097152 [pid 5061] getdents64(3, [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./151" [pid 6586] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] mkdir("./152", 0777) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6587 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 ./strace-static-x86_64: Process 6587 attached [pid 6586] <... munmap resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6586] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6587] set_robust_list(0x55558e6e36a0, 24 [pid 6586] <... openat resumed>) = 4 [pid 6587] <... set_robust_list resumed>) = 0 [pid 6587] chdir("./153") = 0 [pid 6587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6587] setpgid(0, 0 [ 147.338032][ T6585] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 147.357007][ T6584] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6586] ioctl(4, LOOP_SET_FD, 3 [pid 6587] <... setpgid resumed>) = 0 [pid 6587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6587] write(3, "1000", 4) = 4 [pid 6587] close(3) = 0 [pid 6587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6587] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6587] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6586] <... ioctl resumed>) = 0 [pid 6586] close(3) = 0 [pid 6586] close(4) = 0 [pid 6586] mkdir("./file0", 0777 [pid 6587] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6587] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6586] <... mkdir resumed>) = 0 [pid 6587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6586] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6587] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6587] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6588 attached [pid 6588] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6587] <... clone3 resumed> => {parent_tid=[6588]}, 88) = 6588 [pid 6588] <... rseq resumed>) = 0 [pid 6587] rt_sigprocmask(SIG_SETMASK, [], [pid 6588] set_robust_list(0x7fe7c32469a0, 24 [pid 6587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6588] <... set_robust_list resumed>) = 0 [pid 6587] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6588] rt_sigprocmask(SIG_SETMASK, [], [pid 6587] <... futex resumed>) = 0 [pid 6588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6587] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 147.394826][ T6586] loop3: detected capacity change from 0 to 4096 [ 147.433827][ T6586] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6588] memfd_create("syzkaller", 0) = 3 [pid 6584] <... mount resumed>) = 0 [pid 6588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... ioctl resumed>) = 0 [pid 6584] <... openat resumed>) = 3 [pid 6584] chdir("./file0" [pid 6585] <... mount resumed>) = 0 [pid 6584] <... chdir resumed>) = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6584] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6581] <... futex resumed>) = 0 [pid 6585] <... openat resumed>) = 3 [pid 6581] exit_group(0) = ? [pid 6585] chdir("./file0" [pid 5061] close(3 [pid 6585] <... chdir resumed>) = 0 [pid 6584] +++ exited with 0 +++ [pid 6581] +++ exited with 0 +++ [pid 5061] <... close resumed>) = 0 [pid 6585] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6581, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 6585] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6585] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6582] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6589 attached [pid 6585] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6582] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6582] <... exit_group resumed>) = ? [pid 6585] <... futex resumed>) = ? [pid 5060] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6585] +++ exited with 0 +++ [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6589 [pid 6582] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6582, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 6589] set_robust_list(0x55558e6e36a0, 24 [pid 5063] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6589] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] chdir("./152" [pid 5063] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./149/binderfs", [pid 5063] newfstatat(3, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] unlink("./149/binderfs" [pid 6589] <... chdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5060] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6589] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] <... prctl resumed>) = 0 [pid 5063] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6589] <... setpgid resumed>) = 0 [pid 6589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6589] <... openat resumed>) = 3 [pid 5063] unlink("./149/binderfs" [pid 6589] write(3, "1000", 4 [pid 5063] <... unlink resumed>) = 0 [pid 6589] <... write resumed>) = 4 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] close(3 [pid 6586] <... mount resumed>) = 0 [pid 5063] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] <... close resumed>) = 0 [pid 6588] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6586] <... openat resumed>) = 3 [pid 6589] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] chdir("./file0" [pid 6589] <... futex resumed>) = 0 [pid 6586] <... chdir resumed>) = 0 [pid 6589] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6586] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] newfstatat(AT_FDCWD, "./149/file0", [pid 6589] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6586] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6589] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6586] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6586] <... futex resumed>) = 1 [pid 6583] <... futex resumed>) = 0 [pid 5063] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6586] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6589] <... mmap resumed>) = 0x7fe7c3226000 [pid 6586] <... futex resumed>) = ? [pid 6583] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./149/file0", [pid 5060] <... openat resumed>) = 4 [pid 6589] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6586] +++ exited with 0 +++ [pid 6583] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(4, "", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6583, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5063] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6589] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5060] getdents64(4, [pid 6589] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... restart_syscall resumed>) = 0 [pid 6589] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(4, "", [pid 5060] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] close(4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] rmdir("./149/file0" [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5060] <... rmdir resumed>) = 0 [pid 5063] close(4 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./149/file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./150/binderfs", ./strace-static-x86_64: Process 6590 attached [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6590] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6589] <... clone3 resumed> => {parent_tid=[6590]}, 88) = 6590 [pid 6590] <... rseq resumed>) = 0 [pid 6589] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] unlink("./150/binderfs" [pid 5060] close(3 [pid 6590] set_robust_list(0x7fe7c32469a0, 24 [pid 6589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 6590] <... set_robust_list resumed>) = 0 [pid 6589] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] rmdir("./149" [pid 6590] rt_sigprocmask(SIG_SETMASK, [], [pid 6589] <... futex resumed>) = 0 [pid 5063] close(3 [pid 5060] <... rmdir resumed>) = 0 [pid 6590] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6589] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./149" [pid 6590] memfd_create("syzkaller", 0 [pid 5060] mkdir("./150", 0777 [pid 6590] <... memfd_create resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5063] mkdir("./150", 0777 [pid 6590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] newfstatat(AT_FDCWD, "./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6588] <... write resumed>) = 2097152 [pid 6588] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6590] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6588] <... munmap resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 6588] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6588] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] getdents64(4, [pid 6590] <... write resumed>) = 2097152 [pid 6590] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./150/file0") = 0 [pid 6590] <... munmap resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5060] close(3 [pid 5062] rmdir("./150" [pid 5060] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6590] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] mkdir("./151", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6591 attached [pid 6590] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6591 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6588] close(3) = 0 [pid 6588] close(4) = 0 [pid 6590] ioctl(4, LOOP_SET_FD, 3 [pid 6591] set_robust_list(0x55558e6e36a0, 24 [pid 6588] mkdir("./file0", 0777) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [ 147.619605][ T6588] loop0: detected capacity change from 0 to 4096 [ 147.657299][ T6590] loop2: detected capacity change from 0 to 4096 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6588] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"..../strace-static-x86_64: Process 6592 attached [pid 6591] <... set_robust_list resumed>) = 0 [pid 6590] <... ioctl resumed>) = 0 [pid 6592] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6591] chdir("./150" [pid 6590] close(3 [pid 6592] chdir("./150" [pid 6591] <... chdir resumed>) = 0 [pid 6590] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6592 [pid 6592] <... chdir resumed>) = 0 [pid 6591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6590] close(4 [pid 6591] <... prctl resumed>) = 0 [pid 6590] <... close resumed>) = 0 [pid 6590] mkdir("./file0", 0777 [pid 6591] setpgid(0, 0 [pid 6592] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6591] <... setpgid resumed>) = 0 [pid 6590] <... mkdir resumed>) = 0 [pid 6592] <... prctl resumed>) = 0 [pid 6591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6590] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6591] <... openat resumed>) = 3 [ 147.664971][ T6588] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6592] setpgid(0, 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6592] <... setpgid resumed>) = 0 [pid 6591] write(3, "1000", 4 [pid 6592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6591] <... write resumed>) = 4 [pid 6592] <... openat resumed>) = 3 [pid 6591] close(3 [pid 6592] write(3, "1000", 4 [pid 6591] <... close resumed>) = 0 [pid 5062] close(3 [pid 6592] <... write resumed>) = 4 [pid 6591] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... close resumed>) = 0 [pid 6592] close(3 [pid 6591] <... symlink resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6592] <... close resumed>) = 0 [pid 6591] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] symlink("/dev/binderfs", "./binderfs" [pid 6591] <... futex resumed>) = 0 [pid 6592] <... symlink resumed>) = 0 [pid 6591] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6590] <... mount resumed>) = 0 [pid 6591] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6593 attached [pid 6591] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6593 [pid 6590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6591] <... mmap resumed>) = 0x7fe7c3226000 [pid 6593] set_robust_list(0x55558e6e36a0, 24 [pid 6591] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6590] <... openat resumed>) = 3 [pid 6593] <... set_robust_list resumed>) = 0 [pid 6593] chdir("./151" [pid 6592] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6590] chdir("./file0" [pid 6593] <... chdir resumed>) = 0 [pid 6592] <... futex resumed>) = 0 [pid 6591] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6590] <... chdir resumed>) = 0 [pid 6593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6592] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6590] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6594 attached [pid 6593] <... prctl resumed>) = 0 [pid 6592] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6590] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6594] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6593] setpgid(0, 0 [pid 6592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6591] <... clone3 resumed> => {parent_tid=[6594]}, 88) = 6594 [pid 6590] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... rseq resumed>) = 0 [pid 6593] <... setpgid resumed>) = 0 [pid 6592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6591] rt_sigprocmask(SIG_SETMASK, [], [pid 6590] <... futex resumed>) = 1 [ 147.703860][ T6590] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6589] <... futex resumed>) = 0 [pid 6594] set_robust_list(0x7fe7c32469a0, 24 [pid 6593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6590] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6589] exit_group(0 [pid 6594] <... set_robust_list resumed>) = 0 [pid 6593] <... openat resumed>) = 3 [pid 6592] <... mmap resumed>) = 0x7fe7c3226000 [pid 6591] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6590] <... futex resumed>) = ? [pid 6589] <... exit_group resumed>) = ? [pid 6594] rt_sigprocmask(SIG_SETMASK, [], [pid 6593] write(3, "1000", 4 [pid 6592] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6591] <... futex resumed>) = 0 [pid 6590] +++ exited with 0 +++ [pid 6593] <... write resumed>) = 4 [pid 6591] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6593] close(3) = 0 [pid 6589] +++ exited with 0 +++ [pid 6593] symlink("/dev/binderfs", "./binderfs" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6589, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6593] <... symlink resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6594] memfd_create("syzkaller", 0 [pid 6593] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] <... mprotect resumed>) = 0 [pid 6588] <... mount resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 6594] <... memfd_create resumed>) = 3 [pid 6593] <... futex resumed>) = 0 [pid 6592] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6588] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6594] <... mmap resumed>) = 0x7fe7bae00000 [pid 6593] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6592] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6588] <... openat resumed>) = 3 [pid 6593] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6588] chdir("./file0" [pid 6593] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6588] <... chdir resumed>) = 0 [pid 5061] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6593] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6595 attached [pid 6593] <... mmap resumed>) = 0x7fe7c3226000 [pid 6588] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6595] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6593] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6592] <... clone3 resumed> => {parent_tid=[6595]}, 88) = 6595 [pid 6588] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... openat resumed>) = 3 [pid 6595] <... rseq resumed>) = 0 [pid 6593] <... mprotect resumed>) = 0 [pid 6592] rt_sigprocmask(SIG_SETMASK, [], [pid 6588] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] newfstatat(3, "", [pid 6595] set_robust_list(0x7fe7c32469a0, 24 [pid 6593] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6588] <... futex resumed>) = 1 [pid 6587] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6595] <... set_robust_list resumed>) = 0 [pid 6593] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6592] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6588] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6587] exit_group(0 [pid 5061] getdents64(3, [pid 6595] rt_sigprocmask(SIG_SETMASK, [], [pid 6593] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6592] <... futex resumed>) = 0 [pid 6588] <... futex resumed>) = ? [pid 6587] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6596 attached [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6588] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6596] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6593] <... clone3 resumed> => {parent_tid=[6596]}, 88) = 6596 [pid 5061] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6596] <... rseq resumed>) = 0 [pid 6593] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6596] set_robust_list(0x7fe7c32469a0, 24 [pid 6595] memfd_create("syzkaller", 0 [pid 6593] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6587] +++ exited with 0 +++ [pid 6592] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6596] <... set_robust_list resumed>) = 0 [pid 6593] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] newfstatat(AT_FDCWD, "./152/binderfs", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6587, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6596] rt_sigprocmask(SIG_SETMASK, [], [pid 6593] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6595] <... memfd_create resumed>) = 3 [pid 6593] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] unlink("./152/binderfs" [pid 5059] <... restart_syscall resumed>) = 0 [pid 6595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] <... unlink resumed>) = 0 [pid 5059] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6596] memfd_create("syzkaller", 0 [pid 5059] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6596] <... memfd_create resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 6596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./153/binderfs" [pid 6596] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] <... unlink resumed>) = 0 [pid 6594] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] close(4) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5061] rmdir("./152/file0" [pid 5059] newfstatat(4, "", [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5059] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 5061] rmdir("./152" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6595] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] close(4 [pid 5061] mkdir("./153", 0777 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./153/file0") = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5059] getdents64(3, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 6594] <... write resumed>) = 2097152 [pid 5059] rmdir("./153" [pid 6596] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6595] <... write resumed>) = 2097152 [pid 6594] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... rmdir resumed>) = 0 [pid 6595] munmap(0x7fe7bae00000, 138412032 [pid 6594] <... munmap resumed>) = 0 [pid 6596] <... write resumed>) = 2097152 [pid 6594] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] mkdir("./154", 0777 [pid 6596] munmap(0x7fe7bae00000, 138412032 [pid 6594] <... openat resumed>) = 4 [pid 6595] <... munmap resumed>) = 0 [pid 6594] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6595] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6596] <... munmap resumed>) = 0 [pid 6595] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 6596] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6595] ioctl(4, LOOP_SET_FD, 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6594] <... ioctl resumed>) = 0 [pid 6594] close(3) = 0 [pid 6594] close(4) = 0 [pid 6594] mkdir("./file0", 0777 [pid 6596] <... openat resumed>) = 4 [pid 6594] <... mkdir resumed>) = 0 [pid 6596] ioctl(4, LOOP_SET_FD, 3 [pid 6594] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6595] <... ioctl resumed>) = 0 [pid 6595] close(3) = 0 [pid 6595] close(4) = 0 [pid 6595] mkdir("./file0", 0777) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6596] <... ioctl resumed>) = 0 [pid 6595] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6596] close(3) = 0 [pid 6596] close(4) = 0 [pid 5061] close(3 [pid 6596] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6596] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6597 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6597 [pid 6597] set_robust_list(0x55558e6e36a0, 24) = 0 [ 147.890509][ T6594] loop1: detected capacity change from 0 to 4096 [ 147.894582][ T6595] loop4: detected capacity change from 0 to 4096 [ 147.910776][ T6596] loop3: detected capacity change from 0 to 4096 [ 147.912463][ T6594] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6597] chdir("./153") = 0 [pid 6597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6597] setpgid(0, 0) = 0 [pid 6597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6597] write(3, "1000", 4) = 4 [pid 6597] close(3) = 0 [pid 6597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6597] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6597] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6597] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6598 attached [pid 6598] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6597] <... clone3 resumed> => {parent_tid=[6598]}, 88) = 6598 [pid 6598] <... rseq resumed>) = 0 [pid 6597] rt_sigprocmask(SIG_SETMASK, [], [pid 6596] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6598] set_robust_list(0x7fe7c32469a0, 24 [pid 6597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6598] <... set_robust_list resumed>) = 0 [pid 6597] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] rt_sigprocmask(SIG_SETMASK, [], [pid 6597] <... futex resumed>) = 0 [pid 6598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6597] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6598] memfd_create("syzkaller", 0) = 3 [pid 6598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6596] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6599 attached [pid 6596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6599] set_robust_list(0x55558e6e36a0, 24 [pid 6596] <... openat resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6599 [pid 6599] <... set_robust_list resumed>) = 0 [ 147.940012][ T6595] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 147.957812][ T6596] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6596] chdir("./file0" [pid 6599] chdir("./154" [pid 6596] <... chdir resumed>) = 0 [pid 6599] <... chdir resumed>) = 0 [pid 6596] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6599] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6596] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6599] <... prctl resumed>) = 0 [pid 6596] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] setpgid(0, 0 [pid 6596] <... futex resumed>) = 1 [pid 6593] <... futex resumed>) = 0 [pid 6596] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] exit_group(0 [pid 6599] <... setpgid resumed>) = 0 [pid 6596] <... futex resumed>) = ? [pid 6593] <... exit_group resumed>) = ? [pid 6599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6594] <... mount resumed>) = 0 [pid 6594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6599] write(3, "1000", 4 [pid 6598] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6594] chdir("./file0") = 0 [pid 6594] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6599] <... write resumed>) = 4 [pid 6599] close(3) = 0 [pid 6594] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6591] <... futex resumed>) = 0 [pid 6596] +++ exited with 0 +++ [pid 6599] symlink("/dev/binderfs", "./binderfs" [pid 6593] +++ exited with 0 +++ [pid 6591] exit_group(0 [pid 6594] exit_group(0 [pid 6599] <... symlink resumed>) = 0 [pid 6594] +++ exited with 0 +++ [pid 6591] <... exit_group resumed>) = ? [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6593, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 6591] +++ exited with 0 +++ [pid 6599] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6591, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6599] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6599] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6599] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 6599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] newfstatat(3, "", [pid 5060] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6599] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6599] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(3, [pid 5060] newfstatat(3, "", [pid 6599] <... mprotect resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 6599] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6599] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6598] <... write resumed>) = 2097152 [pid 5062] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5060] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6599] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6598] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./151/binderfs" [pid 5060] newfstatat(AT_FDCWD, "./150/binderfs", [pid 6595] <... mount resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] unlink("./150/binderfs" [pid 6595] <... openat resumed>) = 3 [pid 6595] chdir("./file0") = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6595] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = 0 [pid 5060] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6600 attached [pid 6599] <... clone3 resumed> => {parent_tid=[6600]}, 88) = 6600 [pid 6598] <... munmap resumed>) = 0 [pid 6595] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6600] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6599] rt_sigprocmask(SIG_SETMASK, [], [pid 6598] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6595] <... futex resumed>) = 1 [pid 6592] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = 0 [pid 6600] <... rseq resumed>) = 0 [pid 6599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6598] <... openat resumed>) = 4 [pid 6595] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6592] exit_group(0 [pid 5060] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6600] set_robust_list(0x7fe7c32469a0, 24 [pid 6599] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] ioctl(4, LOOP_SET_FD, 3 [pid 6595] <... futex resumed>) = ? [pid 6592] <... exit_group resumed>) = ? [pid 5062] newfstatat(AT_FDCWD, "./151/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6600] <... set_robust_list resumed>) = 0 [pid 6599] <... futex resumed>) = 0 [pid 6598] <... ioctl resumed>) = 0 [pid 6595] +++ exited with 0 +++ [pid 5060] newfstatat(AT_FDCWD, "./150/file0", [pid 6600] rt_sigprocmask(SIG_SETMASK, [], [pid 6599] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6598] close(3 [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6598] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6592] +++ exited with 0 +++ [pid 5062] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6600] memfd_create("syzkaller", 0 [pid 5062] <... openat resumed>) = 4 [pid 5060] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6598] close(4 [pid 5062] newfstatat(4, "", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6592, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6600] <... memfd_create resumed>) = 3 [pid 6598] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6598] mkdir("./file0", 0777 [pid 5060] <... openat resumed>) = 4 [pid 6600] <... mmap resumed>) = 0x7fe7bae00000 [pid 6598] <... mkdir resumed>) = 0 [pid 5063] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5060] newfstatat(4, "", [pid 6598] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(4 [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] rmdir("./151/file0" [pid 5060] rmdir("./150/file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] close(3) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] rmdir("./151" [pid 5060] rmdir("./150" [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] mkdir("./152", 0777 [pid 5060] mkdir("./151", 0777 [pid 5063] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] newfstatat(AT_FDCWD, "./150/binderfs", [pid 5062] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] unlink("./150/binderfs" [pid 6600] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 148.121570][ T6598] loop2: detected capacity change from 0 to 4096 [ 148.145822][ T6598] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5063] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6598] <... mount resumed>) = 0 [pid 6598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./150/file0", [pid 6598] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6598] chdir("./file0" [pid 5063] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6598] <... chdir resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6598] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] getdents64(4, [pid 6598] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6598] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 6597] <... futex resumed>) = 0 [pid 6597] exit_group(0) = ? [pid 6598] <... futex resumed>) = ? [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6598] +++ exited with 0 +++ [pid 6597] +++ exited with 0 +++ [pid 5063] close(4) = 0 [pid 5063] rmdir("./150/file0" [pid 5060] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 6600] <... write resumed>) = 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6597, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] <... close resumed>) = 0 [pid 6600] munmap(0x7fe7bae00000, 138412032 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6601 attached [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5061] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6601] set_robust_list(0x55558e6e36a0, 24 [pid 6600] <... munmap resumed>) = 0 [pid 5063] close(3 [pid 5062] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6601 [pid 6601] <... set_robust_list resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./150" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6601] chdir("./151") = 0 [pid 6600] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 6601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 6602 attached [pid 6601] setpgid(0, 0 [pid 6600] <... openat resumed>) = 4 [pid 5063] mkdir("./151", 0777 [pid 5061] newfstatat(3, "", [pid 6602] set_robust_list(0x55558e6e36a0, 24 [pid 6601] <... setpgid resumed>) = 0 [pid 6600] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6602] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6602 [pid 6602] chdir("./152" [pid 6601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] getdents64(3, [pid 6602] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6602] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... openat resumed>) = 3 [pid 5061] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6602] <... prctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6602] setpgid(0, 0) = 0 [pid 5061] newfstatat(AT_FDCWD, "./153/binderfs", [pid 6602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./153/binderfs") = 0 [pid 6602] <... openat resumed>) = 3 [pid 6601] <... openat resumed>) = 3 [pid 5061] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6602] write(3, "1000", 4) = 4 [pid 6602] close(3) = 0 [pid 6601] write(3, "1000", 4 [pid 6602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6601] <... write resumed>) = 4 [pid 6600] <... ioctl resumed>) = 0 [pid 6601] close(3 [pid 6600] close(3 [pid 6602] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] <... close resumed>) = 0 [pid 6600] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6602] <... futex resumed>) = 0 [pid 6601] symlink("/dev/binderfs", "./binderfs" [pid 6600] close(4 [pid 6601] <... symlink resumed>) = 0 [pid 6600] <... close resumed>) = 0 [pid 6601] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] mkdir("./file0", 0777 [pid 5061] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6602] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6601] <... futex resumed>) = 0 [pid 6600] <... mkdir resumed>) = 0 [pid 5061] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6601] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6600] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6601] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6602] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6601] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6602] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] newfstatat(4, "", [pid 6601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6601] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] getdents64(4, [pid 6601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6602] <... mmap resumed>) = 0x7fe7c3226000 [pid 6601] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] close(4) = 0 [pid 6602] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] rmdir("./153/file0" [pid 6602] <... mprotect resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6603 attached [pid 6602] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6601] <... clone3 resumed> => {parent_tid=[6603]}, 88) = 6603 [pid 5061] getdents64(3, [pid 6603] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6601] rt_sigprocmask(SIG_SETMASK, [], [pid 6603] <... rseq resumed>) = 0 [pid 6603] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6603] <... set_robust_list resumed>) = 0 [pid 6603] rt_sigprocmask(SIG_SETMASK, [], [pid 6601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] close(3 [pid 6603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6601] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6602] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] rmdir("./153" [pid 6603] memfd_create("syzkaller", 0 [pid 6601] <... futex resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6602] <... clone3 resumed> => {parent_tid=[6604]}, 88) = 6604 [pid 5061] mkdir("./154", 0777 [pid 6602] rt_sigprocmask(SIG_SETMASK, [], [pid 6601] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... mkdir resumed>) = 0 [pid 6602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6602] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6602] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6604 attached ) = 3 [pid 6604] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6604] <... rseq resumed>) = 0 [pid 6604] set_robust_list(0x7fe7c32469a0, 24 [pid 6603] <... memfd_create resumed>) = 3 [pid 6603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6604] <... set_robust_list resumed>) = 0 [pid 6603] <... mmap resumed>) = 0x7fe7bae00000 [pid 6604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6604] memfd_create("syzkaller", 0) = 3 [pid 6604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 148.268047][ T6600] loop0: detected capacity change from 0 to 4096 [ 148.297072][ T6600] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6605 attached [pid 6605] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6605 [pid 6605] <... set_robust_list resumed>) = 0 [pid 6605] chdir("./151") = 0 [pid 6604] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6605] setpgid(0, 0) = 0 [pid 6605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 6605] write(3, "1000", 4 [pid 6603] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6605] <... write resumed>) = 4 [pid 6605] close(3) = 0 [pid 6605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6605] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6605] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6605] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6605] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6600] <... mount resumed>) = 0 [pid 6600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6600] chdir("./file0") = 0 [pid 5061] close(3 [pid 6600] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... close resumed>) = 0 ./strace-static-x86_64: Process 6606 attached [pid 6600] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6606] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6600] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6607 attached [pid 6606] <... rseq resumed>) = 0 [pid 6600] <... futex resumed>) = 1 [pid 6599] <... futex resumed>) = 0 [pid 6605] <... clone3 resumed> => {parent_tid=[6606]}, 88) = 6606 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6607 [pid 6605] rt_sigprocmask(SIG_SETMASK, [], [pid 6599] exit_group(0 [pid 6605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6600] read(-256, [pid 6606] set_robust_list(0x7fe7c32469a0, 24 [pid 6605] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] +++ exited with 0 +++ [pid 6599] <... exit_group resumed>) = ? [pid 6606] <... set_robust_list resumed>) = 0 [pid 6605] <... futex resumed>) = 0 [pid 6605] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6606] memfd_create("syzkaller", 0 [pid 6607] set_robust_list(0x55558e6e36a0, 24 [pid 6606] <... memfd_create resumed>) = 3 [pid 6599] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6599, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6607] <... set_robust_list resumed>) = 0 [pid 6606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6607] chdir("./154" [pid 6606] <... mmap resumed>) = 0x7fe7bae00000 [pid 6607] <... chdir resumed>) = 0 [pid 5059] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6604] <... write resumed>) = 2097152 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6607] setpgid(0, 0 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6607] <... setpgid resumed>) = 0 [pid 6607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] getdents64(3, [pid 6607] <... openat resumed>) = 3 [pid 6607] write(3, "1000", 4 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6607] <... write resumed>) = 4 [pid 5059] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6607] close(3) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6607] symlink("/dev/binderfs", "./binderfs" [pid 5059] newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6607] <... symlink resumed>) = 0 [pid 5059] unlink("./154/binderfs" [pid 6607] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... unlink resumed>) = 0 [pid 6607] <... futex resumed>) = 0 [pid 5059] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6607] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... umount2 resumed>) = 0 [pid 6607] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6607] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6604] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] newfstatat(AT_FDCWD, "./154/file0", [pid 6607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6607] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6607] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6604] <... munmap resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6607] <... mprotect resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6607] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... openat resumed>) = 4 [pid 6607] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] newfstatat(4, "", [pid 6607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 6608 attached [pid 6607] <... clone3 resumed> => {parent_tid=[6608]}, 88) = 6608 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6608] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6607] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] getdents64(4, [pid 6608] <... rseq resumed>) = 0 [pid 6607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6603] <... write resumed>) = 2097152 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6608] set_robust_list(0x7fe7c32469a0, 24 [pid 6607] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6603] munmap(0x7fe7bae00000, 138412032 [pid 5059] close(4 [pid 6608] <... set_robust_list resumed>) = 0 [pid 6607] <... futex resumed>) = 0 [pid 6604] <... openat resumed>) = 4 [pid 5059] <... close resumed>) = 0 [pid 6608] rt_sigprocmask(SIG_SETMASK, [], [pid 6607] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6604] ioctl(4, LOOP_SET_FD, 3 [pid 5059] rmdir("./154/file0" [pid 6608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6606] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6603] <... munmap resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6604] <... ioctl resumed>) = 0 [pid 5059] getdents64(3, [pid 6608] memfd_create("syzkaller", 0 [pid 6604] close(3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6604] <... close resumed>) = 0 [pid 5059] close(3 [pid 6604] close(4 [pid 5059] <... close resumed>) = 0 [pid 6604] <... close resumed>) = 0 [pid 5059] rmdir("./154" [pid 6604] mkdir("./file0", 0777 [pid 5059] <... rmdir resumed>) = 0 [pid 6604] <... mkdir resumed>) = 0 [pid 5059] mkdir("./155", 0777 [pid 6608] <... memfd_create resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 6604] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6603] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6608] <... mmap resumed>) = 0x7fe7bae00000 [pid 6603] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6603] close(3) = 0 [pid 6603] close(4) = 0 [pid 6606] <... write resumed>) = 2097152 [pid 6603] mkdir("./file0", 0777) = 0 [ 148.473348][ T6604] loop3: detected capacity change from 0 to 4096 [ 148.494744][ T6604] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 148.508990][ T6603] loop1: detected capacity change from 0 to 4096 [pid 6603] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6606] munmap(0x7fe7bae00000, 138412032 [pid 6608] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6606] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6609 attached [ 148.539780][ T6603] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6606] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6606] ioctl(4, LOOP_SET_FD, 3 [pid 6609] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6609 [pid 6609] chdir("./155") = 0 [pid 6609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6609] setpgid(0, 0) = 0 [pid 6609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6609] write(3, "1000", 4) = 4 [pid 6609] close(3) = 0 [pid 6609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6604] <... mount resumed>) = 0 [pid 6609] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6608] <... write resumed>) = 2097152 [pid 6609] <... futex resumed>) = 0 [pid 6609] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6606] <... ioctl resumed>) = 0 [pid 6604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6608] munmap(0x7fe7bae00000, 138412032 [pid 6606] close(3 [pid 6604] <... openat resumed>) = 3 [pid 6609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6606] <... close resumed>) = 0 [pid 6604] chdir("./file0" [pid 6609] <... mmap resumed>) = 0x7fe7c3226000 [pid 6608] <... munmap resumed>) = 0 [pid 6606] close(4 [pid 6604] <... chdir resumed>) = 0 [pid 6609] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6606] <... close resumed>) = 0 [pid 6604] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6606] mkdir("./file0", 0777 [pid 6604] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6606] <... mkdir resumed>) = 0 [pid 6604] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6606] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6604] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6602] <... futex resumed>) = 0 [pid 6602] exit_group(0 [pid 6604] <... futex resumed>) = ? [pid 6602] <... exit_group resumed>) = ? [ 148.601815][ T6606] loop4: detected capacity change from 0 to 4096 [pid 6609] <... mprotect resumed>) = 0 [pid 6609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6610 attached [pid 6610] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6609] <... clone3 resumed> => {parent_tid=[6610]}, 88) = 6610 [pid 6610] set_robust_list(0x7fe7c32469a0, 24 [pid 6609] rt_sigprocmask(SIG_SETMASK, [], [pid 6610] <... set_robust_list resumed>) = 0 [pid 6609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6610] rt_sigprocmask(SIG_SETMASK, [], [pid 6609] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6609] <... futex resumed>) = 0 [pid 6608] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6610] memfd_create("syzkaller", 0 [pid 6609] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6608] <... openat resumed>) = 4 [pid 6608] ioctl(4, LOOP_SET_FD, 3 [pid 6604] +++ exited with 0 +++ [pid 6602] +++ exited with 0 +++ [pid 6610] <... memfd_create resumed>) = 3 [pid 6610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6602, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6610] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./152/binderfs") = 0 [pid 5062] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] <... ioctl resumed>) = 0 [pid 6608] close(3) = 0 [pid 6608] close(4) = 0 [pid 6608] mkdir("./file0", 0777) = 0 [ 148.643515][ T6606] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 148.657587][ T6608] loop2: detected capacity change from 0 to 4096 [pid 6608] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6606] <... mount resumed>) = 0 [pid 6603] <... mount resumed>) = 0 [pid 6606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6606] <... openat resumed>) = 3 [pid 6603] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 6606] chdir("./file0" [pid 6603] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6606] <... chdir resumed>) = 0 [pid 6603] <... chdir resumed>) = 0 [pid 5062] getdents64(4, [pid 6606] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6603] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6606] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6603] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6606] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6603] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 6606] <... futex resumed>) = 1 [pid 6605] <... futex resumed>) = 0 [pid 6603] <... futex resumed>) = 1 [pid 6601] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6606] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] exit_group(0 [pid 6603] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6601] exit_group(0 [pid 5062] close(4 [pid 6610] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6606] <... futex resumed>) = ? [pid 6605] <... exit_group resumed>) = ? [pid 6603] <... futex resumed>) = ? [pid 6601] <... exit_group resumed>) = ? [pid 6606] +++ exited with 0 +++ [pid 6605] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6605, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./152/file0" [pid 5063] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6603] +++ exited with 0 +++ [pid 6601] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6601, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5063] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6608] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(3 [pid 5063] getdents64(3, [pid 5060] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./152" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 148.699846][ T6608] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 6608] <... openat resumed>) = 3 [pid 5063] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 6608] chdir("./file0" [pid 5062] mkdir("./153", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6608] <... chdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6608] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 6608] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6608] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6607] <... futex resumed>) = 0 [pid 5060] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6607] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6608] <... futex resumed>) = ? [pid 6607] <... exit_group resumed>) = ? [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6608] +++ exited with 0 +++ [pid 6607] +++ exited with 0 +++ [pid 5063] unlink("./151/binderfs" [pid 5062] <... openat resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./151/binderfs", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6607, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./151/binderfs" [pid 5063] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6610] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6610] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./151/file0", [pid 5061] newfstatat(3, "", [pid 5060] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6610] <... munmap resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./151/file0", [pid 5061] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6610] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6610] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(4, "", [pid 5061] newfstatat(AT_FDCWD, "./154/binderfs", [pid 5060] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5061] unlink("./154/binderfs" [pid 5060] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] getdents64(4, [pid 5063] rmdir("./151/file0" [pid 5061] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, [pid 6610] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 6610] close(3) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6610] close(4 [pid 5063] close(3 [pid 6610] <... close resumed>) = 0 [pid 5060] close(4 [pid 5063] <... close resumed>) = 0 [pid 6610] mkdir("./file0", 0777 [pid 5063] rmdir("./151" [pid 5060] <... close resumed>) = 0 [pid 6610] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] rmdir("./151/file0" [pid 5063] mkdir("./152", 0777 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./151") = 0 [pid 5060] mkdir("./152", 0777) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./154/file0", [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... ioctl resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6610] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./154/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./154") = 0 [pid 5061] mkdir("./155", 0777 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6611 attached [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6611] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6611 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6611] <... set_robust_list resumed>) = 0 [pid 6611] chdir("./153" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6611] <... chdir resumed>) = 0 [pid 6611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6611] setpgid(0, 0) = 0 [ 148.794825][ T6610] loop0: detected capacity change from 0 to 4096 [ 148.830297][ T6610] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6611] write(3, "1000", 4) = 4 [pid 6611] close(3) = 0 [pid 6611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6611] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6611] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6611] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6611] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6612]}, 88) = 6612 [pid 6611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6611] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6611] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6610] <... mount resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6610] chdir("./file0") = 0 [pid 6610] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6610] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6610] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6609] <... futex resumed>) = 0 [pid 6609] exit_group(0 [pid 6610] <... futex resumed>) = ? [pid 6609] <... exit_group resumed>) = ? [pid 6610] +++ exited with 0 +++ ./strace-static-x86_64: Process 6612 attached [pid 6612] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5060] <... ioctl resumed>) = 0 [pid 6612] <... rseq resumed>) = 0 [pid 6612] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] close(3 [pid 5061] close(3 [pid 5060] <... close resumed>) = 0 [pid 6612] <... set_robust_list resumed>) = 0 [pid 6609] +++ exited with 0 +++ [pid 5063] <... ioctl resumed>) = 0 [pid 6612] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6609, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6612] memfd_create("syzkaller", 0) = 3 [pid 5063] close(3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6613 [pid 5059] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 6612] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6613 attached [pid 5059] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6613] set_robust_list(0x55558e6e36a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6615 [pid 5059] <... openat resumed>) = 3 [pid 6613] <... set_robust_list resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 6613] chdir("./155" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6615 attached [pid 6615] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6613] <... chdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6615] chdir("./152") = 0 [pid 6613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] newfstatat(AT_FDCWD, "./155/binderfs", [pid 6615] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6613] <... prctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6614 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6615] <... prctl resumed>) = 0 [pid 6613] setpgid(0, 0 [pid 5059] unlink("./155/binderfs" [pid 6615] setpgid(0, 0 [pid 6613] <... setpgid resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6615] <... setpgid resumed>) = 0 [pid 6615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6614 attached [pid 6615] <... openat resumed>) = 3 [pid 6613] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = 0 [pid 6615] write(3, "1000", 4 [pid 6614] set_robust_list(0x55558e6e36a0, 24 [pid 6613] write(3, "1000", 4 [pid 6615] <... write resumed>) = 4 [pid 6613] <... write resumed>) = 4 [pid 6615] close(3 [pid 6613] close(3 [pid 6615] <... close resumed>) = 0 [pid 6613] <... close resumed>) = 0 [pid 6613] symlink("/dev/binderfs", "./binderfs" [pid 6615] symlink("/dev/binderfs", "./binderfs" [pid 6613] <... symlink resumed>) = 0 [pid 6615] <... symlink resumed>) = 0 [pid 6613] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6613] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6615] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] newfstatat(AT_FDCWD, "./155/file0", [pid 6615] <... futex resumed>) = 0 [pid 6615] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6615] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6614] <... set_robust_list resumed>) = 0 [pid 6613] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] chdir("./152" [pid 6613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6615] <... mmap resumed>) = 0x7fe7c3226000 [pid 6613] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6615] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6613] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... openat resumed>) = 4 [pid 6615] <... mprotect resumed>) = 0 [pid 6613] <... mprotect resumed>) = 0 [pid 6615] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6614] <... chdir resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 6614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6613] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6615] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6614] <... prctl resumed>) = 0 [pid 6615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6614] setpgid(0, 0 [pid 6613] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 6616 attached [pid 6614] <... setpgid resumed>) = 0 [pid 6613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] getdents64(4, [pid 6616] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6615] <... clone3 resumed> => {parent_tid=[6616]}, 88) = 6616 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6615] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] close(4 [pid 6616] <... rseq resumed>) = 0 [pid 6615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 6617 attached [pid 6616] set_robust_list(0x7fe7c32469a0, 24 [pid 6615] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] write(3, "1000", 4 [pid 6613] <... clone3 resumed> => {parent_tid=[6617]}, 88) = 6617 [pid 6617] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6616] <... set_robust_list resumed>) = 0 [pid 6615] <... futex resumed>) = 0 [pid 6614] <... write resumed>) = 4 [pid 6613] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] rmdir("./155/file0" [pid 6617] <... rseq resumed>) = 0 [pid 6616] rt_sigprocmask(SIG_SETMASK, [], [pid 6615] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6614] close(3 [pid 6613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] <... close resumed>) = 0 [pid 6613] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] set_robust_list(0x7fe7c32469a0, 24 [pid 6616] memfd_create("syzkaller", 0 [pid 6614] symlink("/dev/binderfs", "./binderfs" [pid 6613] <... futex resumed>) = 0 [pid 6617] <... set_robust_list resumed>) = 0 [pid 6614] <... symlink resumed>) = 0 [pid 5059] getdents64(3, [pid 6617] rt_sigprocmask(SIG_SETMASK, [], [pid 6614] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] <... futex resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6616] <... memfd_create resumed>) = 3 [pid 6614] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] close(3 [pid 6616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... close resumed>) = 0 [pid 6617] memfd_create("syzkaller", 0 [pid 6616] <... mmap resumed>) = 0x7fe7bae00000 [pid 6614] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] rmdir("./155" [pid 6617] <... memfd_create resumed>) = 3 [pid 6614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6612] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./156", 0777 [pid 6617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6617] <... mmap resumed>) = 0x7fe7bae00000 [pid 6614] <... mmap resumed>) = 0x7fe7c3226000 [pid 6614] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6614] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6614] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6618 attached [pid 6616] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6614] <... clone3 resumed> => {parent_tid=[6618]}, 88) = 6618 [pid 6618] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6614] rt_sigprocmask(SIG_SETMASK, [], [pid 6612] <... write resumed>) = 2097152 [pid 6618] set_robust_list(0x7fe7c32469a0, 24 [pid 6614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6612] munmap(0x7fe7bae00000, 138412032 [pid 6618] <... set_robust_list resumed>) = 0 [pid 6614] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] rt_sigprocmask(SIG_SETMASK, [], [pid 6614] <... futex resumed>) = 0 [pid 6614] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6617] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6618] memfd_create("syzkaller", 0) = 3 [pid 6618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6617] <... write resumed>) = 2097152 [pid 6612] <... munmap resumed>) = 0 [pid 6612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6612] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... ioctl resumed>) = 0 [pid 6617] munmap(0x7fe7bae00000, 138412032 [pid 6616] <... write resumed>) = 2097152 [pid 6612] <... ioctl resumed>) = 0 [pid 6612] close(3) = 0 [pid 6612] close(4 [pid 6616] munmap(0x7fe7bae00000, 138412032 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6612] <... close resumed>) = 0 ./strace-static-x86_64: Process 6619 attached [pid 6617] <... munmap resumed>) = 0 [pid 6612] mkdir("./file0", 0777 [pid 6619] set_robust_list(0x55558e6e36a0, 24 [pid 6617] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6616] <... munmap resumed>) = 0 [pid 6619] <... set_robust_list resumed>) = 0 [pid 6618] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6617] <... openat resumed>) = 4 [pid 6612] <... mkdir resumed>) = 0 [pid 6619] chdir("./156" [pid 6617] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6619 [pid 6616] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6619] <... chdir resumed>) = 0 [pid 6617] <... ioctl resumed>) = 0 [pid 6612] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6616] <... openat resumed>) = 4 [pid 6619] prctl(PR_SET_PDEATHSIG, SIGKILL [ 149.070510][ T6612] loop3: detected capacity change from 0 to 4096 [ 149.106685][ T6617] loop2: detected capacity change from 0 to 4096 [pid 6617] close(3 [pid 6616] ioctl(4, LOOP_SET_FD, 3 [pid 6619] <... prctl resumed>) = 0 [pid 6617] <... close resumed>) = 0 [pid 6619] setpgid(0, 0 [pid 6617] close(4 [pid 6619] <... setpgid resumed>) = 0 [pid 6617] <... close resumed>) = 0 [pid 6619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6617] mkdir("./file0", 0777) = 0 [pid 6617] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6619] <... openat resumed>) = 3 [pid 6619] write(3, "1000", 4) = 4 [pid 6619] close(3) = 0 [pid 6619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6619] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6619] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6620]}, 88) = 6620 [pid 6619] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6620 attached NULL, 8) = 0 [pid 6620] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6619] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... rseq resumed>) = 0 [pid 6619] <... futex resumed>) = 0 [pid 6616] <... ioctl resumed>) = 0 [pid 6620] set_robust_list(0x7fe7c32469a0, 24 [pid 6619] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6616] close(3 [pid 6620] <... set_robust_list resumed>) = 0 [pid 6616] <... close resumed>) = 0 [pid 6620] rt_sigprocmask(SIG_SETMASK, [], [pid 6616] close(4 [pid 6620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6616] <... close resumed>) = 0 [pid 6616] mkdir("./file0", 0777 [pid 6620] memfd_create("syzkaller", 0 [pid 6616] <... mkdir resumed>) = 0 [pid 6616] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6620] <... memfd_create resumed>) = 3 [pid 6618] <... write resumed>) = 2097152 [pid 6620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 149.124347][ T6612] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 149.125336][ T6616] loop1: detected capacity change from 0 to 4096 [ 149.154192][ T6617] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6618] munmap(0x7fe7bae00000, 138412032 [pid 6620] <... mmap resumed>) = 0x7fe7bae00000 [pid 6618] <... munmap resumed>) = 0 [pid 6617] <... mount resumed>) = 0 [pid 6612] <... mount resumed>) = 0 [pid 6617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6618] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6617] <... openat resumed>) = 3 [pid 6612] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6618] <... openat resumed>) = 4 [pid 6617] chdir("./file0" [pid 6612] <... openat resumed>) = 3 [pid 6618] ioctl(4, LOOP_SET_FD, 3 [pid 6617] <... chdir resumed>) = 0 [pid 6612] chdir("./file0" [pid 6617] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6612] <... chdir resumed>) = 0 [pid 6617] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6617] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6612] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6617] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] <... ioctl resumed>) = 0 [pid 6612] <... futex resumed>) = 1 [pid 6611] <... futex resumed>) = 0 [pid 6618] close(3 [pid 6612] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6611] exit_group(0 [pid 6618] <... close resumed>) = 0 [pid 6612] <... futex resumed>) = ? [pid 6611] <... exit_group resumed>) = ? [pid 6618] close(4 [pid 6612] +++ exited with 0 +++ [pid 6611] +++ exited with 0 +++ [pid 6618] <... close resumed>) = 0 [pid 6613] <... futex resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6611, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6618] mkdir("./file0", 0777 [pid 6613] exit_group(0 [pid 6617] <... futex resumed>) = ? [pid 6613] <... exit_group resumed>) = ? [pid 6618] <... mkdir resumed>) = 0 [pid 6617] +++ exited with 0 +++ [pid 6613] +++ exited with 0 +++ [pid 5062] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6618] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6613, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... openat resumed>) = 3 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 149.201792][ T6616] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 149.230248][ T6618] loop4: detected capacity change from 0 to 4096 [pid 6620] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] getdents64(3, [pid 5061] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6616] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 6616] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./153/binderfs", [pid 5061] newfstatat(3, "", [pid 6616] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6616] <... chdir resumed>) = 0 [pid 5062] unlink("./153/binderfs" [pid 5061] getdents64(3, [pid 6616] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6616] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6616] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6616] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./155/binderfs" [pid 6616] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] exit_group(0 [pid 5062] newfstatat(AT_FDCWD, "./153/file0", [pid 5061] <... unlink resumed>) = 0 [pid 6616] <... futex resumed>) = ? [pid 6615] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6616] +++ exited with 0 +++ [pid 6615] +++ exited with 0 +++ [pid 5062] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6620] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6615, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5062] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./155/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5061] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(3, "", [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(3, [pid 5062] close(4 [pid 5061] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./153/file0" [pid 5061] newfstatat(4, "", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./152/binderfs", [pid 6620] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./152/binderfs" [pid 5061] getdents64(4, [pid 5060] <... unlink resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5060] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6620] <... munmap resumed>) = 0 [pid 5062] close(3 [pid 5061] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6620] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./152/file0", [pid 6620] <... openat resumed>) = 4 [pid 5062] rmdir("./153" [ 149.268942][ T6618] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5061] rmdir("./155/file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6620] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] mkdir("./154", 0777 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... mkdir resumed>) = 0 [pid 5061] close(3 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 5061] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] rmdir("./155" [pid 5060] getdents64(4, [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(4, [pid 5061] mkdir("./156", 0777 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./152/file0" [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6620] <... ioctl resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] getdents64(3, [pid 6620] close(3) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6620] close(4) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] close(3 [pid 6620] mkdir("./file0", 0777 [pid 6618] <... mount resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./152" [pid 6620] <... mkdir resumed>) = 0 [pid 6618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./153", 0777 [pid 6618] <... openat resumed>) = 3 [pid 5060] <... mkdir resumed>) = 0 [pid 6618] chdir("./file0" [pid 5062] close(3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6618] <... chdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 6620] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... openat resumed>) = 3 [ 149.330813][ T6620] loop0: detected capacity change from 0 to 4096 [pid 6618] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6618] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6618] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6614] <... futex resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6621 [pid 6618] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] exit_group(0./strace-static-x86_64: Process 6621 attached [pid 6618] <... futex resumed>) = ? [pid 6614] <... exit_group resumed>) = ? [pid 6621] set_robust_list(0x55558e6e36a0, 24 [pid 6618] +++ exited with 0 +++ [pid 6614] +++ exited with 0 +++ [pid 6621] <... set_robust_list resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6614, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 6621] chdir("./154" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6621] <... chdir resumed>) = 0 [pid 5063] getdents64(3, [pid 6621] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6621] <... prctl resumed>) = 0 [pid 5063] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6621] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6621] <... setpgid resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./152/binderfs", [pid 6621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6621] <... openat resumed>) = 3 [pid 5063] unlink("./152/binderfs" [pid 6621] write(3, "1000", 4 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6621] <... write resumed>) = 4 [pid 5063] <... umount2 resumed>) = 0 [pid 6621] close(3 [pid 5063] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6621] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6621] symlink("/dev/binderfs", "./binderfs" [pid 5063] newfstatat(AT_FDCWD, "./152/file0", [pid 6621] <... symlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 6621] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6621] <... futex resumed>) = 0 [pid 5063] getdents64(4, [pid 6621] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6621] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] close(4 [pid 6621] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... close resumed>) = 0 [pid 6621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./152/file0" [pid 6621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6621] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] getdents64(3, [pid 6621] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6621] <... mprotect resumed>) = 0 [pid 5063] close(3 [pid 6621] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./152" [pid 6621] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6621] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [ 149.374488][ T6620] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5063] mkdir("./153", 0777) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6621] <... clone3 resumed> => {parent_tid=[6622]}, 88) = 6622 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6621] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6621] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] close(3./strace-static-x86_64: Process 6622 attached [pid 5060] <... ioctl resumed>) = 0 [pid 6622] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6622] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] close(3 [pid 5061] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6622] <... set_robust_list resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6623 attached [pid 6623] set_robust_list(0x55558e6e36a0, 24 [pid 6622] memfd_create("syzkaller", 0 [pid 6620] <... mount resumed>) = 0 [pid 6623] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6624 attached [pid 6623] chdir("./153" [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6624 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6623 [pid 6624] set_robust_list(0x55558e6e36a0, 24 [pid 6623] <... chdir resumed>) = 0 [pid 6620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6624] <... set_robust_list resumed>) = 0 [pid 6620] <... openat resumed>) = 3 [pid 6624] chdir("./156" [pid 6623] <... prctl resumed>) = 0 [pid 6620] chdir("./file0" [pid 6624] <... chdir resumed>) = 0 [pid 6623] setpgid(0, 0 [pid 6620] <... chdir resumed>) = 0 [pid 6623] <... setpgid resumed>) = 0 [pid 6620] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6622] <... memfd_create resumed>) = 3 [pid 6622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6624] <... prctl resumed>) = 0 [pid 6624] setpgid(0, 0 [pid 6622] <... mmap resumed>) = 0x7fe7bae00000 [pid 6624] <... setpgid resumed>) = 0 [pid 6623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6620] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6620] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] <... openat resumed>) = 3 [pid 6623] write(3, "1000", 4 [pid 6620] <... futex resumed>) = 1 [pid 6619] <... futex resumed>) = 0 [pid 6624] write(3, "1000", 4) = 4 [pid 6619] exit_group(0 [pid 6623] <... write resumed>) = 4 [pid 6620] stat(NULL, [pid 6623] close(3 [pid 6619] <... exit_group resumed>) = ? [pid 6623] <... close resumed>) = 0 [pid 6624] close(3 [pid 6623] symlink("/dev/binderfs", "./binderfs" [pid 6624] <... close resumed>) = 0 [pid 6624] symlink("/dev/binderfs", "./binderfs" [pid 6623] <... symlink resumed>) = 0 [pid 6624] <... symlink resumed>) = 0 [pid 6623] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] <... futex resumed>) = 0 [pid 6623] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6624] <... futex resumed>) = 0 [pid 6623] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6620] +++ exited with 0 +++ [pid 6619] +++ exited with 0 +++ [pid 6623] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6619, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6624] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6623] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] <... restart_syscall resumed>) = 0 [pid 6624] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6623] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6623] <... mprotect resumed>) = 0 [pid 6624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6624] <... mmap resumed>) = 0x7fe7c3226000 [pid 6623] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6624] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6624] <... mprotect resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] newfstatat(3, "", ./strace-static-x86_64: Process 6625 attached [pid 6623] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6624] <... clone3 resumed> => {parent_tid=[6625]}, 88) = 6625 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6625] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6624] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] getdents64(3, [pid 6625] set_robust_list(0x7fe7c32469a0, 24 [pid 6624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6625] <... set_robust_list resumed>) = 0 [pid 6624] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6624] <... futex resumed>) = 0 [pid 6625] rt_sigprocmask(SIG_SETMASK, [], [pid 6623] <... clone3 resumed> => {parent_tid=[6626]}, 88) = 6626 [pid 5059] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6624] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6623] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6625] memfd_create("syzkaller", 0 [pid 6623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] newfstatat(AT_FDCWD, "./156/binderfs", ./strace-static-x86_64: Process 6626 attached [pid 6623] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6626] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6625] <... memfd_create resumed>) = 3 [pid 6623] <... futex resumed>) = 0 [pid 5063] close(3 [pid 5059] unlink("./156/binderfs" [pid 6626] <... rseq resumed>) = 0 [pid 6623] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 6626] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... unlink resumed>) = 0 [pid 6626] <... set_robust_list resumed>) = 0 [pid 6626] rt_sigprocmask(SIG_SETMASK, [], [pid 6625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6625] <... mmap resumed>) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6627 attached [pid 6626] memfd_create("syzkaller", 0 [pid 6622] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... umount2 resumed>) = 0 [pid 6627] set_robust_list(0x55558e6e36a0, 24 [pid 6626] <... memfd_create resumed>) = 3 [pid 6626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6627] <... set_robust_list resumed>) = 0 [pid 6626] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6627 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./156/file0", [pid 6627] chdir("./153" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6627] <... chdir resumed>) = 0 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] getdents64(4, [pid 6627] setpgid(0, 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./156/file0" [pid 6627] <... setpgid resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6625] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 6627] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./156" [pid 6627] write(3, "1000", 4 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./157", 0777 [pid 6627] <... write resumed>) = 4 [pid 5059] <... mkdir resumed>) = 0 [pid 6627] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6627] <... close resumed>) = 0 [pid 6622] <... write resumed>) = 2097152 [pid 6627] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... openat resumed>) = 3 [pid 6627] <... symlink resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6622] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6626] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6627] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] <... write resumed>) = 2097152 [pid 6622] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6627] <... futex resumed>) = 0 [pid 6625] munmap(0x7fe7bae00000, 138412032 [pid 6622] <... openat resumed>) = 4 [pid 6627] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6625] <... munmap resumed>) = 0 [pid 6622] ioctl(4, LOOP_SET_FD, 3 [pid 6627] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6627] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6626] <... write resumed>) = 2097152 [pid 6622] <... ioctl resumed>) = 0 [pid 6625] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6627] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6626] munmap(0x7fe7bae00000, 138412032 [pid 6627] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6628]}, 88) = 6628 [pid 6625] <... openat resumed>) = 4 [pid 6625] ioctl(4, LOOP_SET_FD, 3 [pid 6627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6627] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6627] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6628 attached [pid 6628] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6628] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6628] memfd_create("syzkaller", 0 [pid 6626] <... munmap resumed>) = 0 [pid 6625] <... ioctl resumed>) = 0 [pid 6622] close(3 [pid 6628] <... memfd_create resumed>) = 3 [pid 6626] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6625] close(3 [pid 6622] <... close resumed>) = 0 [pid 6626] <... openat resumed>) = 4 [pid 6625] <... close resumed>) = 0 [pid 6622] close(4 [pid 6628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6625] close(4 [pid 6628] <... mmap resumed>) = 0x7fe7bae00000 [pid 6625] <... close resumed>) = 0 [pid 6622] <... close resumed>) = 0 [pid 6626] ioctl(4, LOOP_SET_FD, 3 [pid 6625] mkdir("./file0", 0777 [pid 6622] mkdir("./file0", 0777 [pid 6625] <... mkdir resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [ 149.619786][ T6622] loop3: detected capacity change from 0 to 4096 [ 149.631690][ T6625] loop2: detected capacity change from 0 to 4096 [pid 6625] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6622] <... mkdir resumed>) = 0 [pid 6622] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6629 [pid 6626] <... ioctl resumed>) = 0 [pid 6626] close(3./strace-static-x86_64: Process 6629 attached [pid 6629] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6629] chdir("./157" [pid 6626] <... close resumed>) = 0 [pid 6629] <... chdir resumed>) = 0 [pid 6626] close(4 [pid 6629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6626] <... close resumed>) = 0 [pid 6626] mkdir("./file0", 0777) = 0 [pid 6626] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6629] setpgid(0, 0) = 0 [ 149.664894][ T6626] loop1: detected capacity change from 0 to 4096 [ 149.664908][ T6625] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 149.688678][ T6622] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6629] write(3, "1000", 4) = 4 [pid 6629] close(3) = 0 [pid 6629] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6628] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6629] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6629] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6629] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6629] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6630]}, 88) = 6630 ./strace-static-x86_64: Process 6630 attached [ 149.719925][ T6626] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6629] rt_sigprocmask(SIG_SETMASK, [], [pid 6630] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6630] <... rseq resumed>) = 0 [pid 6629] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] set_robust_list(0x7fe7c32469a0, 24 [pid 6629] <... futex resumed>) = 0 [pid 6629] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6630] <... set_robust_list resumed>) = 0 [pid 6630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6628] <... write resumed>) = 2097152 [pid 6625] <... mount resumed>) = 0 [pid 6630] memfd_create("syzkaller", 0 [pid 6628] munmap(0x7fe7bae00000, 138412032 [pid 6625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6622] <... mount resumed>) = 0 [pid 6630] <... memfd_create resumed>) = 3 [pid 6625] <... openat resumed>) = 3 [pid 6622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6622] chdir("./file0" [pid 6630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6625] chdir("./file0" [pid 6622] <... chdir resumed>) = 0 [pid 6622] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6625] <... chdir resumed>) = 0 [pid 6622] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6626] <... mount resumed>) = 0 [pid 6625] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6622] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6625] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6622] <... futex resumed>) = 1 [pid 6621] <... futex resumed>) = 0 [pid 6626] <... openat resumed>) = 3 [pid 6625] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6621] exit_group(0 [pid 6626] chdir("./file0" [pid 6625] <... futex resumed>) = 1 [pid 6624] <... futex resumed>) = 0 [pid 6622] <... futex resumed>) = ? [pid 6621] <... exit_group resumed>) = ? [pid 6626] <... chdir resumed>) = 0 [pid 6625] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] exit_group(0 [pid 6622] +++ exited with 0 +++ [pid 6621] +++ exited with 0 +++ [pid 6626] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6625] <... futex resumed>) = ? [pid 6624] <... exit_group resumed>) = ? [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6621, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6626] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6626] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] <... munmap resumed>) = 0 [pid 6625] +++ exited with 0 +++ [pid 6624] +++ exited with 0 +++ [pid 6628] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6624, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6628] <... openat resumed>) = 4 [pid 6626] <... futex resumed>) = 1 [pid 6623] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6628] ioctl(4, LOOP_SET_FD, 3 [pid 6626] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6623] exit_group(0 [pid 5062] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6630] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6626] <... futex resumed>) = ? [pid 6623] <... exit_group resumed>) = ? [pid 6628] <... ioctl resumed>) = 0 [pid 6626] +++ exited with 0 +++ [pid 6623] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 3 [pid 5061] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6623, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6628] close(3 [pid 5062] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6628] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6628] close(4 [pid 5062] getdents64(3, [pid 5061] newfstatat(3, "", [pid 5060] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5060] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... openat resumed>) = 3 [pid 5061] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./156/binderfs", [pid 5060] getdents64(3, [pid 6628] <... close resumed>) = 0 [pid 5062] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6628] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./156/binderfs" [pid 5060] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./154/binderfs", [pid 6628] <... mkdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6628] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./154/binderfs" [pid 5060] unlink("./153/binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5062] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./156/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./156") = 0 [pid 5061] mkdir("./157", 0777 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./153/file0", [pid 5062] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./154/file0", [pid 5060] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 5062] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 3 [pid 5060] getdents64(4, [pid 5062] getdents64(4, [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] close(4 [pid 5062] close(4 [pid 5060] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./154/file0" [pid 5060] rmdir("./153/file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] close(3 [pid 5060] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./154" [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./155", 0777 [pid 5060] close(3 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] rmdir("./153" [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./154", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6630] <... write resumed>) = 2097152 [ 149.824774][ T6628] loop4: detected capacity change from 0 to 4096 [ 149.846468][ T6628] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6630] munmap(0x7fe7bae00000, 138412032 [pid 6628] <... mount resumed>) = 0 [pid 6628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6628] chdir("./file0") = 0 [pid 6628] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6628] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6627] <... futex resumed>) = 0 [pid 6628] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6627] exit_group(0 [pid 6628] <... futex resumed>) = ? [pid 6627] <... exit_group resumed>) = ? [pid 6630] <... munmap resumed>) = 0 [pid 6628] +++ exited with 0 +++ [pid 6630] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6627] +++ exited with 0 +++ [pid 6630] <... openat resumed>) = 4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6627, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6630] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5061] <... ioctl resumed>) = 0 [pid 6630] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 5063] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./153/binderfs", [pid 6630] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6631 [pid 5060] close(3 [pid 5063] unlink("./153/binderfs" [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6630] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6630] close(4) = 0 [pid 6630] mkdir("./file0", 0777./strace-static-x86_64: Process 6632 attached ) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6632 [pid 6632] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... umount2 resumed>) = 0 [pid 6632] <... set_robust_list resumed>) = 0 [pid 6632] chdir("./154" [pid 6630] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6632] <... chdir resumed>) = 0 [pid 6632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6632] setpgid(0, 0) = 0 [pid 6632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6632] write(3, "1000", 4) = 4 [pid 6632] close(3) = 0 [pid 6632] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6633 attached ./strace-static-x86_64: Process 6631 attached [pid 5063] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6633 [pid 6631] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6631] <... set_robust_list resumed>) = 0 [pid 6633] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6632] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] chdir("./157" [pid 5063] newfstatat(AT_FDCWD, "./153/file0", [pid 6633] chdir("./155" [pid 6632] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6633] <... chdir resumed>) = 0 [pid 6631] <... chdir resumed>) = 0 [pid 5063] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6632] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6631] <... prctl resumed>) = 0 [pid 6632] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6631] setpgid(0, 0 [pid 5063] newfstatat(4, "", [pid 6631] <... setpgid resumed>) = 0 [pid 6633] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6633] <... prctl resumed>) = 0 [pid 6632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6633] setpgid(0, 0 [pid 6632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6631] <... openat resumed>) = 3 [pid 6633] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 6632] <... mmap resumed>) = 0x7fe7c3226000 [pid 6632] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6632] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6631] write(3, "1000", 4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6631] <... write resumed>) = 4 [pid 5063] getdents64(4, [pid 6631] close(3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6633] <... openat resumed>) = 3 [pid 6632] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6631] <... close resumed>) = 0 [pid 5063] close(4 [pid 6633] write(3, "1000", 4 [pid 6632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6631] symlink("/dev/binderfs", "./binderfs" [pid 6633] <... write resumed>) = 4 ./strace-static-x86_64: Process 6634 attached [pid 6633] close(3 [pid 6632] <... clone3 resumed> => {parent_tid=[6634]}, 88) = 6634 [pid 6631] <... symlink resumed>) = 0 [pid 6634] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6633] <... close resumed>) = 0 [pid 6632] rt_sigprocmask(SIG_SETMASK, [], [pid 6631] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 6634] <... rseq resumed>) = 0 [pid 6633] symlink("/dev/binderfs", "./binderfs" [pid 6632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6634] set_robust_list(0x7fe7c32469a0, 24 [pid 6633] <... symlink resumed>) = 0 [pid 6632] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] <... futex resumed>) = 0 [pid 6634] <... set_robust_list resumed>) = 0 [pid 6632] <... futex resumed>) = 0 [pid 6631] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6634] rt_sigprocmask(SIG_SETMASK, [], [pid 6633] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6631] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] rmdir("./153/file0" [pid 6634] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6633] <... futex resumed>) = 0 [pid 6631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... rmdir resumed>) = 0 [pid 6631] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 149.939696][ T6630] loop0: detected capacity change from 0 to 4096 [ 149.979577][ T6630] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6634] memfd_create("syzkaller", 0 [pid 6633] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] close(3 [pid 6634] <... memfd_create resumed>) = 3 [pid 6633] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6631] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... close resumed>) = 0 [pid 6634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] rmdir("./153" [pid 6634] <... mmap resumed>) = 0x7fe7bae00000 [pid 6633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6633] <... mmap resumed>) = 0x7fe7c3226000 [pid 6633] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6633] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6635 attached [pid 6635] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6633] <... clone3 resumed> => {parent_tid=[6635]}, 88) = 6635 [pid 6635] <... rseq resumed>) = 0 [pid 6633] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] set_robust_list(0x7fe7c32469a0, 24 [pid 6633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6631] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6630] <... mount resumed>) = 0 [pid 5063] mkdir("./154", 0777 [pid 6635] <... set_robust_list resumed>) = 0 [pid 6633] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] rt_sigprocmask(SIG_SETMASK, [], [pid 6633] <... futex resumed>) = 0 [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6633] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6631] <... mprotect resumed>) = 0 [pid 6630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 6630] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6631] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6630] chdir("./file0" [pid 5063] <... openat resumed>) = 3 [pid 6635] memfd_create("syzkaller", 0 [pid 6630] <... chdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6631] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6630] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6636 attached [pid 6635] <... memfd_create resumed>) = 3 [pid 6630] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6636] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6631] <... clone3 resumed> => {parent_tid=[6636]}, 88) = 6636 [pid 6630] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6636] <... rseq resumed>) = 0 [pid 6631] rt_sigprocmask(SIG_SETMASK, [], [pid 6636] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6636] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] <... mmap resumed>) = 0x7fe7bae00000 [pid 6636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6636] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6636] memfd_create("syzkaller", 0 [pid 6634] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6630] <... futex resumed>) = 1 [pid 6629] <... futex resumed>) = 0 [pid 6629] exit_group(0 [pid 6636] <... memfd_create resumed>) = 3 [pid 6629] <... exit_group resumed>) = ? [pid 6636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6630] +++ exited with 0 +++ [pid 6629] +++ exited with 0 +++ [pid 6636] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6629, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./157/binderfs") = 0 [pid 5059] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6635] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5059] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6636] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6634] <... write resumed>) = 2097152 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6634] munmap(0x7fe7bae00000, 138412032 [pid 5059] newfstatat(4, "", [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6637 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6637 attached [pid 5059] close(4 [pid 6637] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... close resumed>) = 0 [pid 6637] <... set_robust_list resumed>) = 0 [pid 5059] rmdir("./157/file0" [pid 6637] chdir("./154") = 0 [pid 6637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... rmdir resumed>) = 0 [pid 6637] <... prctl resumed>) = 0 [pid 5059] getdents64(3, [pid 6637] setpgid(0, 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6637] <... setpgid resumed>) = 0 [pid 5059] close(3 [pid 6637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] <... close resumed>) = 0 [pid 6637] write(3, "1000", 4 [pid 5059] rmdir("./157" [pid 6637] <... write resumed>) = 4 [pid 6637] close(3) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6634] <... munmap resumed>) = 0 [pid 5059] mkdir("./158", 0777 [pid 6637] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6637] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6634] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6637] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6634] ioctl(4, LOOP_SET_FD, 3 [pid 6637] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6638 attached [pid 6638] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6637] <... clone3 resumed> => {parent_tid=[6638]}, 88) = 6638 [pid 6638] <... rseq resumed>) = 0 [pid 6637] rt_sigprocmask(SIG_SETMASK, [], [pid 6638] set_robust_list(0x7fe7c32469a0, 24 [pid 6637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6638] <... set_robust_list resumed>) = 0 [pid 6637] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6638] rt_sigprocmask(SIG_SETMASK, [], [pid 6637] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6638] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6638] memfd_create("syzkaller", 0 [pid 5059] <... openat resumed>) = 3 [pid 6638] <... memfd_create resumed>) = 3 [pid 6635] <... write resumed>) = 2097152 [pid 6634] <... ioctl resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6634] close(3 [pid 6638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6636] <... write resumed>) = 2097152 [pid 6635] munmap(0x7fe7bae00000, 138412032 [pid 6634] <... close resumed>) = 0 [pid 6634] close(4) = 0 [pid 6636] munmap(0x7fe7bae00000, 138412032 [pid 6634] mkdir("./file0", 0777 [pid 6636] <... munmap resumed>) = 0 [pid 6635] <... munmap resumed>) = 0 [pid 6634] <... mkdir resumed>) = 0 [pid 6634] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6636] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 150.163481][ T6634] loop1: detected capacity change from 0 to 4096 [pid 6635] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6636] <... openat resumed>) = 4 [pid 6636] ioctl(4, LOOP_SET_FD, 3 [pid 6635] <... openat resumed>) = 4 [pid 6635] ioctl(4, LOOP_SET_FD, 3 [pid 6636] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6635] <... ioctl resumed>) = 0 [pid 6636] close(3) = 0 [pid 6635] close(3 [pid 6636] close(4 [pid 6635] <... close resumed>) = 0 [pid 6635] close(4 [pid 6636] <... close resumed>) = 0 [pid 6635] <... close resumed>) = 0 [pid 6636] mkdir("./file0", 0777 [pid 6635] mkdir("./file0", 0777 [pid 6636] <... mkdir resumed>) = 0 [pid 6635] <... mkdir resumed>) = 0 [pid 6638] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6636] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 150.207593][ T6634] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 150.232799][ T6635] loop3: detected capacity change from 0 to 4096 [ 150.240461][ T6636] loop2: detected capacity change from 0 to 4096 [pid 6635] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6639 ./strace-static-x86_64: Process 6639 attached [pid 6639] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6639] chdir("./158") = 0 [pid 6639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6639] setpgid(0, 0) = 0 [pid 6634] <... mount resumed>) = 0 [pid 6639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6639] <... openat resumed>) = 3 [pid 6634] chdir("./file0" [pid 6639] write(3, "1000", 4 [pid 6634] <... chdir resumed>) = 0 [pid 6639] <... write resumed>) = 4 [pid 6634] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6639] close(3 [pid 6634] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6639] <... close resumed>) = 0 [pid 6634] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] symlink("/dev/binderfs", "./binderfs" [pid 6634] <... futex resumed>) = 1 [pid 6632] <... futex resumed>) = 0 [pid 6634] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6639] <... symlink resumed>) = 0 [ 150.271055][ T6635] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 150.281575][ T6636] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6639] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6632] exit_group(0 [pid 6639] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6634] <... futex resumed>) = ? [pid 6632] <... exit_group resumed>) = ? [pid 6639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6634] +++ exited with 0 +++ [pid 6639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6638] <... write resumed>) = 2097152 [pid 6639] <... mmap resumed>) = 0x7fe7c3226000 [pid 6638] munmap(0x7fe7bae00000, 138412032 [pid 6639] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6639] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6638] <... munmap resumed>) = 0 [pid 6632] +++ exited with 0 +++ [pid 6639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6638] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6632, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6639] <... clone3 resumed> => {parent_tid=[6640]}, 88) = 6640 [pid 6638] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6640 attached [pid 5060] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6640] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6640] <... rseq resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6640] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] <... openat resumed>) = 3 [pid 6640] <... set_robust_list resumed>) = 0 [pid 6640] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] newfstatat(3, "", [pid 6640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6640] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6639] rt_sigprocmask(SIG_SETMASK, [], [pid 6638] <... ioctl resumed>) = 0 [pid 5060] unlink("./154/binderfs" [pid 6639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6638] close(3 [pid 5060] <... unlink resumed>) = 0 [pid 6639] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... close resumed>) = 0 [pid 5060] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6640] <... futex resumed>) = 0 [pid 6639] <... futex resumed>) = 1 [pid 6638] close(4 [pid 6640] memfd_create("syzkaller", 0 [pid 6639] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6638] <... close resumed>) = 0 [pid 6636] <... mount resumed>) = 0 [pid 6640] <... memfd_create resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 6640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6638] mkdir("./file0", 0777) = 0 [pid 6636] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6638] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6636] <... openat resumed>) = 3 [pid 6635] <... mount resumed>) = 0 [pid 6636] chdir("./file0" [pid 5060] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6636] <... chdir resumed>) = 0 [pid 6636] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6636] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6635] <... openat resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 6636] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] chdir("./file0" [pid 5060] rmdir("./154/file0" [pid 6636] <... futex resumed>) = 1 [pid 6635] <... chdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6636] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6635] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6631] <... futex resumed>) = 0 [pid 5060] getdents64(3, [pid 6635] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6631] exit_group(0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6636] <... futex resumed>) = ? [pid 6635] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] <... exit_group resumed>) = ? [pid 5060] close(3 [pid 6635] <... futex resumed>) = 1 [pid 5060] <... close resumed>) = 0 [pid 6633] <... futex resumed>) = 0 [pid 5060] rmdir("./154" [pid 6636] +++ exited with 0 +++ [pid 6635] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6633] exit_group(0 [pid 6631] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 6635] <... futex resumed>) = ? [pid 6633] <... exit_group resumed>) = ? [pid 6635] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6631, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=1 /* 0.01 s */} --- [pid 5060] mkdir("./155", 0777) = 0 [pid 5061] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6633] +++ exited with 0 +++ [pid 5061] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6633, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [ 150.360013][ T6638] loop4: detected capacity change from 0 to 4096 [ 150.385920][ T6638] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./157/binderfs", [pid 5062] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] unlink("./157/binderfs" [pid 5062] newfstatat(3, "", [pid 5061] <... unlink resumed>) = 0 [pid 6640] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./157/file0", [pid 5062] unlink("./155/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5061] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6638] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 6638] <... openat resumed>) = 3 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6638] chdir("./file0" [pid 5062] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 6638] <... chdir resumed>) = 0 [pid 6638] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] newfstatat(AT_FDCWD, "./155/file0", [pid 5061] getdents64(4, [pid 6638] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6638] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4 [pid 6638] <... futex resumed>) = 1 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6638] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] rmdir("./157/file0" [pid 6637] <... futex resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] <... rmdir resumed>) = 0 [pid 6637] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] close(3 [pid 6637] <... exit_group resumed>) = ? [pid 5062] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./157" [pid 6638] <... futex resumed>) = ? [pid 5062] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] mkdir("./158", 0777 [pid 5062] rmdir("./155/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./155" [pid 6638] +++ exited with 0 +++ [pid 6637] +++ exited with 0 +++ [pid 5062] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6637, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] mkdir("./156", 0777) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] close(3 [pid 5063] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, [pid 6640] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6641 ./strace-static-x86_64: Process 6641 attached [pid 5063] newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./154/binderfs" [pid 6641] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6641] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 6641] chdir("./155" [pid 5063] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6641] <... chdir resumed>) = 0 [pid 6640] munmap(0x7fe7bae00000, 138412032 [pid 6641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6640] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6641] <... prctl resumed>) = 0 [pid 6641] setpgid(0, 0) = 0 [pid 6641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6641] write(3, "1000", 4 [pid 5063] newfstatat(AT_FDCWD, "./154/file0", [pid 6641] <... write resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6641] close(3 [pid 5063] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6641] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6641] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6641] <... symlink resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6641] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6641] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] getdents64(4, [pid 6641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] getdents64(4, [pid 6641] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6641] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6640] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] close(4 [pid 6641] <... mprotect resumed>) = 0 [pid 6640] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 6641] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] rmdir("./154/file0" [pid 6641] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6640] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6641] <... clone3 resumed> => {parent_tid=[6642]}, 88) = 6642 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./154" [pid 6641] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... rmdir resumed>) = 0 [pid 6641] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6642 attached [pid 6641] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6641] <... futex resumed>) = 0 [pid 6642] <... rseq resumed>) = 0 [pid 6641] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] mkdir("./155", 0777 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 6642] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6642] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6642] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6643 attached [pid 6642] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 6643] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... openat resumed>) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6643] <... set_robust_list resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6643 [pid 6642] <... memfd_create resumed>) = 3 [pid 6642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6643] chdir("./158" [pid 5063] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6644 attached [pid 6644] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6644] chdir("./156" [pid 6643] <... chdir resumed>) = 0 [pid 6640] <... ioctl resumed>) = 0 [pid 6643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6644 [pid 6644] <... chdir resumed>) = 0 [pid 6643] <... prctl resumed>) = 0 [pid 6640] close(3 [pid 6644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6643] setpgid(0, 0 [pid 6640] <... close resumed>) = 0 [pid 6643] <... setpgid resumed>) = 0 [pid 6644] <... prctl resumed>) = 0 [pid 6640] close(4 [pid 6643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6640] <... close resumed>) = 0 [pid 6640] mkdir("./file0", 0777 [pid 6644] setpgid(0, 0 [pid 6643] <... openat resumed>) = 3 [pid 6640] <... mkdir resumed>) = 0 [pid 6644] <... setpgid resumed>) = 0 [pid 6644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6643] write(3, "1000", 4) = 4 [pid 6643] close(3) = 0 [ 150.558078][ T6640] loop0: detected capacity change from 0 to 4096 [pid 6643] symlink("/dev/binderfs", "./binderfs" [pid 6644] <... openat resumed>) = 3 [pid 6643] <... symlink resumed>) = 0 [pid 6640] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6644] write(3, "1000", 4) = 4 [pid 6643] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] close(3) = 0 [pid 6644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6643] <... futex resumed>) = 0 [pid 6643] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6644] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6643] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6644] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6643] <... mmap resumed>) = 0x7fe7c3226000 [pid 6642] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6644] <... mprotect resumed>) = 0 [pid 6644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6645 attached => {parent_tid=[6645]}, 88) = 6645 [pid 6645] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6644] rt_sigprocmask(SIG_SETMASK, [], [pid 6645] <... rseq resumed>) = 0 [pid 6644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6643] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6645] set_robust_list(0x7fe7c32469a0, 24 [pid 6644] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... set_robust_list resumed>) = 0 [pid 6644] <... futex resumed>) = 0 [pid 6643] <... mprotect resumed>) = 0 [pid 6644] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6645] rt_sigprocmask(SIG_SETMASK, [], [pid 6643] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6643] <... rt_sigprocmask resumed>[], 8) = 0 [ 150.598996][ T6640] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6646 attached [pid 6645] memfd_create("syzkaller", 0 [pid 6646] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6643] <... clone3 resumed> => {parent_tid=[6646]}, 88) = 6646 [pid 6646] <... rseq resumed>) = 0 [pid 6646] set_robust_list(0x7fe7c32469a0, 24 [pid 6645] <... memfd_create resumed>) = 3 [pid 6646] <... set_robust_list resumed>) = 0 [pid 6643] rt_sigprocmask(SIG_SETMASK, [], [pid 6646] rt_sigprocmask(SIG_SETMASK, [], [pid 6645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6643] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6645] <... mmap resumed>) = 0x7fe7bae00000 [pid 6643] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6642] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 6646] memfd_create("syzkaller", 0 [pid 6642] munmap(0x7fe7bae00000, 138412032 [pid 6646] <... memfd_create resumed>) = 3 [pid 6646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6642] <... munmap resumed>) = 0 [pid 5063] close(3) = 0 [pid 6642] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6647 attached [pid 6645] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6642] <... openat resumed>) = 4 [pid 6642] ioctl(4, LOOP_SET_FD, 3 [pid 6647] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6647 [pid 6647] <... set_robust_list resumed>) = 0 [pid 6647] chdir("./155") = 0 [pid 6647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6647] setpgid(0, 0) = 0 [pid 6647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6647] write(3, "1000", 4 [pid 6642] <... ioctl resumed>) = 0 [pid 6647] <... write resumed>) = 4 [pid 6642] close(3 [pid 6640] <... mount resumed>) = 0 [pid 6647] close(3 [pid 6642] <... close resumed>) = 0 [pid 6640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6640] chdir("./file0") = 0 [pid 6640] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6640] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6639] <... futex resumed>) = 0 [pid 6640] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6639] exit_group(0) = ? [pid 6640] <... futex resumed>) = ? [pid 6642] close(4 [pid 6647] <... close resumed>) = 0 [pid 6647] symlink("/dev/binderfs", "./binderfs" [pid 6642] <... close resumed>) = 0 [pid 6642] mkdir("./file0", 0777 [pid 6647] <... symlink resumed>) = 0 [pid 6642] <... mkdir resumed>) = 0 [pid 6647] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... write resumed>) = 2097152 [pid 6642] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6647] <... futex resumed>) = 0 [ 150.709727][ T6642] loop1: detected capacity change from 0 to 4096 [pid 6647] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6646] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6647] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6647] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6645] munmap(0x7fe7bae00000, 138412032 [pid 6640] +++ exited with 0 +++ [pid 6639] +++ exited with 0 +++ [pid 6647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6645] <... munmap resumed>) = 0 [pid 6647] <... mmap resumed>) = 0x7fe7c3226000 [pid 6647] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6645] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6647] <... mprotect resumed>) = 0 [pid 6645] <... openat resumed>) = 4 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6639, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6647] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6645] ioctl(4, LOOP_SET_FD, 3 [pid 5059] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6647] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6645] <... ioctl resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 6647] <... clone3 resumed> => {parent_tid=[6648]}, 88) = 6648 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6647] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6647] <... futex resumed>) = 0 [pid 5059] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6647] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./158/binderfs", ./strace-static-x86_64: Process 6648 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6648] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5059] unlink("./158/binderfs") = 0 [pid 6648] <... rseq resumed>) = 0 [pid 5059] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6648] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6645] close(3 [pid 6642] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6645] <... close resumed>) = 0 [pid 6642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6648] memfd_create("syzkaller", 0 [pid 6645] close(4 [pid 6642] <... openat resumed>) = 3 [pid 6646] <... write resumed>) = 2097152 [pid 6645] <... close resumed>) = 0 [pid 6642] chdir("./file0" [pid 5059] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6648] <... memfd_create resumed>) = 3 [pid 6646] munmap(0x7fe7bae00000, 138412032 [pid 6645] mkdir("./file0", 0777 [pid 6642] <... chdir resumed>) = 0 [pid 6648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6645] <... mkdir resumed>) = 0 [pid 6642] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6648] <... mmap resumed>) = 0x7fe7bae00000 [pid 6642] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6642] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6642] <... futex resumed>) = 1 [pid 6641] <... futex resumed>) = 0 [pid 6642] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6641] exit_group(0 [pid 5059] newfstatat(AT_FDCWD, "./158/file0", [pid 6645] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6642] <... futex resumed>) = ? [pid 6641] <... exit_group resumed>) = ? [ 150.763011][ T6642] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 150.790851][ T6645] loop3: detected capacity change from 0 to 4096 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6642] +++ exited with 0 +++ [pid 6641] +++ exited with 0 +++ [pid 5059] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6646] <... munmap resumed>) = 0 [pid 6646] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6646] <... openat resumed>) = 4 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6641, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5059] openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6646] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... openat resumed>) = 4 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5060] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(4 [pid 5060] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] rmdir("./158/file0" [pid 5060] newfstatat(3, "", [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5059] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6648] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6646] <... ioctl resumed>) = 0 [pid 5060] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5059] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./155/binderfs" [pid 5059] rmdir("./158" [pid 5060] <... unlink resumed>) = 0 [pid 6646] close(3 [pid 5060] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6646] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [ 150.825287][ T6645] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 150.842537][ T6646] loop2: detected capacity change from 0 to 4096 [pid 6646] close(4) = 0 [pid 5060] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] mkdir("./159", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6646] mkdir("./file0", 0777 [pid 5060] newfstatat(AT_FDCWD, "./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6648] <... write resumed>) = 2097152 [pid 6646] <... mkdir resumed>) = 0 [pid 5060] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 4 [pid 6646] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6648] munmap(0x7fe7bae00000, 138412032 [pid 6645] <... mount resumed>) = 0 [pid 5060] getdents64(4, [pid 6648] <... munmap resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] close(4 [pid 6645] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 6645] chdir("./file0") = 0 [pid 5060] rmdir("./155/file0") = 0 [pid 6645] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] getdents64(3, [pid 6645] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6645] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(3 [pid 6645] <... futex resumed>) = 1 [pid 6644] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6645] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6644] exit_group(0 [pid 5060] rmdir("./155" [pid 6648] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... rmdir resumed>) = 0 [pid 6648] <... openat resumed>) = 4 [pid 6645] <... futex resumed>) = ? [pid 6644] <... exit_group resumed>) = ? [pid 5060] mkdir("./156", 0777 [pid 6648] ioctl(4, LOOP_SET_FD, 3 [pid 6645] +++ exited with 0 +++ [pid 6644] +++ exited with 0 +++ [pid 5060] <... mkdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6644, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./156/binderfs") = 0 [pid 5062] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6648] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6648] close(3) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6648] close(4) = 0 [pid 5062] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6648] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6648] <... mkdir resumed>) = 0 [ 150.907209][ T6646] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 150.925876][ T6648] loop4: detected capacity change from 0 to 4096 [pid 6648] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] newfstatat(AT_FDCWD, "./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5059] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(3 [pid 5062] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6649 attached [pid 5062] close(4 [pid 6649] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... close resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6649 [pid 6649] <... set_robust_list resumed>) = 0 [pid 5062] rmdir("./156/file0" [pid 6649] chdir("./159" [pid 5062] <... rmdir resumed>) = 0 [pid 6649] <... chdir resumed>) = 0 [pid 5062] getdents64(3, [pid 6649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6649] setpgid(0, 0 [pid 5062] close(3 [pid 6649] <... setpgid resumed>) = 0 [pid 6649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... close resumed>) = 0 [pid 6649] <... openat resumed>) = 3 [pid 5062] rmdir("./156" [pid 6649] write(3, "1000", 4) = 4 [pid 5062] <... rmdir resumed>) = 0 [pid 6649] close(3 [pid 5062] mkdir("./157", 0777 [pid 6649] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6646] <... mount resumed>) = 0 [pid 6646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6646] chdir("./file0") = 0 [pid 6646] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6649] symlink("/dev/binderfs", "./binderfs" [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6649] <... symlink resumed>) = 0 [pid 6646] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 6649] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6649] <... futex resumed>) = 0 [pid 6646] <... futex resumed>) = 1 [pid 6643] <... futex resumed>) = 0 [pid 5060] close(3 [pid 6649] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6646] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6643] exit_group(0 [pid 5060] <... close resumed>) = 0 [pid 6649] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6646] <... futex resumed>) = ? [pid 6643] <... exit_group resumed>) = ? [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6646] +++ exited with 0 +++ [pid 6649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6643] +++ exited with 0 +++ [pid 6649] <... mmap resumed>) = 0x7fe7c3226000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6643, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 6649] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6650 attached [ 150.975593][ T6648] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6649] <... mprotect resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6650] set_robust_list(0x55558e6e36a0, 24 [pid 5061] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6649] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6650 [pid 6650] <... set_robust_list resumed>) = 0 [pid 6649] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6650] chdir("./156" [pid 6649] <... clone3 resumed> => {parent_tid=[6651]}, 88) = 6651 [pid 6649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6649] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] <... chdir resumed>) = 0 [pid 6649] <... futex resumed>) = 0 [pid 6650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6649] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6650] <... prctl resumed>) = 0 [pid 6650] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 6651 attached [pid 6650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] newfstatat(3, "", [pid 6651] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6650] <... openat resumed>) = 3 [pid 6651] <... rseq resumed>) = 0 [pid 6650] write(3, "1000", 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6651] set_robust_list(0x7fe7c32469a0, 24 [pid 6650] <... write resumed>) = 4 [pid 6651] <... set_robust_list resumed>) = 0 [pid 6650] close(3) = 0 [pid 6650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6651] rt_sigprocmask(SIG_SETMASK, [], [pid 6650] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(3, [pid 6651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6650] <... futex resumed>) = 0 [pid 6651] memfd_create("syzkaller", 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6650] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6650] <... mmap resumed>) = 0x7fe7c3226000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6650] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] newfstatat(AT_FDCWD, "./158/binderfs", [pid 6651] <... memfd_create resumed>) = 3 [pid 6650] <... mprotect resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] unlink("./158/binderfs" [pid 6651] <... mmap resumed>) = 0x7fe7bae00000 [pid 6650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6650] <... clone3 resumed> => {parent_tid=[6652]}, 88) = 6652 [pid 6650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6648] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6652 attached [pid 6650] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6648] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6652] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6650] <... futex resumed>) = 0 [pid 6652] <... rseq resumed>) = 0 [pid 6650] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6648] <... openat resumed>) = 3 [pid 6648] chdir("./file0" [pid 6652] set_robust_list(0x7fe7c32469a0, 24 [pid 6648] <... chdir resumed>) = 0 [pid 6652] <... set_robust_list resumed>) = 0 [pid 6652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6652] memfd_create("syzkaller", 0 [pid 6648] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6648] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6648] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6652] <... memfd_create resumed>) = 3 [pid 6651] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6648] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6647] <... futex resumed>) = 0 [pid 5062] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6647] exit_group(0 [pid 5062] <... close resumed>) = 0 [pid 6647] <... exit_group resumed>) = ? [pid 6648] <... futex resumed>) = ? [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6648] +++ exited with 0 +++ [pid 6652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] newfstatat(AT_FDCWD, "./158/file0", [pid 6652] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6653 attached [pid 6647] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6647, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6653] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6653 [pid 5061] openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6653] chdir("./157" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 4 [pid 6653] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 6653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(3, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6653] <... prctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 6653] setpgid(0, 0 [pid 5063] getdents64(3, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 6653] <... setpgid resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] close(4 [pid 6653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6652] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6651] <... write resumed>) = 2097152 [pid 5063] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 6651] munmap(0x7fe7bae00000, 138412032 [pid 5061] rmdir("./158/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 6653] <... openat resumed>) = 3 [pid 6653] write(3, "1000", 4) = 4 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./158" [pid 6653] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 6653] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./155/binderfs", [pid 5061] mkdir("./159", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6651] <... munmap resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] unlink("./155/binderfs" [pid 6653] symlink("/dev/binderfs", "./binderfs" [pid 6651] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6653] <... symlink resumed>) = 0 [pid 6652] <... write resumed>) = 2097152 [pid 5063] <... unlink resumed>) = 0 [pid 6653] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] munmap(0x7fe7bae00000, 138412032 [pid 5063] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6653] <... futex resumed>) = 0 [pid 6651] <... openat resumed>) = 4 [pid 6653] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6651] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = 0 [pid 6653] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6652] <... munmap resumed>) = 0 [pid 6653] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6651] <... ioctl resumed>) = 0 [pid 5063] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6651] close(3 [pid 6653] <... mprotect resumed>) = 0 [pid 6652] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6651] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6653] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6652] <... openat resumed>) = 4 [pid 6651] close(4 [pid 5063] newfstatat(AT_FDCWD, "./155/file0", [pid 6653] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6652] ioctl(4, LOOP_SET_FD, 3 [pid 6651] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6651] mkdir("./file0", 0777 [pid 5063] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6651] <... mkdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6651] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./155/file0") = 0 [pid 6653] <... clone3 resumed> => {parent_tid=[6654]}, 88) = 6654 [pid 5063] getdents64(3, [pid 6653] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] close(3 [pid 6653] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 6653] <... futex resumed>) = 0 [pid 5063] rmdir("./155" [pid 6653] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6654 attached [pid 5063] mkdir("./156", 0777 [pid 6654] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5063] <... mkdir resumed>) = 0 [pid 6654] <... rseq resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6654] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] <... openat resumed>) = 3 [pid 6654] <... set_robust_list resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6654] memfd_create("syzkaller", 0 [pid 6652] <... ioctl resumed>) = 0 [pid 6652] close(3) = 0 [pid 6652] close(4 [pid 6654] <... memfd_create resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 6654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6652] <... close resumed>) = 0 [pid 5061] close(3 [pid 6654] <... mmap resumed>) = 0x7fe7bae00000 [pid 6652] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 6652] <... mkdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 151.171577][ T6651] loop0: detected capacity change from 0 to 4096 [ 151.185593][ T6652] loop1: detected capacity change from 0 to 4096 [ 151.194848][ T6651] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6652] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6655 ./strace-static-x86_64: Process 6655 attached [pid 6655] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6655] chdir("./159") = 0 [pid 6655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6655] setpgid(0, 0) = 0 [pid 6655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6655] write(3, "1000", 4) = 4 [pid 6655] close(3) = 0 [pid 6655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6655] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6655] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6655] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6655] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6656]}, 88) = 6656 [pid 6655] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6656 attached NULL, 8) = 0 [pid 6656] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6655] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] <... rseq resumed>) = 0 [pid 6655] <... futex resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6656] set_robust_list(0x7fe7c32469a0, 24 [pid 6655] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6654] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6651] <... mount resumed>) = 0 [pid 6656] <... set_robust_list resumed>) = 0 [pid 6656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6656] memfd_create("syzkaller", 0 [ 151.249730][ T6652] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6656] <... memfd_create resumed>) = 3 [pid 6652] <... mount resumed>) = 0 [pid 6651] <... openat resumed>) = 3 [pid 6651] chdir("./file0") = 0 [pid 6656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6651] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] close(3 [pid 6652] <... openat resumed>) = 3 [pid 6652] chdir("./file0" [pid 6651] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [pid 6652] <... chdir resumed>) = 0 [pid 6651] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6652] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6652] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6650] <... futex resumed>) = 0 [pid 6652] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] exit_group(0 [pid 6652] <... futex resumed>) = ? [pid 6650] <... exit_group resumed>) = ? [pid 6652] +++ exited with 0 +++ [pid 6651] <... futex resumed>) = 1 [pid 6651] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6657 attached [pid 6657] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6649] <... futex resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6657 [pid 6649] exit_group(0 [pid 6657] chdir("./156" [pid 6650] +++ exited with 0 +++ [pid 6649] <... exit_group resumed>) = ? [pid 6657] <... chdir resumed>) = 0 [pid 6651] <... futex resumed>) = ? [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6650, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6657] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6651] +++ exited with 0 +++ [pid 6657] <... prctl resumed>) = 0 [pid 6657] setpgid(0, 0) = 0 [pid 6657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6657] write(3, "1000", 4 [pid 6656] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6657] <... write resumed>) = 4 [pid 5060] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6657] close(3 [pid 5060] <... openat resumed>) = 3 [pid 6657] <... close resumed>) = 0 [pid 6654] <... write resumed>) = 2097152 [pid 6649] +++ exited with 0 +++ [pid 5060] newfstatat(3, "", [pid 6657] symlink("/dev/binderfs", "./binderfs" [pid 6654] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6657] <... symlink resumed>) = 0 [pid 6654] <... munmap resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6649, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6657] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6657] <... futex resumed>) = 0 [pid 5060] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6657] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6657] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] newfstatat(AT_FDCWD, "./156/binderfs", [pid 5059] <... openat resumed>) = 3 [pid 6657] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] newfstatat(3, "", [pid 6657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] unlink("./156/binderfs" [pid 5059] getdents64(3, [pid 6657] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6657] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6657] <... mprotect resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] unlink("./159/binderfs" [pid 6657] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6654] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 6657] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6654] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6656] <... write resumed>) = 2097152 [pid 6654] ioctl(4, LOOP_SET_FD, 3 [pid 5060] newfstatat(AT_FDCWD, "./156/file0", ./strace-static-x86_64: Process 6658 attached [pid 6656] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6658] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 5059] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6658] set_robust_list(0x7fe7c32469a0, 24 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6658] <... set_robust_list resumed>) = 0 [pid 6658] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] newfstatat(AT_FDCWD, "./159/file0", [pid 6658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6658] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6657] <... clone3 resumed> => {parent_tid=[6658]}, 88) = 6658 [pid 6656] <... munmap resumed>) = 0 [pid 6654] <... ioctl resumed>) = 0 [pid 5060] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6654] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6657] rt_sigprocmask(SIG_SETMASK, [], [pid 6656] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6654] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 4 [pid 6657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6654] close(4 [pid 5060] <... openat resumed>) = 4 [pid 6657] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 5059] newfstatat(4, "", [pid 6654] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6657] <... futex resumed>) = 1 [pid 6654] mkdir("./file0", 0777 [pid 5060] getdents64(4, [pid 6658] <... futex resumed>) = 0 [pid 6657] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6656] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6658] memfd_create("syzkaller", 0 [pid 6656] <... ioctl resumed>) = 0 [pid 6654] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 6658] <... memfd_create resumed>) = 3 [pid 5060] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] getdents64(4, [pid 6658] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6654] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6656] close(3 [pid 5060] close(4 [pid 5059] close(4 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./156/file0" [pid 5059] <... close resumed>) = 0 [pid 6656] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6656] close(4 [pid 5060] getdents64(3, [pid 5059] rmdir("./159/file0" [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] rmdir("./156" [pid 5059] close(3 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./159" [pid 5060] mkdir("./157", 0777) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6656] <... close resumed>) = 0 [pid 5059] mkdir("./160", 0777 [pid 6656] mkdir("./file0", 0777 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6656] <... mkdir resumed>) = 0 [pid 6656] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... mkdir resumed>) = 0 [ 151.391245][ T6654] loop3: detected capacity change from 0 to 4096 [ 151.412065][ T6656] loop2: detected capacity change from 0 to 4096 [ 151.427740][ T6654] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [ 151.454347][ T6656] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6658] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6654] <... mount resumed>) = 0 [pid 6654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... ioctl resumed>) = 0 [pid 6654] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6656] <... mount resumed>) = 0 [pid 6656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6654] chdir("./file0" [pid 6656] <... openat resumed>) = 3 [pid 6654] <... chdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6659 [pid 6654] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6654] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6659 attached [pid 6656] chdir("./file0" [pid 6654] <... futex resumed>) = 1 [pid 6653] <... futex resumed>) = 0 [pid 5059] close(3 [pid 6659] set_robust_list(0x55558e6e36a0, 24 [pid 6656] <... chdir resumed>) = 0 [pid 6654] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6653] exit_group(0 [pid 6659] <... set_robust_list resumed>) = 0 [pid 6656] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6654] <... futex resumed>) = ? [pid 6653] <... exit_group resumed>) = ? [pid 5059] <... close resumed>) = 0 [pid 6659] chdir("./157") = 0 [pid 6659] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6659] <... prctl resumed>) = 0 [pid 6659] setpgid(0, 0) = 0 [pid 6659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6656] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6660 ./strace-static-x86_64: Process 6660 attached [pid 6659] write(3, "1000", 4 [pid 6656] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] set_robust_list(0x55558e6e36a0, 24 [pid 6659] <... write resumed>) = 4 [pid 6656] <... futex resumed>) = 1 [pid 6655] <... futex resumed>) = 0 [pid 6654] +++ exited with 0 +++ [pid 6653] +++ exited with 0 +++ [pid 6660] <... set_robust_list resumed>) = 0 [pid 6659] close(3 [pid 6658] <... write resumed>) = 2097152 [pid 6656] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6655] exit_group(0 [pid 6660] chdir("./160" [pid 6659] <... close resumed>) = 0 [pid 6656] <... futex resumed>) = ? [pid 6655] <... exit_group resumed>) = ? [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6653, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6660] <... chdir resumed>) = 0 [pid 6659] symlink("/dev/binderfs", "./binderfs" [pid 6656] +++ exited with 0 +++ [pid 6655] +++ exited with 0 +++ [pid 5062] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6660] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6659] <... symlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6655, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6660] <... prctl resumed>) = 0 [pid 6659] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6660] setpgid(0, 0 [pid 6659] <... futex resumed>) = 0 [pid 6658] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... openat resumed>) = 3 [pid 6660] <... setpgid resumed>) = 0 [pid 6659] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] newfstatat(3, "", [pid 5061] <... restart_syscall resumed>) = 0 [pid 6660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6659] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6660] <... openat resumed>) = 3 [pid 6659] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6658] <... munmap resumed>) = 0 [pid 5062] getdents64(3, [pid 6659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] newfstatat(AT_FDCWD, "./157/binderfs", [pid 6660] write(3, "1000", 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6660] <... write resumed>) = 4 [pid 6659] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] unlink("./157/binderfs" [pid 5061] newfstatat(3, "", [pid 6660] close(3 [pid 6659] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... unlink resumed>) = 0 [pid 6660] <... close resumed>) = 0 [pid 6659] <... mprotect resumed>) = 0 [pid 5062] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6660] symlink("/dev/binderfs", "./binderfs" [pid 6659] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6658] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] getdents64(3, [pid 6660] <... symlink resumed>) = 0 [pid 6659] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6658] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6660] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6658] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6661 attached [pid 6660] <... futex resumed>) = 0 [pid 5061] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6661] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./159/binderfs", [pid 6661] <... rseq resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6661] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] unlink("./159/binderfs" [pid 6661] <... set_robust_list resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6661] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6661] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6659] <... clone3 resumed> => {parent_tid=[6661]}, 88) = 6661 [pid 6658] <... ioctl resumed>) = 0 [pid 5062] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6660] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6659] rt_sigprocmask(SIG_SETMASK, [], [pid 6658] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6660] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6658] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./157/file0", [pid 5061] <... umount2 resumed>) = 0 [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6659] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6661] <... futex resumed>) = 0 [pid 6660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6659] <... futex resumed>) = 1 [pid 6658] <... close resumed>) = 0 [pid 5062] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6660] <... mmap resumed>) = 0x7fe7c3226000 [pid 6659] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6658] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6660] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6658] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./159/file0", [pid 6660] <... mprotect resumed>) = 0 [pid 6658] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... openat resumed>) = 4 [pid 6661] memfd_create("syzkaller", 0 [pid 6660] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6661] <... memfd_create resumed>) = 3 [pid 6660] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6661] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./159/file0") = 0 [pid 5062] getdents64(4, [pid 5061] getdents64(3, [pid 6660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(4, [pid 5061] close(3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... close resumed>) = 0 [pid 6660] <... clone3 resumed> => {parent_tid=[6662]}, 88) = 6662 [pid 5062] close(4 [pid 5061] rmdir("./159" [pid 6660] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] rmdir("./157/file0" [pid 5061] mkdir("./160", 0777 [pid 6660] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6662 attached [pid 6660] <... futex resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6662] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6660] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6662] <... rseq resumed>) = 0 [pid 5062] close(3 [pid 6662] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] <... close resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6662] <... set_robust_list resumed>) = 0 [pid 6662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] rmdir("./157" [pid 6662] memfd_create("syzkaller", 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./158", 0777 [pid 6662] <... memfd_create resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 151.589456][ T6658] loop4: detected capacity change from 0 to 4096 [ 151.615661][ T6658] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6662] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6661] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6663 attached , child_tidptr=0x55558e6e3690) = 6663 [pid 6663] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6663] chdir("./160") = 0 [pid 6663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6663] setpgid(0, 0) = 0 [pid 6663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6663] write(3, "1000", 4 [pid 5062] close(3 [pid 6663] <... write resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 6663] close(3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6663] <... close resumed>) = 0 [pid 6663] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6664 attached [pid 6663] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6663] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6664] set_robust_list(0x55558e6e36a0, 24 [pid 6663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6664 [pid 6664] <... set_robust_list resumed>) = 0 [pid 6663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6664] chdir("./158" [pid 6663] <... mmap resumed>) = 0x7fe7c3226000 [pid 6664] <... chdir resumed>) = 0 [pid 6663] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6664] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6663] <... mprotect resumed>) = 0 [pid 6664] <... prctl resumed>) = 0 [pid 6663] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6658] <... mount resumed>) = 0 [pid 6664] setpgid(0, 0 [pid 6663] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6664] <... setpgid resumed>) = 0 [pid 6663] <... clone3 resumed> => {parent_tid=[6665]}, 88) = 6665 [pid 6664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6663] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6665 attached NULL, 8) = 0 [pid 6658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6665] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6663] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... rseq resumed>) = 0 [pid 6663] <... futex resumed>) = 0 [pid 6658] <... openat resumed>) = 3 [pid 6665] set_robust_list(0x7fe7c32469a0, 24 [pid 6664] <... openat resumed>) = 3 [pid 6663] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6658] chdir("./file0" [pid 6665] <... set_robust_list resumed>) = 0 [pid 6664] write(3, "1000", 4 [pid 6662] <... write resumed>) = 2097152 [pid 6658] <... chdir resumed>) = 0 [pid 6665] rt_sigprocmask(SIG_SETMASK, [], [pid 6658] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6658] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6665] memfd_create("syzkaller", 0 [pid 6664] <... write resumed>) = 4 [pid 6658] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6662] munmap(0x7fe7bae00000, 138412032 [pid 6658] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] <... memfd_create resumed>) = 3 [pid 6664] close(3 [pid 6662] <... munmap resumed>) = 0 [pid 6661] <... write resumed>) = 2097152 [pid 6657] <... futex resumed>) = 0 [pid 6665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6657] exit_group(0 [pid 6664] <... close resumed>) = 0 [pid 6661] munmap(0x7fe7bae00000, 138412032 [pid 6657] <... exit_group resumed>) = ? [pid 6665] <... mmap resumed>) = 0x7fe7bae00000 [pid 6658] <... futex resumed>) = ? [pid 6664] symlink("/dev/binderfs", "./binderfs" [pid 6658] +++ exited with 0 +++ [pid 6657] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6657, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./156/binderfs", [pid 6664] <... symlink resumed>) = 0 [pid 6662] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6662] <... openat resumed>) = 4 [pid 5063] unlink("./156/binderfs" [pid 6664] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6662] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... unlink resumed>) = 0 [pid 6664] <... futex resumed>) = 0 [pid 6661] <... munmap resumed>) = 0 [pid 5063] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6664] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6661] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6664] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6664] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6661] <... openat resumed>) = 4 [pid 6662] <... ioctl resumed>) = 0 [pid 6665] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6661] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = 0 [pid 6662] close(3 [pid 5063] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6662] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6662] close(4 [pid 5063] newfstatat(AT_FDCWD, "./156/file0", [pid 6662] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6662] mkdir("./file0", 0777 [pid 5063] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6664] <... mmap resumed>) = 0x7fe7c3226000 [pid 6662] <... mkdir resumed>) = 0 [pid 6664] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6662] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6661] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6661] close(3 [pid 5063] openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6666 attached [pid 6661] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6666] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6664] <... clone3 resumed> => {parent_tid=[6666]}, 88) = 6666 [pid 6661] close(4 [pid 6666] <... rseq resumed>) = 0 [pid 6664] rt_sigprocmask(SIG_SETMASK, [], [pid 6661] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6666] set_robust_list(0x7fe7c32469a0, 24 [pid 6664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6661] mkdir("./file0", 0777 [pid 6666] <... set_robust_list resumed>) = 0 [pid 6665] <... write resumed>) = 2097152 [pid 6664] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6661] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6666] rt_sigprocmask(SIG_SETMASK, [], [pid 6664] <... futex resumed>) = 0 [pid 6666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6661] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6664] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 6666] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./156/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./156") = 0 [pid 5063] mkdir("./157", 0777) = 0 [pid 6666] <... memfd_create resumed>) = 3 [ 151.799458][ T6662] loop0: detected capacity change from 0 to 4096 [ 151.818374][ T6661] loop1: detected capacity change from 0 to 4096 [ 151.839795][ T6662] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6665] munmap(0x7fe7bae00000, 138412032 [pid 6666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6665] <... munmap resumed>) = 0 [pid 6665] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 151.869957][ T6661] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6666] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6661] <... mount resumed>) = 0 [pid 6661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6661] chdir("./file0" [pid 6665] close(3 [pid 6661] <... chdir resumed>) = 0 [pid 6661] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6661] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... futex resumed>) = 0 [pid 6661] <... futex resumed>) = 1 [pid 6661] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] exit_group(0 [pid 6661] <... futex resumed>) = ? [pid 6659] <... exit_group resumed>) = ? [pid 6665] <... close resumed>) = 0 [pid 6661] +++ exited with 0 +++ [pid 6659] +++ exited with 0 +++ [pid 6665] close(4 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6659, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6665] <... close resumed>) = 0 [pid 6665] mkdir("./file0", 0777) = 0 [pid 5060] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6665] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 151.910453][ T6665] loop2: detected capacity change from 0 to 4096 [pid 5060] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./157/binderfs") = 0 [pid 5060] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6662] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 5060] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6662] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] newfstatat(AT_FDCWD, "./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6662] chdir("./file0" [pid 5060] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 6667 attached [pid 6662] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6667 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 6662] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6662] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6667] set_robust_list(0x55558e6e36a0, 24 [pid 6662] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(4 [pid 6667] <... set_robust_list resumed>) = 0 [pid 6662] <... futex resumed>) = 1 [pid 6660] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6667] chdir("./157" [pid 6666] <... write resumed>) = 2097152 [pid 6662] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] exit_group(0 [pid 5060] rmdir("./157/file0" [pid 6667] <... chdir resumed>) = 0 [pid 6666] munmap(0x7fe7bae00000, 138412032 [pid 6662] <... futex resumed>) = ? [pid 6660] <... exit_group resumed>) = ? [pid 5060] <... rmdir resumed>) = 0 [pid 6667] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6662] +++ exited with 0 +++ [pid 6660] +++ exited with 0 +++ [pid 5060] getdents64(3, [pid 6667] <... prctl resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6667] setpgid(0, 0 [pid 5060] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6660, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6667] <... setpgid resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] rmdir("./157" [pid 6667] <... openat resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 6667] write(3, "1000", 4 [pid 5060] mkdir("./158", 0777 [pid 6667] <... write resumed>) = 4 [pid 6666] <... munmap resumed>) = 0 [pid 6667] close(3 [pid 6666] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... mkdir resumed>) = 0 [pid 5059] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6667] <... close resumed>) = 0 [pid 6666] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6667] symlink("/dev/binderfs", "./binderfs" [pid 5059] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6667] <... symlink resumed>) = 0 [pid 6666] ioctl(4, LOOP_SET_FD, 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... openat resumed>) = 3 [ 151.965657][ T6665] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6667] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6667] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6667] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6666] <... ioctl resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 6667] <... mprotect resumed>) = 0 [pid 6667] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6666] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6666] <... close resumed>) = 0 [pid 6667] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6666] close(4 [pid 5059] getdents64(3, [pid 6667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6666] <... close resumed>) = 0 [pid 6666] mkdir("./file0", 0777 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6668 attached [pid 6667] <... clone3 resumed> => {parent_tid=[6668]}, 88) = 6668 [pid 6666] <... mkdir resumed>) = 0 [pid 6668] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6667] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6668] <... rseq resumed>) = 0 [pid 6667] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6668] set_robust_list(0x7fe7c32469a0, 24 [pid 6667] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] <... set_robust_list resumed>) = 0 [pid 6667] <... futex resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./160/binderfs", [pid 6668] rt_sigprocmask(SIG_SETMASK, [], [pid 6667] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6666] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6668] memfd_create("syzkaller", 0 [pid 5059] unlink("./160/binderfs") = 0 [pid 5059] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6668] <... memfd_create resumed>) = 3 [pid 6668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./160/file0") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./160") = 0 [pid 5059] mkdir("./161", 0777) = 0 [pid 6665] <... mount resumed>) = 0 [pid 6665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6665] chdir("./file0") = 0 [ 152.024761][ T6666] loop3: detected capacity change from 0 to 4096 [ 152.052831][ T6666] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6665] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6665] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6665] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6665] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6663] <... futex resumed>) = 0 [pid 6663] exit_group(0 [pid 6665] <... futex resumed>) = ? [pid 6663] <... exit_group resumed>) = ? [pid 6665] +++ exited with 0 +++ [pid 6663] +++ exited with 0 +++ [pid 5059] <... openat resumed>) = 3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6663, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./160/binderfs", ./strace-static-x86_64: Process 6669 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6669] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5061] unlink("./160/binderfs" [pid 6669] chdir("./158" [pid 5061] <... unlink resumed>) = 0 [pid 6669] <... chdir resumed>) = 0 [pid 5061] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6669] setpgid(0, 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6669] <... setpgid resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6669 [pid 6669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6669] write(3, "1000", 4) = 4 [pid 6669] close(3) = 0 [pid 5061] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6669] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6669] <... symlink resumed>) = 0 [pid 6668] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] newfstatat(AT_FDCWD, "./160/file0", [pid 6669] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6669] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6669] <... clone3 resumed> => {parent_tid=[6670]}, 88) = 6670 [pid 5061] getdents64(4, [pid 6669] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] getdents64(4, [pid 6669] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] close(4) = 0 ./strace-static-x86_64: Process 6670 attached [pid 5061] rmdir("./160/file0" [pid 6670] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] <... rmdir resumed>) = 0 [pid 6670] <... rseq resumed>) = 0 [pid 5061] getdents64(3, [pid 6670] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6670] <... set_robust_list resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./160") = 0 [pid 6670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6670] memfd_create("syzkaller", 0 [pid 5061] mkdir("./161", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6670] <... memfd_create resumed>) = 3 [pid 6670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6671 attached [pid 6671] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6671] chdir("./161") = 0 [pid 6671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6671] setpgid(0, 0) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6671 [pid 6671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6668] <... write resumed>) = 2097152 [pid 6671] write(3, "1000", 4) = 4 [pid 6671] close(3 [pid 6668] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... ioctl resumed>) = 0 [pid 6671] <... close resumed>) = 0 [pid 6671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6671] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6671] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6668] <... munmap resumed>) = 0 [pid 6671] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5061] close(3 [pid 6671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6671] <... clone3 resumed> => {parent_tid=[6672]}, 88) = 6672 [pid 6666] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6672 attached [pid 6671] rt_sigprocmask(SIG_SETMASK, [], [pid 6666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6673 attached [pid 6672] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6668] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6666] <... openat resumed>) = 3 [pid 6672] <... rseq resumed>) = 0 [pid 6671] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6666] chdir("./file0" [pid 6673] set_robust_list(0x55558e6e36a0, 24 [pid 6672] set_robust_list(0x7fe7c32469a0, 24 [pid 6671] <... futex resumed>) = 0 [pid 6670] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6668] <... openat resumed>) = 4 [pid 6666] <... chdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6673 [pid 6673] <... set_robust_list resumed>) = 0 [pid 6672] <... set_robust_list resumed>) = 0 [pid 6671] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6666] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6673] chdir("./161" [pid 6672] rt_sigprocmask(SIG_SETMASK, [], [pid 6666] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6673] <... chdir resumed>) = 0 [pid 6672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6668] ioctl(4, LOOP_SET_FD, 3 [pid 6666] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6672] memfd_create("syzkaller", 0 [pid 6666] <... futex resumed>) = 1 [pid 6664] <... futex resumed>) = 0 [pid 6672] <... memfd_create resumed>) = 3 [pid 6672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6664] exit_group(0 [pid 6672] <... mmap resumed>) = 0x7fe7bae00000 [pid 6664] <... exit_group resumed>) = ? [pid 6673] <... prctl resumed>) = 0 [pid 6673] setpgid(0, 0) = 0 [pid 6673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6666] +++ exited with 0 +++ [pid 6664] +++ exited with 0 +++ [pid 6673] write(3, "1000", 4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6664, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6673] <... write resumed>) = 4 [pid 6673] close(3) = 0 [pid 5062] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6673] <... symlink resumed>) = 0 [pid 6668] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6673] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] close(3 [pid 5062] <... openat resumed>) = 3 [pid 6673] <... futex resumed>) = 0 [pid 6668] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 6673] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6668] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6668] <... close resumed>) = 0 [pid 6668] mkdir("./file0", 0777 [pid 6673] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] getdents64(3, [pid 6673] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6673] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] newfstatat(AT_FDCWD, "./158/binderfs", [pid 6673] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6673] <... mprotect resumed>) = 0 [pid 5062] unlink("./158/binderfs" [pid 6673] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... unlink resumed>) = 0 [pid 6673] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6668] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6668] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6673] <... clone3 resumed> => {parent_tid=[6674]}, 88) = 6674 [pid 6673] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6674 attached [pid 6673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 152.253714][ T6668] loop4: detected capacity change from 0 to 4096 [pid 6674] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6673] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(AT_FDCWD, "./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6674] <... rseq resumed>) = 0 [pid 6673] <... futex resumed>) = 0 [pid 6670] <... write resumed>) = 2097152 [pid 5062] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 6674] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6674] <... set_robust_list resumed>) = 0 [pid 5062] getdents64(4, [pid 6674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6670] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6674] memfd_create("syzkaller", 0 [pid 5062] close(4 [pid 6674] <... memfd_create resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 6674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] rmdir("./158/file0" [pid 6674] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] <... rmdir resumed>) = 0 [pid 6670] <... munmap resumed>) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./158" [pid 6670] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6672] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6670] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./159", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6668] <... mount resumed>) = 0 [pid 6668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6674] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6670] <... ioctl resumed>) = 0 [pid 6668] chdir("./file0" [pid 6670] close(3 [pid 6668] <... chdir resumed>) = 0 [pid 6670] <... close resumed>) = 0 [pid 6668] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6670] close(4 [pid 6668] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6670] <... close resumed>) = 0 [pid 6668] <... futex resumed>) = 1 [pid 6668] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6670] mkdir("./file0", 0777 [pid 6667] <... futex resumed>) = 0 [pid 6667] exit_group(0) = ? [pid 6670] <... mkdir resumed>) = 0 [pid 6668] <... futex resumed>) = ? [pid 6668] +++ exited with 0 +++ [ 152.302884][ T6668] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 152.342173][ T6670] loop1: detected capacity change from 0 to 4096 [pid 6670] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6667] +++ exited with 0 +++ [pid 6672] <... write resumed>) = 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6667, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6672] munmap(0x7fe7bae00000, 138412032 [pid 5063] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 152.388254][ T6670] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6672] <... munmap resumed>) = 0 [pid 5063] unlink("./157/binderfs" [pid 6672] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... unlink resumed>) = 0 [pid 6672] <... openat resumed>) = 4 [pid 5063] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6672] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6674] <... write resumed>) = 2097152 [pid 5063] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6675 attached [pid 6675] set_robust_list(0x55558e6e36a0, 24 [pid 6672] <... ioctl resumed>) = 0 [pid 6675] <... set_robust_list resumed>) = 0 [pid 6672] close(3 [pid 6675] chdir("./159" [pid 6672] <... close resumed>) = 0 [pid 6675] <... chdir resumed>) = 0 [pid 6674] munmap(0x7fe7bae00000, 138412032 [pid 6672] close(4 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6675 [pid 6675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6674] <... munmap resumed>) = 0 [pid 6672] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6675] <... prctl resumed>) = 0 [pid 6675] setpgid(0, 0) = 0 [pid 5063] newfstatat(AT_FDCWD, "./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6672] mkdir("./file0", 0777 [pid 6675] <... openat resumed>) = 3 [pid 6672] <... mkdir resumed>) = 0 [pid 5063] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6670] <... mount resumed>) = 0 [pid 6670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6675] write(3, "1000", 4) = 4 [pid 6672] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6670] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 6675] close(3) = 0 [pid 6674] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6670] chdir("./file0" [pid 5063] newfstatat(4, "", [pid 6674] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6675] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(4, [pid 6670] <... chdir resumed>) = 0 [pid 6675] <... symlink resumed>) = 0 [pid 6674] ioctl(4, LOOP_SET_FD, 3 [pid 6670] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [ 152.432391][ T6672] loop0: detected capacity change from 0 to 4096 [ 152.472178][ T6674] loop2: detected capacity change from 0 to 4096 [pid 6675] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6670] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] getdents64(4, [pid 6670] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] <... futex resumed>) = 0 [pid 6674] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6670] <... futex resumed>) = 1 [pid 6675] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6674] close(3 [pid 6670] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] <... futex resumed>) = 0 [pid 5063] close(4 [pid 6675] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6674] <... close resumed>) = 0 [pid 6669] exit_group(0 [pid 6675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6674] close(4 [pid 6670] <... futex resumed>) = ? [pid 6669] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6674] <... close resumed>) = 0 [pid 6675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] rmdir("./157/file0" [pid 6675] <... mmap resumed>) = 0x7fe7c3226000 [pid 6674] mkdir("./file0", 0777 [pid 6675] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... rmdir resumed>) = 0 [pid 6675] <... mprotect resumed>) = 0 [pid 5063] getdents64(3, [pid 6675] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6674] <... mkdir resumed>) = 0 [pid 6670] +++ exited with 0 +++ [pid 6669] +++ exited with 0 +++ [pid 6675] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6669, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 6675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6675] <... clone3 resumed> => {parent_tid=[6676]}, 88) = 6676 [pid 6674] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] close(3 [pid 5060] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6676 attached [pid 6675] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 152.479011][ T6672] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6676] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] rmdir("./157" [pid 5060] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6676] <... rseq resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6676] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6676] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... openat resumed>) = 3 [pid 6676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6675] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(3, "", [pid 6676] memfd_create("syzkaller", 0 [pid 6675] <... futex resumed>) = 0 [pid 5063] mkdir("./158", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6675] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./158/binderfs", [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./158/binderfs" [pid 6676] <... memfd_create resumed>) = 3 [pid 5060] <... unlink resumed>) = 0 [pid 6676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6676] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 6672] <... mount resumed>) = 0 [pid 6672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6672] chdir("./file0" [pid 5060] close(4 [pid 6672] <... chdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] rmdir("./158/file0" [pid 6672] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... rmdir resumed>) = 0 [pid 6672] <... futex resumed>) = 1 [pid 6672] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6674] <... mount resumed>) = 0 [pid 6671] <... futex resumed>) = 0 [pid 6671] exit_group(0 [pid 6672] <... futex resumed>) = ? [pid 6671] <... exit_group resumed>) = ? [ 152.518378][ T6674] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6674] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6672] +++ exited with 0 +++ [pid 6671] +++ exited with 0 +++ [pid 6674] <... openat resumed>) = 3 [pid 5060] getdents64(3, [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6671, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6674] chdir("./file0" [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6674] <... chdir resumed>) = 0 [pid 5060] close(3 [pid 5059] <... restart_syscall resumed>) = 0 [pid 6674] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./158") = 0 [pid 5059] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6674] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6673] <... futex resumed>) = 0 [pid 5060] mkdir("./159", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6676] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6673] exit_group(0 [pid 5060] <... mkdir resumed>) = 0 [pid 6673] <... exit_group resumed>) = ? [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6674] +++ exited with 0 +++ [pid 6673] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6673, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... openat resumed>) = 3 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./161/binderfs") = 0 [pid 5061] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5061] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./161/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./161/file0", [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./161/binderfs" [pid 5061] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6677 attached [pid 5059] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6677 [pid 5061] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./161/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6677] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6677] <... set_robust_list resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 5059] newfstatat(4, "", [pid 6677] chdir("./158" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6677] <... chdir resumed>) = 0 [pid 5059] getdents64(4, [pid 6677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6677] <... prctl resumed>) = 0 [pid 5061] close(3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6677] setpgid(0, 0 [pid 5061] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 6677] <... setpgid resumed>) = 0 [pid 5061] rmdir("./161" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6676] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./162", 0777 [pid 6676] munmap(0x7fe7bae00000, 138412032 [pid 6677] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./161/file0" [pid 6677] write(3, "1000", 4) = 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6677] close(3) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6677] symlink("/dev/binderfs", "./binderfs" [pid 5059] getdents64(3, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6677] <... symlink resumed>) = 0 [pid 6676] <... munmap resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6676] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6676] ioctl(4, LOOP_SET_FD, 3 [pid 6677] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6676] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 6677] <... futex resumed>) = 0 [pid 6677] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... close resumed>) = 0 [pid 6677] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6677] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] rmdir("./161" [pid 6677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6677] <... mmap resumed>) = 0x7fe7c3226000 [pid 6677] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6678 attached [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6678 [pid 6677] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] mkdir("./162", 0777 [pid 6678] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6678] chdir("./159") = 0 [pid 6676] close(3 [pid 6678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6676] <... close resumed>) = 0 [pid 6678] <... prctl resumed>) = 0 [pid 6676] close(4 [pid 6678] setpgid(0, 0 [pid 6676] <... close resumed>) = 0 [pid 6678] <... setpgid resumed>) = 0 [pid 6676] mkdir("./file0", 0777 [pid 6678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6676] <... mkdir resumed>) = 0 [pid 6678] <... openat resumed>) = 3 [pid 6678] write(3, "1000", 4) = 4 [pid 6676] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6678] close(3 [pid 6677] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6678] <... close resumed>) = 0 [pid 6677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6678] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6679 attached [pid 6678] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6677] <... clone3 resumed> => {parent_tid=[6679]}, 88) = 6679 [pid 6679] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6677] rt_sigprocmask(SIG_SETMASK, [], [pid 6678] <... futex resumed>) = 0 [pid 6677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6679] <... rseq resumed>) = 0 [pid 6678] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6678] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6678] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6677] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6678] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6677] <... futex resumed>) = 0 [pid 6679] rt_sigprocmask(SIG_SETMASK, [], [pid 6678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6677] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6678] <... clone3 resumed> => {parent_tid=[6680]}, 88) = 6680 [pid 6678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6678] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6678] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6680 attached [pid 6679] memfd_create("syzkaller", 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6680] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6679] <... memfd_create resumed>) = 3 [pid 6679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6680] <... rseq resumed>) = 0 [pid 6679] <... mmap resumed>) = 0x7fe7bae00000 [pid 6680] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6680] memfd_create("syzkaller", 0) = 3 [pid 6680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 152.659550][ T6676] loop3: detected capacity change from 0 to 4096 [ 152.690950][ T6676] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6681 ./strace-static-x86_64: Process 6681 attached [pid 6681] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6681] chdir("./162") = 0 [pid 6681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6681] setpgid(0, 0) = 0 [pid 6681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6681] write(3, "1000", 4) = 4 [pid 6681] close(3) = 0 [pid 6680] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6681] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6681] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6681] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6682]}, 88) = 6682 [pid 6681] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6682 attached NULL, 8) = 0 [pid 6679] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6682] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6681] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... rseq resumed>) = 0 [pid 6681] <... futex resumed>) = 0 [pid 6681] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6682] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6682] memfd_create("syzkaller", 0) = 3 [pid 6682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6683 attached , child_tidptr=0x55558e6e3690) = 6683 [pid 6683] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6683] chdir("./162" [pid 6680] <... write resumed>) = 2097152 [pid 6683] <... chdir resumed>) = 0 [pid 6682] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6680] munmap(0x7fe7bae00000, 138412032 [pid 6679] <... write resumed>) = 2097152 [pid 6683] <... prctl resumed>) = 0 [pid 6679] munmap(0x7fe7bae00000, 138412032 [pid 6683] setpgid(0, 0) = 0 [pid 6683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6680] <... munmap resumed>) = 0 [pid 6683] <... openat resumed>) = 3 [pid 6683] write(3, "1000", 4 [pid 6679] <... munmap resumed>) = 0 [pid 6676] <... mount resumed>) = 0 [pid 6683] <... write resumed>) = 4 [pid 6680] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6683] close(3 [pid 6680] <... openat resumed>) = 4 [pid 6679] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6676] <... openat resumed>) = 3 [pid 6683] <... close resumed>) = 0 [pid 6680] ioctl(4, LOOP_SET_FD, 3 [pid 6679] <... openat resumed>) = 4 [pid 6683] symlink("/dev/binderfs", "./binderfs" [pid 6679] ioctl(4, LOOP_SET_FD, 3 [pid 6676] chdir("./file0") = 0 [pid 6676] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6676] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6675] exit_group(0) = ? [pid 6676] +++ exited with 0 +++ [pid 6675] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6675, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6683] <... symlink resumed>) = 0 [pid 5062] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6682] <... write resumed>) = 2097152 [pid 5062] getdents64(3, [pid 6683] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] munmap(0x7fe7bae00000, 138412032 [pid 6680] <... ioctl resumed>) = 0 [pid 6679] <... ioctl resumed>) = 0 [pid 6683] <... futex resumed>) = 0 [pid 6679] close(3 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6683] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6680] close(3 [pid 6679] <... close resumed>) = 0 [pid 5062] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6683] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6680] <... close resumed>) = 0 [pid 6679] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6683] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6680] close(4 [pid 6679] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./159/binderfs", [pid 6683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6679] mkdir("./file0", 0777 [pid 5062] unlink("./159/binderfs" [pid 6683] <... mmap resumed>) = 0x7fe7c3226000 [pid 6679] <... mkdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6683] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6683] <... mprotect resumed>) = 0 [pid 6679] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6683] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6680] <... close resumed>) = 0 [pid 6680] mkdir("./file0", 0777 [pid 6683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6680] <... mkdir resumed>) = 0 [pid 6680] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6683] <... clone3 resumed> => {parent_tid=[6684]}, 88) = 6684 ./strace-static-x86_64: Process 6684 attached [ 152.869699][ T6680] loop1: detected capacity change from 0 to 4096 [ 152.877012][ T6679] loop4: detected capacity change from 0 to 4096 [ 152.899624][ T6679] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6684] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6684] <... rseq resumed>) = 0 [pid 6682] <... munmap resumed>) = 0 [pid 6684] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6684] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6683] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... umount2 resumed>) = 0 [pid 6684] <... futex resumed>) = 0 [pid 6683] <... futex resumed>) = 1 [pid 6684] memfd_create("syzkaller", 0 [pid 6683] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6682] ioctl(4, LOOP_SET_FD, 3 [pid 6684] <... memfd_create resumed>) = 3 [pid 6679] <... mount resumed>) = 0 [pid 5062] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6684] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] newfstatat(AT_FDCWD, "./159/file0", [pid 6679] <... openat resumed>) = 3 [pid 6679] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6679] <... chdir resumed>) = 0 [pid 6679] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6679] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6679] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6679] <... futex resumed>) = 1 [pid 6677] <... futex resumed>) = 0 [pid 6679] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 6677] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6679] <... futex resumed>) = ? [pid 6677] <... exit_group resumed>) = ? [pid 5062] getdents64(4, [pid 6679] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./159/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./159") = 0 [pid 6682] <... ioctl resumed>) = 0 [pid 5062] mkdir("./160", 0777 [pid 6682] close(3) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6682] close(4) = 0 [pid 6682] mkdir("./file0", 0777 [pid 6677] +++ exited with 0 +++ [pid 6682] <... mkdir resumed>) = 0 [pid 6682] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6677, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [ 152.919828][ T6680] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 152.937952][ T6682] loop2: detected capacity change from 0 to 4096 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./158/binderfs") = 0 [pid 6680] <... mount resumed>) = 0 [pid 6680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6684] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6680] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6680] chdir("./file0" [pid 5063] getdents64(4, [pid 6680] <... chdir resumed>) = 0 [pid 6680] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6680] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6680] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6678] <... futex resumed>) = 0 [pid 6678] exit_group(0) = ? [pid 6680] <... futex resumed>) = ? [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./158/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./158") = 0 [pid 5063] mkdir("./159", 0777 [pid 6680] +++ exited with 0 +++ [pid 6678] +++ exited with 0 +++ [pid 5063] <... mkdir resumed>) = 0 [ 152.994514][ T6682] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6678, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6684] <... write resumed>) = 2097152 [pid 5062] close(3 [pid 5060] newfstatat(AT_FDCWD, "./159/binderfs", [pid 5062] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./159/binderfs" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6685 attached [pid 6684] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... umount2 resumed>) = 0 [pid 6685] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6685] chdir("./160" [pid 5060] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6685 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6685] <... chdir resumed>) = 0 [pid 6684] <... munmap resumed>) = 0 [pid 6682] <... mount resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6685] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6685] <... prctl resumed>) = 0 [pid 6682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6685] setpgid(0, 0 [pid 6682] <... openat resumed>) = 3 [pid 6685] <... setpgid resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 6685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6685] <... openat resumed>) = 3 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6685] write(3, "1000", 4 [pid 6682] chdir("./file0" [pid 5063] <... ioctl resumed>) = 0 [pid 5060] close(4 [pid 6685] <... write resumed>) = 4 [pid 6682] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 5060] <... close resumed>) = 0 [pid 6685] close(3 [pid 6682] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] rmdir("./159/file0" [pid 6685] <... close resumed>) = 0 [pid 6684] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6682] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6685] symlink("/dev/binderfs", "./binderfs" [pid 6684] <... openat resumed>) = 4 [pid 6682] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] getdents64(3, [pid 6685] <... symlink resumed>) = 0 [pid 6684] ioctl(4, LOOP_SET_FD, 3 [pid 6682] <... futex resumed>) = 1 [pid 6681] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6686 attached [pid 6685] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] set_robust_list(0x55558e6e36a0, 24 [pid 6685] <... futex resumed>) = 0 [pid 6684] <... ioctl resumed>) = 0 [pid 6682] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6681] exit_group(0 [pid 5060] close(3 [pid 6686] <... set_robust_list resumed>) = 0 [pid 6685] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6684] close(3 [pid 6682] <... futex resumed>) = ? [pid 6681] <... exit_group resumed>) = ? [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6686 [pid 5060] <... close resumed>) = 0 [pid 6686] chdir("./159" [pid 6685] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] rmdir("./159" [pid 6686] <... chdir resumed>) = 0 [pid 6685] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6686] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6686] <... prctl resumed>) = 0 [pid 6685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6686] setpgid(0, 0 [pid 6685] <... mmap resumed>) = 0x7fe7c3226000 [pid 6685] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6686] <... setpgid resumed>) = 0 [pid 6685] <... mprotect resumed>) = 0 [pid 6684] <... close resumed>) = 0 [pid 5060] mkdir("./160", 0777 [pid 6686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6685] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6684] close(4 [pid 6685] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6684] <... close resumed>) = 0 [pid 6682] +++ exited with 0 +++ [pid 6681] +++ exited with 0 +++ [pid 6686] <... openat resumed>) = 3 [pid 5060] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6687 attached [pid 6684] mkdir("./file0", 0777 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6681, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6687] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6686] write(3, "1000", 4 [pid 6685] <... clone3 resumed> => {parent_tid=[6687]}, 88) = 6687 [pid 6684] <... mkdir resumed>) = 0 [pid 6687] <... rseq resumed>) = 0 [pid 6686] <... write resumed>) = 4 [pid 6685] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6687] set_robust_list(0x7fe7c32469a0, 24 [pid 6686] close(3 [pid 6685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6687] <... set_robust_list resumed>) = 0 [pid 6686] <... close resumed>) = 0 [pid 6685] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6687] rt_sigprocmask(SIG_SETMASK, [], [pid 6686] symlink("/dev/binderfs", "./binderfs" [pid 6685] <... futex resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6686] <... symlink resumed>) = 0 [pid 6685] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6687] memfd_create("syzkaller", 0 [pid 6686] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6687] <... memfd_create resumed>) = 3 [pid 6686] <... futex resumed>) = 0 [pid 6687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6686] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6687] <... mmap resumed>) = 0x7fe7bae00000 [pid 6686] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6686] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 6686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5061] getdents64(3, [pid 6686] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./162/binderfs", [pid 6686] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./162/binderfs" [pid 6686] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6686] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 6688 attached [pid 6686] <... clone3 resumed> => {parent_tid=[6688]}, 88) = 6688 [pid 5061] newfstatat(4, "", [pid 6688] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6686] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6688] <... rseq resumed>) = 0 [pid 6686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6688] set_robust_list(0x7fe7c32469a0, 24 [pid 6686] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(4, [pid 6688] <... set_robust_list resumed>) = 0 [pid 6686] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6688] rt_sigprocmask(SIG_SETMASK, [], [pid 6686] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./162/file0" [pid 6688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6688] memfd_create("syzkaller", 0) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 6688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6688] <... mmap resumed>) = 0x7fe7bae00000 [ 153.131142][ T6684] loop0: detected capacity change from 0 to 4096 [ 153.157035][ T6684] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] close(3 [pid 6687] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./162" [pid 5060] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] mkdir("./163", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6689 attached [pid 6689] set_robust_list(0x55558e6e36a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6689 [pid 6689] <... set_robust_list resumed>) = 0 [pid 6689] chdir("./160") = 0 [pid 6689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6689] setpgid(0, 0) = 0 [pid 6689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6689] write(3, "1000", 4) = 4 [pid 6689] close(3) = 0 [pid 6689] symlink("/dev/binderfs", "./binderfs" [pid 6684] <... mount resumed>) = 0 [pid 6689] <... symlink resumed>) = 0 [pid 6688] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6687] <... write resumed>) = 2097152 [pid 6684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6689] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] <... openat resumed>) = 3 [pid 6689] <... futex resumed>) = 0 [pid 6689] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6689] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6689] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6690 attached [pid 6687] munmap(0x7fe7bae00000, 138412032 [pid 6684] chdir("./file0" [pid 6689] <... clone3 resumed> => {parent_tid=[6690]}, 88) = 6690 [pid 6689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6689] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6690] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6687] <... munmap resumed>) = 0 [pid 6684] <... chdir resumed>) = 0 [pid 6690] <... rseq resumed>) = 0 [pid 6689] <... futex resumed>) = 0 [pid 6689] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6684] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6690] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6687] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6684] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... ioctl resumed>) = 0 [pid 6690] rt_sigprocmask(SIG_SETMASK, [], [pid 6684] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6687] <... openat resumed>) = 4 [pid 5061] close(3 [pid 6688] <... write resumed>) = 2097152 [pid 6684] <... futex resumed>) = 1 [pid 6683] <... futex resumed>) = 0 [pid 6690] memfd_create("syzkaller", 0 [pid 6684] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6683] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 6690] <... memfd_create resumed>) = 3 [pid 6688] munmap(0x7fe7bae00000, 138412032 [pid 6687] ioctl(4, LOOP_SET_FD, 3 [pid 6684] <... futex resumed>) = ? [pid 6683] <... exit_group resumed>) = ? [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6691 attached [pid 6690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6688] <... munmap resumed>) = 0 [pid 6691] set_robust_list(0x55558e6e36a0, 24 [pid 6690] <... mmap resumed>) = 0x7fe7bae00000 [pid 6688] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6687] <... ioctl resumed>) = 0 [pid 6684] +++ exited with 0 +++ [pid 6683] +++ exited with 0 +++ [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6691 [pid 6691] <... set_robust_list resumed>) = 0 [pid 6688] <... openat resumed>) = 4 [pid 6687] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6683, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6691] chdir("./163" [pid 6688] ioctl(4, LOOP_SET_FD, 3 [pid 6687] <... close resumed>) = 0 [pid 6691] <... chdir resumed>) = 0 [pid 5059] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6688] <... ioctl resumed>) = 0 [pid 5059] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6687] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6691] <... prctl resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./162/binderfs", [pid 6691] setpgid(0, 0 [pid 6687] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6691] <... setpgid resumed>) = 0 [pid 6687] mkdir("./file0", 0777 [pid 5059] unlink("./162/binderfs" [pid 6691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6687] <... mkdir resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6691] <... openat resumed>) = 3 [pid 6687] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6691] write(3, "1000", 4) = 4 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./162/file0" [pid 6691] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6691] <... close resumed>) = 0 [pid 6688] close(3 [pid 6691] symlink("/dev/binderfs", "./binderfs" [pid 6688] <... close resumed>) = 0 [pid 5059] close(3 [pid 6691] <... symlink resumed>) = 0 [pid 6688] close(4) = 0 [pid 6688] mkdir("./file0", 0777 [pid 5059] <... close resumed>) = 0 [pid 6691] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... mkdir resumed>) = 0 [pid 6691] <... futex resumed>) = 0 [pid 6690] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] rmdir("./162" [pid 6691] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6688] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6691] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... rmdir resumed>) = 0 [ 153.336067][ T6687] loop3: detected capacity change from 0 to 4096 [ 153.351839][ T6688] loop4: detected capacity change from 0 to 4096 [ 153.368696][ T6687] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] mkdir("./163", 0777 [pid 6691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5059] <... mkdir resumed>) = 0 [pid 6691] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6692 attached [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6692] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6691] <... clone3 resumed> => {parent_tid=[6692]}, 88) = 6692 [pid 6691] rt_sigprocmask(SIG_SETMASK, [], [pid 6692] <... rseq resumed>) = 0 [pid 6692] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6692] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6691] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6692] <... futex resumed>) = 0 [pid 6691] <... futex resumed>) = 1 [pid 6691] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6692] memfd_create("syzkaller", 0 [pid 6687] <... mount resumed>) = 0 [pid 6690] <... write resumed>) = 2097152 [pid 6692] <... memfd_create resumed>) = 3 [pid 6687] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6690] munmap(0x7fe7bae00000, 138412032 [pid 6692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6687] <... openat resumed>) = 3 [ 153.413780][ T6688] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6687] chdir("./file0" [pid 6690] <... munmap resumed>) = 0 [pid 6687] <... chdir resumed>) = 0 [pid 6687] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6690] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6687] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6690] <... openat resumed>) = 4 [pid 6687] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6690] ioctl(4, LOOP_SET_FD, 3 [pid 6688] <... mount resumed>) = 0 [pid 6687] <... futex resumed>) = 1 [pid 6685] <... futex resumed>) = 0 [pid 6687] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6685] exit_group(0) = ? [pid 6687] <... futex resumed>) = ? [pid 6688] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6688] chdir("./file0" [pid 6692] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6688] <... chdir resumed>) = 0 [pid 6687] +++ exited with 0 +++ [pid 6685] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6685, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6688] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6688] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... restart_syscall resumed>) = 0 [pid 6688] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6688] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 6686] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./160/binderfs" [pid 6686] exit_group(0 [pid 5062] <... unlink resumed>) = 0 [pid 6688] <... futex resumed>) = ? [pid 6686] <... exit_group resumed>) = ? [pid 5062] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6688] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6690] <... ioctl resumed>) = 0 [pid 5062] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6690] close(3 [pid 5062] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6690] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6690] close(4 [pid 6686] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] close(3 [pid 6690] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6686, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 6690] mkdir("./file0", 0777 [pid 5062] newfstatat(4, "", [pid 5059] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 6690] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(4, [pid 5063] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4 [pid 5063] newfstatat(AT_FDCWD, "./159/binderfs", [pid 5062] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] rmdir("./160/file0" [pid 5063] unlink("./159/binderfs" [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] getdents64(3, ./strace-static-x86_64: Process 6693 attached [pid 6690] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6693 [pid 6693] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5063] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6693] chdir("./163" [pid 5063] <... umount2 resumed>) = 0 [ 153.496212][ T6690] loop1: detected capacity change from 0 to 4096 [pid 6693] <... chdir resumed>) = 0 [pid 6692] <... write resumed>) = 2097152 [pid 5063] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 6693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6692] munmap(0x7fe7bae00000, 138412032 [pid 6693] <... prctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./160") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./159/file0", [pid 5062] mkdir("./161", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6692] <... munmap resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6693] setpgid(0, 0) = 0 [pid 6692] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6692] <... openat resumed>) = 4 [pid 5063] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6692] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6693] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 6693] write(3, "1000", 4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6693] <... write resumed>) = 4 [pid 6692] <... ioctl resumed>) = 0 [pid 5063] close(4 [pid 6693] close(3 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./159/file0" [pid 6693] <... close resumed>) = 0 [pid 6693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6693] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... rmdir resumed>) = 0 [pid 6693] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6693] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] getdents64(3, [pid 6693] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6693] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6692] close(3 [pid 5063] close(3 [pid 6693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6692] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 6694 attached [pid 6692] close(4 [pid 5063] rmdir("./159" [pid 6694] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6693] <... clone3 resumed> => {parent_tid=[6694]}, 88) = 6694 [pid 6692] <... close resumed>) = 0 [pid 6694] <... rseq resumed>) = 0 [pid 6693] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... rmdir resumed>) = 0 [pid 6694] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6694] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] mkdir("./160", 0777 [pid 6694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6693] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6692] mkdir("./file0", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 6692] <... mkdir resumed>) = 0 [pid 6692] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 153.546046][ T6690] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 153.565638][ T6692] loop2: detected capacity change from 0 to 4096 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6694] memfd_create("syzkaller", 0 [pid 6690] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6694] <... memfd_create resumed>) = 3 [pid 6690] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6690] <... openat resumed>) = 3 [pid 6690] chdir("./file0") = 0 [pid 6690] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6690] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] <... futex resumed>) = 0 [pid 6689] exit_group(0) = ? [pid 6690] +++ exited with 0 +++ [pid 6689] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6689, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5060] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6694] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./160/binderfs") = 0 [ 153.598493][ T6692] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6695 [pid 5060] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6696 attached ./strace-static-x86_64: Process 6695 attached [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] set_robust_list(0x55558e6e36a0, 24 [pid 6695] set_robust_list(0x55558e6e36a0, 24 [pid 5060] newfstatat(AT_FDCWD, "./160/file0", [pid 6696] <... set_robust_list resumed>) = 0 [pid 6696] chdir("./160" [pid 6695] <... set_robust_list resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6696] <... chdir resumed>) = 0 [pid 6695] chdir("./161" [pid 5060] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6696] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6695] <... chdir resumed>) = 0 [pid 6696] <... prctl resumed>) = 0 [pid 6695] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] setpgid(0, 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6696 [pid 5060] openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6696] <... setpgid resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] newfstatat(4, "", [pid 6696] <... openat resumed>) = 3 [pid 6695] <... prctl resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 6696] write(3, "1000", 4 [pid 6695] setpgid(0, 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6696] <... write resumed>) = 4 [pid 6695] <... setpgid resumed>) = 0 [pid 6696] close(3 [pid 6695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] getdents64(4, [pid 6696] <... close resumed>) = 0 [pid 6695] <... openat resumed>) = 3 [pid 6696] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6696] <... symlink resumed>) = 0 [pid 6695] write(3, "1000", 4 [pid 5060] close(4 [pid 6696] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] <... write resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 6696] <... futex resumed>) = 0 [pid 6695] close(3 [pid 5060] rmdir("./160/file0" [pid 6696] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6695] <... close resumed>) = 0 [pid 6696] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6695] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... rmdir resumed>) = 0 [pid 6696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6695] <... symlink resumed>) = 0 [pid 6696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6695] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(3, [pid 6696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6695] <... futex resumed>) = 0 [pid 6692] <... mount resumed>) = 0 [pid 6696] <... mmap resumed>) = 0x7fe7c3226000 [pid 6692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 6696] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6695] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6692] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 6696] <... mprotect resumed>) = 0 [pid 6695] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6692] chdir("./file0" [pid 6696] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6695] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6692] <... chdir resumed>) = 0 [pid 6696] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6692] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] rmdir("./160" [pid 6696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6695] <... mmap resumed>) = 0x7fe7c3226000 [pid 6694] <... write resumed>) = 2097152 [pid 6692] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6697 attached [pid 6695] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6694] munmap(0x7fe7bae00000, 138412032 [pid 6692] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... rmdir resumed>) = 0 [pid 6697] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6696] <... clone3 resumed> => {parent_tid=[6697]}, 88) = 6697 [pid 6695] <... mprotect resumed>) = 0 [pid 6692] <... futex resumed>) = 1 [pid 6691] <... futex resumed>) = 0 [pid 6697] <... rseq resumed>) = 0 [pid 6696] rt_sigprocmask(SIG_SETMASK, [], [pid 6695] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6692] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6691] exit_group(0 [pid 5060] mkdir("./161", 0777 [pid 6697] set_robust_list(0x7fe7c32469a0, 24 [pid 6692] <... futex resumed>) = ? [pid 6691] <... exit_group resumed>) = ? [pid 6697] <... set_robust_list resumed>) = 0 [pid 6696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6695] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 6697] rt_sigprocmask(SIG_SETMASK, [], [pid 6696] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6698 attached [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6696] <... futex resumed>) = 0 [pid 6694] <... munmap resumed>) = 0 [pid 6698] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6696] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... openat resumed>) = 3 [pid 6698] <... rseq resumed>) = 0 [pid 6695] <... clone3 resumed> => {parent_tid=[6698]}, 88) = 6698 [pid 6694] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6692] +++ exited with 0 +++ [pid 6691] +++ exited with 0 +++ [pid 6697] memfd_create("syzkaller", 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6698] set_robust_list(0x7fe7c32469a0, 24 [pid 6697] <... memfd_create resumed>) = 3 [pid 6695] rt_sigprocmask(SIG_SETMASK, [], [pid 6694] <... openat resumed>) = 4 [pid 6698] <... set_robust_list resumed>) = 0 [pid 6697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6691, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6698] rt_sigprocmask(SIG_SETMASK, [], [pid 6697] <... mmap resumed>) = 0x7fe7bae00000 [pid 6695] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] ioctl(4, LOOP_SET_FD, 3 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6695] <... futex resumed>) = 0 [pid 6695] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6698] memfd_create("syzkaller", 0 [pid 6694] <... ioctl resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 6698] <... memfd_create resumed>) = 3 [pid 6694] close(3 [pid 6698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6694] <... close resumed>) = 0 [pid 6698] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6694] close(4) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6694] mkdir("./file0", 0777 [pid 5061] newfstatat(3, "", [pid 6694] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6694] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./163/binderfs") = 0 [pid 5061] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6697] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./163/file0", [pid 5060] <... ioctl resumed>) = 0 [pid 6698] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [ 153.732984][ T6694] loop0: detected capacity change from 0 to 4096 [ 153.762822][ T6694] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6699 attached [pid 6699] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... openat resumed>) = 4 [pid 6699] <... set_robust_list resumed>) = 0 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6699] chdir("./161" [pid 5061] getdents64(4, [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6699 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6699] <... chdir resumed>) = 0 [pid 6699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6699] <... prctl resumed>) = 0 [pid 6699] setpgid(0, 0 [pid 5061] close(4) = 0 [pid 6699] <... setpgid resumed>) = 0 [pid 5061] rmdir("./163/file0" [pid 6699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... rmdir resumed>) = 0 [pid 6699] <... openat resumed>) = 3 [pid 6699] write(3, "1000", 4 [pid 5061] getdents64(3, [pid 6699] <... write resumed>) = 4 [pid 6699] close(3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6694] <... mount resumed>) = 0 [pid 6699] <... close resumed>) = 0 [pid 6698] <... write resumed>) = 2097152 [pid 6697] <... write resumed>) = 2097152 [pid 6694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] close(3 [pid 6699] symlink("/dev/binderfs", "./binderfs" [pid 6698] munmap(0x7fe7bae00000, 138412032 [pid 6697] munmap(0x7fe7bae00000, 138412032 [pid 6694] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 6699] <... symlink resumed>) = 0 [pid 6694] chdir("./file0" [pid 5061] rmdir("./163" [pid 6699] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... chdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6699] <... futex resumed>) = 0 [pid 6694] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] mkdir("./164", 0777 [pid 6699] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6694] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... mkdir resumed>) = 0 [pid 6699] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6694] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6694] <... futex resumed>) = 1 [pid 6693] <... futex resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6693] exit_group(0 [pid 6699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6693] <... exit_group resumed>) = ? [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6699] <... mmap resumed>) = 0x7fe7c3226000 [pid 6699] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6699] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6698] <... munmap resumed>) = 0 [pid 6697] <... munmap resumed>) = 0 [pid 6694] +++ exited with 0 +++ [pid 6693] +++ exited with 0 +++ [pid 6699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6698] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6693, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 6698] <... openat resumed>) = 4 [pid 6699] <... clone3 resumed> => {parent_tid=[6700]}, 88) = 6700 [pid 6698] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6700 attached [pid 6699] rt_sigprocmask(SIG_SETMASK, [], [pid 6697] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6700] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6700] set_robust_list(0x7fe7c32469a0, 24 [pid 6697] <... openat resumed>) = 4 [pid 6700] <... set_robust_list resumed>) = 0 [pid 6697] ioctl(4, LOOP_SET_FD, 3 [pid 6700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6698] <... ioctl resumed>) = 0 [pid 5059] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6699] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6699] <... futex resumed>) = 0 [pid 6698] close(3 [pid 5059] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6699] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6698] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6698] close(4 [pid 5059] newfstatat(3, "", [pid 6698] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6698] mkdir("./file0", 0777 [pid 5059] getdents64(3, [pid 6700] memfd_create("syzkaller", 0 [pid 6698] <... mkdir resumed>) = 0 [pid 6697] <... ioctl resumed>) = 0 [pid 6700] <... memfd_create resumed>) = 3 [pid 6697] close(3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6698] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6697] <... close resumed>) = 0 [pid 5059] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6700] <... mmap resumed>) = 0x7fe7bae00000 [pid 6697] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./163/binderfs" [pid 6697] <... close resumed>) = 0 [pid 6697] mkdir("./file0", 0777 [pid 5059] <... unlink resumed>) = 0 [pid 6697] <... mkdir resumed>) = 0 [pid 5059] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6697] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6700] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] close(3 [pid 5059] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6701 attached [pid 6701] set_robust_list(0x55558e6e36a0, 24 [pid 5059] openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6701] <... set_robust_list resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6701 [ 153.885050][ T6698] loop3: detected capacity change from 0 to 4096 [ 153.887228][ T6697] loop4: detected capacity change from 0 to 4096 [ 153.905935][ T6698] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 153.923874][ T6697] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5059] newfstatat(4, "", [pid 6701] chdir("./164" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6701] <... chdir resumed>) = 0 [pid 6701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] getdents64(4, [pid 6701] <... prctl resumed>) = 0 [pid 6701] setpgid(0, 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6701] <... setpgid resumed>) = 0 [pid 5059] getdents64(4, [pid 6701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./163/file0") = 0 [pid 6701] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 6698] <... mount resumed>) = 0 [pid 6701] write(3, "1000", 4 [pid 6698] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6698] <... openat resumed>) = 3 [pid 6701] <... write resumed>) = 4 [pid 6701] close(3 [pid 6698] chdir("./file0" [pid 5059] close(3 [pid 6701] <... close resumed>) = 0 [pid 6698] <... chdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6698] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] rmdir("./163" [pid 6698] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6701] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... rmdir resumed>) = 0 [pid 6698] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] <... symlink resumed>) = 0 [pid 6698] <... futex resumed>) = 1 [pid 6695] <... futex resumed>) = 0 [pid 6698] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6701] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] exit_group(0 [pid 5059] mkdir("./164", 0777 [pid 6701] <... futex resumed>) = 0 [pid 6698] <... futex resumed>) = ? [pid 6695] <... exit_group resumed>) = ? [pid 6701] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6698] +++ exited with 0 +++ [pid 6695] +++ exited with 0 +++ [pid 5059] <... mkdir resumed>) = 0 [pid 6701] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6695, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6700] <... write resumed>) = 2097152 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6701] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... openat resumed>) = 3 [pid 6701] <... mprotect resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6701] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6701] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] getdents64(3, [pid 6701] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6700] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6702 attached [pid 6701] <... clone3 resumed> => {parent_tid=[6702]}, 88) = 6702 [pid 6702] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6701] rt_sigprocmask(SIG_SETMASK, [], [pid 6700] <... munmap resumed>) = 0 [pid 5062] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6701] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] <... rseq resumed>) = 0 [pid 6702] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6702] <... set_robust_list resumed>) = 0 [pid 6701] <... futex resumed>) = 0 [pid 6702] rt_sigprocmask(SIG_SETMASK, [], [pid 6701] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] newfstatat(AT_FDCWD, "./161/binderfs", [pid 6702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./161/binderfs") = 0 [pid 6702] memfd_create("syzkaller", 0 [pid 5062] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6702] <... memfd_create resumed>) = 3 [pid 6697] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6697] chdir("./file0" [pid 5062] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6700] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6697] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6700] <... openat resumed>) = 4 [pid 6697] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./161/file0", [pid 6702] <... mmap resumed>) = 0x7fe7bae00000 [pid 6697] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6700] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6700] <... ioctl resumed>) = 0 [pid 6697] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6697] <... futex resumed>) = 1 [pid 5062] openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6697] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6696] <... futex resumed>) = 0 [pid 5062] getdents64(4, [pid 6696] exit_group(0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6697] <... futex resumed>) = ? [pid 6696] <... exit_group resumed>) = ? [pid 5062] getdents64(4, [pid 6697] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6696] +++ exited with 0 +++ [pid 5062] close(4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6696, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./161/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [ 154.031558][ T6700] loop1: detected capacity change from 0 to 4096 [pid 5062] rmdir("./161" [pid 6700] close(3 [pid 5063] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6700] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6700] close(4) = 0 [pid 6700] mkdir("./file0", 0777 [pid 5062] mkdir("./162", 0777 [pid 6702] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 6700] <... mkdir resumed>) = 0 [pid 6700] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6703 attached [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6703 [pid 5063] getdents64(3, [pid 6703] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6703] chdir("./162") = 0 [pid 6703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6703] setpgid(0, 0) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6703] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./160/binderfs", [pid 5059] <... ioctl resumed>) = 0 [pid 6703] write(3, "1000", 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6703] <... write resumed>) = 4 [pid 5063] unlink("./160/binderfs" [pid 5059] close(3 [pid 6703] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6703] <... close resumed>) = 0 [pid 5063] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6703] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6704 attached ) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6704 [pid 6704] set_robust_list(0x55558e6e36a0, 24 [pid 6703] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... umount2 resumed>) = 0 [pid 6704] <... set_robust_list resumed>) = 0 [pid 6703] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6703] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [ 154.075081][ T6700] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6704] chdir("./164" [pid 6703] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6703] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6704] <... chdir resumed>) = 0 [pid 6703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(AT_FDCWD, "./160/file0", [pid 6704] <... prctl resumed>) = 0 [pid 6703] <... clone3 resumed> => {parent_tid=[6705]}, 88) = 6705 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6705 attached [pid 6704] setpgid(0, 0 [pid 6703] rt_sigprocmask(SIG_SETMASK, [], [pid 6705] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6704] <... setpgid resumed>) = 0 [pid 6703] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6705] <... rseq resumed>) = 0 [pid 6703] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] set_robust_list(0x7fe7c32469a0, 24 [pid 6704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6703] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6705] <... set_robust_list resumed>) = 0 [pid 6704] <... openat resumed>) = 3 [pid 6703] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6705] rt_sigprocmask(SIG_SETMASK, [], [pid 6704] write(3, "1000", 4 [pid 5063] <... openat resumed>) = 4 [pid 6705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6704] <... write resumed>) = 4 [pid 6705] memfd_create("syzkaller", 0 [pid 6704] close(3 [pid 5063] newfstatat(4, "", [pid 6704] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6705] <... memfd_create resumed>) = 3 [pid 6704] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(4, [pid 6705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6704] <... symlink resumed>) = 0 [pid 6705] <... mmap resumed>) = 0x7fe7bae00000 [pid 6704] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6704] <... futex resumed>) = 0 [pid 5063] getdents64(4, [pid 6704] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6704] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] close(4 [pid 6704] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6700] <... mount resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6704] <... mmap resumed>) = 0x7fe7c3226000 [pid 6700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] rmdir("./160/file0" [pid 6700] <... openat resumed>) = 3 [pid 6700] chdir("./file0") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6700] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6702] <... write resumed>) = 2097152 [pid 6700] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6702] munmap(0x7fe7bae00000, 138412032 [pid 6700] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 6700] <... futex resumed>) = 1 [pid 6699] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6704] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6700] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6699] exit_group(0 [pid 5063] close(3 [pid 6704] <... mprotect resumed>) = 0 [pid 6700] <... futex resumed>) = ? [pid 6699] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 6704] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6702] <... munmap resumed>) = 0 [pid 6700] +++ exited with 0 +++ [pid 6699] +++ exited with 0 +++ [pid 5063] rmdir("./160" [pid 6704] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6699, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6704] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6702] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6706 attached [pid 6705] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6702] <... openat resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6706] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6704] <... clone3 resumed> => {parent_tid=[6706]}, 88) = 6706 [pid 6702] ioctl(4, LOOP_SET_FD, 3 [pid 5063] mkdir("./161", 0777 [pid 6706] <... rseq resumed>) = 0 [pid 6704] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6706] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6704] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(3, "", [pid 6704] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6704] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./161/binderfs" [pid 6706] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... unlink resumed>) = 0 [pid 6706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6706] memfd_create("syzkaller", 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6706] <... memfd_create resumed>) = 3 [pid 6705] <... write resumed>) = 2097152 [pid 6706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6702] <... ioctl resumed>) = 0 [pid 5060] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6706] <... mmap resumed>) = 0x7fe7bae00000 [pid 6705] munmap(0x7fe7bae00000, 138412032 [pid 6702] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6702] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./161/file0", [pid 6702] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6702] <... close resumed>) = 0 [pid 5060] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6702] mkdir("./file0", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6702] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6702] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./161/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./161" [pid 6705] <... munmap resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6705] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5060] mkdir("./162", 0777 [ 154.212126][ T6702] loop2: detected capacity change from 0 to 4096 [ 154.243503][ T6702] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6705] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6705] <... ioctl resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6706] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6705] close(3) = 0 [pid 6705] close(4) = 0 [pid 6705] mkdir("./file0", 0777) = 0 [ 154.268448][ T6705] loop3: detected capacity change from 0 to 4096 [pid 6705] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6707 ./strace-static-x86_64: Process 6707 attached [pid 6707] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6702] <... mount resumed>) = 0 [pid 6707] chdir("./161") = 0 [pid 6702] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6706] <... write resumed>) = 2097152 [pid 6702] <... openat resumed>) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 6706] munmap(0x7fe7bae00000, 138412032 [pid 5060] close(3 [pid 6707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6702] chdir("./file0" [pid 5060] <... close resumed>) = 0 [pid 6707] <... prctl resumed>) = 0 [pid 6702] <... chdir resumed>) = 0 [pid 6707] setpgid(0, 0 [pid 6702] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6707] <... setpgid resumed>) = 0 [pid 6702] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6702] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6708 attached [pid 6707] <... openat resumed>) = 3 [pid 6702] <... futex resumed>) = 1 [pid 6701] <... futex resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6708 [ 154.338758][ T6705] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6708] set_robust_list(0x55558e6e36a0, 24 [pid 6707] write(3, "1000", 4 [pid 6702] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6701] exit_group(0 [pid 6708] <... set_robust_list resumed>) = 0 [pid 6707] <... write resumed>) = 4 [pid 6706] <... munmap resumed>) = 0 [pid 6702] <... futex resumed>) = ? [pid 6701] <... exit_group resumed>) = ? [pid 6708] chdir("./162" [pid 6707] close(3 [pid 6708] <... chdir resumed>) = 0 [pid 6707] <... close resumed>) = 0 [pid 6706] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6708] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6707] symlink("/dev/binderfs", "./binderfs" [pid 6706] <... openat resumed>) = 4 [pid 6708] <... prctl resumed>) = 0 [pid 6707] <... symlink resumed>) = 0 [pid 6706] ioctl(4, LOOP_SET_FD, 3 [pid 6708] setpgid(0, 0 [pid 6707] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6702] +++ exited with 0 +++ [pid 6701] +++ exited with 0 +++ [pid 6708] <... setpgid resumed>) = 0 [pid 6707] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6706] <... ioctl resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6701, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6707] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6706] close(3 [pid 6708] <... openat resumed>) = 3 [pid 6707] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6706] <... close resumed>) = 0 [pid 6708] write(3, "1000", 4 [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6706] close(4 [pid 5061] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6708] <... write resumed>) = 4 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6706] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6708] close(3 [pid 6707] <... mmap resumed>) = 0x7fe7c3226000 [pid 6706] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6708] <... close resumed>) = 0 [pid 6707] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... openat resumed>) = 3 [pid 6708] symlink("/dev/binderfs", "./binderfs" [pid 6707] <... mprotect resumed>) = 0 [pid 6706] <... mkdir resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 6708] <... symlink resumed>) = 0 [pid 6707] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6708] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6706] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] getdents64(3, [pid 6707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6709 attached [pid 6708] <... futex resumed>) = 0 [pid 5061] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6709] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6707] <... clone3 resumed> => {parent_tid=[6709]}, 88) = 6709 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6709] <... rseq resumed>) = 0 [ 154.381842][ T6706] loop0: detected capacity change from 0 to 4096 [pid 6707] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] newfstatat(AT_FDCWD, "./164/binderfs", [pid 6709] set_robust_list(0x7fe7c32469a0, 24 [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6709] <... set_robust_list resumed>) = 0 [pid 6707] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] unlink("./164/binderfs" [pid 6709] rt_sigprocmask(SIG_SETMASK, [], [pid 6707] <... futex resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6707] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6709] memfd_create("syzkaller", 0 [pid 6708] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6705] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6709] <... memfd_create resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6708] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./164/file0", [pid 6708] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6705] <... openat resumed>) = 3 [pid 6709] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6705] chdir("./file0" [pid 5061] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6708] <... mmap resumed>) = 0x7fe7c3226000 [pid 6705] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6708] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6705] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 6708] <... mprotect resumed>) = 0 [pid 6705] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(4, "", [pid 6708] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6705] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6708] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6705] <... futex resumed>) = 1 [pid 6703] <... futex resumed>) = 0 [pid 6708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6705] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] exit_group(0 [pid 5061] getdents64(4, [pid 6705] <... futex resumed>) = ? [pid 6703] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6710 attached [pid 6708] <... clone3 resumed> => {parent_tid=[6710]}, 88) = 6710 [pid 6705] +++ exited with 0 +++ [pid 6703] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6710] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6708] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6703, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] getdents64(4, [pid 6710] <... rseq resumed>) = 0 [pid 6708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6710] set_robust_list(0x7fe7c32469a0, 24 [pid 6708] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6710] <... set_robust_list resumed>) = 0 [pid 6708] <... futex resumed>) = 0 [pid 5061] close(4 [pid 6710] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... close resumed>) = 0 [pid 5062] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./164/file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 6710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./162/binderfs") = 0 [ 154.427659][ T6706] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] getdents64(3, [pid 5062] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6709] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6710] memfd_create("syzkaller", 0 [pid 6706] <... mount resumed>) = 0 [pid 5061] close(3 [pid 6706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6710] <... memfd_create resumed>) = 3 [pid 6706] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 6710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6710] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6706] chdir("./file0") = 0 [pid 6706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6706] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6704] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./164" [pid 6706] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6704] exit_group(0 [pid 5062] newfstatat(AT_FDCWD, "./162/file0", [pid 6706] <... futex resumed>) = ? [pid 6704] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] mkdir("./165", 0777 [pid 5062] openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6706] +++ exited with 0 +++ [pid 6704] +++ exited with 0 +++ [pid 5062] <... openat resumed>) = 4 [pid 5061] <... mkdir resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6704, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5059] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6709] <... write resumed>) = 2097152 [pid 5062] getdents64(4, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(4 [pid 6710] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6709] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5062] rmdir("./162/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5062] getdents64(3, [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./164/binderfs", [pid 5062] rmdir("./162" [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./164/binderfs" [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6709] <... munmap resumed>) = 0 [pid 5059] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6709] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5062] mkdir("./163", 0777 [pid 6709] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... mkdir resumed>) = 0 [pid 6710] <... write resumed>) = 2097152 [pid 6709] <... ioctl resumed>) = 0 [pid 5059] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6710] munmap(0x7fe7bae00000, 138412032 [pid 6709] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6709] <... close resumed>) = 0 [pid 6709] close(4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5059] newfstatat(AT_FDCWD, "./164/file0", [pid 6709] <... close resumed>) = 0 [pid 6709] mkdir("./file0", 0777 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6710] <... munmap resumed>) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6710] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6709] <... mkdir resumed>) = 0 [pid 5059] getdents64(4, [pid 6710] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6710] ioctl(4, LOOP_SET_FD, 3 [pid 6709] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] close(4) = 0 [pid 5059] rmdir("./164/file0") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./164") = 0 [pid 5059] mkdir("./165", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] <... ioctl resumed>) = 0 [pid 6710] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 6710] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6710] <... close resumed>) = 0 [ 154.544315][ T6709] loop4: detected capacity change from 0 to 4096 [ 154.576190][ T6710] loop1: detected capacity change from 0 to 4096 [ 154.583664][ T6709] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6710] close(4) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6711 [pid 6710] mkdir("./file0", 0777./strace-static-x86_64: Process 6711 attached [pid 6711] set_robust_list(0x55558e6e36a0, 24 [pid 6710] <... mkdir resumed>) = 0 [pid 6710] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6711] <... set_robust_list resumed>) = 0 [pid 6711] chdir("./165") = 0 [pid 6711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6711] setpgid(0, 0) = 0 [pid 6711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6711] write(3, "1000", 4) = 4 [pid 6711] close(3) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6711] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6711] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5062] close(3 [pid 6711] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... close resumed>) = 0 [pid 6711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... ioctl resumed>) = 0 [pid 6711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 ./strace-static-x86_64: Process 6712 attached [pid 6711] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6712 [pid 6712] set_robust_list(0x55558e6e36a0, 24 [pid 6711] <... mprotect resumed>) = 0 [pid 6711] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6712] <... set_robust_list resumed>) = 0 [pid 6712] chdir("./163" [pid 6711] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] close(3 [pid 6712] <... chdir resumed>) = 0 [pid 6711] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6712] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... close resumed>) = 0 [pid 6712] <... prctl resumed>) = 0 [pid 6711] <... clone3 resumed> => {parent_tid=[6713]}, 88) = 6713 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6713 attached [pid 6712] setpgid(0, 0 [pid 6711] rt_sigprocmask(SIG_SETMASK, [], [pid 6713] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6713] <... rseq resumed>) = 0 [pid 6712] <... setpgid resumed>) = 0 [pid 6711] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6714 attached [pid 6713] set_robust_list(0x7fe7c32469a0, 24 [pid 6712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6711] <... futex resumed>) = 0 [pid 6714] set_robust_list(0x55558e6e36a0, 24 [pid 6713] <... set_robust_list resumed>) = 0 [pid 6712] <... openat resumed>) = 3 [pid 6711] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6714] <... set_robust_list resumed>) = 0 [pid 6713] rt_sigprocmask(SIG_SETMASK, [], [pid 6712] write(3, "1000", 4 [pid 6714] chdir("./165" [pid 6713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] <... write resumed>) = 4 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6714 [pid 6712] close(3 [pid 6714] <... chdir resumed>) = 0 [pid 6712] <... close resumed>) = 0 [pid 6714] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6712] symlink("/dev/binderfs", "./binderfs" [pid 6714] <... prctl resumed>) = 0 [pid 6713] memfd_create("syzkaller", 0 [pid 6712] <... symlink resumed>) = 0 [pid 6714] setpgid(0, 0) = 0 [pid 6712] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6712] <... futex resumed>) = 0 [ 154.635090][ T6710] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6714] <... openat resumed>) = 3 [pid 6712] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6712] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6709] <... mount resumed>) = 0 [pid 6712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6712] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6713] <... memfd_create resumed>) = 3 [pid 6712] <... mprotect resumed>) = 0 [pid 6709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6714] write(3, "1000", 4 [pid 6713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6712] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6714] <... write resumed>) = 4 [pid 6713] <... mmap resumed>) = 0x7fe7bae00000 [pid 6712] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6709] <... openat resumed>) = 3 [pid 6714] close(3 [pid 6712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6709] chdir("./file0" [pid 6714] <... close resumed>) = 0 [pid 6709] <... chdir resumed>) = 0 [pid 6714] symlink("/dev/binderfs", "./binderfs" [pid 6709] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6715 attached [pid 6714] <... symlink resumed>) = 0 [pid 6712] <... clone3 resumed> => {parent_tid=[6715]}, 88) = 6715 [pid 6709] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6715] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6714] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... rseq resumed>) = 0 [pid 6714] <... futex resumed>) = 0 [pid 6709] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] set_robust_list(0x7fe7c32469a0, 24 [pid 6714] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6712] rt_sigprocmask(SIG_SETMASK, [], [pid 6715] <... set_robust_list resumed>) = 0 [pid 6714] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6709] <... futex resumed>) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6715] rt_sigprocmask(SIG_SETMASK, [], [pid 6714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6712] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] exit_group(0 [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] <... futex resumed>) = 0 [pid 6707] <... exit_group resumed>) = ? [pid 6715] memfd_create("syzkaller", 0 [pid 6714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6712] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6715] <... memfd_create resumed>) = 3 [pid 6714] <... mmap resumed>) = 0x7fe7c3226000 [pid 6715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6714] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6715] <... mmap resumed>) = 0x7fe7bae00000 [pid 6714] <... mprotect resumed>) = 0 [pid 6714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6709] +++ exited with 0 +++ [pid 6707] +++ exited with 0 +++ [pid 6714] <... clone3 resumed> => {parent_tid=[6716]}, 88) = 6716 [pid 6714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6714] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6707, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6714] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6716 attached [pid 6716] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 5063] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6716] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6716] <... set_robust_list resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6716] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... openat resumed>) = 3 [pid 6716] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(3, "", [pid 6716] memfd_create("syzkaller", 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6716] <... memfd_create resumed>) = 3 [pid 5063] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6716] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./161/binderfs") = 0 [pid 5063] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./161/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./161" [pid 6710] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6713] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6710] <... openat resumed>) = 3 [pid 5063] mkdir("./162", 0777) = 0 [pid 6710] chdir("./file0") = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6710] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6710] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6710] <... futex resumed>) = 1 [pid 6708] <... futex resumed>) = 0 [pid 6716] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6710] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6708] exit_group(0 [pid 6710] <... futex resumed>) = ? [pid 6708] <... exit_group resumed>) = ? [pid 6713] <... write resumed>) = 2097152 [pid 6710] +++ exited with 0 +++ [pid 6708] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6708, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6713] munmap(0x7fe7bae00000, 138412032 [pid 6716] <... write resumed>) = 2097152 [pid 5060] <... restart_syscall resumed>) = 0 [pid 6713] <... munmap resumed>) = 0 [pid 5060] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6716] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./162/binderfs" [pid 6713] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... unlink resumed>) = 0 [pid 6713] <... openat resumed>) = 4 [pid 5060] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6716] <... munmap resumed>) = 0 [pid 6713] ioctl(4, LOOP_SET_FD, 3 [pid 6716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6715] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6717 ./strace-static-x86_64: Process 6717 attached [pid 6717] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6717] chdir("./162" [pid 6716] ioctl(4, LOOP_SET_FD, 3 [pid 6717] <... chdir resumed>) = 0 [pid 6717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6717] setpgid(0, 0 [pid 6713] <... ioctl resumed>) = 0 [pid 6717] <... setpgid resumed>) = 0 [pid 6713] close(3 [pid 6717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6713] <... close resumed>) = 0 [pid 6717] <... openat resumed>) = 3 [pid 6713] close(4) = 0 [pid 6717] write(3, "1000", 4 [pid 6713] mkdir("./file0", 0777 [pid 6717] <... write resumed>) = 4 [pid 6717] close(3 [pid 6713] <... mkdir resumed>) = 0 [pid 6717] <... close resumed>) = 0 [pid 6717] symlink("/dev/binderfs", "./binderfs" [pid 6713] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6717] <... symlink resumed>) = 0 [pid 6717] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = 0 [pid 6715] munmap(0x7fe7bae00000, 138412032 [pid 5060] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6716] <... ioctl resumed>) = 0 [pid 6717] <... futex resumed>) = 0 [pid 6717] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6717] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6715] <... munmap resumed>) = 0 [pid 6716] close(3 [pid 6717] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6716] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6717] <... mprotect resumed>) = 0 [pid 6716] close(4 [pid 5060] newfstatat(AT_FDCWD, "./162/file0", [pid 6717] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6716] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6717] <... clone3 resumed> => {parent_tid=[6718]}, 88) = 6718 [pid 6716] mkdir("./file0", 0777 [pid 5060] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6717] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6716] <... mkdir resumed>) = 0 [pid 6717] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6717] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6718 attached [pid 6716] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6715] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... openat resumed>) = 4 [pid 6718] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5060] newfstatat(4, "", [pid 6718] <... rseq resumed>) = 0 [pid 6718] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6718] <... set_robust_list resumed>) = 0 [ 154.846342][ T6713] loop2: detected capacity change from 0 to 4096 [ 154.864663][ T6716] loop0: detected capacity change from 0 to 4096 [ 154.878044][ T6713] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6718] memfd_create("syzkaller", 0) = 3 [pid 6718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6715] <... openat resumed>) = 4 [pid 5060] getdents64(4, [pid 6715] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./162/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./162" [pid 6715] <... ioctl resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./163", 0777 [pid 6715] close(3 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6715] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6715] close(4) = 0 [pid 6715] mkdir("./file0", 0777) = 0 [ 154.900975][ T6716] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 154.914277][ T6715] loop3: detected capacity change from 0 to 4096 [pid 6715] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6713] <... mount resumed>) = 0 [pid 6718] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6713] chdir("./file0") = 0 [pid 6713] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6713] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6713] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6711] <... futex resumed>) = 0 [pid 6711] exit_group(0) = ? [pid 6713] <... futex resumed>) = ? [pid 6713] +++ exited with 0 +++ [ 154.953187][ T6715] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6711] +++ exited with 0 +++ [pid 5060] <... ioctl resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6711, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] close(3 [pid 6718] <... write resumed>) = 2097152 [pid 6718] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6719 [pid 5061] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6719 attached ) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6719] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 6719] chdir("./163" [pid 6716] <... mount resumed>) = 0 [pid 6716] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6719] <... chdir resumed>) = 0 [pid 6716] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6718] <... munmap resumed>) = 0 [pid 6716] chdir("./file0" [pid 5061] getdents64(3, [pid 6719] <... prctl resumed>) = 0 [pid 6718] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6716] <... chdir resumed>) = 0 [pid 6715] <... mount resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6718] <... openat resumed>) = 4 [pid 6716] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6719] setpgid(0, 0 [pid 6716] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6719] <... setpgid resumed>) = 0 [pid 6718] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6716] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6715] <... openat resumed>) = 3 [pid 5061] unlink("./165/binderfs" [pid 6718] <... ioctl resumed>) = 0 [pid 6716] <... futex resumed>) = 1 [pid 6714] <... futex resumed>) = 0 [pid 6719] <... openat resumed>) = 3 [pid 6718] close(3 [pid 6716] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] chdir("./file0" [pid 6714] exit_group(0 [pid 6719] write(3, "1000", 4 [pid 6718] <... close resumed>) = 0 [pid 6716] <... futex resumed>) = ? [pid 6715] <... chdir resumed>) = 0 [pid 6714] <... exit_group resumed>) = ? [pid 5061] <... unlink resumed>) = 0 [pid 6719] <... write resumed>) = 4 [pid 6716] +++ exited with 0 +++ [pid 6715] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6715] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6715] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] close(3 [pid 6718] close(4 [pid 6714] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6714, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6715] <... futex resumed>) = 1 [pid 6712] <... futex resumed>) = 0 [pid 5061] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6719] <... close resumed>) = 0 [pid 6712] exit_group(0 [pid 6719] symlink("/dev/binderfs", "./binderfs" [pid 6712] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 5061] newfstatat(AT_FDCWD, "./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 6715] +++ exited with 0 +++ [pid 6719] <... symlink resumed>) = 0 [pid 6712] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6712, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] newfstatat(AT_FDCWD, "./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6719] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5059] unlink("./165/binderfs" [pid 6719] <... futex resumed>) = 0 [pid 6718] mkdir("./file0", 0777 [pid 5062] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6719] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6718] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5059] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6719] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = 0 [pid 6719] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6718] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... openat resumed>) = 3 [pid 6719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] newfstatat(3, "", [pid 5061] getdents64(4, [pid 5059] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 155.060571][ T6718] loop4: detected capacity change from 0 to 4096 [pid 6719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6719] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./163/binderfs") = 0 [pid 5059] newfstatat(AT_FDCWD, "./165/file0", [pid 5061] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 6719] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] rmdir("./165/file0" [pid 6719] <... mprotect resumed>) = 0 [pid 5059] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5062] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6719] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 5059] <... openat resumed>) = 4 [pid 6719] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(4, "", [pid 6719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6720 attached [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6720] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5061] rmdir("./165" [pid 5059] getdents64(4, [pid 6720] <... rseq resumed>) = 0 [pid 6719] <... clone3 resumed> => {parent_tid=[6720]}, 88) = 6720 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6720] set_robust_list(0x7fe7c32469a0, 24 [pid 6719] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... rmdir resumed>) = 0 [pid 5059] close(4) = 0 [pid 6720] <... set_robust_list resumed>) = 0 [pid 5059] rmdir("./165/file0" [pid 6720] rt_sigprocmask(SIG_SETMASK, [], [pid 6719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6719] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./166", 0777 [pid 6719] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mkdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] getdents64(3, [pid 5062] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6720] memfd_create("syzkaller", 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] close(3) = 0 [pid 5059] rmdir("./165" [pid 6720] <... memfd_create resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... openat resumed>) = 4 [pid 6720] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] mkdir("./166", 0777 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] getdents64(4, [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./163/file0" [pid 6718] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 155.103129][ T6718] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6720] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6718] <... openat resumed>) = 3 [pid 5062] close(3 [pid 6718] chdir("./file0" [pid 5062] <... close resumed>) = 0 [pid 6718] <... chdir resumed>) = 0 [pid 6718] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] rmdir("./163" [pid 6718] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... rmdir resumed>) = 0 [pid 6718] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] mkdir("./164", 0777 [pid 6718] <... futex resumed>) = 1 [pid 6717] <... futex resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6718] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6717] exit_group(0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6718] <... futex resumed>) = ? [pid 6717] <... exit_group resumed>) = ? [pid 6718] +++ exited with 0 +++ [pid 6717] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6717, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./162/binderfs") = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(3 [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... close resumed>) = 0 [pid 5063] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6721 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4./strace-static-x86_64: Process 6722 attached ./strace-static-x86_64: Process 6721 attached ) = 0 [pid 6722] set_robust_list(0x55558e6e36a0, 24 [pid 6721] set_robust_list(0x55558e6e36a0, 24 [pid 6722] <... set_robust_list resumed>) = 0 [pid 6721] <... set_robust_list resumed>) = 0 [pid 5063] rmdir("./162/file0" [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6722 [pid 6722] chdir("./166") = 0 [pid 6721] chdir("./166" [pid 5063] <... rmdir resumed>) = 0 [pid 6722] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6721] <... chdir resumed>) = 0 [pid 6722] <... prctl resumed>) = 0 [pid 6722] setpgid(0, 0 [pid 6721] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(3, [pid 6722] <... setpgid resumed>) = 0 [pid 6721] <... prctl resumed>) = 0 [pid 6722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6721] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6721] <... setpgid resumed>) = 0 [pid 6722] <... openat resumed>) = 3 [pid 6722] write(3, "1000", 4 [pid 6721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6720] <... write resumed>) = 2097152 [pid 6722] <... write resumed>) = 4 [pid 5063] close(3 [pid 6722] close(3 [pid 6721] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 6722] <... close resumed>) = 0 [pid 6721] write(3, "1000", 4 [pid 5063] rmdir("./162" [pid 6722] symlink("/dev/binderfs", "./binderfs" [pid 6721] <... write resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 6721] close(3 [pid 6720] munmap(0x7fe7bae00000, 138412032 [pid 6722] <... symlink resumed>) = 0 [pid 6721] <... close resumed>) = 0 [pid 6720] <... munmap resumed>) = 0 [pid 5063] mkdir("./163", 0777 [pid 6722] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... mkdir resumed>) = 0 [pid 6721] <... symlink resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6722] <... futex resumed>) = 0 [pid 6722] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6722] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6721] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6720] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6723 attached [pid 6722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6721] <... futex resumed>) = 0 [pid 6720] <... openat resumed>) = 4 [pid 6722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6721] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6723] set_robust_list(0x55558e6e36a0, 24 [pid 6722] <... mmap resumed>) = 0x7fe7c3226000 [pid 6721] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6720] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6723 [pid 6723] <... set_robust_list resumed>) = 0 [pid 6722] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6721] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6722] <... mprotect resumed>) = 0 [pid 6721] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6723] chdir("./164" [pid 6722] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6723] <... chdir resumed>) = 0 [pid 6722] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6721] <... mmap resumed>) = 0x7fe7c3226000 [pid 6722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6721] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6724 attached [pid 6721] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6724] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6724] set_robust_list(0x7fe7c32469a0, 24 [pid 6722] <... clone3 resumed> => {parent_tid=[6724]}, 88) = 6724 [pid 6724] <... set_robust_list resumed>) = 0 [pid 6722] rt_sigprocmask(SIG_SETMASK, [], [pid 6721] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6724] rt_sigprocmask(SIG_SETMASK, [], [pid 6722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6721] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6722] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6725 attached [pid 6724] memfd_create("syzkaller", 0 [pid 6722] <... futex resumed>) = 0 [pid 6725] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6721] <... clone3 resumed> => {parent_tid=[6725]}, 88) = 6725 [pid 6725] <... rseq resumed>) = 0 [pid 6721] rt_sigprocmask(SIG_SETMASK, [], [pid 6725] set_robust_list(0x7fe7c32469a0, 24 [pid 6721] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6725] <... set_robust_list resumed>) = 0 [pid 6723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6721] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] rt_sigprocmask(SIG_SETMASK, [], [pid 6723] <... prctl resumed>) = 0 [pid 6722] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6721] <... futex resumed>) = 0 [pid 6720] <... ioctl resumed>) = 0 [pid 6725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6724] <... memfd_create resumed>) = 3 [pid 6723] setpgid(0, 0 [pid 6721] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6725] memfd_create("syzkaller", 0 [pid 6724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6723] <... setpgid resumed>) = 0 [pid 6720] close(3 [pid 6725] <... memfd_create resumed>) = 3 [pid 6724] <... mmap resumed>) = 0x7fe7bae00000 [pid 6723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6720] <... close resumed>) = 0 [pid 6723] <... openat resumed>) = 3 [pid 6720] close(4 [pid 6723] write(3, "1000", 4 [pid 6720] <... close resumed>) = 0 [pid 6723] <... write resumed>) = 4 [pid 6720] mkdir("./file0", 0777 [pid 6725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6723] close(3 [pid 6720] <... mkdir resumed>) = 0 [pid 6723] <... close resumed>) = 0 [pid 6720] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6723] symlink("/dev/binderfs", "./binderfs" [pid 6725] <... mmap resumed>) = 0x7fe7bae00000 [pid 6723] <... symlink resumed>) = 0 [pid 6723] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6723] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6723] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6723] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6723] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6726]}, 88) = 6726 [pid 6723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6723] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6723] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6726 attached [pid 6726] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6726] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6726] memfd_create("syzkaller", 0) = 3 [pid 6726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] <... ioctl resumed>) = 0 [pid 6725] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6720] <... mount resumed>) = 0 [pid 6720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6720] chdir("./file0") = 0 [ 155.290775][ T6720] loop1: detected capacity change from 0 to 4096 [ 155.308195][ T6720] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6720] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6724] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6720] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(3) = 0 [pid 6720] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6720] <... futex resumed>) = 1 [pid 6720] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6719] <... futex resumed>) = 0 [pid 6719] exit_group(0) = ? [pid 6720] <... futex resumed>) = ? [pid 6720] +++ exited with 0 +++ [pid 6719] +++ exited with 0 +++ ./strace-static-x86_64: Process 6727 attached [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6719, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6727] set_robust_list(0x55558e6e36a0, 24 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6727] <... set_robust_list resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6727] chdir("./163" [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6727 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6727] <... chdir resumed>) = 0 [pid 6726] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] getdents64(3, [pid 6727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6727] <... prctl resumed>) = 0 [pid 5060] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6727] setpgid(0, 0) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] newfstatat(AT_FDCWD, "./163/binderfs", [pid 6727] <... openat resumed>) = 3 [pid 6724] <... write resumed>) = 2097152 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6727] write(3, "1000", 4 [pid 5060] unlink("./163/binderfs" [pid 6727] <... write resumed>) = 4 [pid 6724] munmap(0x7fe7bae00000, 138412032 [pid 6727] close(3) = 0 [pid 6727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6727] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6724] <... munmap resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6727] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6724] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6727] <... mprotect resumed>) = 0 [pid 6724] <... openat resumed>) = 4 [pid 6727] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6724] ioctl(4, LOOP_SET_FD, 3 [pid 6725] <... write resumed>) = 2097152 [pid 6727] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./163/file0", ./strace-static-x86_64: Process 6728 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6728] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6725] munmap(0x7fe7bae00000, 138412032 [pid 5060] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6727] <... clone3 resumed> => {parent_tid=[6728]}, 88) = 6728 [pid 5060] openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6728] <... rseq resumed>) = 0 [pid 6727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6727] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] newfstatat(4, "", [pid 6728] <... set_robust_list resumed>) = 0 [pid 6727] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6728] rt_sigprocmask(SIG_SETMASK, [], [pid 6727] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] getdents64(4, [pid 6728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./163/file0" [pid 6728] memfd_create("syzkaller", 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 6724] <... ioctl resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6724] close(3 [pid 5060] close(3 [pid 6724] <... close resumed>) = 0 [pid 6724] close(4 [pid 5060] <... close resumed>) = 0 [pid 6725] <... munmap resumed>) = 0 [pid 6724] <... close resumed>) = 0 [pid 5060] rmdir("./163" [pid 6728] <... memfd_create resumed>) = 3 [pid 6725] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6724] mkdir("./file0", 0777 [pid 6728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6726] <... write resumed>) = 2097152 [pid 6725] <... openat resumed>) = 4 [pid 6724] <... mkdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6728] <... mmap resumed>) = 0x7fe7bae00000 [pid 6726] munmap(0x7fe7bae00000, 138412032 [pid 6725] ioctl(4, LOOP_SET_FD, 3 [pid 6724] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] mkdir("./164", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6726] <... munmap resumed>) = 0 [pid 6726] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 155.434690][ T6724] loop0: detected capacity change from 0 to 4096 [ 155.467091][ T6724] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 155.467409][ T6725] loop2: detected capacity change from 0 to 4096 [pid 6726] ioctl(4, LOOP_SET_FD, 3 [pid 6725] <... ioctl resumed>) = 0 [pid 6728] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6726] <... ioctl resumed>) = 0 [pid 6726] close(3 [pid 6725] close(3 [pid 6726] <... close resumed>) = 0 [pid 6726] close(4) = 0 [pid 6726] mkdir("./file0", 0777 [pid 6725] <... close resumed>) = 0 [pid 6724] <... mount resumed>) = 0 [pid 6725] close(4) = 0 [pid 6726] <... mkdir resumed>) = 0 [pid 6725] mkdir("./file0", 0777 [pid 6724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6726] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6725] <... mkdir resumed>) = 0 [pid 6724] <... openat resumed>) = 3 [pid 6724] chdir("./file0") = 0 [pid 6725] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6724] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6724] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6722] <... futex resumed>) = 0 [pid 6722] exit_group(0) = ? [ 155.499064][ T6726] loop3: detected capacity change from 0 to 4096 [ 155.538252][ T6725] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6724] <... futex resumed>) = ? [pid 5060] <... ioctl resumed>) = 0 [pid 6724] +++ exited with 0 +++ [pid 6722] +++ exited with 0 +++ [pid 6728] <... write resumed>) = 2097152 [pid 5060] close(3 [pid 6728] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6722, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6728] <... munmap resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6729 attached [pid 6728] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6729] set_robust_list(0x55558e6e36a0, 24 [pid 6728] <... openat resumed>) = 4 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6729 [pid 6729] <... set_robust_list resumed>) = 0 [pid 6728] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6729] chdir("./164" [ 155.538749][ T6726] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5059] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6729] <... chdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 6729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6729] setpgid(0, 0 [pid 6728] <... ioctl resumed>) = 0 [pid 5059] getdents64(3, [pid 6729] <... setpgid resumed>) = 0 [pid 6728] close(3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6729] <... openat resumed>) = 3 [pid 6728] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6729] write(3, "1000", 4 [pid 6728] close(4 [pid 5059] newfstatat(AT_FDCWD, "./166/binderfs", [pid 6729] <... write resumed>) = 4 [pid 6728] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6729] close(3 [pid 6728] mkdir("./file0", 0777 [pid 5059] unlink("./166/binderfs" [pid 6729] <... close resumed>) = 0 [pid 6728] <... mkdir resumed>) = 0 [pid 6726] <... mount resumed>) = 0 [pid 6725] <... mount resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6729] symlink("/dev/binderfs", "./binderfs" [pid 6728] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6729] <... symlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6729] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6729] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6729] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] newfstatat(AT_FDCWD, "./166/file0", [pid 6729] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6729] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6729] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] <... openat resumed>) = 4 [pid 6729] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] newfstatat(4, "", [pid 6729] <... mprotect resumed>) = 0 [ 155.596960][ T6728] loop4: detected capacity change from 0 to 4096 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6729] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6726] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] getdents64(4, [pid 6729] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] getdents64(4, ./strace-static-x86_64: Process 6730 attached [pid 6726] <... openat resumed>) = 3 [pid 6725] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6730] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6729] <... clone3 resumed> => {parent_tid=[6730]}, 88) = 6730 [pid 6726] chdir("./file0" [pid 6725] chdir("./file0" [pid 6730] <... rseq resumed>) = 0 [pid 6729] rt_sigprocmask(SIG_SETMASK, [], [pid 6726] <... chdir resumed>) = 0 [pid 6725] <... chdir resumed>) = 0 [pid 5059] close(4 [pid 6730] set_robust_list(0x7fe7c32469a0, 24 [pid 6729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6726] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6725] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 6730] <... set_robust_list resumed>) = 0 [pid 6729] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6725] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6730] rt_sigprocmask(SIG_SETMASK, [], [pid 6729] <... futex resumed>) = 0 [pid 6726] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] rmdir("./166/file0" [pid 6730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6729] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6726] <... futex resumed>) = 1 [pid 6725] <... futex resumed>) = 1 [pid 6723] <... futex resumed>) = 0 [pid 6721] <... futex resumed>) = 0 [pid 6726] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6723] exit_group(0 [pid 6721] exit_group(0 [pid 5059] <... rmdir resumed>) = 0 [pid 6730] memfd_create("syzkaller", 0 [pid 6726] <... futex resumed>) = ? [pid 6725] <... futex resumed>) = ? [pid 6723] <... exit_group resumed>) = ? [pid 6721] <... exit_group resumed>) = ? [pid 5059] getdents64(3, [pid 6726] +++ exited with 0 +++ [pid 6725] +++ exited with 0 +++ [pid 6730] <... memfd_create resumed>) = 3 [pid 6728] <... mount resumed>) = 0 [pid 6723] +++ exited with 0 +++ [pid 6721] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6721, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5059] close(3 [pid 6728] <... openat resumed>) = 3 [pid 6730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6728] chdir("./file0" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6723, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] <... close resumed>) = 0 [pid 6730] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./166" [pid 6728] <... chdir resumed>) = 0 [pid 5062] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./167", 0777 [pid 6728] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... mkdir resumed>) = 0 [pid 6728] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6728] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [ 155.640547][ T6728] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6728] <... futex resumed>) = 1 [pid 6727] <... futex resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5061] newfstatat(3, "", [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6728] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6727] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6727] <... exit_group resumed>) = ? [pid 6728] <... futex resumed>) = ? [pid 5062] getdents64(3, [pid 5061] getdents64(3, [pid 6728] +++ exited with 0 +++ [pid 6727] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6727, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./164/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./164/binderfs" [pid 5061] newfstatat(AT_FDCWD, "./166/binderfs", [pid 5063] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] unlink("./166/binderfs" [pid 5063] getdents64(3, [pid 5061] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6730] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./163/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./164/file0", [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6730] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6730] munmap(0x7fe7bae00000, 138412032 [pid 5063] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(AT_FDCWD, "./166/file0", [pid 5062] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5061] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./164/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5062] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 6730] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5063] newfstatat(AT_FDCWD, "./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6730] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 5063] openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] rmdir("./164" [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6730] <... openat resumed>) = 4 [pid 5061] close(4 [pid 6730] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./166/file0") = 0 [pid 6730] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] mkdir("./165", 0777 [pid 5059] <... ioctl resumed>) = 0 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5059] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] close(3) = 0 [pid 5061] rmdir("./166" [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6731 attached [pid 5063] close(4 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6731 [pid 6731] set_robust_list(0x55558e6e36a0, 24 [pid 6730] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6731] <... set_robust_list resumed>) = 0 [pid 5063] rmdir("./163/file0" [pid 6731] chdir("./167" [pid 6730] <... close resumed>) = 0 [pid 5061] mkdir("./167", 0777 [pid 6731] <... chdir resumed>) = 0 [pid 6730] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 6731] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(3, [pid 6731] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6731] setpgid(0, 0 [pid 6730] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 6731] <... setpgid resumed>) = 0 [pid 6730] mkdir("./file0", 0777 [pid 5063] close(3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6730] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6730] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6731] <... openat resumed>) = 3 [pid 6731] write(3, "1000", 4 [pid 5063] rmdir("./163" [pid 6731] <... write resumed>) = 4 [pid 6731] close(3) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6731] symlink("/dev/binderfs", "./binderfs" [pid 5063] mkdir("./164", 0777 [pid 6731] <... symlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6731] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6731] <... futex resumed>) = 0 [pid 6731] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... openat resumed>) = 3 [pid 6731] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6731] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6731] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 155.755113][ T6730] loop1: detected capacity change from 0 to 4096 [ 155.792610][ T6730] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6732 attached [pid 6732] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6731] <... clone3 resumed> => {parent_tid=[6732]}, 88) = 6732 [pid 6732] <... rseq resumed>) = 0 [pid 6731] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] set_robust_list(0x7fe7c32469a0, 24 [pid 6731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6731] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6732] <... set_robust_list resumed>) = 0 [pid 6731] <... futex resumed>) = 0 [pid 5062] close(3 [pid 6732] rt_sigprocmask(SIG_SETMASK, [], [pid 6731] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... close resumed>) = 0 [pid 6732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6733 attached [pid 6733] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6733] chdir("./165" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6733 [pid 6733] <... chdir resumed>) = 0 [pid 6733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6732] memfd_create("syzkaller", 0 [pid 5061] close(3 [pid 6732] <... memfd_create resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 6732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6733] <... prctl resumed>) = 0 [pid 6733] setpgid(0, 0) = 0 [pid 6733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6732] <... mmap resumed>) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6734 attached [pid 6733] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6734 [pid 6733] write(3, "1000", 4 [pid 6734] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6733] <... write resumed>) = 4 [pid 6733] close(3 [pid 6734] chdir("./167" [pid 6733] <... close resumed>) = 0 [pid 6733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6734] <... chdir resumed>) = 0 [pid 6733] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6733] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6733] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6734] <... prctl resumed>) = 0 [pid 6733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6734] setpgid(0, 0 [pid 6733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6734] <... setpgid resumed>) = 0 [pid 6733] <... mmap resumed>) = 0x7fe7c3226000 [pid 6733] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6733] <... mprotect resumed>) = 0 [pid 6733] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6734] <... openat resumed>) = 3 [pid 6733] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6734] write(3, "1000", 4 [pid 6733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6735 attached [pid 6734] <... write resumed>) = 4 [pid 6735] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6734] close(3 [pid 6733] <... clone3 resumed> => {parent_tid=[6735]}, 88) = 6735 [pid 6734] <... close resumed>) = 0 [pid 6733] rt_sigprocmask(SIG_SETMASK, [], [pid 6735] <... rseq resumed>) = 0 [pid 6733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6735] set_robust_list(0x7fe7c32469a0, 24 [pid 6734] symlink("/dev/binderfs", "./binderfs" [pid 6733] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] <... set_robust_list resumed>) = 0 [pid 6734] <... symlink resumed>) = 0 [pid 6733] <... futex resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6735] rt_sigprocmask(SIG_SETMASK, [], [pid 6734] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6734] <... futex resumed>) = 0 [pid 5063] close(3 [pid 6734] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... close resumed>) = 0 [pid 6734] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6734] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6735] memfd_create("syzkaller", 0 [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6730] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6736 attached [pid 6734] <... mmap resumed>) = 0x7fe7c3226000 [pid 6730] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6736 [pid 6736] set_robust_list(0x55558e6e36a0, 24 [pid 6734] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6730] <... openat resumed>) = 3 [pid 6736] <... set_robust_list resumed>) = 0 [pid 6734] <... mprotect resumed>) = 0 [pid 6736] chdir("./164" [pid 6735] <... memfd_create resumed>) = 3 [pid 6734] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6730] chdir("./file0" [pid 6736] <... chdir resumed>) = 0 [pid 6735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6734] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6730] <... chdir resumed>) = 0 [pid 6736] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6730] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6735] <... mmap resumed>) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6737 attached [pid 6736] <... prctl resumed>) = 0 [pid 6737] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6736] setpgid(0, 0 [pid 6734] <... clone3 resumed> => {parent_tid=[6737]}, 88) = 6737 [pid 6732] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6730] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6737] <... rseq resumed>) = 0 [pid 6736] <... setpgid resumed>) = 0 [pid 6734] rt_sigprocmask(SIG_SETMASK, [], [pid 6730] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6730] <... futex resumed>) = 1 [pid 6729] <... futex resumed>) = 0 [pid 6737] set_robust_list(0x7fe7c32469a0, 24 [pid 6729] exit_group(0 [pid 6737] <... set_robust_list resumed>) = 0 [pid 6736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6737] rt_sigprocmask(SIG_SETMASK, [], [pid 6734] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... exit_group resumed>) = ? [pid 6730] +++ exited with 0 +++ [pid 6729] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6729, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6736] <... openat resumed>) = 3 [pid 6734] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6737] memfd_create("syzkaller", 0 [pid 6736] write(3, "1000", 4 [pid 6734] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] newfstatat(3, "", [pid 6736] <... write resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6736] close(3 [pid 5060] getdents64(3, [pid 6736] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6737] <... memfd_create resumed>) = 3 [pid 6736] symlink("/dev/binderfs", "./binderfs" [pid 5060] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6736] <... symlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] newfstatat(AT_FDCWD, "./164/binderfs", [pid 6737] <... mmap resumed>) = 0x7fe7bae00000 [pid 6736] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./164/binderfs" [pid 6736] <... futex resumed>) = 0 [pid 6736] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6735] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6732] <... write resumed>) = 2097152 [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6736] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6736] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6736] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6736] <... mprotect resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 6736] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6732] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6736] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6732] <... munmap resumed>) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] getdents64(4, ./strace-static-x86_64: Process 6738 attached 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 6738] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 5060] <... close resumed>) = 0 [pid 6738] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] rmdir("./164/file0" [pid 6738] <... set_robust_list resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6738] rt_sigprocmask(SIG_SETMASK, [], [pid 6736] <... clone3 resumed> => {parent_tid=[6738]}, 88) = 6738 [pid 6738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6736] rt_sigprocmask(SIG_SETMASK, [], [pid 6738] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./164") = 0 [pid 6736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] mkdir("./165", 0777 [pid 6736] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... mkdir resumed>) = 0 [pid 6738] <... futex resumed>) = 0 [pid 6736] <... futex resumed>) = 1 [pid 6732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6732] ioctl(4, LOOP_SET_FD, 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6738] memfd_create("syzkaller", 0 [pid 6736] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6735] <... write resumed>) = 2097152 [pid 6732] <... ioctl resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6738] <... memfd_create resumed>) = 3 [pid 6738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6738] <... mmap resumed>) = 0x7fe7bae00000 [pid 6732] close(3 [pid 6737] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6735] munmap(0x7fe7bae00000, 138412032 [pid 6738] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6732] <... close resumed>) = 0 [pid 6732] close(4) = 0 [pid 6732] mkdir("./file0", 0777) = 0 [pid 6732] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6735] <... munmap resumed>) = 0 [ 155.999902][ T6732] loop0: detected capacity change from 0 to 4096 [pid 6738] <... write resumed>) = 2097152 [pid 6738] munmap(0x7fe7bae00000, 138412032 [pid 6735] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6738] <... munmap resumed>) = 0 [pid 6735] <... openat resumed>) = 4 [pid 6735] ioctl(4, LOOP_SET_FD, 3 [pid 6737] <... write resumed>) = 2097152 [pid 6738] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6737] munmap(0x7fe7bae00000, 138412032 [pid 6738] ioctl(4, LOOP_SET_FD, 3 [pid 6735] <... ioctl resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6737] <... munmap resumed>) = 0 [pid 6735] close(3 [pid 5060] close(3 [pid 6735] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6735] close(4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6735] <... close resumed>) = 0 [pid 6735] mkdir("./file0", 0777) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6739 [pid 6735] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"..../strace-static-x86_64: Process 6739 attached [ 156.043479][ T6732] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 156.062982][ T6735] loop3: detected capacity change from 0 to 4096 [ 156.084676][ T6738] loop4: detected capacity change from 0 to 4096 [pid 6739] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6737] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6739] chdir("./165" [pid 6737] <... openat resumed>) = 4 [pid 6737] ioctl(4, LOOP_SET_FD, 3 [pid 6739] <... chdir resumed>) = 0 [pid 6738] <... ioctl resumed>) = 0 [pid 6738] close(3) = 0 [pid 6738] close(4) = 0 [pid 6738] mkdir("./file0", 0777 [pid 6739] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6738] <... mkdir resumed>) = 0 [pid 6739] <... prctl resumed>) = 0 [pid 6739] setpgid(0, 0 [pid 6738] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6739] <... setpgid resumed>) = 0 [pid 6739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6737] <... ioctl resumed>) = 0 [pid 6737] close(3) = 0 [pid 6737] close(4) = 0 [pid 6737] mkdir("./file0", 0777 [pid 6739] <... openat resumed>) = 3 [pid 6737] <... mkdir resumed>) = 0 [pid 6739] write(3, "1000", 4) = 4 [pid 6739] close(3 [pid 6737] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6739] <... close resumed>) = 0 [ 156.105418][ T6735] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 156.118162][ T6737] loop2: detected capacity change from 0 to 4096 [ 156.127908][ T6738] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6739] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6739] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6735] <... mount resumed>) = 0 [pid 6735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6739] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6735] <... openat resumed>) = 3 [pid 6739] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6739] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6735] chdir("./file0") = 0 [pid 6739] <... mmap resumed>) = 0x7fe7c3226000 [pid 6735] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6735] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6733] <... futex resumed>) = 0 [pid 6739] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6735] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] <... mprotect resumed>) = 0 [pid 6733] exit_group(0 [pid 6735] <... futex resumed>) = ? [pid 6735] +++ exited with 0 +++ [pid 6733] <... exit_group resumed>) = ? [pid 6739] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6739] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6740 attached [pid 6740] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6739] <... clone3 resumed> => {parent_tid=[6740]}, 88) = 6740 [pid 6740] <... rseq resumed>) = 0 [pid 6733] +++ exited with 0 +++ [pid 6740] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6739] rt_sigprocmask(SIG_SETMASK, [], [pid 6738] <... mount resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6733, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6740] rt_sigprocmask(SIG_SETMASK, [], [pid 6739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6739] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6738] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... restart_syscall resumed>) = 0 [pid 6738] <... openat resumed>) = 3 [pid 6738] chdir("./file0" [pid 6739] <... futex resumed>) = 0 [pid 6738] <... chdir resumed>) = 0 [pid 5062] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6738] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6739] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6738] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 6738] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6736] <... futex resumed>) = 0 [pid 6738] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6736] exit_group(0 [pid 5062] newfstatat(3, "", [pid 6738] <... futex resumed>) = ? [pid 6736] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6738] +++ exited with 0 +++ [pid 5062] getdents64(3, [pid 6740] memfd_create("syzkaller", 0 [pid 6736] +++ exited with 0 +++ [pid 6732] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [ 156.154512][ T6737] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6740] <... memfd_create resumed>) = 3 [pid 6732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6736, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6732] <... openat resumed>) = 3 [pid 5062] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6740] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./165/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6732] chdir("./file0" [pid 5063] <... openat resumed>) = 3 [pid 5062] unlink("./165/binderfs" [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6732] <... chdir resumed>) = 0 [pid 6737] <... mount resumed>) = 0 [pid 6732] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] getdents64(3, [pid 6737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6732] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6737] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6737] chdir("./file0") = 0 [pid 6737] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6732] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6732] <... futex resumed>) = 1 [pid 6731] <... futex resumed>) = 0 [pid 6737] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6731] exit_group(0) = ? [pid 6737] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6734] <... futex resumed>) = 0 [pid 6737] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6734] exit_group(0 [pid 6737] <... futex resumed>) = ? [pid 6734] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./164/binderfs", [pid 6737] +++ exited with 0 +++ [pid 6734] +++ exited with 0 +++ [pid 6732] +++ exited with 0 +++ [pid 6731] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./165/file0", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6731, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] unlink("./164/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6734, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5062] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... restart_syscall resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(3, "", [pid 5062] getdents64(4, [pid 5059] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(3, "", [pid 5061] getdents64(3, [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(4 [pid 5059] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./165/file0" [pid 5061] newfstatat(AT_FDCWD, "./167/binderfs", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./164/file0", [pid 5061] unlink("./167/binderfs" [pid 5059] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./165") = 0 [pid 5059] newfstatat(AT_FDCWD, "./167/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6740] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] mkdir("./166", 0777 [pid 5061] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./167/binderfs") = 0 [pid 5063] <... openat resumed>) = 4 [pid 5059] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./164/file0" [pid 5061] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 4 [pid 6740] <... write resumed>) = 2097152 [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./167/file0" [pid 6740] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 4 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5061] newfstatat(4, "", [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./164" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6740] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6740] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] mkdir("./165", 0777 [pid 5059] close(3 [pid 6740] <... openat resumed>) = 4 [pid 5059] <... close resumed>) = 0 [pid 6740] ioctl(4, LOOP_SET_FD, 3 [pid 5059] rmdir("./167" [pid 5063] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, [pid 5059] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5059] mkdir("./168", 0777 [pid 5061] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 5061] rmdir("./167/file0" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5061] close(3) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6740] <... ioctl resumed>) = 0 [pid 5061] rmdir("./167" [pid 6740] close(3) = 0 [pid 6740] close(4) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6740] mkdir("./file0", 0777 [pid 5061] mkdir("./168", 0777 [pid 6740] <... mkdir resumed>) = 0 [pid 6740] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6741 attached [pid 6741] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6741] chdir("./166") = 0 [pid 6741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6741 [pid 6741] setpgid(0, 0) = 0 [ 156.326343][ T6740] loop1: detected capacity change from 0 to 4096 [ 156.347806][ T6740] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6741] <... openat resumed>) = 3 [pid 6741] write(3, "1000", 4) = 4 [pid 6741] close(3) = 0 [pid 6741] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6741] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6741] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6741] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6741] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6742]}, 88) = 6742 [pid 6741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] close(3 [pid 6741] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6741] <... futex resumed>) = 0 [pid 6741] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6742 attached [pid 6742] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6742] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6742] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6743 attached NULL, 8) = 0 [pid 6743] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6743 [pid 6743] <... set_robust_list resumed>) = 0 [pid 6742] memfd_create("syzkaller", 0 [pid 6743] chdir("./168") = 0 [pid 5063] close(3 [pid 6743] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... close resumed>) = 0 [pid 6743] <... prctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6743] setpgid(0, 0) = 0 [pid 6742] <... memfd_create resumed>) = 3 [pid 6743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6743] <... openat resumed>) = 3 [pid 6743] write(3, "1000", 4) = 4 [pid 6743] close(3) = 0 ./strace-static-x86_64: Process 6744 attached [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6744] set_robust_list(0x55558e6e36a0, 24 [pid 6743] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6744 [pid 6744] <... set_robust_list resumed>) = 0 [pid 6743] <... symlink resumed>) = 0 [pid 6744] chdir("./165" [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6745 [pid 6744] <... chdir resumed>) = 0 [pid 6744] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6745 attached ) = 0 [pid 6745] set_robust_list(0x55558e6e36a0, 24 [pid 6744] setpgid(0, 0 [pid 6743] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... set_robust_list resumed>) = 0 [pid 6744] <... setpgid resumed>) = 0 [pid 6743] <... futex resumed>) = 0 [pid 6745] chdir("./168" [pid 6744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6743] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6744] <... openat resumed>) = 3 [pid 6743] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6745] <... chdir resumed>) = 0 [pid 6744] write(3, "1000", 4 [pid 6743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6744] <... write resumed>) = 4 [pid 6743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6744] close(3 [pid 6743] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6745] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6744] <... close resumed>) = 0 [pid 6743] <... mprotect resumed>) = 0 [pid 6745] <... prctl resumed>) = 0 [pid 6744] symlink("/dev/binderfs", "./binderfs" [pid 6743] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6744] <... symlink resumed>) = 0 [pid 6745] setpgid(0, 0 [pid 6744] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6743] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6745] <... setpgid resumed>) = 0 [pid 6744] <... futex resumed>) = 0 [pid 6743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6746 attached [pid 6745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6744] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6745] <... openat resumed>) = 3 [pid 6744] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6744] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6740] <... mount resumed>) = 0 [pid 6746] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6743] <... clone3 resumed> => {parent_tid=[6746]}, 88) = 6746 [pid 6746] <... rseq resumed>) = 0 [pid 6745] write(3, "1000", 4 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6743] rt_sigprocmask(SIG_SETMASK, [], [pid 6740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6746] set_robust_list(0x7fe7c32469a0, 24 [pid 6745] <... write resumed>) = 4 [pid 6744] <... mmap resumed>) = 0x7fe7c3226000 [pid 6743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6740] <... openat resumed>) = 3 [pid 6746] <... set_robust_list resumed>) = 0 [pid 6745] close(3 [pid 6744] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6743] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] chdir("./file0" [pid 6746] rt_sigprocmask(SIG_SETMASK, [], [pid 6745] <... close resumed>) = 0 [pid 6744] <... mprotect resumed>) = 0 [pid 6743] <... futex resumed>) = 0 [pid 6742] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6740] <... chdir resumed>) = 0 [pid 6746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6745] symlink("/dev/binderfs", "./binderfs" [pid 6744] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6743] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6740] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6746] memfd_create("syzkaller", 0 [pid 6740] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6740] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... symlink resumed>) = 0 [pid 6740] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6746] <... memfd_create resumed>) = 3 [pid 6744] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6746] <... mmap resumed>) = 0x7fe7bae00000 [pid 6745] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... clone3 resumed> => {parent_tid=[6747]}, 88) = 6747 [pid 6739] <... futex resumed>) = 0 [pid 6745] <... futex resumed>) = 0 [pid 6744] rt_sigprocmask(SIG_SETMASK, [], [pid 6739] exit_group(0 [pid 6745] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6740] <... futex resumed>) = ? [pid 6739] <... exit_group resumed>) = ? [pid 6745] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6744] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] +++ exited with 0 +++ ./strace-static-x86_64: Process 6747 attached [pid 6745] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6744] <... futex resumed>) = 0 [pid 6739] +++ exited with 0 +++ [pid 6747] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6744] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6739, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6747] <... rseq resumed>) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6747] set_robust_list(0x7fe7c32469a0, 24 [pid 6745] <... mmap resumed>) = 0x7fe7c3226000 [pid 6747] <... set_robust_list resumed>) = 0 [pid 6747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6747] memfd_create("syzkaller", 0 [pid 5060] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6745] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6745] <... mprotect resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6745] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 6747] <... memfd_create resumed>) = 3 [pid 6747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6745] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6747] <... mmap resumed>) = 0x7fe7bae00000 [pid 6745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6742] <... write resumed>) = 2097152 [pid 6742] munmap(0x7fe7bae00000, 138412032 [pid 5060] getdents64(3, [pid 6745] <... clone3 resumed> => {parent_tid=[6748]}, 88) = 6748 [pid 6745] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6745] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6745] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] newfstatat(AT_FDCWD, "./165/binderfs", ./strace-static-x86_64: Process 6748 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6748] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6748] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 5060] unlink("./165/binderfs" [pid 6748] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6748] memfd_create("syzkaller", 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6748] <... memfd_create resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./165/file0", [pid 6748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6746] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6742] <... munmap resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6748] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6747] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6742] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6746] <... write resumed>) = 2097152 [pid 6742] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6742] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./165/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./165") = 0 [pid 5060] mkdir("./166", 0777 [pid 6746] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... mkdir resumed>) = 0 [pid 6746] <... munmap resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6742] <... ioctl resumed>) = 0 [pid 6748] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6742] close(3) = 0 [pid 6742] close(4) = 0 [pid 6747] <... write resumed>) = 2097152 [pid 6742] mkdir("./file0", 0777 [pid 6746] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6742] <... mkdir resumed>) = 0 [pid 6746] <... openat resumed>) = 4 [ 156.597767][ T6742] loop3: detected capacity change from 0 to 4096 [ 156.632745][ T6742] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6742] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6748] <... write resumed>) = 2097152 [pid 6747] munmap(0x7fe7bae00000, 138412032 [pid 6746] ioctl(4, LOOP_SET_FD, 3 [pid 6748] munmap(0x7fe7bae00000, 138412032 [pid 6747] <... munmap resumed>) = 0 [pid 6746] <... ioctl resumed>) = 0 [pid 6748] <... munmap resumed>) = 0 [pid 6747] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6746] close(3) = 0 [pid 6748] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6746] close(4 [pid 6742] <... mount resumed>) = 0 [pid 6748] <... openat resumed>) = 4 [pid 6747] <... openat resumed>) = 4 [ 156.646306][ T6746] loop2: detected capacity change from 0 to 4096 [pid 6742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6748] ioctl(4, LOOP_SET_FD, 3 [pid 6747] ioctl(4, LOOP_SET_FD, 3 [pid 6746] <... close resumed>) = 0 [pid 6742] <... openat resumed>) = 3 [pid 6742] chdir("./file0") = 0 [pid 6742] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6742] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6742] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6741] <... futex resumed>) = 0 [pid 6741] exit_group(0 [pid 6742] <... futex resumed>) = ? [pid 6741] <... exit_group resumed>) = ? [pid 6742] +++ exited with 0 +++ [pid 6741] +++ exited with 0 +++ [pid 6747] <... ioctl resumed>) = 0 [pid 6746] mkdir("./file0", 0777 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6741, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5060] <... ioctl resumed>) = 0 [pid 6747] close(3 [pid 6746] <... mkdir resumed>) = 0 [pid 6747] <... close resumed>) = 0 [pid 6746] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./166/binderfs", [pid 6748] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6748] close(3 [pid 5062] unlink("./166/binderfs") = 0 [pid 6748] <... close resumed>) = 0 [pid 5062] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6748] close(4) = 0 [pid 6748] mkdir("./file0", 0777) = 0 [pid 6748] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6747] close(4 [pid 5062] <... umount2 resumed>) = 0 [pid 6747] <... close resumed>) = 0 [pid 6747] mkdir("./file0", 0777 [pid 5062] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6747] <... mkdir resumed>) = 0 [pid 6747] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] close(3 [pid 5062] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [ 156.685666][ T6748] loop0: detected capacity change from 0 to 4096 [ 156.689137][ T6747] loop4: detected capacity change from 0 to 4096 [ 156.711859][ T6746] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 156.723492][ T6748] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5062] newfstatat(4, "", [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6749 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6749 attached [pid 5062] getdents64(4, [pid 6749] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6749] <... set_robust_list resumed>) = 0 [pid 5062] close(4 [pid 6749] chdir("./166" [pid 5062] <... close resumed>) = 0 [pid 6749] <... chdir resumed>) = 0 [pid 6749] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] rmdir("./166/file0" [pid 6749] <... prctl resumed>) = 0 [pid 6749] setpgid(0, 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6749] <... setpgid resumed>) = 0 [pid 6749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6749] write(3, "1000", 4 [pid 5062] getdents64(3, [pid 6749] <... write resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6749] close(3 [pid 5062] close(3 [pid 6749] <... close resumed>) = 0 [pid 6749] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... close resumed>) = 0 [pid 6749] <... symlink resumed>) = 0 [pid 5062] rmdir("./166" [pid 6749] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 6749] <... futex resumed>) = 0 [pid 6749] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] mkdir("./167", 0777 [pid 6749] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6749] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6749] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6749] <... mprotect resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 6749] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6750 attached [pid 6750] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6749] <... clone3 resumed> => {parent_tid=[6750]}, 88) = 6750 [pid 6750] <... rseq resumed>) = 0 [pid 6749] rt_sigprocmask(SIG_SETMASK, [], [pid 6750] set_robust_list(0x7fe7c32469a0, 24 [pid 6749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6750] <... set_robust_list resumed>) = 0 [pid 6749] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6750] rt_sigprocmask(SIG_SETMASK, [], [pid 6749] <... futex resumed>) = 0 [pid 6750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6749] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6750] memfd_create("syzkaller", 0) = 3 [pid 6750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 156.743257][ T6747] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6746] <... mount resumed>) = 0 [pid 6746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6746] chdir("./file0") = 0 [pid 6746] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6746] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6743] <... futex resumed>) = 0 [pid 6746] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6743] exit_group(0 [pid 6748] <... mount resumed>) = 0 [pid 6746] <... futex resumed>) = ? [pid 6743] <... exit_group resumed>) = ? [pid 6746] +++ exited with 0 +++ [pid 6743] +++ exited with 0 +++ [pid 6748] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6743, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6750] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6748] <... openat resumed>) = 3 [pid 6748] chdir("./file0" [pid 5061] <... openat resumed>) = 3 [pid 6748] <... chdir resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 6748] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(3 [pid 6748] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6748] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6751 attached [pid 6748] <... futex resumed>) = 1 [pid 6745] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6751] set_robust_list(0x55558e6e36a0, 24 [pid 6748] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6745] exit_group(0 [pid 5061] newfstatat(AT_FDCWD, "./168/binderfs", [pid 6751] <... set_robust_list resumed>) = 0 [pid 6748] <... futex resumed>) = ? [pid 6745] <... exit_group resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6751 [pid 6751] chdir("./167" [pid 6748] +++ exited with 0 +++ [pid 6745] +++ exited with 0 +++ [pid 5061] unlink("./168/binderfs" [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6745, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6751] <... chdir resumed>) = 0 [pid 6751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6751] setpgid(0, 0) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6747] <... mount resumed>) = 0 [pid 5061] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6751] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6751] write(3, "1000", 4 [pid 5061] newfstatat(AT_FDCWD, "./168/file0", [pid 5059] <... openat resumed>) = 3 [pid 6751] <... write resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6751] close(3 [pid 5059] newfstatat(3, "", [pid 5061] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6751] <... close resumed>) = 0 [pid 6751] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6751] <... symlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(3, [pid 6751] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6751] <... futex resumed>) = 0 [pid 6747] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6751] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6747] chdir("./file0" [pid 5061] newfstatat(4, "", [pid 5059] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6751] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6747] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6751] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6747] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] getdents64(4, [pid 5059] newfstatat(AT_FDCWD, "./168/binderfs", [pid 6751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6750] <... write resumed>) = 2097152 [pid 6747] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6751] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6747] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] unlink("./168/binderfs" [pid 6751] <... mmap resumed>) = 0x7fe7c3226000 [pid 6750] munmap(0x7fe7bae00000, 138412032 [pid 6747] <... futex resumed>) = 1 [pid 6744] <... futex resumed>) = 0 [pid 5061] getdents64(4, [pid 5059] <... unlink resumed>) = 0 [pid 6751] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6744] exit_group(0 [pid 5059] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6747] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6751] <... mprotect resumed>) = 0 [pid 6744] <... exit_group resumed>) = ? [pid 5061] close(4 [pid 5059] <... umount2 resumed>) = 0 [pid 6747] +++ exited with 0 +++ [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./168/file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6744] +++ exited with 0 +++ [pid 5059] <... openat resumed>) = 4 [pid 6751] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6744, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6751] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] getdents64(3, [pid 5059] newfstatat(4, "", [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3./strace-static-x86_64: Process 6752 attached ) = 0 [pid 5059] getdents64(4, [pid 6752] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6751] <... clone3 resumed> => {parent_tid=[6752]}, 88) = 6752 [pid 5063] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./168" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6752] <... rseq resumed>) = 0 [pid 6751] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 6752] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(4, [pid 6752] <... set_robust_list resumed>) = 0 [pid 6752] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] mkdir("./169", 0777 [pid 5059] close(4 [pid 6752] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(3, "", [pid 5059] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] rmdir("./168/file0" [pid 6751] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6751] <... futex resumed>) = 1 [pid 5063] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6752] <... futex resumed>) = 0 [pid 6751] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 6752] memfd_create("syzkaller", 0 [pid 6750] <... munmap resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./165/binderfs", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(3, [pid 6752] <... memfd_create resumed>) = 3 [pid 6750] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] unlink("./165/binderfs" [pid 6752] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 6750] <... openat resumed>) = 4 [pid 5063] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 6750] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./168" [pid 6750] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6752] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6750] close(3 [pid 5063] newfstatat(AT_FDCWD, "./165/file0", [pid 5059] mkdir("./169", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6750] <... close resumed>) = 0 [pid 6750] close(4) = 0 [pid 6750] mkdir("./file0", 0777) = 0 [pid 5063] openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6750] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 4 [ 156.927314][ T6750] loop1: detected capacity change from 0 to 4096 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./165/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./165") = 0 [pid 5063] mkdir("./166", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... ioctl resumed>) = 0 [pid 6752] <... write resumed>) = 2097152 [pid 6752] munmap(0x7fe7bae00000, 138412032 [pid 5061] close(3 [pid 6752] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6753 [pid 6750] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6753 attached [pid 6753] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6753] chdir("./169") = 0 [pid 6753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6753] setpgid(0, 0) = 0 [pid 6752] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6752] <... openat resumed>) = 4 [ 156.971392][ T6750] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6753] <... openat resumed>) = 3 [pid 6752] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6753] write(3, "1000", 4) = 4 [pid 6753] close(3) = 0 [pid 6753] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6750] <... openat resumed>) = 3 [pid 6753] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6753] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6753] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6753] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6753] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6753] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6754 attached [pid 6750] chdir("./file0" [pid 6754] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6753] <... clone3 resumed> => {parent_tid=[6754]}, 88) = 6754 [pid 6750] <... chdir resumed>) = 0 [pid 6754] <... rseq resumed>) = 0 [pid 6753] rt_sigprocmask(SIG_SETMASK, [], [pid 6750] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6754] set_robust_list(0x7fe7c32469a0, 24 [pid 6753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6750] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6754] <... set_robust_list resumed>) = 0 [pid 6753] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6752] close(3 [pid 6753] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6752] <... close resumed>) = 0 [pid 6752] close(4) = 0 [pid 6752] mkdir("./file0", 0777 [pid 6754] rt_sigprocmask(SIG_SETMASK, [], [pid 6752] <... mkdir resumed>) = 0 [pid 6750] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... ioctl resumed>) = 0 [pid 6754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6752] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6750] <... futex resumed>) = 1 [ 157.028914][ T6752] loop3: detected capacity change from 0 to 4096 [pid 6750] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6754] memfd_create("syzkaller", 0 [pid 6749] <... futex resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 6754] <... memfd_create resumed>) = 3 [pid 6749] exit_group(0 [pid 5063] close(3 [pid 5059] <... close resumed>) = 0 [pid 6754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6750] <... futex resumed>) = ? [pid 6749] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6755 attached [pid 6754] <... mmap resumed>) = 0x7fe7bae00000 [pid 6750] +++ exited with 0 +++ [pid 6749] +++ exited with 0 +++ [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6755] set_robust_list(0x55558e6e36a0, 24 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6749, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5060] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6755 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6755] <... set_robust_list resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6755] chdir("./169" [pid 5060] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6756 attached [pid 6755] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6756 [pid 5060] newfstatat(3, "", [pid 6756] set_robust_list(0x55558e6e36a0, 24 [pid 6755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6756] <... set_robust_list resumed>) = 0 [pid 6755] <... prctl resumed>) = 0 [pid 5060] getdents64(3, [pid 6756] chdir("./166" [pid 6755] setpgid(0, 0) = 0 [pid 6756] <... chdir resumed>) = 0 [pid 6755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6756] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6755] <... openat resumed>) = 3 [pid 5060] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6755] write(3, "1000", 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6756] setpgid(0, 0 [pid 6755] <... write resumed>) = 4 [pid 5060] newfstatat(AT_FDCWD, "./166/binderfs", [pid 6756] <... setpgid resumed>) = 0 [pid 6755] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6755] <... close resumed>) = 0 [pid 6756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] unlink("./166/binderfs" [pid 6756] <... openat resumed>) = 3 [pid 6755] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... unlink resumed>) = 0 [pid 6756] write(3, "1000", 4 [pid 6755] <... symlink resumed>) = 0 [pid 6756] <... write resumed>) = 4 [pid 6755] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6756] close(3 [pid 5060] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6756] <... close resumed>) = 0 [pid 6755] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6756] symlink("/dev/binderfs", "./binderfs" [pid 6755] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6755] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6756] <... symlink resumed>) = 0 [pid 6755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6756] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] <... mmap resumed>) = 0x7fe7c3226000 [pid 6752] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6756] <... futex resumed>) = 0 [ 157.069259][ T6752] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6755] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6752] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6756] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6755] <... mprotect resumed>) = 0 [pid 6754] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6752] <... openat resumed>) = 3 [pid 5060] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6756] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6755] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6756] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6755] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6752] chdir("./file0" [pid 6756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6752] <... chdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6757 attached [pid 6756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6752] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6757] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6756] <... mmap resumed>) = 0x7fe7c3226000 [pid 6755] <... clone3 resumed> => {parent_tid=[6757]}, 88) = 6757 [pid 6752] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(AT_FDCWD, "./166/file0", [pid 6757] <... rseq resumed>) = 0 [pid 6756] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6755] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6757] set_robust_list(0x7fe7c32469a0, 24 [pid 6756] <... mprotect resumed>) = 0 [pid 6755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6752] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6757] <... set_robust_list resumed>) = 0 [pid 6755] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = 1 [pid 6751] <... futex resumed>) = 0 [pid 6757] rt_sigprocmask(SIG_SETMASK, [], [pid 6756] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6755] <... futex resumed>) = 0 [pid 6752] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6751] exit_group(0 [pid 5060] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6755] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6757] memfd_create("syzkaller", 0 [pid 6756] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6752] <... futex resumed>) = ? [pid 6751] <... exit_group resumed>) = ? [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6752] +++ exited with 0 +++ [pid 5060] openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6758 attached [pid 6751] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6751, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] newfstatat(4, "", [pid 6757] <... memfd_create resumed>) = 3 [pid 6757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6756] <... clone3 resumed> => {parent_tid=[6758]}, 88) = 6758 [pid 6758] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6758] set_robust_list(0x7fe7c32469a0, 24 [pid 6756] rt_sigprocmask(SIG_SETMASK, [], [pid 6758] <... set_robust_list resumed>) = 0 [pid 6758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6758] memfd_create("syzkaller", 0 [pid 6756] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... write resumed>) = 2097152 [pid 5062] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 6756] <... futex resumed>) = 0 [pid 6756] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6754] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6758] <... memfd_create resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, [pid 6758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6757] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] newfstatat(3, "", [pid 5060] close(4 [pid 6758] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] rmdir("./166/file0") = 0 [pid 5060] getdents64(3, [pid 5062] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6754] <... munmap resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6754] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./167/binderfs", [pid 5060] close(3 [pid 6754] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 6754] ioctl(4, LOOP_SET_FD, 3 [pid 5062] unlink("./167/binderfs" [pid 5060] rmdir("./166" [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./167", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6758] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6757] <... write resumed>) = 2097152 [pid 6754] <... ioctl resumed>) = 0 [pid 5062] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6757] munmap(0x7fe7bae00000, 138412032 [pid 6754] close(3 [pid 6757] <... munmap resumed>) = 0 [pid 6754] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6754] close(4 [pid 5062] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6754] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6757] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6754] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6754] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 6757] <... openat resumed>) = 4 [ 157.203180][ T6754] loop2: detected capacity change from 0 to 4096 [pid 6754] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] newfstatat(4, "", [pid 6757] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 6758] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./167/file0" [pid 6758] munmap(0x7fe7bae00000, 138412032 [pid 6757] close(3 [pid 6758] <... munmap resumed>) = 0 [pid 6757] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6757] close(4 [pid 5062] getdents64(3, [pid 6757] <... close resumed>) = 0 [pid 6757] mkdir("./file0", 0777) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6757] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6758] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] close(3 [pid 5062] rmdir("./167" [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./168", 0777 [pid 6758] <... openat resumed>) = 4 [ 157.248975][ T6757] loop0: detected capacity change from 0 to 4096 [ 157.256560][ T6754] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 157.287354][ T6757] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5062] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6759 attached [pid 6758] ioctl(4, LOOP_SET_FD, 3 [pid 6759] set_robust_list(0x55558e6e36a0, 24 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6759] <... set_robust_list resumed>) = 0 [pid 6759] chdir("./167" [pid 5062] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6759 [pid 6759] <... chdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6759] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6759] setpgid(0, 0) = 0 [pid 6759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6758] <... ioctl resumed>) = 0 [pid 6759] write(3, "1000", 4 [pid 6754] <... mount resumed>) = 0 [pid 6759] <... write resumed>) = 4 [pid 6754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6759] close(3 [pid 6754] <... openat resumed>) = 3 [pid 6759] <... close resumed>) = 0 [pid 6758] close(3 [pid 6754] chdir("./file0" [pid 6759] symlink("/dev/binderfs", "./binderfs" [pid 6758] <... close resumed>) = 0 [pid 6754] <... chdir resumed>) = 0 [pid 6759] <... symlink resumed>) = 0 [pid 6754] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6754] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6753] <... futex resumed>) = 0 [pid 6753] exit_group(0) = ? [pid 6759] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 157.304991][ T6758] loop4: detected capacity change from 0 to 4096 [pid 6758] close(4 [pid 6754] +++ exited with 0 +++ [pid 6753] +++ exited with 0 +++ [pid 6759] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6758] <... close resumed>) = 0 [pid 6758] mkdir("./file0", 0777 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6753, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6758] <... mkdir resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 6758] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6759] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6757] <... mount resumed>) = 0 [pid 6759] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... ioctl resumed>) = 0 [pid 6759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6757] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5061] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6757] chdir("./file0" [pid 5062] <... close resumed>) = 0 [pid 6759] <... mmap resumed>) = 0x7fe7c3226000 [pid 6759] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6759] <... mprotect resumed>) = 0 [pid 6757] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6757] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 6759] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6757] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(3, "", [pid 6757] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6759] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6757] <... futex resumed>) = 1 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6760 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6759] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6757] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] newfstatat(AT_FDCWD, "./169/binderfs", ./strace-static-x86_64: Process 6760 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6759] <... clone3 resumed> => {parent_tid=[6761]}, 88) = 6761 [pid 5061] unlink("./169/binderfs" [pid 6759] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6761 attached [pid 6759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6761] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6759] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6761] <... rseq resumed>) = 0 [pid 6760] set_robust_list(0x55558e6e36a0, 24 [pid 6759] <... futex resumed>) = 0 [pid 6755] <... futex resumed>) = 0 [pid 6761] set_robust_list(0x7fe7c32469a0, 24 [pid 6759] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6761] <... set_robust_list resumed>) = 0 [pid 6760] <... set_robust_list resumed>) = 0 [pid 6755] exit_group(0 [pid 5061] <... umount2 resumed>) = 0 [pid 6761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6760] chdir("./168" [pid 6757] <... futex resumed>) = ? [pid 6755] <... exit_group resumed>) = ? [pid 5061] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6761] memfd_create("syzkaller", 0 [pid 6760] <... chdir resumed>) = 0 [pid 6757] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6761] <... memfd_create resumed>) = 3 [pid 6760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6755] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6760] <... prctl resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6761] <... mmap resumed>) = 0x7fe7bae00000 [pid 6760] setpgid(0, 0 [pid 5061] newfstatat(4, "", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6755, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6760] <... setpgid resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6760] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6760] write(3, "1000", 4) = 4 [pid 5061] getdents64(4, [pid 5059] <... openat resumed>) = 3 [pid 6760] close(3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6760] <... close resumed>) = 0 [pid 6760] symlink("/dev/binderfs", "./binderfs" [pid 5061] close(4) = 0 [pid 5059] newfstatat(3, "", [pid 5061] rmdir("./169/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6760] <... symlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5061] getdents64(3, [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 6760] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6760] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] rmdir("./169" [ 157.373910][ T6758] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5059] newfstatat(AT_FDCWD, "./169/binderfs", [pid 6760] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6760] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] unlink("./169/binderfs" [pid 6760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... unlink resumed>) = 0 [pid 5061] mkdir("./170", 0777) = 0 [pid 5059] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6760] <... mmap resumed>) = 0x7fe7c3226000 [pid 6760] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6760] <... mprotect resumed>) = 0 [pid 6760] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6761] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6760] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6762 attached [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./169/file0", [pid 6760] <... clone3 resumed> => {parent_tid=[6762]}, 88) = 6762 [pid 6762] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6760] rt_sigprocmask(SIG_SETMASK, [], [pid 6762] <... rseq resumed>) = 0 [pid 6760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6762] set_robust_list(0x7fe7c32469a0, 24 [pid 6760] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6762] <... set_robust_list resumed>) = 0 [pid 6760] <... futex resumed>) = 0 [pid 5059] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6762] rt_sigprocmask(SIG_SETMASK, [], [pid 6760] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 6762] memfd_create("syzkaller", 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 6762] <... memfd_create resumed>) = 3 [pid 6762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] rmdir("./169/file0" [pid 6762] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./169") = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] mkdir("./170", 0777 [pid 6761] <... write resumed>) = 2097152 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6762] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6761] munmap(0x7fe7bae00000, 138412032 [pid 6758] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6763 attached [pid 6758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6763] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6763 [pid 6763] <... set_robust_list resumed>) = 0 [pid 6758] <... openat resumed>) = 3 [pid 6763] chdir("./170" [pid 6762] <... write resumed>) = 2097152 [pid 6761] <... munmap resumed>) = 0 [pid 6758] chdir("./file0" [pid 6763] <... chdir resumed>) = 0 [pid 6758] <... chdir resumed>) = 0 [pid 6761] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6763] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6762] munmap(0x7fe7bae00000, 138412032 [pid 6758] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... ioctl resumed>) = 0 [pid 6763] <... prctl resumed>) = 0 [pid 6758] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6763] setpgid(0, 0 [pid 6758] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] <... setpgid resumed>) = 0 [pid 6758] <... futex resumed>) = 1 [pid 6756] <... futex resumed>) = 0 [pid 6763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6761] <... openat resumed>) = 4 [pid 6758] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6756] exit_group(0 [pid 5059] close(3 [pid 6763] <... openat resumed>) = 3 [pid 6762] <... munmap resumed>) = 0 [pid 6761] ioctl(4, LOOP_SET_FD, 3 [pid 6758] <... futex resumed>) = ? [pid 6756] <... exit_group resumed>) = ? [pid 5059] <... close resumed>) = 0 [pid 6758] +++ exited with 0 +++ [pid 6763] write(3, "1000", 4 [pid 6762] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6756] +++ exited with 0 +++ [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6763] <... write resumed>) = 4 [pid 6763] close(3 [pid 6762] <... openat resumed>) = 4 [pid 6763] <... close resumed>) = 0 [pid 6763] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6764 attached ) = 0 [pid 6762] ioctl(4, LOOP_SET_FD, 3 [pid 6761] <... ioctl resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6764 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6756, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6764] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6764] chdir("./170" [pid 6763] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6761] close(3 [pid 6764] <... chdir resumed>) = 0 [pid 6763] <... futex resumed>) = 0 [pid 6761] <... close resumed>) = 0 [pid 5063] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6764] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6763] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6761] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6764] <... prctl resumed>) = 0 [pid 6763] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6761] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6764] setpgid(0, 0 [pid 6763] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6761] mkdir("./file0", 0777 [pid 5063] <... openat resumed>) = 3 [pid 6764] <... setpgid resumed>) = 0 [pid 6763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(3, "", [pid 6764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6761] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6763] <... mmap resumed>) = 0x7fe7c3226000 [pid 6764] <... openat resumed>) = 3 [pid 6763] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] getdents64(3, [pid 6763] <... mprotect resumed>) = 0 [pid 6761] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6764] write(3, "1000", 4 [pid 5063] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6763] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6764] <... write resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6763] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6762] <... ioctl resumed>) = 0 [pid 6764] close(3 [pid 5063] newfstatat(AT_FDCWD, "./166/binderfs", [pid 6764] <... close resumed>) = 0 [pid 6763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6762] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] unlink("./166/binderfs") = 0 [pid 5063] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6762] <... close resumed>) = 0 [pid 6762] close(4 [pid 6764] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6764] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 ./strace-static-x86_64: Process 6765 attached [pid 6763] <... clone3 resumed> => {parent_tid=[6765]}, 88) = 6765 [pid 6762] <... close resumed>) = 0 [pid 6765] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6763] rt_sigprocmask(SIG_SETMASK, [], [pid 6762] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 6765] <... rseq resumed>) = 0 [pid 6765] set_robust_list(0x7fe7c32469a0, 24 [pid 6764] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6762] <... mkdir resumed>) = 0 [pid 6765] <... set_robust_list resumed>) = 0 [pid 6764] <... mprotect resumed>) = 0 [pid 6763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6762] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 157.578941][ T6761] loop1: detected capacity change from 0 to 4096 [ 157.596811][ T6762] loop3: detected capacity change from 0 to 4096 [ 157.612021][ T6761] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6765] rt_sigprocmask(SIG_SETMASK, [], [pid 6764] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6763] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6764] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] newfstatat(AT_FDCWD, "./166/file0", [pid 6765] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6766 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6766] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6764] <... clone3 resumed> => {parent_tid=[6766]}, 88) = 6766 [pid 5063] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6766] <... rseq resumed>) = 0 [pid 6764] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6766] set_robust_list(0x7fe7c32469a0, 24 [pid 6764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6766] <... set_robust_list resumed>) = 0 [pid 6764] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 4 [pid 6766] rt_sigprocmask(SIG_SETMASK, [], [pid 6764] <... futex resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6764] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6766] memfd_create("syzkaller", 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./166/file0") = 0 [pid 6766] <... memfd_create resumed>) = 3 [pid 6766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] getdents64(3, [pid 6766] <... mmap resumed>) = 0x7fe7bae00000 [pid 6765] memfd_create("syzkaller", 0 [pid 6763] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6763] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] close(3 [pid 6765] <... memfd_create resumed>) = 3 [pid 6765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./166") = 0 [pid 5063] mkdir("./167", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6761] <... mount resumed>) = 0 [pid 6761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6761] chdir("./file0") = 0 [pid 6761] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6761] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6759] <... futex resumed>) = 0 [ 157.635037][ T6762] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6761] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6759] exit_group(0) = ? [pid 6761] <... futex resumed>) = ? [pid 6761] +++ exited with 0 +++ [pid 6759] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6759, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5060] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./167/binderfs") = 0 [pid 5060] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6762] <... mount resumed>) = 0 [pid 6762] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6765] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... umount2 resumed>) = 0 [pid 6766] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6762] <... openat resumed>) = 3 [pid 6762] chdir("./file0" [pid 5060] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6762] <... chdir resumed>) = 0 [pid 6762] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6762] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6760] <... futex resumed>) = 0 [pid 6762] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6760] exit_group(0 [pid 6762] <... futex resumed>) = ? [pid 6760] <... exit_group resumed>) = ? [pid 6762] +++ exited with 0 +++ [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6760] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6760, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5063] <... ioctl resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5060] close(4 [pid 5063] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] rmdir("./167/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3./strace-static-x86_64: Process 6767 attached [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6767 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./167") = 0 [pid 5060] mkdir("./168", 0777) = 0 [pid 6767] set_robust_list(0x55558e6e36a0, 24 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6767] <... set_robust_list resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6767] chdir("./167" [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6767] <... chdir resumed>) = 0 [pid 6765] <... write resumed>) = 2097152 [pid 6765] munmap(0x7fe7bae00000, 138412032 [pid 5062] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6767] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... openat resumed>) = 3 [pid 6767] <... prctl resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 6767] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6767] <... setpgid resumed>) = 0 [pid 5062] getdents64(3, [pid 6767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6767] <... openat resumed>) = 3 [pid 5062] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6767] write(3, "1000", 4 [pid 5062] newfstatat(AT_FDCWD, "./168/binderfs", [pid 6767] <... write resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6767] close(3 [pid 5062] unlink("./168/binderfs" [pid 6767] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6767] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6767] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6767] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6767] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6766] <... write resumed>) = 2097152 [pid 5062] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6767] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6766] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6767] <... mprotect resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6767] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6767] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6766] <... munmap resumed>) = 0 [pid 6765] <... munmap resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 6767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6766] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6765] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] newfstatat(4, "", ./strace-static-x86_64: Process 6768 attached [pid 6765] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6768] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6767] <... clone3 resumed> => {parent_tid=[6768]}, 88) = 6768 [pid 5062] getdents64(4, [pid 6766] <... openat resumed>) = 4 [pid 6768] <... rseq resumed>) = 0 [pid 6767] rt_sigprocmask(SIG_SETMASK, [], [pid 6766] ioctl(4, LOOP_SET_FD, 3 [pid 6765] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6768] set_robust_list(0x7fe7c32469a0, 24 [pid 6767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6768] <... set_robust_list resumed>) = 0 [pid 6767] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6768] rt_sigprocmask(SIG_SETMASK, [], [pid 6767] <... futex resumed>) = 0 [pid 6768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6767] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6768] memfd_create("syzkaller", 0) = 3 [pid 6768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6766] <... ioctl resumed>) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5062] close(4 [pid 6765] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6769 attached [pid 6766] close(3 [pid 6765] close(3 [pid 5062] <... close resumed>) = 0 [pid 6765] <... close resumed>) = 0 [pid 5062] rmdir("./168/file0" [pid 6765] close(4 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6769 [pid 5062] <... rmdir resumed>) = 0 [pid 6765] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 6765] mkdir("./file0", 0777 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6765] <... mkdir resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./168" [pid 6765] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6769] set_robust_list(0x55558e6e36a0, 24 [pid 6766] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6769] <... set_robust_list resumed>) = 0 [pid 6768] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6766] close(4 [pid 5062] mkdir("./169", 0777 [pid 6769] chdir("./168" [pid 5062] <... mkdir resumed>) = 0 [pid 6769] <... chdir resumed>) = 0 [pid 6766] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6769] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6766] mkdir("./file0", 0777 [pid 5062] <... openat resumed>) = 3 [pid 6769] <... prctl resumed>) = 0 [pid 6766] <... mkdir resumed>) = 0 [pid 6769] setpgid(0, 0 [pid 6766] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6769] <... setpgid resumed>) = 0 [ 157.819232][ T6766] loop0: detected capacity change from 0 to 4096 [ 157.825944][ T6765] loop2: detected capacity change from 0 to 4096 [ 157.853177][ T6765] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6769] write(3, "1000", 4) = 4 [pid 6769] close(3) = 0 [pid 6769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6769] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6769] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6769] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6770]}, 88) = 6770 ./strace-static-x86_64: Process 6770 attached [pid 6769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6769] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6770] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6769] <... futex resumed>) = 0 [pid 6770] <... rseq resumed>) = 0 [ 157.876822][ T6766] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6770] set_robust_list(0x7fe7c32469a0, 24 [pid 6769] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6768] <... write resumed>) = 2097152 [pid 6770] <... set_robust_list resumed>) = 0 [pid 6770] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6770] memfd_create("syzkaller", 0) = 3 [pid 6768] munmap(0x7fe7bae00000, 138412032 [pid 6770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6768] <... munmap resumed>) = 0 [pid 6766] <... mount resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6770] <... mmap resumed>) = 0x7fe7bae00000 [pid 6766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(3 [pid 6766] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 6768] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6768] ioctl(4, LOOP_SET_FD, 3 [pid 6766] chdir("./file0" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6766] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6771 attached [pid 6766] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6771] set_robust_list(0x55558e6e36a0, 24 [pid 6766] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6771 [pid 6771] <... set_robust_list resumed>) = 0 [pid 6768] <... ioctl resumed>) = 0 [pid 6766] <... futex resumed>) = 1 [pid 6764] <... futex resumed>) = 0 [pid 6764] exit_group(0) = ? [pid 6771] chdir("./169") = 0 [pid 6771] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6770] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6768] close(3 [pid 6766] +++ exited with 0 +++ [pid 6765] <... mount resumed>) = 0 [pid 6764] +++ exited with 0 +++ [pid 6771] <... prctl resumed>) = 0 [pid 6765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6764, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 6765] <... openat resumed>) = 3 [pid 6771] setpgid(0, 0 [pid 6768] <... close resumed>) = 0 [pid 6765] chdir("./file0" [pid 6768] close(4 [pid 6771] <... setpgid resumed>) = 0 [pid 6768] <... close resumed>) = 0 [pid 6765] <... chdir resumed>) = 0 [pid 6765] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6765] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6768] mkdir("./file0", 0777 [pid 6765] <... futex resumed>) = 1 [pid 6763] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6768] <... mkdir resumed>) = 0 [pid 6763] exit_group(0 [pid 5059] <... openat resumed>) = 3 [ 157.970789][ T6768] loop4: detected capacity change from 0 to 4096 [pid 6768] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6763] <... exit_group resumed>) = ? [pid 5059] newfstatat(3, "", [pid 6771] <... openat resumed>) = 3 [pid 6771] write(3, "1000", 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6771] <... write resumed>) = 4 [pid 5059] getdents64(3, [pid 6771] close(3) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6771] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6771] <... futex resumed>) = 0 [pid 6771] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6765] +++ exited with 0 +++ [pid 6763] +++ exited with 0 +++ [pid 5059] newfstatat(AT_FDCWD, "./170/binderfs", [pid 6771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6763, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] unlink("./170/binderfs" [pid 6771] <... mmap resumed>) = 0x7fe7c3226000 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... unlink resumed>) = 0 [pid 6771] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... restart_syscall resumed>) = 0 [pid 5059] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6771] <... mprotect resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6770] <... write resumed>) = 2097152 [pid 5061] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6772 attached [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6772] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6771] <... clone3 resumed> => {parent_tid=[6772]}, 88) = 6772 [pid 6770] munmap(0x7fe7bae00000, 138412032 [pid 6768] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./170/file0", [pid 6772] <... rseq resumed>) = 0 [pid 6771] rt_sigprocmask(SIG_SETMASK, [], [pid 6768] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6772] set_robust_list(0x7fe7c32469a0, 24 [pid 6771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6768] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6772] <... set_robust_list resumed>) = 0 [pid 6771] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6772] rt_sigprocmask(SIG_SETMASK, [], [pid 6771] <... futex resumed>) = 0 [pid 6768] chdir("./file0" [pid 5061] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6771] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6768] <... chdir resumed>) = 0 [pid 6772] memfd_create("syzkaller", 0 [pid 6768] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6768] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... openat resumed>) = 4 [pid 6768] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(4, "", [pid 6768] <... futex resumed>) = 1 [pid 6767] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6767] exit_group(0 [pid 5059] getdents64(4, [pid 6772] <... memfd_create resumed>) = 3 [pid 6767] <... exit_group resumed>) = ? [pid 6768] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6767] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6767, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5063] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] rmdir("./170/file0" [pid 5063] <... openat resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 158.018436][ T6768] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5063] getdents64(3, [pid 5061] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./170" [pid 5063] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./171", 0777 [pid 5063] newfstatat(AT_FDCWD, "./167/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./170/binderfs", [pid 5059] <... mkdir resumed>) = 0 [pid 6770] <... munmap resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6770] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] unlink("./167/binderfs" [pid 5059] <... openat resumed>) = 3 [pid 6770] <... openat resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5061] unlink("./170/binderfs" [pid 6770] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6772] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 6770] <... ioctl resumed>) = 0 [pid 5063] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6770] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6770] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./167/file0", [pid 6770] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6770] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./170/file0", [pid 6770] mkdir("./file0", 0777 [pid 5063] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6770] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 6770] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(4, "", [pid 5061] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./170/file0" [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./167/file0" [pid 5061] close(3) = 0 [pid 5061] rmdir("./170") = 0 [pid 5061] mkdir("./171", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 6772] <... write resumed>) = 2097152 [pid 5063] getdents64(3, [pid 6772] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6772] <... munmap resumed>) = 0 [pid 6772] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3) = 0 [pid 5063] rmdir("./167" [pid 6772] <... openat resumed>) = 4 [pid 6772] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... rmdir resumed>) = 0 [ 158.096702][ T6770] loop1: detected capacity change from 0 to 4096 [ 158.126089][ T6770] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] mkdir("./168", 0777 [pid 6772] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6772] close(3 [pid 5059] close(3 [pid 6772] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6772] close(4 [pid 5063] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 6772] <... close resumed>) = 0 [pid 6772] mkdir("./file0", 0777 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6772] <... mkdir resumed>) = 0 [pid 6772] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6773 ./strace-static-x86_64: Process 6773 attached [ 158.157851][ T6772] loop3: detected capacity change from 0 to 4096 [pid 6773] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6773] chdir("./171" [pid 5061] <... ioctl resumed>) = 0 [pid 6773] <... chdir resumed>) = 0 [pid 5061] close(3 [pid 6773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] <... close resumed>) = 0 [pid 6773] setpgid(0, 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6773] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6774 attached [pid 6773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6773] write(3, "1000", 4 [pid 6774] set_robust_list(0x55558e6e36a0, 24 [pid 6773] <... write resumed>) = 4 [pid 6774] <... set_robust_list resumed>) = 0 [pid 6773] close(3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6774 [pid 6773] <... close resumed>) = 0 [pid 6774] chdir("./171" [pid 6773] symlink("/dev/binderfs", "./binderfs" [pid 6774] <... chdir resumed>) = 0 [pid 6774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6773] <... symlink resumed>) = 0 [pid 6774] <... prctl resumed>) = 0 [pid 6774] setpgid(0, 0) = 0 [pid 6773] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6773] <... futex resumed>) = 0 [pid 6773] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6774] <... openat resumed>) = 3 [pid 6774] write(3, "1000", 4 [pid 6773] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6774] <... write resumed>) = 4 [pid 6773] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6774] close(3 [pid 6773] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6774] <... close resumed>) = 0 [pid 6773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6774] symlink("/dev/binderfs", "./binderfs" [pid 6773] <... mmap resumed>) = 0x7fe7c3226000 [pid 6774] <... symlink resumed>) = 0 [pid 6773] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6774] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6773] <... mprotect resumed>) = 0 [pid 6774] <... futex resumed>) = 0 [pid 6773] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6774] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6773] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6774] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [ 158.204852][ T6772] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6774] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 6775 attached [pid 5063] <... ioctl resumed>) = 0 [pid 6775] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6775] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6773] <... clone3 resumed> => {parent_tid=[6775]}, 88) = 6775 [pid 6775] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6773] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6773] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6770] <... mount resumed>) = 0 [pid 5063] close(3 [pid 6775] <... futex resumed>) = 0 [pid 6774] <... mmap resumed>) = 0x7fe7c3226000 [pid 6773] <... futex resumed>) = 1 [pid 6770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6775] memfd_create("syzkaller", 0 [pid 6774] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6773] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 6775] <... memfd_create resumed>) = 3 [pid 6774] <... mprotect resumed>) = 0 [pid 6770] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6774] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6770] chdir("./file0"./strace-static-x86_64: Process 6776 attached [pid 6775] <... mmap resumed>) = 0x7fe7bae00000 [pid 6774] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6770] <... chdir resumed>) = 0 [pid 6774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6770] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6776] set_robust_list(0x55558e6e36a0, 24./strace-static-x86_64: Process 6777 attached ) = 0 [pid 6770] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6776 [pid 6777] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6776] chdir("./168" [pid 6774] <... clone3 resumed> => {parent_tid=[6777]}, 88) = 6777 [pid 6772] <... mount resumed>) = 0 [pid 6770] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6777] <... rseq resumed>) = 0 [pid 6776] <... chdir resumed>) = 0 [pid 6774] rt_sigprocmask(SIG_SETMASK, [], [pid 6772] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6770] <... futex resumed>) = 1 [pid 6769] <... futex resumed>) = 0 [pid 6777] set_robust_list(0x7fe7c32469a0, 24 [pid 6776] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6772] <... openat resumed>) = 3 [pid 6770] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6769] exit_group(0 [pid 6777] <... set_robust_list resumed>) = 0 [pid 6776] <... prctl resumed>) = 0 [pid 6774] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] chdir("./file0" [pid 6770] <... futex resumed>) = ? [pid 6769] <... exit_group resumed>) = ? [pid 6777] rt_sigprocmask(SIG_SETMASK, [], [pid 6776] setpgid(0, 0 [pid 6774] <... futex resumed>) = 0 [pid 6772] <... chdir resumed>) = 0 [pid 6777] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6776] <... setpgid resumed>) = 0 [pid 6772] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6777] memfd_create("syzkaller", 0 [pid 6776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6774] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6772] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6770] +++ exited with 0 +++ [pid 6769] +++ exited with 0 +++ [pid 6772] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6769, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6772] <... futex resumed>) = 1 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6772] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... restart_syscall resumed>) = 0 [pid 6771] <... futex resumed>) = 0 [pid 6776] <... openat resumed>) = 3 [pid 6777] <... memfd_create resumed>) = 3 [pid 6777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6776] write(3, "1000", 4 [pid 5060] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6776] <... write resumed>) = 4 [pid 6771] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6771] <... exit_group resumed>) = ? [pid 5060] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", [pid 6776] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6776] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 6776] symlink("/dev/binderfs", "./binderfs" [pid 6772] <... futex resumed>) = ? [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6776] <... symlink resumed>) = 0 [pid 6772] +++ exited with 0 +++ [pid 6771] +++ exited with 0 +++ [pid 5060] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6771, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6777] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6776] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6776] <... futex resumed>) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5060] newfstatat(AT_FDCWD, "./168/binderfs", [pid 6776] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] <... restart_syscall resumed>) = 0 [pid 6776] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6776] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] unlink("./168/binderfs" [pid 6776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... unlink resumed>) = 0 [pid 6776] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6776] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6776] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6776] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6778 attached [pid 5062] <... openat resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./168/file0", [pid 6778] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6776] <... clone3 resumed> => {parent_tid=[6778]}, 88) = 6778 [pid 6778] <... rseq resumed>) = 0 [pid 6776] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6778] set_robust_list(0x7fe7c32469a0, 24 [pid 6776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6778] <... set_robust_list resumed>) = 0 [pid 6776] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6778] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6778] memfd_create("syzkaller", 0 [pid 5062] newfstatat(AT_FDCWD, "./169/binderfs", [pid 5060] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(4, "", [pid 6778] <... memfd_create resumed>) = 3 [pid 6776] <... futex resumed>) = 0 [pid 5062] unlink("./169/binderfs" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] getdents64(4, [pid 5062] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6776] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 6778] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./168/file0") = 0 [pid 6777] <... write resumed>) = 2097152 [pid 5060] getdents64(3, [pid 6777] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./168" [pid 5062] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./169", 0777 [pid 5062] newfstatat(AT_FDCWD, "./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] <... mkdir resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 6777] <... munmap resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 6777] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 6777] <... openat resumed>) = 4 [pid 5062] getdents64(4, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6777] ioctl(4, LOOP_SET_FD, 3 [pid 6775] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./169/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./169") = 0 [pid 5062] mkdir("./170", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6775] munmap(0x7fe7bae00000, 138412032 [pid 6778] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6777] <... ioctl resumed>) = 0 [pid 6777] close(3 [pid 6775] <... munmap resumed>) = 0 [pid 6777] <... close resumed>) = 0 [pid 6777] close(4) = 0 [pid 6775] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6777] mkdir("./file0", 0777 [pid 6775] <... openat resumed>) = 4 [pid 6777] <... mkdir resumed>) = 0 [ 158.389278][ T6777] loop2: detected capacity change from 0 to 4096 [ 158.424582][ T6775] loop0: detected capacity change from 0 to 4096 [pid 6775] ioctl(4, LOOP_SET_FD, 3 [pid 6777] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6778] <... write resumed>) = 2097152 [pid 6775] <... ioctl resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6778] munmap(0x7fe7bae00000, 138412032 [pid 6775] close(3 [pid 5060] close(3) = 0 [pid 6775] <... close resumed>) = 0 [pid 6775] close(4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6778] <... munmap resumed>) = 0 [pid 6775] <... close resumed>) = 0 [pid 6775] mkdir("./file0", 0777 [pid 5062] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6779 attached [pid 6778] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6775] <... mkdir resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6775] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6779] set_robust_list(0x55558e6e36a0, 24 [pid 6778] <... openat resumed>) = 4 [pid 6779] <... set_robust_list resumed>) = 0 [ 158.441180][ T6777] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6778] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6780 attached [pid 6780] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6780] chdir("./170" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6780 [pid 6780] <... chdir resumed>) = 0 [pid 6780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6780] setpgid(0, 0 [pid 6779] chdir("./169" [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6779 [pid 6780] <... setpgid resumed>) = 0 [pid 6779] <... chdir resumed>) = 0 [pid 6778] <... ioctl resumed>) = 0 [pid 6779] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6778] close(3 [pid 6779] <... prctl resumed>) = 0 [pid 6778] <... close resumed>) = 0 [pid 6780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6779] setpgid(0, 0 [pid 6778] close(4 [pid 6779] <... setpgid resumed>) = 0 [pid 6778] <... close resumed>) = 0 [pid 6779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6778] mkdir("./file0", 0777 [pid 6780] write(3, "1000", 4) = 4 [pid 6778] <... mkdir resumed>) = 0 [pid 6780] close(3 [pid 6778] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6780] <... close resumed>) = 0 [pid 6780] symlink("/dev/binderfs", "./binderfs" [pid 6779] <... openat resumed>) = 3 [pid 6780] <... symlink resumed>) = 0 [pid 6780] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6780] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6780] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6780] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6779] write(3, "1000", 4 [pid 6780] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6779] <... write resumed>) = 4 [pid 6775] <... mount resumed>) = 0 [pid 6780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6779] close(3./strace-static-x86_64: Process 6781 attached ) = 0 [pid 6775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6781] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6780] <... clone3 resumed> => {parent_tid=[6781]}, 88) = 6781 [pid 6779] symlink("/dev/binderfs", "./binderfs" [pid 6775] <... openat resumed>) = 3 [pid 6781] <... rseq resumed>) = 0 [pid 6780] rt_sigprocmask(SIG_SETMASK, [], [pid 6781] set_robust_list(0x7fe7c32469a0, 24 [pid 6780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6779] <... symlink resumed>) = 0 [pid 6775] chdir("./file0" [pid 6781] <... set_robust_list resumed>) = 0 [pid 6780] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6779] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] <... chdir resumed>) = 0 [pid 6781] rt_sigprocmask(SIG_SETMASK, [], [pid 6780] <... futex resumed>) = 0 [pid 6779] <... futex resumed>) = 0 [pid 6775] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6779] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6780] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6779] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6775] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6781] memfd_create("syzkaller", 0 [pid 6779] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6775] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6781] <... memfd_create resumed>) = 3 [pid 6779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6775] <... futex resumed>) = 1 [pid 6773] <... futex resumed>) = 0 [pid 6779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6775] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6773] exit_group(0 [pid 6781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6775] <... futex resumed>) = ? [pid 6773] <... exit_group resumed>) = ? [pid 6781] <... mmap resumed>) = 0x7fe7bae00000 [pid 6779] <... mmap resumed>) = 0x7fe7c3226000 [pid 6775] +++ exited with 0 +++ [pid 6773] +++ exited with 0 +++ [ 158.495308][ T6775] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 158.504732][ T6778] loop4: detected capacity change from 0 to 4096 [ 158.533253][ T6778] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6773, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6779] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6779] <... mprotect resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6779] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6779] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6779] <... clone3 resumed> => {parent_tid=[6782]}, 88) = 6782 [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6782 attached [pid 6779] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6777] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6782] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6779] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6782] <... rseq resumed>) = 0 [pid 6779] <... futex resumed>) = 0 [pid 6777] <... openat resumed>) = 3 [pid 5059] newfstatat(AT_FDCWD, "./171/binderfs", [pid 6782] set_robust_list(0x7fe7c32469a0, 24 [pid 6779] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6777] chdir("./file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6782] <... set_robust_list resumed>) = 0 [pid 6777] <... chdir resumed>) = 0 [pid 5059] unlink("./171/binderfs" [pid 6782] rt_sigprocmask(SIG_SETMASK, [], [pid 6777] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... unlink resumed>) = 0 [pid 6782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6777] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6777] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6777] <... futex resumed>) = 1 [pid 6774] <... futex resumed>) = 0 [pid 6777] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6774] exit_group(0 [pid 6777] <... futex resumed>) = ? [pid 6774] <... exit_group resumed>) = ? [pid 6782] memfd_create("syzkaller", 0 [pid 6778] <... mount resumed>) = 0 [pid 6777] +++ exited with 0 +++ [pid 6774] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6774, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./171/file0", [pid 5061] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6782] <... memfd_create resumed>) = 3 [pid 6778] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(3, [pid 5059] <... openat resumed>) = 4 [pid 6782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6778] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(4, "", [pid 6782] <... mmap resumed>) = 0x7fe7bae00000 [pid 6778] chdir("./file0" [pid 5061] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6778] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 6778] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./171/binderfs", [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6778] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6778] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6776] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, [pid 6778] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6776] exit_group(0 [pid 5061] unlink("./171/binderfs" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6778] <... futex resumed>) = ? [pid 6776] <... exit_group resumed>) = ? [pid 5061] <... unlink resumed>) = 0 [pid 5059] close(4 [pid 6778] +++ exited with 0 +++ [pid 5061] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./171/file0" [pid 6781] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6776] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6776, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", [pid 5061] newfstatat(AT_FDCWD, "./171/file0", [pid 5059] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./171" [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... rmdir resumed>) = 0 [pid 5063] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./168/binderfs" [pid 5061] <... openat resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 5059] mkdir("./172", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5063] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(4, "", [pid 5061] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6782] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] getdents64(4, [pid 5061] close(4) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5061] rmdir("./171/file0" [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(3, [pid 5063] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5063] close(4 [pid 5061] <... close resumed>) = 0 [pid 6781] <... write resumed>) = 2097152 [pid 5063] <... close resumed>) = 0 [pid 5061] rmdir("./171" [pid 6781] munmap(0x7fe7bae00000, 138412032 [pid 5063] rmdir("./168/file0" [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] mkdir("./172", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] close(3) = 0 [pid 5063] rmdir("./168" [pid 6781] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6781] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5063] mkdir("./169", 0777 [pid 6781] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6781] <... ioctl resumed>) = 0 [pid 6781] close(3) = 0 [pid 6781] close(4 [pid 6782] <... write resumed>) = 2097152 [pid 6782] munmap(0x7fe7bae00000, 138412032 [pid 6781] <... close resumed>) = 0 [pid 6782] <... munmap resumed>) = 0 [pid 6782] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6781] mkdir("./file0", 0777 [pid 5059] <... ioctl resumed>) = 0 [pid 6781] <... mkdir resumed>) = 0 [ 158.699774][ T6781] loop3: detected capacity change from 0 to 4096 [pid 6781] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6782] <... openat resumed>) = 4 [pid 6782] ioctl(4, LOOP_SET_FD, 3 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6782] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6783 attached [pid 6782] close(3) = 0 [pid 6782] close(4) = 0 [pid 6782] mkdir("./file0", 0777 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6783 [pid 6782] <... mkdir resumed>) = 0 [pid 6783] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6782] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6783] chdir("./172") = 0 [ 158.752224][ T6781] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 158.762427][ T6782] loop1: detected capacity change from 0 to 4096 [pid 6783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6783] setpgid(0, 0 [pid 5063] close(3 [pid 5061] <... ioctl resumed>) = 0 [pid 6783] <... setpgid resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6784 [pid 6783] write(3, "1000", 4) = 4 [pid 6783] close(3) = 0 [pid 6783] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6785 attached ./strace-static-x86_64: Process 6784 attached [pid 6783] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6785 [pid 6784] set_robust_list(0x55558e6e36a0, 24 [pid 6783] <... futex resumed>) = 0 [pid 6784] <... set_robust_list resumed>) = 0 [pid 6783] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6784] chdir("./169" [pid 6783] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6784] <... chdir resumed>) = 0 [pid 6783] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6784] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6783] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6784] <... prctl resumed>) = 0 [pid 6783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6784] setpgid(0, 0 [pid 6783] <... mmap resumed>) = 0x7fe7c3226000 [pid 6784] <... setpgid resumed>) = 0 [pid 6783] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6783] <... mprotect resumed>) = 0 [pid 6785] set_robust_list(0x55558e6e36a0, 24 [pid 6783] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6785] <... set_robust_list resumed>) = 0 [pid 6784] <... openat resumed>) = 3 [pid 6783] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6785] chdir("./172" [pid 6784] write(3, "1000", 4 [pid 6783] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6786 attached [pid 6785] <... chdir resumed>) = 0 [pid 6784] <... write resumed>) = 4 [pid 6786] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6785] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6784] close(3 [pid 6783] <... clone3 resumed> => {parent_tid=[6786]}, 88) = 6786 [pid 6786] <... rseq resumed>) = 0 [pid 6785] <... prctl resumed>) = 0 [pid 6784] <... close resumed>) = 0 [pid 6783] rt_sigprocmask(SIG_SETMASK, [], [pid 6786] set_robust_list(0x7fe7c32469a0, 24 [pid 6785] setpgid(0, 0 [pid 6784] symlink("/dev/binderfs", "./binderfs" [pid 6783] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6786] <... set_robust_list resumed>) = 0 [pid 6785] <... setpgid resumed>) = 0 [pid 6784] <... symlink resumed>) = 0 [pid 6783] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6786] rt_sigprocmask(SIG_SETMASK, [], [pid 6785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6784] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] <... futex resumed>) = 0 [pid 6786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6785] <... openat resumed>) = 3 [pid 6784] <... futex resumed>) = 0 [pid 6783] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6786] memfd_create("syzkaller", 0 [pid 6785] write(3, "1000", 4 [pid 6784] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6781] <... mount resumed>) = 0 [pid 6786] <... memfd_create resumed>) = 3 [pid 6785] <... write resumed>) = 4 [pid 6784] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6781] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6785] close(3 [pid 6784] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6781] <... openat resumed>) = 3 [pid 6786] <... mmap resumed>) = 0x7fe7bae00000 [pid 6785] <... close resumed>) = 0 [pid 6784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6781] chdir("./file0" [pid 6785] symlink("/dev/binderfs", "./binderfs" [pid 6784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 158.800667][ T6782] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6785] <... symlink resumed>) = 0 [pid 6784] <... mmap resumed>) = 0x7fe7c3226000 [pid 6781] <... chdir resumed>) = 0 [pid 6785] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6781] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6785] <... futex resumed>) = 0 [pid 6784] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6781] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6785] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6784] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6785] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6785] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 6787 attached NULL, 8) = 0 [pid 6784] <... clone3 resumed> => {parent_tid=[6787]}, 88) = 6787 [pid 6785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6784] rt_sigprocmask(SIG_SETMASK, [], [pid 6787] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6785] <... mmap resumed>) = 0x7fe7c3226000 [pid 6784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6787] <... rseq resumed>) = 0 [pid 6785] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6784] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6781] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6787] set_robust_list(0x7fe7c32469a0, 24 [pid 6785] <... mprotect resumed>) = 0 [pid 6784] <... futex resumed>) = 0 [pid 6781] <... futex resumed>) = 1 [pid 6780] <... futex resumed>) = 0 [pid 6787] <... set_robust_list resumed>) = 0 [pid 6785] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6784] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6781] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6780] exit_group(0 [pid 6787] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6785] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6780] <... exit_group resumed>) = ? [pid 6785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6781] <... futex resumed>) = ? [pid 6785] <... clone3 resumed> => {parent_tid=[6788]}, 88) = 6788 [pid 6785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6788 attached [pid 6785] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6788] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6787] memfd_create("syzkaller", 0 [pid 6788] set_robust_list(0x7fe7c32469a0, 24 [pid 6781] +++ exited with 0 +++ [pid 6780] +++ exited with 0 +++ [pid 6788] <... set_robust_list resumed>) = 0 [pid 6787] <... memfd_create resumed>) = 3 [pid 6788] rt_sigprocmask(SIG_SETMASK, [], [pid 6787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6780, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6788] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6787] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 6788] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6782] <... mount resumed>) = 0 [pid 5062] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./170/binderfs") = 0 [pid 5062] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6782] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6788] <... mmap resumed>) = 0x7fe7bae00000 [pid 6782] <... openat resumed>) = 3 [pid 6782] chdir("./file0") = 0 [pid 6782] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6782] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6779] <... futex resumed>) = 0 [pid 6782] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6779] exit_group(0 [pid 6782] <... futex resumed>) = ? [pid 6779] <... exit_group resumed>) = ? [pid 6782] +++ exited with 0 +++ [pid 6779] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6779, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6786] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 6787] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6788] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6786] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(3, "", [pid 5062] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(4, "", [pid 5060] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(4, [pid 5060] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5060] newfstatat(AT_FDCWD, "./169/binderfs", [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(4 [pid 5060] unlink("./169/binderfs" [pid 6786] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... close resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5062] rmdir("./170/file0" [pid 5060] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = 0 [pid 6787] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6787] munmap(0x7fe7bae00000, 138412032 [pid 5062] close(3 [pid 6786] <... munmap resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./170" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6787] <... munmap resumed>) = 0 [pid 5062] mkdir("./171", 0777 [pid 5060] <... openat resumed>) = 4 [pid 6786] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6787] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6786] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6787] <... openat resumed>) = 4 [pid 6786] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] getdents64(4, [pid 6788] <... write resumed>) = 2097152 [pid 6787] ioctl(4, LOOP_SET_FD, 3 [pid 6786] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6786] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6786] <... close resumed>) = 0 [pid 5060] getdents64(4, [pid 6786] close(4 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6786] <... close resumed>) = 0 [pid 5060] close(4 [pid 6786] mkdir("./file0", 0777 [pid 5060] <... close resumed>) = 0 [pid 6786] <... mkdir resumed>) = 0 [pid 5060] rmdir("./169/file0") = 0 [pid 6786] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 6788] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./169") = 0 [pid 5060] mkdir("./170", 0777 [pid 6788] <... munmap resumed>) = 0 [pid 6787] <... ioctl resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 6788] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6787] close(3) = 0 [pid 6787] close(4) = 0 [pid 6787] mkdir("./file0", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6787] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... openat resumed>) = 3 [pid 6788] <... openat resumed>) = 4 [pid 5060] ioctl(3, LOOP_CLR_FD [ 158.998928][ T6786] loop0: detected capacity change from 0 to 4096 [ 158.999742][ T6787] loop4: detected capacity change from 0 to 4096 [ 159.018524][ T6786] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6788] ioctl(4, LOOP_SET_FD, 3 [pid 6786] <... mount resumed>) = 0 [pid 6786] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6786] chdir("./file0") = 0 [pid 6786] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6788] <... ioctl resumed>) = 0 [pid 6786] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] close(3 [pid 6786] <... futex resumed>) = 1 [pid 6783] <... futex resumed>) = 0 [pid 6788] <... close resumed>) = 0 [pid 6786] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6783] exit_group(0 [pid 6788] close(4 [pid 6786] <... futex resumed>) = ? [pid 6783] <... exit_group resumed>) = ? [pid 6788] <... close resumed>) = 0 [pid 6786] +++ exited with 0 +++ [pid 6783] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6783, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6788] mkdir("./file0", 0777) = 0 [ 159.047461][ T6787] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 159.057255][ T6788] loop2: detected capacity change from 0 to 4096 [pid 6788] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 5059] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6789 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6789 attached 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6789] set_robust_list(0x55558e6e36a0, 24 [pid 5059] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6789] <... set_robust_list resumed>) = 0 [pid 6789] chdir("./171" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./172/binderfs", [pid 6789] <... chdir resumed>) = 0 [pid 6789] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6789] <... prctl resumed>) = 0 [pid 6789] setpgid(0, 0 [pid 5059] unlink("./172/binderfs" [pid 6789] <... setpgid resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... ioctl resumed>) = 0 [pid 5059] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6789] <... openat resumed>) = 3 [pid 6789] write(3, "1000", 4) = 4 [pid 5060] close(3 [pid 6789] close(3 [pid 5060] <... close resumed>) = 0 [pid 6789] <... close resumed>) = 0 [pid 6789] symlink("/dev/binderfs", "./binderfs" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6789] <... symlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6790 attached [pid 6789] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6790 [pid 6790] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6790] chdir("./170" [pid 6789] <... futex resumed>) = 0 [pid 5059] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6789] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6790] <... chdir resumed>) = 0 [pid 6789] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6790] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6789] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] newfstatat(AT_FDCWD, "./172/file0", [pid 6790] <... prctl resumed>) = 0 [pid 6787] <... mount resumed>) = 0 [pid 6790] setpgid(0, 0 [pid 6789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6787] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6790] <... setpgid resumed>) = 0 [pid 6789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6787] <... openat resumed>) = 3 [pid 5059] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6789] <... mmap resumed>) = 0x7fe7c3226000 [pid 6787] chdir("./file0" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6790] <... openat resumed>) = 3 [pid 6787] <... chdir resumed>) = 0 [ 159.111752][ T6788] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5059] openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6790] write(3, "1000", 4 [pid 6787] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6789] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... openat resumed>) = 4 [pid 6790] <... write resumed>) = 4 [pid 6790] close(3) = 0 [pid 6790] symlink("/dev/binderfs", "./binderfs" [pid 6789] <... mprotect resumed>) = 0 [pid 6787] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] newfstatat(4, "", [pid 6789] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6789] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6788] <... mount resumed>) = 0 [pid 6787] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(4, [pid 6789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6787] <... futex resumed>) = 1 [pid 6787] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6784] <... futex resumed>) = 0 [pid 6788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] getdents64(4, [pid 6789] <... clone3 resumed> => {parent_tid=[6791]}, 88) = 6791 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6789] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] close(4 [pid 6789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6789] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... close resumed>) = 0 [pid 6789] <... futex resumed>) = 0 [pid 5059] rmdir("./172/file0" [pid 6789] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6791 attached [pid 6790] <... symlink resumed>) = 0 [pid 6788] <... openat resumed>) = 3 [pid 6784] exit_group(0 [pid 5059] <... rmdir resumed>) = 0 [pid 6791] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6790] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] chdir("./file0" [pid 6787] <... futex resumed>) = ? [pid 6784] <... exit_group resumed>) = ? [pid 5059] getdents64(3, [pid 6791] <... rseq resumed>) = 0 [pid 6790] <... futex resumed>) = 0 [pid 6788] <... chdir resumed>) = 0 [pid 6787] +++ exited with 0 +++ [pid 6791] set_robust_list(0x7fe7c32469a0, 24 [pid 6790] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6791] <... set_robust_list resumed>) = 0 [pid 6790] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6788] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] close(3 [pid 6791] rt_sigprocmask(SIG_SETMASK, [], [pid 6790] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6788] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6784] +++ exited with 0 +++ [pid 5059] <... close resumed>) = 0 [pid 6791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6788] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] rmdir("./172" [pid 6791] memfd_create("syzkaller", 0 [pid 6790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6788] <... futex resumed>) = 1 [pid 6785] <... futex resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6784, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] <... rmdir resumed>) = 0 [pid 6791] <... memfd_create resumed>) = 3 [pid 6790] <... mmap resumed>) = 0x7fe7c3226000 [pid 6788] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6785] exit_group(0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5059] mkdir("./173", 0777 [pid 6791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6790] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6788] <... futex resumed>) = ? [pid 6785] <... exit_group resumed>) = ? [pid 5063] <... restart_syscall resumed>) = 0 [pid 6791] <... mmap resumed>) = 0x7fe7bae00000 [pid 6790] <... mprotect resumed>) = 0 [pid 6788] +++ exited with 0 +++ [pid 6785] +++ exited with 0 +++ [pid 5059] <... mkdir resumed>) = 0 [pid 6790] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6785, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6790] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6792 attached [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 3 [pid 6790] <... clone3 resumed> => {parent_tid=[6792]}, 88) = 6792 [pid 6792] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6790] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6792] <... rseq resumed>) = 0 [pid 6790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6792] set_robust_list(0x7fe7c32469a0, 24 [pid 6790] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6792] <... set_robust_list resumed>) = 0 [pid 6790] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6792] rt_sigprocmask(SIG_SETMASK, [], [pid 6790] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(3, [pid 6792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(3, "", [pid 5063] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5063] newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] unlink("./169/binderfs" [pid 5061] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6792] memfd_create("syzkaller", 0 [pid 5063] <... unlink resumed>) = 0 [pid 6792] <... memfd_create resumed>) = 3 [pid 5063] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./172/binderfs") = 0 [pid 6791] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... ioctl resumed>) = 0 [pid 6792] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./169/file0", [pid 5061] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 6791] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6793 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./172/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./172"./strace-static-x86_64: Process 6793 attached [pid 6792] <... write resumed>) = 2097152 [pid 6791] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 6793] set_robust_list(0x55558e6e36a0, 24 [pid 5063] newfstatat(4, "", [pid 5061] mkdir("./173", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6793] <... set_robust_list resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, [pid 6793] chdir("./173" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6793] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6793] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(4, [pid 5061] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] close(4) = 0 [pid 5063] rmdir("./169/file0" [pid 6793] <... prctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6793] setpgid(0, 0 [pid 5063] getdents64(3, [pid 6793] <... setpgid resumed>) = 0 [pid 6792] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3) = 0 [pid 5063] rmdir("./169" [pid 6793] <... openat resumed>) = 3 [pid 6793] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 6793] <... write resumed>) = 4 [pid 5063] mkdir("./170", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6793] close(3 [pid 5063] <... openat resumed>) = 3 [pid 6793] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6793] symlink("/dev/binderfs", "./binderfs" [pid 6791] <... munmap resumed>) = 0 [pid 6793] <... symlink resumed>) = 0 [pid 6792] <... munmap resumed>) = 0 [pid 6793] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6792] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6791] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6793] <... futex resumed>) = 0 [pid 6793] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6792] <... openat resumed>) = 4 [pid 6793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6791] <... openat resumed>) = 4 [pid 6793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6791] ioctl(4, LOOP_SET_FD, 3 [pid 6793] <... mmap resumed>) = 0x7fe7c3226000 [pid 6792] ioctl(4, LOOP_SET_FD, 3 [pid 6793] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6792] <... ioctl resumed>) = 0 [pid 6791] <... ioctl resumed>) = 0 [pid 6792] close(3 [pid 6791] close(3 [pid 6792] <... close resumed>) = 0 [pid 6791] <... close resumed>) = 0 [pid 6792] close(4 [pid 6791] close(4 [pid 6792] <... close resumed>) = 0 [pid 6791] <... close resumed>) = 0 [pid 6792] mkdir("./file0", 0777 [pid 6791] mkdir("./file0", 0777 [pid 6792] <... mkdir resumed>) = 0 [pid 6791] <... mkdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 6792] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 159.350569][ T6792] loop1: detected capacity change from 0 to 4096 [ 159.351122][ T6791] loop3: detected capacity change from 0 to 4096 [ 159.388835][ T6791] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6791] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6793] <... mprotect resumed>) = 0 [pid 6793] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 6793] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... close resumed>) = 0 [pid 5061] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6794 attached [pid 6793] <... clone3 resumed> => {parent_tid=[6794]}, 88) = 6794 ./strace-static-x86_64: Process 6795 attached [pid 6793] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6796 attached [pid 6795] set_robust_list(0x55558e6e36a0, 24 [pid 6794] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6795 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6796 [pid 6795] <... set_robust_list resumed>) = 0 [pid 6794] <... rseq resumed>) = 0 [pid 6793] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] chdir("./170" [pid 6794] set_robust_list(0x7fe7c32469a0, 24 [pid 6793] <... futex resumed>) = 0 [pid 6794] <... set_robust_list resumed>) = 0 [pid 6793] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6796] set_robust_list(0x55558e6e36a0, 24 [pid 6794] rt_sigprocmask(SIG_SETMASK, [], [pid 6796] <... set_robust_list resumed>) = 0 [pid 6796] chdir("./173" [pid 6794] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6796] <... chdir resumed>) = 0 [pid 6796] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6794] memfd_create("syzkaller", 0 [pid 6796] <... prctl resumed>) = 0 [pid 6795] <... chdir resumed>) = 0 [pid 6794] <... memfd_create resumed>) = 3 [pid 6796] setpgid(0, 0 [pid 6795] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6796] <... setpgid resumed>) = 0 [pid 6795] <... prctl resumed>) = 0 [pid 6794] <... mmap resumed>) = 0x7fe7bae00000 [pid 6796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6795] setpgid(0, 0 [pid 6796] <... openat resumed>) = 3 [pid 6795] <... setpgid resumed>) = 0 [pid 6796] write(3, "1000", 4 [pid 6795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6796] <... write resumed>) = 4 [pid 6795] <... openat resumed>) = 3 [pid 6796] close(3) = 0 [pid 6795] write(3, "1000", 4 [pid 6796] symlink("/dev/binderfs", "./binderfs" [pid 6795] <... write resumed>) = 4 [pid 6796] <... symlink resumed>) = 0 [pid 6796] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6796] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6796] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6796] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6796] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6796] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6797]}, 88) = 6797 ./strace-static-x86_64: Process 6797 attached [pid 6796] rt_sigprocmask(SIG_SETMASK, [], [pid 6797] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6796] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6797] <... rseq resumed>) = 0 [pid 6796] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6797] set_robust_list(0x7fe7c32469a0, 24 [pid 6796] <... futex resumed>) = 0 [pid 6797] <... set_robust_list resumed>) = 0 [pid 6796] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 159.398099][ T6792] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6797] memfd_create("syzkaller", 0 [pid 6795] close(3 [pid 6792] <... mount resumed>) = 0 [pid 6792] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6792] chdir("./file0") = 0 [pid 6792] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6792] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6797] <... memfd_create resumed>) = 3 [pid 6795] <... close resumed>) = 0 [pid 6792] <... futex resumed>) = 1 [pid 6797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6792] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6795] symlink("/dev/binderfs", "./binderfs" [pid 6797] <... mmap resumed>) = 0x7fe7bae00000 [pid 6795] <... symlink resumed>) = 0 [pid 6795] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6795] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6795] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6790] <... futex resumed>) = 0 [pid 6795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6790] exit_group(0 [pid 6795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6790] <... exit_group resumed>) = ? [pid 6795] <... mmap resumed>) = 0x7fe7c3226000 [pid 6792] <... futex resumed>) = ? [pid 6795] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6792] +++ exited with 0 +++ [pid 6790] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6790, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6795] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6795] <... clone3 resumed> => {parent_tid=[6798]}, 88) = 6798 [pid 6791] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6791] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] newfstatat(3, "", ./strace-static-x86_64: Process 6798 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6798] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6791] <... openat resumed>) = 3 [pid 5060] getdents64(3, [pid 6798] <... rseq resumed>) = 0 [pid 6795] rt_sigprocmask(SIG_SETMASK, [], [pid 6791] chdir("./file0" [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6798] set_robust_list(0x7fe7c32469a0, 24 [pid 6791] <... chdir resumed>) = 0 [pid 6795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6798] <... set_robust_list resumed>) = 0 [pid 6791] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6798] rt_sigprocmask(SIG_SETMASK, [], [pid 6795] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6791] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6795] <... futex resumed>) = 0 [pid 6795] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6798] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6791] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./170/binderfs", [pid 6791] <... futex resumed>) = 1 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6791] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] unlink("./170/binderfs") = 0 [pid 5060] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6798] memfd_create("syzkaller", 0) = 3 [pid 6789] <... futex resumed>) = 0 [pid 6798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6789] exit_group(0 [pid 6798] <... mmap resumed>) = 0x7fe7bae00000 [pid 6791] <... futex resumed>) = ? [pid 6789] <... exit_group resumed>) = ? [pid 6791] +++ exited with 0 +++ [pid 6789] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6789, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6794] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./171/binderfs", [pid 5060] newfstatat(AT_FDCWD, "./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6794] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6797] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] unlink("./171/binderfs" [pid 5060] openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./170/file0") = 0 [pid 5060] getdents64(3, [pid 6798] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6794] <... munmap resumed>) = 0 [pid 5062] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6794] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./170" [pid 6794] <... openat resumed>) = 4 [pid 5062] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 6794] ioctl(4, LOOP_SET_FD, 3 [pid 6797] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./171", 0777 [pid 5062] newfstatat(AT_FDCWD, "./171/file0", [pid 6797] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./171/file0") = 0 [pid 6798] <... write resumed>) = 2097152 [pid 6797] <... munmap resumed>) = 0 [pid 6794] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6798] munmap(0x7fe7bae00000, 138412032 [pid 6797] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6794] close(3 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... openat resumed>) = 3 [pid 6797] <... openat resumed>) = 4 [pid 6794] <... close resumed>) = 0 [pid 5062] close(3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6797] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... close resumed>) = 0 [pid 6798] <... munmap resumed>) = 0 [pid 6794] close(4 [pid 5062] rmdir("./171") = 0 [pid 5062] mkdir("./172", 0777) = 0 [pid 6798] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6798] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 6798] ioctl(4, LOOP_SET_FD, 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6797] <... ioctl resumed>) = 0 [pid 6794] <... close resumed>) = 0 [pid 6797] close(3 [pid 6794] mkdir("./file0", 0777 [pid 6797] <... close resumed>) = 0 [pid 6794] <... mkdir resumed>) = 0 [pid 6797] close(4) = 0 [pid 6797] mkdir("./file0", 0777 [pid 6794] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6797] <... mkdir resumed>) = 0 [ 159.592224][ T6794] loop0: detected capacity change from 0 to 4096 [ 159.618246][ T6797] loop2: detected capacity change from 0 to 4096 [ 159.624134][ T6798] loop4: detected capacity change from 0 to 4096 [pid 6797] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6798] <... ioctl resumed>) = 0 [pid 6798] close(3) = 0 [pid 6798] close(4) = 0 [pid 6798] mkdir("./file0", 0777) = 0 [pid 6798] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6799 attached [pid 6799] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6799] chdir("./171") = 0 [pid 6799] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6799 [pid 6799] <... prctl resumed>) = 0 [ 159.635391][ T6794] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 159.646498][ T6797] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 159.667405][ T6798] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6799] setpgid(0, 0) = 0 [pid 6799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... ioctl resumed>) = 0 [pid 6799] <... openat resumed>) = 3 [pid 6798] <... mount resumed>) = 0 [pid 6798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(3 [pid 6799] write(3, "1000", 4 [pid 6798] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 6799] <... write resumed>) = 4 [pid 6798] chdir("./file0" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6799] close(3 [pid 6798] <... chdir resumed>) = 0 [pid 6798] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6799] <... close resumed>) = 0 [pid 6798] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6798] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] symlink("/dev/binderfs", "./binderfs" [pid 6798] <... futex resumed>) = 1 [pid 6795] <... futex resumed>) = 0 [pid 6799] <... symlink resumed>) = 0 [pid 6798] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6797] <... mount resumed>) = 0 [pid 6795] exit_group(0./strace-static-x86_64: Process 6800 attached [pid 6799] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6798] <... futex resumed>) = ? [pid 6797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6795] <... exit_group resumed>) = ? [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6800 [pid 6800] set_robust_list(0x55558e6e36a0, 24 [pid 6799] <... futex resumed>) = 0 [pid 6800] <... set_robust_list resumed>) = 0 [pid 6799] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6800] chdir("./172" [pid 6799] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6797] <... openat resumed>) = 3 [pid 6799] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6797] chdir("./file0" [pid 6799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6798] +++ exited with 0 +++ [pid 6797] <... chdir resumed>) = 0 [pid 6795] +++ exited with 0 +++ [pid 6800] <... chdir resumed>) = 0 [pid 6799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6797] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6795, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6800] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6799] <... mmap resumed>) = 0x7fe7c3226000 [pid 6800] <... prctl resumed>) = 0 [pid 6799] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6800] setpgid(0, 0 [pid 6799] <... mprotect resumed>) = 0 [pid 6797] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6800] <... setpgid resumed>) = 0 [pid 6799] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6797] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6797] <... futex resumed>) = 1 [pid 6800] <... openat resumed>) = 3 [pid 6799] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6797] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6796] <... futex resumed>) = 0 [pid 6800] write(3, "1000", 4 [pid 6799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6796] exit_group(0 [pid 6794] <... mount resumed>) = 0 [pid 5063] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6801 attached [pid 6800] <... write resumed>) = 4 [pid 6797] <... futex resumed>) = ? [pid 6796] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6801] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6800] close(3 [pid 6799] <... clone3 resumed> => {parent_tid=[6801]}, 88) = 6801 [pid 6797] +++ exited with 0 +++ [pid 6794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6801] <... rseq resumed>) = 0 [pid 6800] <... close resumed>) = 0 [pid 6799] rt_sigprocmask(SIG_SETMASK, [], [pid 6796] +++ exited with 0 +++ [pid 6794] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 6801] set_robust_list(0x7fe7c32469a0, 24 [pid 6800] symlink("/dev/binderfs", "./binderfs" [pid 6799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(3, "", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6796, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6794] chdir("./file0" [pid 6801] <... set_robust_list resumed>) = 0 [pid 6800] <... symlink resumed>) = 0 [pid 6799] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6801] rt_sigprocmask(SIG_SETMASK, [], [pid 6800] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] <... futex resumed>) = 0 [pid 6794] <... chdir resumed>) = 0 [pid 5063] getdents64(3, [pid 6801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6800] <... futex resumed>) = 0 [pid 6799] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6794] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6800] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6801] memfd_create("syzkaller", 0 [pid 6800] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6794] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6801] <... memfd_create resumed>) = 3 [pid 6800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6794] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6794] <... futex resumed>) = 1 [pid 6793] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6801] <... mmap resumed>) = 0x7fe7bae00000 [pid 6800] <... mmap resumed>) = 0x7fe7c3226000 [pid 6794] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6793] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6800] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6794] <... futex resumed>) = ? [pid 6793] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./170/binderfs", [pid 5061] <... openat resumed>) = 3 [pid 6800] <... mprotect resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(3, "", [pid 6800] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] unlink("./170/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 6794] +++ exited with 0 +++ [pid 6793] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6800] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6793, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6802 attached [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... restart_syscall resumed>) = 0 [pid 6802] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6800] <... clone3 resumed> => {parent_tid=[6802]}, 88) = 6802 [pid 5061] newfstatat(AT_FDCWD, "./173/binderfs", [pid 6802] <... rseq resumed>) = 0 [pid 6800] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6802] set_robust_list(0x7fe7c32469a0, 24 [pid 6800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6802] <... set_robust_list resumed>) = 0 [pid 6800] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] unlink("./173/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6802] rt_sigprocmask(SIG_SETMASK, [], [pid 6800] <... futex resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6802] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6800] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... openat resumed>) = 3 [pid 6802] memfd_create("syzkaller", 0 [pid 5063] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(AT_FDCWD, "./173/binderfs", [pid 5063] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6802] <... memfd_create resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] unlink("./173/binderfs" [pid 6802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... openat resumed>) = 4 [pid 5059] <... unlink resumed>) = 0 [pid 6802] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] newfstatat(4, "", [pid 5061] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6801] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./173/file0", [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./170/file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 5063] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./170" [pid 5061] getdents64(4, [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./171", 0777 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] close(4) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] rmdir("./173/file0" [pid 5059] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6802] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6801] <... write resumed>) = 2097152 [pid 5061] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6801] munmap(0x7fe7bae00000, 138412032 [pid 5059] newfstatat(AT_FDCWD, "./173/file0", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./173" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6801] <... munmap resumed>) = 0 [pid 6802] <... write resumed>) = 2097152 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] mkdir("./174", 0777 [pid 6802] munmap(0x7fe7bae00000, 138412032 [pid 6801] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6801] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] newfstatat(4, "", [pid 6801] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6802] <... munmap resumed>) = 0 [pid 6802] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6802] ioctl(4, LOOP_SET_FD, 3 [pid 6801] <... ioctl resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6801] close(3 [pid 5059] getdents64(4, [pid 6801] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6801] close(4 [pid 5059] close(4 [pid 6801] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6802] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./173/file0") = 0 [pid 5059] getdents64(3, [pid 6801] mkdir("./file0", 0777 [pid 5063] close(3 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6802] close(3 [pid 5059] close(3 [pid 6802] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6802] close(4 [pid 5063] <... close resumed>) = 0 [pid 6802] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] rmdir("./173") = 0 ./strace-static-x86_64: Process 6803 attached [pid 6802] mkdir("./file0", 0777 [pid 6801] <... mkdir resumed>) = 0 [pid 5059] mkdir("./174", 0777 [pid 6802] <... mkdir resumed>) = 0 [pid 6801] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6803 [pid 5059] <... mkdir resumed>) = 0 [pid 6802] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 159.894069][ T6801] loop1: detected capacity change from 0 to 4096 [ 159.897892][ T6802] loop3: detected capacity change from 0 to 4096 [pid 6803] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6803] chdir("./171" [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6803] <... chdir resumed>) = 0 [pid 6803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6803] setpgid(0, 0) = 0 [pid 6803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6803] write(3, "1000", 4) = 4 [pid 6803] close(3) = 0 [pid 6803] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6803] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6803] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6803] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6803] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6803] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6803] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6804]}, 88) = 6804 [pid 6803] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6804 attached NULL, 8) = 0 [pid 6804] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6803] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6804] <... rseq resumed>) = 0 [pid 6803] <... futex resumed>) = 0 [pid 6804] set_robust_list(0x7fe7c32469a0, 24 [pid 6803] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6804] <... set_robust_list resumed>) = 0 [pid 6804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6804] memfd_create("syzkaller", 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6804] <... memfd_create resumed>) = 3 [ 159.935182][ T6802] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 159.945912][ T6801] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6805 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6805 [pid 6805] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6805] chdir("./174") = 0 [pid 6802] <... mount resumed>) = 0 [pid 6805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6802] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6805] setpgid(0, 0 [pid 6802] <... openat resumed>) = 3 [pid 6805] <... setpgid resumed>) = 0 [pid 6805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6802] chdir("./file0" [pid 6805] <... openat resumed>) = 3 [pid 6802] <... chdir resumed>) = 0 [pid 6805] write(3, "1000", 4) = 4 [pid 6804] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6802] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6805] close(3) = 0 [pid 6805] symlink("/dev/binderfs", "./binderfs" [pid 6802] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6805] <... symlink resumed>) = 0 [pid 6802] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6802] <... futex resumed>) = 1 [pid 6800] <... futex resumed>) = 0 [pid 6805] <... futex resumed>) = 0 [pid 6805] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6802] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6800] exit_group(0 [pid 6805] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6800] <... exit_group resumed>) = ? [pid 6805] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6802] <... futex resumed>) = ? [pid 6805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6802] +++ exited with 0 +++ [pid 6800] +++ exited with 0 +++ [pid 6805] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6805] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6800, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6805] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6806 attached [pid 6805] <... clone3 resumed> => {parent_tid=[6806]}, 88) = 6806 [pid 5062] <... openat resumed>) = 3 [pid 6806] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6805] rt_sigprocmask(SIG_SETMASK, [], [pid 6801] <... mount resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 6806] <... rseq resumed>) = 0 [pid 6805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6801] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] close(3 [pid 6806] set_robust_list(0x7fe7c32469a0, 24 [pid 6805] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6806] <... set_robust_list resumed>) = 0 [pid 6805] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6806] rt_sigprocmask(SIG_SETMASK, [], [pid 6801] <... openat resumed>) = 3 [pid 6805] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] getdents64(3, [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6806] memfd_create("syzkaller", 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6807 attached [pid 6801] chdir("./file0" [pid 5062] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6801] <... chdir resumed>) = 0 [pid 6801] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6807 [pid 6807] set_robust_list(0x55558e6e36a0, 24 [pid 5062] newfstatat(AT_FDCWD, "./172/binderfs", [pid 6807] <... set_robust_list resumed>) = 0 [pid 6807] chdir("./174" [pid 6801] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6807] <... chdir resumed>) = 0 [pid 6801] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] unlink("./172/binderfs" [pid 6801] <... futex resumed>) = 1 [pid 6807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6806] <... memfd_create resumed>) = 3 [pid 6804] <... write resumed>) = 2097152 [pid 6801] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] <... futex resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 6807] <... prctl resumed>) = 0 [pid 6806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6804] munmap(0x7fe7bae00000, 138412032 [pid 6799] exit_group(0 [pid 5062] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] setpgid(0, 0 [pid 6806] <... mmap resumed>) = 0x7fe7bae00000 [pid 6807] <... setpgid resumed>) = 0 [pid 6807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6801] <... futex resumed>) = ? [pid 6799] <... exit_group resumed>) = ? [pid 6801] +++ exited with 0 +++ [pid 6799] +++ exited with 0 +++ [pid 6807] <... openat resumed>) = 3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6799, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5060] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] write(3, "1000", 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6807] <... write resumed>) = 4 [pid 6807] close(3 [pid 6804] <... munmap resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6807] <... close resumed>) = 0 [pid 6806] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 6807] symlink("/dev/binderfs", "./binderfs" [pid 5062] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 6804] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] newfstatat(3, "", [pid 6804] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6807] <... symlink resumed>) = 0 [pid 6804] ioctl(4, LOOP_SET_FD, 3 [pid 5062] newfstatat(AT_FDCWD, "./172/file0", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6807] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] getdents64(3, [pid 6807] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6807] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6807] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6804] <... ioctl resumed>) = 0 [pid 6807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6806] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6806] munmap(0x7fe7bae00000, 138412032 [pid 6807] <... mmap resumed>) = 0x7fe7c3226000 [pid 6807] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6806] <... munmap resumed>) = 0 [pid 6804] close(3 [pid 5062] openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./171/binderfs", [pid 6807] <... mprotect resumed>) = 0 [pid 6806] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6804] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6806] ioctl(4, LOOP_SET_FD, 3 [pid 6804] close(4 [pid 5062] newfstatat(4, "", [pid 5060] unlink("./171/binderfs" [pid 6804] <... close resumed>) = 0 [pid 6804] mkdir("./file0", 0777) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6804] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./172/file0") = 0 [pid 5062] getdents64(3, [pid 6807] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6806] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6807] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6807] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6806] close(3 [pid 5062] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 6807] <... clone3 resumed> => {parent_tid=[6808]}, 88) = 6808 [pid 6806] <... close resumed>) = 0 [pid 6807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6807] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] close(4./strace-static-x86_64: Process 6808 attached [pid 6807] <... futex resumed>) = 0 [pid 6806] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 6808] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5062] rmdir("./172" [pid 6808] <... rseq resumed>) = 0 [pid 6807] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6806] mkdir("./file0", 0777 [pid 5062] <... rmdir resumed>) = 0 [pid 6808] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] mkdir("./173", 0777 [pid 5060] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6808] <... set_robust_list resumed>) = 0 [pid 6806] <... mkdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6808] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] newfstatat(AT_FDCWD, "./171/file0", [pid 6808] memfd_create("syzkaller", 0 [pid 6806] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6808] <... memfd_create resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 160.114668][ T6804] loop4: detected capacity change from 0 to 4096 [ 160.146169][ T6806] loop2: detected capacity change from 0 to 4096 [ 160.152690][ T6804] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6808] <... mmap resumed>) = 0x7fe7bae00000 [pid 6804] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6804] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6804] chdir("./file0") = 0 [pid 6804] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(4, [pid 6804] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6804] <... futex resumed>) = 1 [pid 5060] close(4 [pid 6804] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./171/file0" [pid 6803] <... futex resumed>) = 0 [pid 6803] exit_group(0) = ? [pid 5060] <... rmdir resumed>) = 0 [pid 6804] <... futex resumed>) = ? [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./171") = 0 [pid 6804] +++ exited with 0 +++ [pid 6803] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6803, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5060] mkdir("./172", 0777) = 0 [pid 5063] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 160.191556][ T6806] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(3, [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6808] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3) = 0 [pid 6808] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./171/binderfs" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6809 attached [pid 6808] munmap(0x7fe7bae00000, 138412032 [pid 6809] set_robust_list(0x55558e6e36a0, 24 [pid 6808] <... munmap resumed>) = 0 [pid 5063] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6809] <... set_robust_list resumed>) = 0 [pid 6809] chdir("./173" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6809 [pid 6809] <... chdir resumed>) = 0 [pid 6809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6809] setpgid(0, 0) = 0 [pid 6809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6809] write(3, "1000", 4) = 4 [pid 6809] close(3) = 0 [pid 6808] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 6809] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... ioctl resumed>) = 0 [pid 6808] <... openat resumed>) = 4 [pid 5063] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6809] <... symlink resumed>) = 0 [pid 6808] ioctl(4, LOOP_SET_FD, 3 [pid 5060] close(3 [pid 6809] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6809] <... futex resumed>) = 0 [pid 6806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./171/file0", [pid 6809] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6806] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6809] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6809] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6806] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6806] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6806] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 6809] <... mmap resumed>) = 0x7fe7c3226000 [pid 6806] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] newfstatat(4, "", [pid 6809] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6809] <... mprotect resumed>) = 0 [pid 6806] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 6809] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6806] <... futex resumed>) = 1 [pid 6805] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6809] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6806] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6805] exit_group(0 [pid 5063] getdents64(4, [pid 6809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6806] <... futex resumed>) = ? [pid 6805] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6810 attached [pid 6806] +++ exited with 0 +++ [pid 6805] +++ exited with 0 +++ [pid 5063] close(4 [pid 5060] <... close resumed>) = 0 [pid 6810] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6809] <... clone3 resumed> => {parent_tid=[6810]}, 88) = 6810 [pid 5063] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6810] <... rseq resumed>) = 0 [pid 6809] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] rmdir("./171/file0" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6805, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6810] set_robust_list(0x7fe7c32469a0, 24 [pid 6809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6810] <... set_robust_list resumed>) = 0 [pid 6809] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6810] rt_sigprocmask(SIG_SETMASK, [], [pid 6809] <... futex resumed>) = 0 [pid 6810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6809] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6811 attached [pid 6810] memfd_create("syzkaller", 0 [pid 6808] <... ioctl resumed>) = 0 [pid 5063] getdents64(3, [pid 6811] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6811 [pid 6808] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6811] <... set_robust_list resumed>) = 0 [pid 6810] <... memfd_create resumed>) = 3 [pid 6808] <... close resumed>) = 0 [pid 5063] rmdir("./171" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6811] chdir("./172" [pid 6810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6808] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6811] <... chdir resumed>) = 0 [pid 6810] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] <... openat resumed>) = 3 [pid 6811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6808] <... close resumed>) = 0 [pid 5063] mkdir("./172", 0777 [pid 5061] newfstatat(3, "", [pid 6808] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6811] <... prctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, [pid 6808] <... mkdir resumed>) = 0 [pid 6811] setpgid(0, 0) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6808] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6811] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./174/binderfs" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... unlink resumed>) = 0 [pid 6811] write(3, "1000", 4 [pid 5061] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6811] <... write resumed>) = 4 [pid 6811] close(3) = 0 [pid 6811] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6811] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6811] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6811] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... umount2 resumed>) = 0 [pid 6811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6811] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6811] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6810] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6808] <... mount resumed>) = 0 [pid 5061] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6812 attached [pid 6808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6812] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6811] <... clone3 resumed> => {parent_tid=[6812]}, 88) = 6812 [pid 6808] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./174/file0", [pid 6812] <... rseq resumed>) = 0 [pid 6808] chdir("./file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6812] set_robust_list(0x7fe7c32469a0, 24 [pid 6811] rt_sigprocmask(SIG_SETMASK, [], [pid 6808] <... chdir resumed>) = 0 [pid 6808] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 160.327103][ T6808] loop0: detected capacity change from 0 to 4096 [ 160.365322][ T6808] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6808] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6812] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(4, [pid 6811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6812] rt_sigprocmask(SIG_SETMASK, [], [pid 6811] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6808] <... futex resumed>) = 1 [pid 5061] close(4) = 0 [pid 5061] rmdir("./174/file0" [pid 6808] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./174") = 0 [pid 6812] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6811] <... futex resumed>) = 0 [pid 6812] memfd_create("syzkaller", 0 [pid 6811] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6807] <... futex resumed>) = 0 [pid 5061] mkdir("./175", 0777) = 0 [pid 6812] <... memfd_create resumed>) = 3 [pid 6807] exit_group(0 [pid 6812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6808] <... futex resumed>) = ? [pid 6807] <... exit_group resumed>) = ? [pid 6812] <... mmap resumed>) = 0x7fe7bae00000 [pid 6808] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6807] +++ exited with 0 +++ [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6807, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./174/binderfs") = 0 [pid 5059] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6813 ./strace-static-x86_64: Process 6813 attached [pid 6810] <... write resumed>) = 2097152 [pid 5059] <... umount2 resumed>) = 0 [pid 6813] set_robust_list(0x55558e6e36a0, 24 [pid 6812] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6810] munmap(0x7fe7bae00000, 138412032 [pid 6813] <... set_robust_list resumed>) = 0 [pid 5059] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6813] chdir("./172" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./174/file0", [pid 6813] <... chdir resumed>) = 0 [pid 6813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6813] setpgid(0, 0 [pid 6810] <... munmap resumed>) = 0 [pid 5059] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6813] <... setpgid resumed>) = 0 [pid 6813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6810] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6813] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6810] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 4 [pid 6813] write(3, "1000", 4 [pid 5059] newfstatat(4, "", [pid 6813] <... write resumed>) = 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6813] close(3) = 0 [pid 5059] getdents64(4, [pid 6813] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6813] <... symlink resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] getdents64(4, [pid 6810] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6814 attached , child_tidptr=0x55558e6e3690) = 6814 [pid 6814] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6814] chdir("./175") = 0 [pid 6814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6814] setpgid(0, 0) = 0 [pid 6814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6814] write(3, "1000", 4 [pid 6813] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6812] <... write resumed>) = 2097152 [pid 5059] close(4 [pid 6814] <... write resumed>) = 4 [pid 6813] <... futex resumed>) = 0 [pid 6814] close(3 [pid 6813] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... close resumed>) = 0 [pid 6814] <... close resumed>) = 0 [pid 6813] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] rmdir("./174/file0" [pid 6814] symlink("/dev/binderfs", "./binderfs" [pid 6813] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6812] munmap(0x7fe7bae00000, 138412032 [pid 6814] <... symlink resumed>) = 0 [pid 6813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6810] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] getdents64(3, [pid 6814] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6813] <... mmap resumed>) = 0x7fe7c3226000 [pid 6814] <... futex resumed>) = 0 [pid 6813] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6814] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6813] <... mprotect resumed>) = 0 [pid 5059] close(3 [pid 6814] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6813] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6810] close(3 [pid 5059] <... close resumed>) = 0 [pid 6814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6813] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6810] <... close resumed>) = 0 [pid 5059] rmdir("./174" [pid 6814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6812] <... munmap resumed>) = 0 [pid 6814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./175", 0777./strace-static-x86_64: Process 6815 attached [pid 6813] <... clone3 resumed> => {parent_tid=[6815]}, 88) = 6815 [pid 6813] rt_sigprocmask(SIG_SETMASK, [], [pid 6815] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6815] <... rseq resumed>) = 0 [pid 6814] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6813] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6815] set_robust_list(0x7fe7c32469a0, 24 [pid 6814] <... mprotect resumed>) = 0 [pid 6813] <... futex resumed>) = 0 [pid 6812] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6810] close(4 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6815] <... set_robust_list resumed>) = 0 [pid 6814] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6813] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6812] <... openat resumed>) = 4 [pid 6810] <... close resumed>) = 0 [pid 6815] rt_sigprocmask(SIG_SETMASK, [], [pid 6814] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6812] ioctl(4, LOOP_SET_FD, 3 [ 160.514138][ T6810] loop3: detected capacity change from 0 to 4096 [ 160.548366][ T6812] loop1: detected capacity change from 0 to 4096 [pid 6810] mkdir("./file0", 0777 [pid 5059] <... openat resumed>) = 3 [pid 6815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6810] <... mkdir resumed>) = 0 [pid 6814] <... clone3 resumed> => {parent_tid=[6816]}, 88) = 6816 [pid 6815] memfd_create("syzkaller", 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6814] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6810] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6814] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6816 attached [pid 6816] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6816] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6816] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6816] memfd_create("syzkaller", 0 [pid 6812] <... ioctl resumed>) = 0 [pid 6812] close(3) = 0 [pid 6812] close(4) = 0 [pid 6812] mkdir("./file0", 0777) = 0 [pid 6816] <... memfd_create resumed>) = 3 [pid 6816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6812] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6815] <... memfd_create resumed>) = 3 [pid 6815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 160.559563][ T6810] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 160.579326][ T6812] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6816] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 6812] <... mount resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6812] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6817 attached [pid 6815] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6812] chdir("./file0" [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6817 [pid 6817] set_robust_list(0x55558e6e36a0, 24 [pid 6812] <... chdir resumed>) = 0 [pid 6812] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6817] <... set_robust_list resumed>) = 0 [pid 6812] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6812] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6817] chdir("./175" [pid 6812] <... futex resumed>) = 1 [pid 6811] <... futex resumed>) = 0 [pid 6812] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6811] exit_group(0) = ? [pid 6812] <... futex resumed>) = ? [pid 6817] <... chdir resumed>) = 0 [pid 6817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6817] setpgid(0, 0) = 0 [pid 6817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6817] write(3, "1000", 4) = 4 [pid 6812] +++ exited with 0 +++ [pid 6811] +++ exited with 0 +++ [pid 6817] close(3) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6811, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6817] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6816] <... write resumed>) = 2097152 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6817] <... futex resumed>) = 0 [pid 6816] munmap(0x7fe7bae00000, 138412032 [pid 5060] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6817] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6817] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./172/binderfs", [pid 6817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] unlink("./172/binderfs" [pid 6817] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] <... unlink resumed>) = 0 [pid 6817] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6817] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6816] <... munmap resumed>) = 0 [pid 6815] <... write resumed>) = 2097152 [pid 6810] <... mount resumed>) = 0 [pid 6810] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6815] munmap(0x7fe7bae00000, 138412032 [pid 6810] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6818 attached [pid 6810] chdir("./file0" [pid 5060] <... umount2 resumed>) = 0 [pid 6818] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6817] <... clone3 resumed> => {parent_tid=[6818]}, 88) = 6818 [pid 6816] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6810] <... chdir resumed>) = 0 [pid 5060] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6818] <... rseq resumed>) = 0 [pid 6817] rt_sigprocmask(SIG_SETMASK, [], [pid 6816] <... openat resumed>) = 4 [pid 6810] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6818] set_robust_list(0x7fe7c32469a0, 24 [pid 6817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6816] ioctl(4, LOOP_SET_FD, 3 [pid 6815] <... munmap resumed>) = 0 [pid 6810] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(AT_FDCWD, "./172/file0", [pid 6818] <... set_robust_list resumed>) = 0 [pid 6817] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6818] memfd_create("syzkaller", 0 [pid 6817] <... futex resumed>) = 0 [pid 6816] <... ioctl resumed>) = 0 [pid 6815] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6810] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... memfd_create resumed>) = 3 [pid 6817] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6816] close(3 [pid 6810] <... futex resumed>) = 1 [pid 6809] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6816] <... close resumed>) = 0 [pid 6815] <... openat resumed>) = 4 [pid 6810] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6809] exit_group(0 [pid 6818] <... mmap resumed>) = 0x7fe7bae00000 [pid 6816] close(4 [pid 6815] ioctl(4, LOOP_SET_FD, 3 [pid 6810] <... futex resumed>) = ? [pid 6809] <... exit_group resumed>) = ? [pid 5060] openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6816] <... close resumed>) = 0 [pid 6810] +++ exited with 0 +++ [pid 6809] +++ exited with 0 +++ [pid 6816] mkdir("./file0", 0777 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6809, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 6816] <... mkdir resumed>) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 6816] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6815] <... ioctl resumed>) = 0 [pid 5062] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6815] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 6815] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6815] close(4) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 6818] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6815] mkdir("./file0", 0777 [pid 5062] newfstatat(3, "", [pid 6815] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] rmdir("./172/file0" [pid 5062] getdents64(3, [pid 6815] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./173/binderfs", [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./172") = 0 [pid 5060] mkdir("./173", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 160.734129][ T6816] loop2: detected capacity change from 0 to 4096 [ 160.751488][ T6815] loop4: detected capacity change from 0 to 4096 [ 160.769671][ T6816] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] unlink("./173/binderfs") = 0 [pid 5062] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6818] <... write resumed>) = 2097152 [pid 5062] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./173/file0", [pid 6818] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [ 160.799319][ T6815] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5062] getdents64(4, [pid 6818] <... munmap resumed>) = 0 [pid 6816] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6816] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(4 [pid 6818] ioctl(4, LOOP_SET_FD, 3 [pid 6816] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 6816] chdir("./file0" [pid 5062] rmdir("./173/file0" [pid 6816] <... chdir resumed>) = 0 [pid 6816] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6816] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6814] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6816] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] exit_group(0) = ? [pid 6816] <... futex resumed>) = ? [pid 5062] getdents64(3, [pid 6816] +++ exited with 0 +++ [pid 6814] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6814, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5060] close(3 [pid 5062] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] rmdir("./173" [pid 5061] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6819 attached [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6819] set_robust_list(0x55558e6e36a0, 24 [pid 5062] mkdir("./174", 0777 [pid 5061] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6819] <... set_robust_list resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6819 [pid 6819] chdir("./173" [pid 5062] <... openat resumed>) = 3 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6819] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6819] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] newfstatat(AT_FDCWD, "./175/binderfs", [pid 6819] <... prctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6819] setpgid(0, 0 [pid 5061] unlink("./175/binderfs" [pid 6819] <... setpgid resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6818] <... ioctl resumed>) = 0 [pid 5061] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6819] <... openat resumed>) = 3 [pid 6818] close(3) = 0 [pid 6818] close(4 [pid 6819] write(3, "1000", 4 [pid 6818] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6819] <... write resumed>) = 4 [pid 6818] mkdir("./file0", 0777 [pid 5061] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6819] close(3 [pid 6818] <... mkdir resumed>) = 0 [pid 6819] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6819] symlink("/dev/binderfs", "./binderfs" [pid 5061] newfstatat(AT_FDCWD, "./175/file0", [pid 6819] <... symlink resumed>) = 0 [ 160.872451][ T6818] loop0: detected capacity change from 0 to 4096 [pid 6818] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6819] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6815] <... mount resumed>) = 0 [pid 5061] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6819] <... futex resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6819] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... openat resumed>) = 4 [pid 6819] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6815] <... openat resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 6815] chdir("./file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 6815] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6815] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] getdents64(4, [pid 6819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6815] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6815] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(4 [pid 6819] <... mmap resumed>) = 0x7fe7c3226000 [pid 6815] <... futex resumed>) = 1 [pid 6813] <... futex resumed>) = 0 [pid 6819] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6815] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6813] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 6819] <... mprotect resumed>) = 0 [pid 6819] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6815] <... futex resumed>) = ? [pid 6813] <... exit_group resumed>) = ? [pid 5061] rmdir("./175/file0" [pid 6819] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6815] +++ exited with 0 +++ [pid 6813] +++ exited with 0 +++ [pid 6819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6820 attached [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6813, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] getdents64(3, [pid 6820] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6819] <... clone3 resumed> => {parent_tid=[6820]}, 88) = 6820 [pid 5063] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6819] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] close(3 [pid 6820] <... rseq resumed>) = 0 [pid 6819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... close resumed>) = 0 [pid 6820] set_robust_list(0x7fe7c32469a0, 24 [pid 6819] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] rmdir("./175" [pid 6820] <... set_robust_list resumed>) = 0 [pid 6819] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6820] rt_sigprocmask(SIG_SETMASK, [], [pid 6819] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 6820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6820] memfd_create("syzkaller", 0 [pid 5063] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./172/binderfs") = 0 [pid 6820] <... memfd_create resumed>) = 3 [pid 5063] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./176", 0777 [pid 6820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... mkdir resumed>) = 0 [pid 6820] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [ 160.912876][ T6818] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5062] close(3 [pid 5063] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6821 attached [pid 5063] openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6821] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6821 [pid 6821] <... set_robust_list resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 6821] chdir("./174" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 6821] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] close(4 [pid 6821] <... prctl resumed>) = 0 [pid 6821] setpgid(0, 0 [pid 5063] <... close resumed>) = 0 [pid 6821] <... setpgid resumed>) = 0 [pid 5063] rmdir("./172/file0" [pid 6821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./172" [pid 6821] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 6821] write(3, "1000", 4) = 4 [pid 6821] close(3) = 0 [pid 6821] symlink("/dev/binderfs", "./binderfs" [pid 5063] mkdir("./173", 0777 [pid 6821] <... symlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6821] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... mount resumed>) = 0 [pid 6821] <... futex resumed>) = 0 [pid 6818] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6818] chdir("./file0" [pid 6821] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6820] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6818] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6821] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6818] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6821] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6818] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... openat resumed>) = 3 [pid 6821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6818] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6818] <... futex resumed>) = 1 [pid 6817] <... futex resumed>) = 0 [pid 6821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6818] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] exit_group(0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6822 [pid 6818] <... futex resumed>) = ? [pid 6817] <... exit_group resumed>) = ? [pid 6821] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6818] +++ exited with 0 +++ [pid 6817] +++ exited with 0 +++ ./strace-static-x86_64: Process 6822 attached [pid 6821] <... mprotect resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6817, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6822] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6822] chdir("./176" [pid 5059] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6822] <... chdir resumed>) = 0 [pid 6821] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6822] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6821] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6822] <... prctl resumed>) = 0 [pid 6821] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6822] setpgid(0, 0./strace-static-x86_64: Process 6823 attached ) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6823] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6821] <... clone3 resumed> => {parent_tid=[6823]}, 88) = 6823 [pid 5059] newfstatat(3, "", [pid 6823] <... rseq resumed>) = 0 [pid 6821] rt_sigprocmask(SIG_SETMASK, [], [pid 6823] set_robust_list(0x7fe7c32469a0, 24 [pid 6822] <... openat resumed>) = 3 [pid 6821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6823] <... set_robust_list resumed>) = 0 [pid 6823] rt_sigprocmask(SIG_SETMASK, [], [pid 6822] write(3, "1000", 4 [pid 6821] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(3, [pid 6823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6822] <... write resumed>) = 4 [pid 6821] <... futex resumed>) = 0 [pid 6821] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6822] close(3 [pid 5059] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6822] <... close resumed>) = 0 [pid 6822] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6823] memfd_create("syzkaller", 0 [pid 6822] <... symlink resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6823] <... memfd_create resumed>) = 3 [pid 5059] unlink("./175/binderfs" [pid 6822] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6822] <... futex resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6823] <... mmap resumed>) = 0x7fe7bae00000 [pid 6822] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6822] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6820] <... write resumed>) = 2097152 [pid 6822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6822] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... umount2 resumed>) = 0 [pid 6820] munmap(0x7fe7bae00000, 138412032 [pid 6822] <... mprotect resumed>) = 0 [pid 6822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6820] <... munmap resumed>) = 0 [pid 5059] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6824 attached [pid 6820] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6824] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6820] <... openat resumed>) = 4 [pid 6824] <... rseq resumed>) = 0 [pid 6822] <... clone3 resumed> => {parent_tid=[6824]}, 88) = 6824 [pid 6820] ioctl(4, LOOP_SET_FD, 3 [pid 5059] newfstatat(AT_FDCWD, "./175/file0", [pid 6824] set_robust_list(0x7fe7c32469a0, 24 [pid 6822] rt_sigprocmask(SIG_SETMASK, [], [pid 6824] <... set_robust_list resumed>) = 0 [pid 6824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6824] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6823] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6822] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6824] <... futex resumed>) = 0 [pid 6822] <... futex resumed>) = 1 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6822] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6824] memfd_create("syzkaller", 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./175/file0") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./175") = 0 [pid 5059] mkdir("./176", 0777) = 0 [pid 6820] <... ioctl resumed>) = 0 [pid 6820] close(3) = 0 [pid 6820] close(4 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6820] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6820] mkdir("./file0", 0777) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6820] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6824] <... memfd_create resumed>) = 3 [pid 6824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6825 attached [pid 6825] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6825] chdir("./173") = 0 [pid 6825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 161.077627][ T6820] loop1: detected capacity change from 0 to 4096 [pid 6825] setpgid(0, 0) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6825 [pid 6825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6825] write(3, "1000", 4 [pid 5059] <... ioctl resumed>) = 0 [pid 6825] <... write resumed>) = 4 [pid 6825] close(3) = 0 [pid 6825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6825] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6825] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] close(3 [pid 6825] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] <... close resumed>) = 0 [pid 6825] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6823] <... write resumed>) = 2097152 [pid 6825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6827]}, 88) = 6827 [pid 6825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6826 attached [pid 6825] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] set_robust_list(0x55558e6e36a0, 24 [pid 6825] <... futex resumed>) = 0 [pid 6826] <... set_robust_list resumed>) = 0 [pid 6825] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6826 ./strace-static-x86_64: Process 6827 attached [pid 6826] chdir("./176" [pid 6823] munmap(0x7fe7bae00000, 138412032 [pid 6827] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6826] <... chdir resumed>) = 0 [pid 6827] <... rseq resumed>) = 0 [pid 6826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6827] set_robust_list(0x7fe7c32469a0, 24 [pid 6826] <... prctl resumed>) = 0 [ 161.139157][ T6820] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6823] <... munmap resumed>) = 0 [pid 6827] <... set_robust_list resumed>) = 0 [pid 6826] setpgid(0, 0 [pid 6824] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6827] rt_sigprocmask(SIG_SETMASK, [], [pid 6826] <... setpgid resumed>) = 0 [pid 6823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6823] <... openat resumed>) = 4 [pid 6826] <... openat resumed>) = 3 [pid 6827] memfd_create("syzkaller", 0 [pid 6823] ioctl(4, LOOP_SET_FD, 3 [pid 6827] <... memfd_create resumed>) = 3 [pid 6826] write(3, "1000", 4 [pid 6820] <... mount resumed>) = 0 [pid 6826] <... write resumed>) = 4 [pid 6826] close(3) = 0 [pid 6820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6826] symlink("/dev/binderfs", "./binderfs" [pid 6820] <... openat resumed>) = 3 [pid 6826] <... symlink resumed>) = 0 [pid 6820] chdir("./file0" [pid 6826] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6820] <... chdir resumed>) = 0 [pid 6827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6826] <... futex resumed>) = 0 [pid 6820] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6826] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6827] <... mmap resumed>) = 0x7fe7bae00000 [pid 6823] <... ioctl resumed>) = 0 [pid 6820] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6820] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6819] <... futex resumed>) = 0 [pid 6823] close(3 [pid 6826] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6823] <... close resumed>) = 0 [pid 6820] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6819] exit_group(0 [pid 6826] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6819] <... exit_group resumed>) = ? [pid 6823] close(4 [pid 6826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6823] <... close resumed>) = 0 [pid 6820] <... futex resumed>) = ? [pid 6826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6820] +++ exited with 0 +++ [pid 6826] <... mmap resumed>) = 0x7fe7c3226000 [pid 6826] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6826] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6823] mkdir("./file0", 0777 [pid 6826] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6828 attached [pid 6823] <... mkdir resumed>) = 0 [pid 6828] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6826] <... clone3 resumed> => {parent_tid=[6828]}, 88) = 6828 [pid 6828] <... rseq resumed>) = 0 [pid 6826] rt_sigprocmask(SIG_SETMASK, [], [pid 6828] set_robust_list(0x7fe7c32469a0, 24 [pid 6826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6828] <... set_robust_list resumed>) = 0 [pid 6826] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6828] rt_sigprocmask(SIG_SETMASK, [], [pid 6826] <... futex resumed>) = 0 [pid 6828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6826] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6823] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6819] +++ exited with 0 +++ [pid 6828] memfd_create("syzkaller", 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6819, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6828] <... memfd_create resumed>) = 3 [pid 6828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5060] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./173/binderfs") = 0 [pid 5060] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6824] <... write resumed>) = 2097152 [ 161.210301][ T6823] loop3: detected capacity change from 0 to 4096 [ 161.246612][ T6823] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./173/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6827] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6824] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6828] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6824] <... munmap resumed>) = 0 [pid 6823] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6824] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] newfstatat(4, "", [pid 6824] <... openat resumed>) = 4 [pid 6823] <... openat resumed>) = 3 [pid 6824] ioctl(4, LOOP_SET_FD, 3 [pid 6823] chdir("./file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6823] <... chdir resumed>) = 0 [pid 6823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] getdents64(4, [pid 6823] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6823] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, [pid 6824] <... ioctl resumed>) = 0 [pid 6823] <... futex resumed>) = 1 [pid 6821] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6827] <... write resumed>) = 2097152 [pid 6824] close(3 [pid 6823] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6821] exit_group(0 [pid 5060] close(4 [pid 6824] <... close resumed>) = 0 [pid 6823] <... futex resumed>) = ? [pid 6821] <... exit_group resumed>) = ? [pid 5060] <... close resumed>) = 0 [pid 6824] close(4 [pid 6823] +++ exited with 0 +++ [pid 5060] rmdir("./173/file0" [pid 6827] munmap(0x7fe7bae00000, 138412032 [pid 6828] <... write resumed>) = 2097152 [pid 6824] <... close resumed>) = 0 [pid 6821] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 6828] munmap(0x7fe7bae00000, 138412032 [pid 6827] <... munmap resumed>) = 0 [pid 6824] mkdir("./file0", 0777 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6821, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] getdents64(3, [pid 6828] <... munmap resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./173" [pid 5062] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5060] mkdir("./174", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... mkdir resumed>) = 0 [pid 6824] <... mkdir resumed>) = 0 [pid 5062] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 161.329211][ T6824] loop2: detected capacity change from 0 to 4096 [pid 6828] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6824] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 6828] <... openat resumed>) = 4 [pid 5062] newfstatat(AT_FDCWD, "./174/binderfs", [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6828] ioctl(4, LOOP_SET_FD, 3 [pid 6827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] unlink("./174/binderfs" [pid 6827] <... openat resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 6827] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6827] <... ioctl resumed>) = 0 [pid 6827] close(3) = 0 [pid 6827] close(4 [pid 6828] <... ioctl resumed>) = 0 [pid 6828] close(3) = 0 [pid 6827] <... close resumed>) = 0 [pid 6828] close(4 [pid 6827] mkdir("./file0", 0777 [pid 6828] <... close resumed>) = 0 [pid 6827] <... mkdir resumed>) = 0 [pid 6828] mkdir("./file0", 0777 [pid 6827] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6828] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 6828] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./174/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 161.380975][ T6824] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 161.393617][ T6827] loop4: detected capacity change from 0 to 4096 [ 161.400589][ T6828] loop0: detected capacity change from 0 to 4096 [ 161.417365][ T6827] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5062] getdents64(4, [pid 6824] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6824] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] getdents64(4, [pid 6824] chdir("./file0") = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6824] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] close(4) = 0 [pid 5062] rmdir("./174/file0") = 0 [pid 6824] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 6824] <... futex resumed>) = 1 [pid 6824] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6822] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6822] exit_group(0 [pid 5062] close(3 [pid 6824] <... futex resumed>) = ? [pid 6822] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 6824] +++ exited with 0 +++ [pid 6822] +++ exited with 0 +++ [pid 5062] rmdir("./174") = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6822, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5061] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] mkdir("./175", 0777 [pid 5061] <... openat resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5061] unlink("./176/binderfs") = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5060] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./176/file0", ./strace-static-x86_64: Process 6829 attached [pid 6829] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6829] <... set_robust_list resumed>) = 0 [pid 6829] chdir("./174" [pid 5061] <... openat resumed>) = 4 [pid 6829] <... chdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6829 [pid 6829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6829] <... prctl resumed>) = 0 [pid 5061] getdents64(4, [pid 6829] setpgid(0, 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6829] <... setpgid resumed>) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./176/file0" [pid 6829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] <... rmdir resumed>) = 0 [ 161.438504][ T6828] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6829] write(3, "1000", 4 [pid 5061] getdents64(3, [pid 6829] <... write resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./176" [pid 6829] close(3 [pid 5061] <... rmdir resumed>) = 0 [pid 6829] <... close resumed>) = 0 [pid 6829] symlink("/dev/binderfs", "./binderfs" [pid 5061] mkdir("./177", 0777) = 0 [pid 6829] <... symlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6829] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... openat resumed>) = 3 [pid 6829] <... futex resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6829] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6829] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6829] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6829] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6830]}, 88) = 6830 [pid 6829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6829] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6830 attached [pid 6829] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6830] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6830] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6830] memfd_create("syzkaller", 0 [pid 6828] <... mount resumed>) = 0 [pid 6827] <... mount resumed>) = 0 [pid 6830] <... memfd_create resumed>) = 3 [pid 6830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6830] <... mmap resumed>) = 0x7fe7bae00000 [pid 6828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6827] <... openat resumed>) = 3 [pid 6828] <... openat resumed>) = 3 [pid 6827] chdir("./file0") = 0 [pid 6828] chdir("./file0" [pid 6827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6828] <... chdir resumed>) = 0 [pid 6827] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6828] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6827] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6828] <... futex resumed>) = 1 [pid 6827] <... futex resumed>) = 1 [pid 6825] <... futex resumed>) = 0 [pid 6828] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6826] <... futex resumed>) = 0 [pid 6825] exit_group(0 [pid 6826] exit_group(0 [pid 6825] <... exit_group resumed>) = ? [pid 6828] <... futex resumed>) = ? [pid 6826] <... exit_group resumed>) = ? [pid 6828] +++ exited with 0 +++ [pid 6826] +++ exited with 0 +++ [pid 5062] <... ioctl resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6826, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 6827] +++ exited with 0 +++ [pid 6825] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6825, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] close(3) = 0 [pid 5063] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6831 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6831 attached ) = -1 EINVAL (Invalid argument) [pid 6831] set_robust_list(0x55558e6e36a0, 24 [pid 5059] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6831] <... set_robust_list resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 6831] chdir("./175" [pid 5063] newfstatat(3, "", [pid 5059] newfstatat(3, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] getdents64(3, [pid 5063] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./173/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(AT_FDCWD, "./176/binderfs", [pid 6831] <... chdir resumed>) = 0 [pid 5063] unlink("./173/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5059] unlink("./176/binderfs" [pid 5063] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 6830] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6831] <... prctl resumed>) = 0 [pid 5063] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 6831] setpgid(0, 0) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] newfstatat(AT_FDCWD, "./173/file0", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6831] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6832 attached [pid 6831] write(3, "1000", 4 [pid 5063] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6831] <... write resumed>) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6832 [pid 6831] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6831] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6832] set_robust_list(0x55558e6e36a0, 24 [pid 6831] symlink("/dev/binderfs", "./binderfs" [pid 5059] newfstatat(AT_FDCWD, "./176/file0", [pid 5063] <... openat resumed>) = 4 [pid 6831] <... symlink resumed>) = 0 [pid 6832] <... set_robust_list resumed>) = 0 [pid 6831] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6831] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6831] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6832] chdir("./177" [pid 5059] openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 6832] <... chdir resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 6831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] close(4 [pid 6832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] getdents64(4, [pid 6832] <... prctl resumed>) = 0 [pid 6831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6830] <... write resumed>) = 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./173/file0" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6832] setpgid(0, 0 [pid 6831] <... mmap resumed>) = 0x7fe7c3226000 [pid 6832] <... setpgid resumed>) = 0 [pid 6831] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6830] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] getdents64(4, [pid 6832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6831] <... mprotect resumed>) = 0 [pid 6831] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] getdents64(3, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6832] <... openat resumed>) = 3 [pid 5059] close(4 [pid 6832] write(3, "1000", 4 [pid 6831] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 6832] <... write resumed>) = 4 [pid 6831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] close(3 [pid 5059] rmdir("./176/file0"./strace-static-x86_64: Process 6833 attached [pid 6832] close(3 [pid 5063] <... close resumed>) = 0 [pid 6833] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5063] rmdir("./173" [pid 6832] <... close resumed>) = 0 [pid 6833] <... rseq resumed>) = 0 [pid 6832] symlink("/dev/binderfs", "./binderfs" [pid 6831] <... clone3 resumed> => {parent_tid=[6833]}, 88) = 6833 [pid 5063] <... rmdir resumed>) = 0 [pid 6833] set_robust_list(0x7fe7c32469a0, 24 [pid 6832] <... symlink resumed>) = 0 [pid 6831] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... rmdir resumed>) = 0 [pid 6833] <... set_robust_list resumed>) = 0 [pid 6832] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] mkdir("./174", 0777 [pid 5059] getdents64(3, [pid 6833] rt_sigprocmask(SIG_SETMASK, [], [pid 6832] <... futex resumed>) = 0 [pid 6831] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6832] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6831] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... mkdir resumed>) = 0 [pid 5059] close(3 [pid 6832] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6832] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... close resumed>) = 0 [pid 6832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] rmdir("./176" [pid 6832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... openat resumed>) = 3 [pid 6833] memfd_create("syzkaller", 0 [pid 6832] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] <... rmdir resumed>) = 0 [pid 6832] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6832] <... mprotect resumed>) = 0 [pid 6833] <... memfd_create resumed>) = 3 [pid 6833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] mkdir("./177", 0777 [pid 6833] <... mmap resumed>) = 0x7fe7bae00000 [pid 6832] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... mkdir resumed>) = 0 [pid 6832] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6832] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6834 attached => {parent_tid=[6834]}, 88) = 6834 [pid 6830] <... munmap resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6834] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6832] rt_sigprocmask(SIG_SETMASK, [], [pid 6830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6834] <... rseq resumed>) = 0 [pid 6832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6830] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 6834] set_robust_list(0x7fe7c32469a0, 24 [pid 6832] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] <... set_robust_list resumed>) = 0 [pid 6832] <... futex resumed>) = 0 [pid 6830] ioctl(4, LOOP_SET_FD, 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6834] rt_sigprocmask(SIG_SETMASK, [], [pid 6833] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6832] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6834] memfd_create("syzkaller", 0) = 3 [pid 6833] <... write resumed>) = 2097152 [pid 6830] <... ioctl resumed>) = 0 [pid 6834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6833] munmap(0x7fe7bae00000, 138412032 [pid 6830] close(3 [pid 6834] <... mmap resumed>) = 0x7fe7bae00000 [pid 6830] <... close resumed>) = 0 [pid 6830] close(4) = 0 [pid 6830] mkdir("./file0", 0777) = 0 [pid 6830] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6833] <... munmap resumed>) = 0 [pid 6833] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 161.665335][ T6830] loop1: detected capacity change from 0 to 4096 [ 161.698736][ T6833] loop3: detected capacity change from 0 to 4096 [pid 6833] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6833] close(3) = 0 [pid 6833] close(4 [pid 5063] <... ioctl resumed>) = 0 [pid 6833] <... close resumed>) = 0 [pid 6833] mkdir("./file0", 0777) = 0 [pid 5063] close(3) = 0 [pid 6833] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 161.707059][ T6830] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6834] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 6835 attached [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6835 [pid 6835] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6835] chdir("./174") = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 6835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... close resumed>) = 0 [pid 6835] <... prctl resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6835] setpgid(0, 0./strace-static-x86_64: Process 6836 attached ) = 0 [pid 6836] set_robust_list(0x55558e6e36a0, 24 [pid 6835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6836 [pid 6836] <... set_robust_list resumed>) = 0 [pid 6835] <... openat resumed>) = 3 [pid 6836] chdir("./177" [pid 6835] write(3, "1000", 4 [pid 6836] <... chdir resumed>) = 0 [pid 6835] <... write resumed>) = 4 [pid 6836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6835] close(3 [pid 6836] <... prctl resumed>) = 0 [pid 6835] <... close resumed>) = 0 [pid 6834] <... write resumed>) = 2097152 [pid 6836] setpgid(0, 0 [pid 6835] symlink("/dev/binderfs", "./binderfs" [pid 6834] munmap(0x7fe7bae00000, 138412032 [pid 6836] <... setpgid resumed>) = 0 [pid 6830] <... mount resumed>) = 0 [pid 6836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6836] <... openat resumed>) = 3 [pid 6835] <... symlink resumed>) = 0 [pid 6830] <... openat resumed>) = 3 [pid 6835] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6830] chdir("./file0" [pid 6835] <... futex resumed>) = 0 [pid 6830] <... chdir resumed>) = 0 [pid 6835] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6835] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6830] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6836] write(3, "1000", 4 [pid 6835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6830] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6836] <... write resumed>) = 4 [pid 6835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6836] close(3 [pid 6835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6834] <... munmap resumed>) = 0 [pid 6830] <... futex resumed>) = 1 [pid 6829] <... futex resumed>) = 0 [pid 6836] <... close resumed>) = 0 [pid 6835] <... mmap resumed>) = 0x7fe7c3226000 [pid 6834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6830] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6829] exit_group(0 [pid 6836] symlink("/dev/binderfs", "./binderfs" [pid 6835] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6834] <... openat resumed>) = 4 [pid 6830] <... futex resumed>) = ? [pid 6829] <... exit_group resumed>) = ? [pid 6836] <... symlink resumed>) = 0 [pid 6830] +++ exited with 0 +++ [pid 6835] <... mprotect resumed>) = 0 [ 161.744182][ T6833] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6836] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6834] ioctl(4, LOOP_SET_FD, 3 [pid 6833] <... mount resumed>) = 0 [pid 6829] +++ exited with 0 +++ [pid 6836] <... futex resumed>) = 0 [pid 6835] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6829, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6833] chdir("./file0" [pid 5060] <... restart_syscall resumed>) = 0 [pid 6833] <... chdir resumed>) = 0 [pid 6833] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6836] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6834] <... ioctl resumed>) = 0 [pid 5060] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6834] close(3./strace-static-x86_64: Process 6837 attached [pid 6836] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6834] <... close resumed>) = 0 [pid 6833] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6837] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6836] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6835] <... clone3 resumed> => {parent_tid=[6837]}, 88) = 6837 [pid 6834] close(4 [pid 6833] <... futex resumed>) = 1 [pid 6831] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6837] <... rseq resumed>) = 0 [pid 6836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6835] rt_sigprocmask(SIG_SETMASK, [], [pid 6834] <... close resumed>) = 0 [pid 6833] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6831] exit_group(0 [pid 5060] <... openat resumed>) = 3 [pid 6837] set_robust_list(0x7fe7c32469a0, 24 [pid 6835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6834] mkdir("./file0", 0777 [pid 6833] <... futex resumed>) = ? [pid 6831] <... exit_group resumed>) = ? [pid 6837] <... set_robust_list resumed>) = 0 [pid 6836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6835] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] <... mkdir resumed>) = 0 [pid 6833] +++ exited with 0 +++ [pid 6831] +++ exited with 0 +++ [pid 5060] newfstatat(3, "", [pid 6837] rt_sigprocmask(SIG_SETMASK, [], [pid 6836] <... mmap resumed>) = 0x7fe7c3226000 [pid 6835] <... futex resumed>) = 0 [pid 6836] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6836] <... mprotect resumed>) = 0 [pid 6835] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] getdents64(3, [pid 6837] memfd_create("syzkaller", 0 [pid 6836] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6834] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6831, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6836] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6838 attached [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... restart_syscall resumed>) = 0 [pid 6837] <... memfd_create resumed>) = 3 [pid 6838] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6836] <... clone3 resumed> => {parent_tid=[6838]}, 88) = 6838 [pid 5060] newfstatat(AT_FDCWD, "./174/binderfs", [pid 6838] <... rseq resumed>) = 0 [pid 6836] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6838] set_robust_list(0x7fe7c32469a0, 24 [pid 6836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6838] <... set_robust_list resumed>) = 0 [pid 6836] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] unlink("./174/binderfs" [pid 6838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6838] memfd_create("syzkaller", 0 [pid 6836] <... futex resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6838] <... memfd_create resumed>) = 3 [pid 6836] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6838] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./175/binderfs") = 0 [pid 5062] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./174/file0", [pid 5062] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./175/file0", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 161.816392][ T6834] loop2: detected capacity change from 0 to 4096 [ 161.849879][ T6834] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(4 [pid 5060] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5062] rmdir("./175/file0" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5060] close(4 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 5062] close(3 [pid 5060] rmdir("./174/file0" [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./175") = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] mkdir("./176", 0777 [pid 5060] getdents64(3, [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] close(3 [pid 5062] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] rmdir("./174") = 0 [pid 5060] mkdir("./175", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6838] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6834] <... mount resumed>) = 0 [pid 6834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6834] chdir("./file0") = 0 [pid 6834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6837] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6834] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6834] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6832] <... futex resumed>) = 0 [pid 6834] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6832] exit_group(0 [pid 6834] <... futex resumed>) = ? [pid 6832] <... exit_group resumed>) = ? [pid 6834] +++ exited with 0 +++ [pid 6832] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6832, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./177/binderfs" [pid 6838] <... write resumed>) = 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 6838] munmap(0x7fe7bae00000, 138412032) = 0 [pid 5061] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6838] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./177/file0", [pid 6838] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6838] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6838] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6837] <... write resumed>) = 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6837] munmap(0x7fe7bae00000, 138412032 [pid 5062] close(3 [pid 5061] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6839 attached [pid 5061] getdents64(4, [pid 6839] set_robust_list(0x55558e6e36a0, 24 [pid 6838] close(3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6839 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6839] <... set_robust_list resumed>) = 0 [pid 6839] chdir("./176" [pid 6838] <... close resumed>) = 0 [pid 6837] <... munmap resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] <... ioctl resumed>) = 0 [pid 6838] close(4 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6839] <... chdir resumed>) = 0 [pid 6838] <... close resumed>) = 0 [pid 6837] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] close(4 [pid 5060] close(3 [pid 6838] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 6839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6837] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 6839] <... prctl resumed>) = 0 [pid 6838] <... mkdir resumed>) = 0 [pid 6837] ioctl(4, LOOP_SET_FD, 3 [pid 5061] rmdir("./177/file0" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6839] setpgid(0, 0 [pid 6838] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6839] <... setpgid resumed>) = 0 [pid 6839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6839] write(3, "1000", 4 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6840 [pid 6839] <... write resumed>) = 4 [pid 6839] close(3) = 0 [pid 6839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6839] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6839] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6840 attached [pid 6839] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... rmdir resumed>) = 0 [pid 6840] set_robust_list(0x55558e6e36a0, 24 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6840] <... set_robust_list resumed>) = 0 [pid 6839] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6837] <... ioctl resumed>) = 0 [pid 6840] chdir("./175" [pid 5061] close(3 [pid 6839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6837] close(3 [pid 5061] <... close resumed>) = 0 [pid 6840] <... chdir resumed>) = 0 [pid 6837] <... close resumed>) = 0 [pid 5061] rmdir("./177" [pid 6840] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6839] <... clone3 resumed> => {parent_tid=[6841]}, 88) = 6841 [pid 6837] close(4 [pid 6840] <... prctl resumed>) = 0 [pid 6839] rt_sigprocmask(SIG_SETMASK, [], [pid 6837] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6840] setpgid(0, 0 [pid 6839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6837] mkdir("./file0", 0777 [pid 6840] <... setpgid resumed>) = 0 [pid 6839] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] <... mkdir resumed>) = 0 [pid 5061] mkdir("./178", 0777./strace-static-x86_64: Process 6841 attached [pid 6839] <... futex resumed>) = 0 [ 161.971261][ T6838] loop0: detected capacity change from 0 to 4096 [ 162.003230][ T6837] loop4: detected capacity change from 0 to 4096 [ 162.011559][ T6838] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6837] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... mkdir resumed>) = 0 [pid 6841] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6839] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6841] <... rseq resumed>) = 0 [pid 6841] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6841] rt_sigprocmask(SIG_SETMASK, [], [pid 6840] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6840] write(3, "1000", 4) = 4 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6841] memfd_create("syzkaller", 0 [pid 6840] close(3) = 0 [pid 6840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6841] <... memfd_create resumed>) = 3 [pid 6841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6840] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6841] <... mmap resumed>) = 0x7fe7bae00000 [pid 6840] <... futex resumed>) = 0 [pid 6840] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6840] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6840] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6842]}, 88) = 6842 [ 162.039222][ T6837] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6840] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6842 attached [pid 6841] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6838] <... mount resumed>) = 0 [pid 6842] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6840] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6840] <... futex resumed>) = 0 [pid 6842] <... rseq resumed>) = 0 [pid 6840] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6838] <... openat resumed>) = 3 [pid 6842] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6842] memfd_create("syzkaller", 0) = 3 [pid 6838] chdir("./file0" [pid 5061] <... ioctl resumed>) = 0 [pid 6842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6838] <... chdir resumed>) = 0 [pid 6838] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6842] <... mmap resumed>) = 0x7fe7bae00000 [pid 6838] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6838] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] <... mount resumed>) = 0 [pid 5061] close(3 [pid 6838] <... futex resumed>) = 1 [pid 6837] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6838] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6836] <... futex resumed>) = 0 [pid 6837] <... openat resumed>) = 3 [pid 6836] exit_group(0) = ? [pid 6838] <... futex resumed>) = ? [pid 6837] chdir("./file0") = 0 [pid 5061] <... close resumed>) = 0 [pid 6838] +++ exited with 0 +++ [pid 6837] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6836] +++ exited with 0 +++ [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6836, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6837] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6843 attached [pid 6837] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 3 [pid 6837] <... futex resumed>) = 1 [pid 5059] newfstatat(3, "", [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6843 [pid 6843] set_robust_list(0x55558e6e36a0, 24 [pid 6835] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6835] exit_group(0) = ? [pid 5059] getdents64(3, [pid 6843] <... set_robust_list resumed>) = 0 [pid 6843] chdir("./178" [pid 6837] +++ exited with 0 +++ [pid 6835] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6843] <... chdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6835, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6842] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6841] <... write resumed>) = 2097152 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] newfstatat(AT_FDCWD, "./177/binderfs", [pid 6843] <... prctl resumed>) = 0 [pid 6843] setpgid(0, 0 [pid 6841] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6843] <... setpgid resumed>) = 0 [pid 6841] <... munmap resumed>) = 0 [pid 5059] unlink("./177/binderfs" [pid 6843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6843] <... openat resumed>) = 3 [pid 5059] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6843] write(3, "1000", 4) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6843] close(3) = 0 [pid 5059] newfstatat(AT_FDCWD, "./177/file0", [pid 6843] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6843] <... symlink resumed>) = 0 [pid 5059] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6843] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6843] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 4 [pid 6843] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(4, "", [pid 6843] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] newfstatat(3, "", [pid 5059] getdents64(4, [pid 6843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6842] <... write resumed>) = 2097152 [pid 6841] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6842] munmap(0x7fe7bae00000, 138412032 [pid 5063] getdents64(3, [pid 5059] getdents64(4, [pid 6843] <... mmap resumed>) = 0x7fe7c3226000 [pid 6841] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6843] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(4 [pid 6843] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 6843] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] newfstatat(AT_FDCWD, "./174/binderfs", [pid 5059] rmdir("./177/file0" [pid 6843] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6842] <... munmap resumed>) = 0 [pid 5063] unlink("./174/binderfs" [pid 5059] getdents64(3, ./strace-static-x86_64: Process 6844 attached [pid 6842] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6841] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6844] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6843] <... clone3 resumed> => {parent_tid=[6844]}, 88) = 6844 [pid 5063] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 6844] <... rseq resumed>) = 0 [pid 6843] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... close resumed>) = 0 [pid 6843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] rmdir("./177" [pid 6844] set_robust_list(0x7fe7c32469a0, 24 [pid 6843] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... rmdir resumed>) = 0 [pid 6844] <... set_robust_list resumed>) = 0 [pid 6843] <... futex resumed>) = 0 [pid 6843] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] mkdir("./178", 0777 [pid 6844] memfd_create("syzkaller", 0 [pid 6842] <... openat resumed>) = 4 [pid 6841] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6842] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6844] <... memfd_create resumed>) = 3 [pid 6842] <... ioctl resumed>) = 0 [pid 6841] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6842] close(3) = 0 [pid 6844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6842] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6842] <... close resumed>) = 0 [pid 6841] <... close resumed>) = 0 [pid 6844] <... mmap resumed>) = 0x7fe7bae00000 [pid 6842] mkdir("./file0", 0777) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6842] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6841] close(4 [pid 5063] newfstatat(AT_FDCWD, "./174/file0", [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6841] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6841] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6841] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6844] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6841] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 162.220798][ T6841] loop3: detected capacity change from 0 to 4096 [ 162.230849][ T6842] loop1: detected capacity change from 0 to 4096 [ 162.257432][ T6842] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./174/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 6842] <... mount resumed>) = 0 [pid 5063] rmdir("./174" [pid 6842] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6842] chdir("./file0") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6842] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] mkdir("./175", 0777 [pid 6842] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6842] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5063] <... mkdir resumed>) = 0 [pid 6844] <... write resumed>) = 2097152 [pid 6842] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6840] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... ioctl resumed>) = 0 [pid 6840] exit_group(0 [pid 5063] <... openat resumed>) = 3 [pid 6840] <... exit_group resumed>) = ? [ 162.280049][ T6841] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6844] munmap(0x7fe7bae00000, 138412032 [pid 6842] <... futex resumed>) = ? [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] close(3 [pid 6842] +++ exited with 0 +++ [pid 6840] +++ exited with 0 +++ [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6840, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- ./strace-static-x86_64: Process 6845 attached [pid 6844] <... munmap resumed>) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6845 [pid 6845] set_robust_list(0x55558e6e36a0, 24 [pid 6844] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6845] <... set_robust_list resumed>) = 0 [pid 6845] chdir("./178" [pid 6844] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 6845] <... chdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 6845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6844] ioctl(4, LOOP_SET_FD, 3 [pid 6845] <... prctl resumed>) = 0 [pid 6841] <... mount resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6845] setpgid(0, 0 [pid 6841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6845] <... setpgid resumed>) = 0 [pid 6841] <... openat resumed>) = 3 [pid 6845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6841] chdir("./file0") = 0 [pid 6845] <... openat resumed>) = 3 [pid 6841] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6841] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6839] <... futex resumed>) = 0 [pid 6845] write(3, "1000", 4 [pid 6841] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6839] exit_group(0 [pid 6845] <... write resumed>) = 4 [pid 6844] <... ioctl resumed>) = 0 [pid 5060] getdents64(3, [pid 6839] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6845] close(3 [pid 5060] newfstatat(AT_FDCWD, "./175/binderfs", [pid 6845] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6844] close(3 [pid 5060] unlink("./175/binderfs" [pid 6844] <... close resumed>) = 0 [pid 6844] close(4 [pid 6845] symlink("/dev/binderfs", "./binderfs" [pid 6844] <... close resumed>) = 0 [pid 6841] <... futex resumed>) = ? [pid 6844] mkdir("./file0", 0777 [pid 6841] +++ exited with 0 +++ [pid 6839] +++ exited with 0 +++ [pid 5060] <... unlink resumed>) = 0 [pid 6845] <... symlink resumed>) = 0 [pid 5060] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6845] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6845] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6839, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6845] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6845] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6844] <... mkdir resumed>) = 0 [pid 6845] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6844] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"..../strace-static-x86_64: Process 6846 attached [pid 6845] <... clone3 resumed> => {parent_tid=[6846]}, 88) = 6846 [pid 5062] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 6846] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6845] rt_sigprocmask(SIG_SETMASK, [], [pid 6846] <... rseq resumed>) = 0 [pid 6845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6846] set_robust_list(0x7fe7c32469a0, 24 [pid 6845] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... set_robust_list resumed>) = 0 [pid 6845] <... futex resumed>) = 0 [pid 6846] rt_sigprocmask(SIG_SETMASK, [], [pid 6845] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6846] memfd_create("syzkaller", 0 [pid 5062] <... openat resumed>) = 3 [pid 6846] <... memfd_create resumed>) = 3 [pid 5060] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6846] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] newfstatat(3, "", [pid 5060] newfstatat(AT_FDCWD, "./175/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5062] unlink("./176/binderfs" [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./175/file0" [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5062] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./175") = 0 [pid 5060] mkdir("./176", 0777 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(3 [pid 5062] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6847 attached [ 162.360161][ T6844] loop2: detected capacity change from 0 to 4096 [ 162.386805][ T6844] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6846] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6847 [pid 5062] <... openat resumed>) = 4 [pid 6847] set_robust_list(0x55558e6e36a0, 24 [pid 5062] newfstatat(4, "", [pid 6847] <... set_robust_list resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6847] chdir("./175" [pid 6844] <... mount resumed>) = 0 [pid 5062] getdents64(4, [pid 6847] <... chdir resumed>) = 0 [pid 6844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6844] <... openat resumed>) = 3 [pid 6847] <... prctl resumed>) = 0 [pid 6847] setpgid(0, 0 [pid 6844] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6847] <... setpgid resumed>) = 0 [pid 6847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6847] write(3, "1000", 4) = 4 [pid 6847] close(3) = 0 [pid 6847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6847] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 6844] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6847] <... futex resumed>) = 0 [pid 6847] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6847] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6844] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(4 [pid 6847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 6844] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6847] <... mmap resumed>) = 0x7fe7c3226000 [pid 6846] <... write resumed>) = 2097152 [pid 6844] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] rmdir("./176/file0" [pid 5060] <... ioctl resumed>) = 0 [pid 6847] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6847] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6844] <... futex resumed>) = 1 [pid 5062] <... rmdir resumed>) = 0 [pid 6844] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6843] <... futex resumed>) = 0 [pid 6847] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6846] munmap(0x7fe7bae00000, 138412032 [pid 6843] exit_group(0 [pid 6847] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6848 attached [pid 6848] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6847] <... clone3 resumed> => {parent_tid=[6848]}, 88) = 6848 [pid 5060] close(3 [pid 6848] <... rseq resumed>) = 0 [pid 6847] rt_sigprocmask(SIG_SETMASK, [], [pid 6848] set_robust_list(0x7fe7c32469a0, 24 [pid 6847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 6848] <... set_robust_list resumed>) = 0 [pid 6847] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... futex resumed>) = ? [pid 6843] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6848] rt_sigprocmask(SIG_SETMASK, [], [pid 6847] <... futex resumed>) = 0 [pid 6844] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6847] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] close(3./strace-static-x86_64: Process 6849 attached [pid 6848] memfd_create("syzkaller", 0 [pid 6849] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... close resumed>) = 0 [pid 6849] <... set_robust_list resumed>) = 0 [pid 6849] chdir("./176" [pid 5062] rmdir("./176" [pid 6849] <... chdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6849 [pid 6849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6849] setpgid(0, 0 [pid 6848] <... memfd_create resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 6849] <... setpgid resumed>) = 0 [pid 6848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6848] <... mmap resumed>) = 0x7fe7bae00000 [pid 6849] <... openat resumed>) = 3 [pid 6846] <... munmap resumed>) = 0 [pid 6843] +++ exited with 0 +++ [pid 5062] mkdir("./177", 0777 [pid 6849] write(3, "1000", 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6843, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6849] <... write resumed>) = 4 [pid 6846] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 6849] close(3) = 0 [pid 5061] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6849] symlink("/dev/binderfs", "./binderfs" [pid 6846] <... openat resumed>) = 4 [pid 6849] <... symlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6849] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6846] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6849] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6849] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6849] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6850 attached [pid 6850] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6850] set_robust_list(0x7fe7c32469a0, 24 [pid 6849] <... clone3 resumed> => {parent_tid=[6850]}, 88) = 6850 [pid 6848] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6846] <... ioctl resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 6850] <... set_robust_list resumed>) = 0 [pid 6849] rt_sigprocmask(SIG_SETMASK, [], [pid 6846] close(3 [pid 5061] newfstatat(3, "", [pid 6850] rt_sigprocmask(SIG_SETMASK, [], [pid 6849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6846] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6849] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] close(4 [pid 5061] getdents64(3, [pid 6846] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6846] mkdir("./file0", 0777 [pid 5061] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6849] <... futex resumed>) = 0 [pid 6846] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6850] memfd_create("syzkaller", 0 [pid 6849] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6850] <... memfd_create resumed>) = 3 [pid 6850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5061] newfstatat(AT_FDCWD, "./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./178/binderfs") = 0 [pid 5061] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6846] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6848] <... write resumed>) = 2097152 [pid 5061] newfstatat(AT_FDCWD, "./178/file0", [pid 6848] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./178/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./178") = 0 [ 162.532700][ T6846] loop0: detected capacity change from 0 to 4096 [ 162.568436][ T6846] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] mkdir("./179", 0777 [pid 6848] <... munmap resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 6850] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6848] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 6848] <... openat resumed>) = 4 [pid 6848] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6851 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6851 attached [pid 6851] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6851] chdir("./177" [pid 6848] <... ioctl resumed>) = 0 [pid 6851] <... chdir resumed>) = 0 [pid 6848] close(3 [pid 6851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6848] <... close resumed>) = 0 [pid 6848] close(4) = 0 [pid 6848] mkdir("./file0", 0777 [pid 6851] <... prctl resumed>) = 0 [pid 6848] <... mkdir resumed>) = 0 [pid 6846] <... mount resumed>) = 0 [pid 6851] setpgid(0, 0 [pid 6848] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6851] <... setpgid resumed>) = 0 [pid 6850] <... write resumed>) = 2097152 [pid 6846] <... openat resumed>) = 3 [pid 6851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6846] chdir("./file0" [pid 6851] <... openat resumed>) = 3 [pid 6846] <... chdir resumed>) = 0 [pid 6851] write(3, "1000", 4 [pid 6846] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6851] <... write resumed>) = 4 [pid 6846] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6851] close(3 [pid 6846] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6851] <... close resumed>) = 0 [pid 6850] munmap(0x7fe7bae00000, 138412032 [pid 6848] <... mount resumed>) = 0 [pid 6846] <... futex resumed>) = 1 [pid 6845] <... futex resumed>) = 0 [pid 6851] symlink("/dev/binderfs", "./binderfs" [pid 6846] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] exit_group(0 [pid 6851] <... symlink resumed>) = 0 [pid 6848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6850] <... munmap resumed>) = 0 [pid 6845] <... exit_group resumed>) = ? [pid 6846] <... futex resumed>) = ? [pid 6848] <... openat resumed>) = 3 [pid 6846] +++ exited with 0 +++ [pid 6848] chdir("./file0" [pid 6851] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] +++ exited with 0 +++ [pid 6851] <... futex resumed>) = 0 [pid 6850] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6848] <... chdir resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6845, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./178/binderfs", [pid 6851] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6848] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6851] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6850] <... openat resumed>) = 4 [pid 6848] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6851] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6850] ioctl(4, LOOP_SET_FD, 3 [pid 6848] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] unlink("./178/binderfs" [pid 6851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6848] <... futex resumed>) = 1 [pid 6847] <... futex resumed>) = 0 [pid 6851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6848] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6847] exit_group(0 [pid 6851] <... mmap resumed>) = 0x7fe7c3226000 [pid 6848] <... futex resumed>) = ? [pid 6847] <... exit_group resumed>) = ? [pid 5059] <... unlink resumed>) = 0 [ 162.629328][ T6848] loop4: detected capacity change from 0 to 4096 [ 162.649766][ T6848] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5059] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6852 attached [pid 6852] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6852] chdir("./179" [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6852 [pid 6852] <... chdir resumed>) = 0 [pid 6852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6852] setpgid(0, 0) = 0 [pid 6852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6851] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6850] <... ioctl resumed>) = 0 [pid 6848] +++ exited with 0 +++ [pid 6847] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = 0 [pid 6852] <... openat resumed>) = 3 [pid 6851] <... mprotect resumed>) = 0 [pid 6850] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6847, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6851] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6850] <... close resumed>) = 0 [pid 5059] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6852] write(3, "1000", 4 [pid 6851] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6850] close(4 [pid 6851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6850] <... close resumed>) = 0 [pid 5063] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6853 attached [pid 6850] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6853] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6851] <... clone3 resumed> => {parent_tid=[6853]}, 88) = 6853 [pid 5063] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./178/file0", [pid 6853] <... rseq resumed>) = 0 [pid 6851] rt_sigprocmask(SIG_SETMASK, [], [pid 6850] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6853] set_robust_list(0x7fe7c32469a0, 24 [pid 6851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6850] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] newfstatat(3, "", [pid 5059] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6853] <... set_robust_list resumed>) = 0 [pid 6851] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6853] rt_sigprocmask(SIG_SETMASK, [], [pid 6851] <... futex resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6853] memfd_create("syzkaller", 0 [pid 5063] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(4, "", [pid 5063] unlink("./175/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6853] <... memfd_create resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 6852] <... write resumed>) = 4 [pid 6851] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6852] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6852] <... close resumed>) = 0 [pid 6852] symlink("/dev/binderfs", "./binderfs" [pid 5059] close(4) = 0 [pid 6852] <... symlink resumed>) = 0 [pid 5059] rmdir("./178/file0" [pid 6852] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... rmdir resumed>) = 0 [pid 6852] <... futex resumed>) = 0 [pid 5059] getdents64(3, [pid 6852] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5063] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6852] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3) = 0 [pid 5059] rmdir("./178" [pid 5063] newfstatat(AT_FDCWD, "./175/file0", [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] mkdir("./179", 0777 [pid 5063] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mkdir resumed>) = 0 [pid 6852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6852] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... openat resumed>) = 3 [pid 6852] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(4, "", [pid 6852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6854 attached [pid 5063] getdents64(4, [pid 6854] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6852] <... clone3 resumed> => {parent_tid=[6854]}, 88) = 6854 [pid 6854] <... rseq resumed>) = 0 [pid 6852] rt_sigprocmask(SIG_SETMASK, [], [pid 6854] set_robust_list(0x7fe7c32469a0, 24 [pid 6852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6854] <... set_robust_list resumed>) = 0 [pid 6852] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6854] rt_sigprocmask(SIG_SETMASK, [], [pid 6852] <... futex resumed>) = 0 [pid 6854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6852] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 6854] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./175/file0" [pid 6854] <... memfd_create resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 6854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 162.704425][ T6850] loop1: detected capacity change from 0 to 4096 [ 162.728062][ T6850] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 6850] <... mount resumed>) = 0 [pid 5063] rmdir("./175" [pid 6850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 6850] <... openat resumed>) = 3 [pid 6850] chdir("./file0") = 0 [pid 6850] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] mkdir("./176", 0777 [pid 6850] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... mkdir resumed>) = 0 [pid 6850] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6849] <... futex resumed>) = 0 [pid 6850] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6849] exit_group(0 [pid 6850] <... futex resumed>) = ? [pid 6849] <... exit_group resumed>) = ? [pid 6850] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6854] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6853] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6849] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6849, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5060] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./176/binderfs") = 0 [pid 5060] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./176/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./176") = 0 [pid 5060] mkdir("./177", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 6854] <... write resumed>) = 2097152 [pid 6853] <... write resumed>) = 2097152 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6853] munmap(0x7fe7bae00000, 138412032./strace-static-x86_64: Process 6855 attached [pid 6854] munmap(0x7fe7bae00000, 138412032 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6855 [pid 6854] <... munmap resumed>) = 0 [pid 6855] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6855] chdir("./179" [pid 6854] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6855] <... chdir resumed>) = 0 [pid 6855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6854] <... openat resumed>) = 4 [pid 6855] <... prctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6854] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 6855] setpgid(0, 0) = 0 [pid 6855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6855] write(3, "1000", 4) = 4 [pid 6855] close(3) = 0 [pid 6855] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6853] <... munmap resumed>) = 0 [pid 6855] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6855] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6855] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6855] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6853] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6855] <... mprotect resumed>) = 0 [pid 6853] <... openat resumed>) = 4 [pid 6855] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6853] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 6855] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6856]}, 88) = 6856 [pid 6855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6855] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6855] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6857 attached ./strace-static-x86_64: Process 6856 attached [pid 6857] set_robust_list(0x55558e6e36a0, 24 [pid 6856] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6856] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6857] <... set_robust_list resumed>) = 0 [pid 6856] memfd_create("syzkaller", 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6857 [pid 6857] chdir("./176" [pid 5060] <... ioctl resumed>) = 0 [pid 6857] <... chdir resumed>) = 0 [pid 6856] <... memfd_create resumed>) = 3 [pid 6856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6854] <... ioctl resumed>) = 0 [pid 6857] <... prctl resumed>) = 0 [pid 6854] close(3 [pid 6857] setpgid(0, 0 [pid 6854] <... close resumed>) = 0 [pid 6854] close(4 [pid 6857] <... setpgid resumed>) = 0 [pid 6853] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 6853] close(3 [pid 6857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6853] <... close resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 6853] close(4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6854] <... close resumed>) = 0 ./strace-static-x86_64: Process 6858 attached [pid 6857] <... openat resumed>) = 3 [pid 6854] mkdir("./file0", 0777 [pid 6853] <... close resumed>) = 0 [pid 6858] set_robust_list(0x55558e6e36a0, 24 [pid 6853] mkdir("./file0", 0777 [pid 6858] <... set_robust_list resumed>) = 0 [pid 6854] <... mkdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6858 [pid 6858] chdir("./177" [pid 6857] write(3, "1000", 4 [pid 6854] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6853] <... mkdir resumed>) = 0 [pid 6857] <... write resumed>) = 4 [ 162.890518][ T6854] loop2: detected capacity change from 0 to 4096 [ 162.896967][ T6853] loop3: detected capacity change from 0 to 4096 [pid 6857] close(3) = 0 [pid 6858] <... chdir resumed>) = 0 [pid 6853] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6857] symlink("/dev/binderfs", "./binderfs" [pid 6858] <... prctl resumed>) = 0 [pid 6858] setpgid(0, 0) = 0 [pid 6858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6857] <... symlink resumed>) = 0 [pid 6858] <... openat resumed>) = 3 [pid 6857] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6858] write(3, "1000", 4) = 4 [pid 6858] close(3) = 0 [pid 6856] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6857] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6858] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6857] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6858] <... futex resumed>) = 0 [pid 6857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6858] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6858] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6857] <... mmap resumed>) = 0x7fe7c3226000 [pid 6857] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6858] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6857] <... mprotect resumed>) = 0 [pid 6858] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6857] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6858] <... mprotect resumed>) = 0 [pid 6857] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6858] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6858] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6860]}, 88) = 6860 ./strace-static-x86_64: Process 6860 attached ./strace-static-x86_64: Process 6859 attached [pid 6858] rt_sigprocmask(SIG_SETMASK, [], [pid 6857] <... clone3 resumed> => {parent_tid=[6859]}, 88) = 6859 [pid 6860] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6859] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6858] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6860] <... rseq resumed>) = 0 [pid 6859] <... rseq resumed>) = 0 [pid 6858] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6857] rt_sigprocmask(SIG_SETMASK, [], [pid 6860] set_robust_list(0x7fe7c32469a0, 24 [pid 6859] set_robust_list(0x7fe7c32469a0, 24 [pid 6858] <... futex resumed>) = 0 [pid 6857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6860] <... set_robust_list resumed>) = 0 [pid 6859] <... set_robust_list resumed>) = 0 [pid 6858] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6857] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] rt_sigprocmask(SIG_SETMASK, [], [pid 6859] rt_sigprocmask(SIG_SETMASK, [], [pid 6857] <... futex resumed>) = 0 [pid 6860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6860] memfd_create("syzkaller", 0 [pid 6859] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6857] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6859] memfd_create("syzkaller", 0) = 3 [pid 6859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 162.948893][ T6854] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 162.953481][ T6853] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6860] <... memfd_create resumed>) = 3 [pid 6860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6856] <... write resumed>) = 2097152 [pid 6854] <... mount resumed>) = 0 [pid 6854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6856] munmap(0x7fe7bae00000, 138412032 [pid 6854] <... openat resumed>) = 3 [pid 6856] <... munmap resumed>) = 0 [pid 6854] chdir("./file0") = 0 [pid 6854] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6856] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6854] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6856] <... openat resumed>) = 4 [pid 6854] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] ioctl(4, LOOP_SET_FD, 3 [pid 6854] <... futex resumed>) = 1 [pid 6852] <... futex resumed>) = 0 [pid 6852] exit_group(0) = ? [pid 6860] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6859] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6856] <... ioctl resumed>) = 0 [pid 6854] +++ exited with 0 +++ [pid 6853] <... mount resumed>) = 0 [pid 6852] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6852, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6856] close(3 [pid 6853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6856] <... close resumed>) = 0 [pid 6856] close(4 [pid 5061] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6856] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6856] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6860] <... write resumed>) = 2097152 [pid 6856] <... mkdir resumed>) = 0 [pid 6853] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 6860] munmap(0x7fe7bae00000, 138412032 [pid 6859] <... write resumed>) = 2097152 [pid 6856] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6853] chdir("./file0" [pid 5061] newfstatat(3, "", [pid 6859] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6859] <... munmap resumed>) = 0 [pid 6853] <... chdir resumed>) = 0 [ 163.056153][ T6856] loop0: detected capacity change from 0 to 4096 [pid 6859] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6860] <... munmap resumed>) = 0 [pid 6853] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] getdents64(3, [pid 6860] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6853] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6860] <... openat resumed>) = 4 [pid 6859] <... openat resumed>) = 4 [pid 6853] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6860] ioctl(4, LOOP_SET_FD, 3 [pid 6859] ioctl(4, LOOP_SET_FD, 3 [pid 6853] <... futex resumed>) = 1 [pid 6851] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6851] exit_group(0 [pid 5061] newfstatat(AT_FDCWD, "./179/binderfs", [pid 6853] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6851] <... exit_group resumed>) = ? [pid 6860] <... ioctl resumed>) = 0 [pid 6859] <... ioctl resumed>) = 0 [pid 6853] <... futex resumed>) = ? [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6859] close(3 [pid 6856] <... mount resumed>) = 0 [pid 6860] close(3 [pid 6859] <... close resumed>) = 0 [pid 6853] +++ exited with 0 +++ [pid 6856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6851] +++ exited with 0 +++ [ 163.114859][ T6856] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 163.131912][ T6860] loop1: detected capacity change from 0 to 4096 [ 163.139177][ T6859] loop4: detected capacity change from 0 to 4096 [pid 5061] unlink("./179/binderfs" [pid 6860] <... close resumed>) = 0 [pid 6859] close(4 [pid 6856] <... openat resumed>) = 3 [pid 5061] <... unlink resumed>) = 0 [pid 6860] close(4 [pid 6859] <... close resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6851, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6860] <... close resumed>) = 0 [pid 6859] mkdir("./file0", 0777 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6860] mkdir("./file0", 0777 [pid 6859] <... mkdir resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 6860] <... mkdir resumed>) = 0 [pid 6859] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6856] chdir("./file0" [pid 5061] <... umount2 resumed>) = 0 [pid 6856] <... chdir resumed>) = 0 [pid 6860] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6856] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./179/file0", [pid 5062] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6856] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6856] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 3 [pid 5061] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6856] <... futex resumed>) = 1 [pid 6855] <... futex resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6856] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6855] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6855] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 6856] <... futex resumed>) = ? [pid 5061] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6856] +++ exited with 0 +++ [pid 6855] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(4, "", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6855, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./177/binderfs", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(4, [pid 5062] unlink("./177/binderfs" [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... unlink resumed>) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5061] rmdir("./179/file0" [pid 5059] newfstatat(3, "", [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5061] getdents64(3, [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./179" [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./180", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./179/binderfs", [pid 5062] openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(4, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] unlink("./179/binderfs" [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./177/file0" [pid 5059] <... unlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5062] close(3) = 0 [ 163.167479][ T6859] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 163.184033][ T6860] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5062] rmdir("./177") = 0 [pid 5059] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./178", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5059] newfstatat(4, "", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6859] <... mount resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 6859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6859] chdir("./file0") = 0 [pid 6859] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] getdents64(4, [pid 6859] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6860] <... mount resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] close(4 [pid 6860] <... openat resumed>) = 3 [pid 6859] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] close(3 [pid 6860] chdir("./file0" [pid 5059] <... close resumed>) = 0 [pid 6859] <... futex resumed>) = 1 [pid 6857] <... futex resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] rmdir("./179/file0" [pid 6860] <... chdir resumed>) = 0 [pid 6859] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6857] exit_group(0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... rmdir resumed>) = 0 [pid 6860] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6859] <... futex resumed>) = ? [pid 6857] <... exit_group resumed>) = ? [pid 5059] getdents64(3, [pid 6860] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6860] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 6860] <... futex resumed>) = 1 [pid 6858] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6860] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6858] exit_group(0 [pid 5059] rmdir("./179" [pid 6858] <... exit_group resumed>) = ? [pid 6860] <... futex resumed>) = ? [pid 5059] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6861 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6861 [pid 5059] mkdir("./180", 0777 [pid 6861] set_robust_list(0x55558e6e36a0, 24 [pid 6860] +++ exited with 0 +++ [pid 6858] +++ exited with 0 +++ [pid 6861] <... set_robust_list resumed>) = 0 [pid 6859] +++ exited with 0 +++ [pid 6857] +++ exited with 0 +++ [pid 5059] <... mkdir resumed>) = 0 [pid 6861] chdir("./180" [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6858, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6857, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6861] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6861] <... prctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6861] setpgid(0, 0) = 0 [pid 6861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] newfstatat(3, "", [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6861] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6861] write(3, "1000", 4) = 4 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6861] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./176/binderfs", [pid 5060] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6861] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./176/binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 6861] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5063] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./176/file0", [pid 6861] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] getdents64(3, [pid 5063] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6861] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6861] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... openat resumed>) = 4 [pid 5060] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 6861] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6861] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] newfstatat(AT_FDCWD, "./177/binderfs", [pid 6861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] unlink("./177/binderfs" [pid 6861] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] <... unlink resumed>) = 0 [pid 6861] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6861] <... mprotect resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = 0 [pid 6861] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] getdents64(4, [pid 6861] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] close(3 [pid 6861] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6861] <... clone3 resumed> => {parent_tid=[6862]}, 88) = 6862 [pid 6861] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6861] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6861] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6863 attached ./strace-static-x86_64: Process 6862 attached [pid 5063] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6862] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5063] <... close resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6863 [pid 5060] newfstatat(AT_FDCWD, "./177/file0", [pid 5059] <... ioctl resumed>) = 0 [pid 6863] set_robust_list(0x55558e6e36a0, 24 [pid 6862] <... rseq resumed>) = 0 [pid 5063] rmdir("./176/file0" [pid 6863] <... set_robust_list resumed>) = 0 [pid 6862] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] close(3 [pid 6863] chdir("./178" [pid 6862] <... set_robust_list resumed>) = 0 [pid 5063] getdents64(3, [pid 5060] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... close resumed>) = 0 [pid 6862] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6863] <... chdir resumed>) = 0 [pid 6862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] close(3 [pid 5060] openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... close resumed>) = 0 [pid 6863] <... prctl resumed>) = 0 [pid 5063] rmdir("./176" [pid 6863] setpgid(0, 0 [pid 5063] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6864 attached [pid 6863] <... setpgid resumed>) = 0 [pid 6863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6862] memfd_create("syzkaller", 0 [pid 5063] mkdir("./177", 0777 [pid 5060] <... openat resumed>) = 4 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6864 [pid 6864] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6863] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6864] chdir("./180" [pid 6863] write(3, "1000", 4 [pid 6862] <... memfd_create resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6864] <... chdir resumed>) = 0 [pid 6863] <... write resumed>) = 4 [pid 6862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] getdents64(4, [pid 6864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6863] close(3 [pid 6862] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6864] <... prctl resumed>) = 0 [pid 6863] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6864] setpgid(0, 0 [pid 6863] symlink("/dev/binderfs", "./binderfs" [pid 6864] <... setpgid resumed>) = 0 [pid 6863] <... symlink resumed>) = 0 [pid 6864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6863] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... openat resumed>) = 3 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6864] write(3, "1000", 4 [pid 6863] <... futex resumed>) = 0 [pid 5060] close(4 [pid 6864] <... write resumed>) = 4 [pid 6863] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6864] close(3 [pid 6863] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6864] <... close resumed>) = 0 [pid 6863] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6864] symlink("/dev/binderfs", "./binderfs" [pid 6863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6864] <... symlink resumed>) = 0 [pid 6863] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./177/file0" [pid 6863] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6864] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6863] <... mprotect resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6864] <... futex resumed>) = 0 [pid 6864] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6863] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6864] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6863] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] getdents64(3, [pid 6863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6865 attached [pid 6864] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6865] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6864] <... mprotect resumed>) = 0 [pid 6863] <... clone3 resumed> => {parent_tid=[6865]}, 88) = 6865 [pid 6865] <... rseq resumed>) = 0 [pid 6864] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6863] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6865] set_robust_list(0x7fe7c32469a0, 24 [pid 5060] close(3 [pid 6863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6865] <... set_robust_list resumed>) = 0 [pid 6864] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6863] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] rt_sigprocmask(SIG_SETMASK, [], [pid 6864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6863] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 ./strace-static-x86_64: Process 6866 attached [pid 6865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6863] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] rmdir("./177" [pid 6865] memfd_create("syzkaller", 0 [pid 6864] <... clone3 resumed> => {parent_tid=[6866]}, 88) = 6866 [pid 6864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6864] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6866] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6865] <... memfd_create resumed>) = 3 [pid 6864] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6866] <... rseq resumed>) = 0 [pid 6864] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6866] set_robust_list(0x7fe7c32469a0, 24 [pid 6862] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5060] mkdir("./178", 0777 [pid 6866] <... set_robust_list resumed>) = 0 [pid 6866] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... mkdir resumed>) = 0 [pid 6866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6866] memfd_create("syzkaller", 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6866] <... memfd_create resumed>) = 3 [pid 6866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6865] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6862] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 6865] munmap(0x7fe7bae00000, 138412032 [pid 6862] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 6866] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6865] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] close(3 [pid 6862] <... munmap resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6868 attached ./strace-static-x86_64: Process 6867 attached [pid 6865] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6862] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6868 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6867 [pid 6868] set_robust_list(0x55558e6e36a0, 24 [pid 6867] set_robust_list(0x55558e6e36a0, 24 [pid 6865] <... openat resumed>) = 4 [pid 6868] <... set_robust_list resumed>) = 0 [pid 6867] <... set_robust_list resumed>) = 0 [pid 6865] ioctl(4, LOOP_SET_FD, 3 [pid 6862] <... openat resumed>) = 4 [pid 6868] chdir("./177" [pid 6867] chdir("./178" [pid 6862] ioctl(4, LOOP_SET_FD, 3 [pid 6868] <... chdir resumed>) = 0 [pid 6868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6868] setpgid(0, 0) = 0 [pid 6868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6868] write(3, "1000", 4) = 4 [pid 6868] close(3) = 0 [pid 6868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6868] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6867] <... chdir resumed>) = 0 [pid 6868] <... futex resumed>) = 0 [pid 6868] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6868] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6868] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6867] <... prctl resumed>) = 0 [pid 6867] setpgid(0, 0) = 0 [pid 6868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6868] <... mmap resumed>) = 0x7fe7c3226000 [pid 6867] <... openat resumed>) = 3 [pid 6868] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6867] write(3, "1000", 4 [pid 6868] <... mprotect resumed>) = 0 [pid 6867] <... write resumed>) = 4 [pid 6868] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6867] close(3 [pid 6868] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6867] <... close resumed>) = 0 [pid 6862] <... ioctl resumed>) = 0 [pid 6868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6867] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6869 attached [pid 6865] <... ioctl resumed>) = 0 [pid 6862] close(3) = 0 [pid 6862] close(4) = 0 [pid 6869] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6868] <... clone3 resumed> => {parent_tid=[6869]}, 88) = 6869 [pid 6867] <... symlink resumed>) = 0 [pid 6866] <... write resumed>) = 2097152 [pid 6865] close(3 [pid 6862] mkdir("./file0", 0777 [pid 6869] <... rseq resumed>) = 0 [pid 6868] rt_sigprocmask(SIG_SETMASK, [], [pid 6867] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6866] munmap(0x7fe7bae00000, 138412032 [pid 6865] <... close resumed>) = 0 [pid 6869] set_robust_list(0x7fe7c32469a0, 24 [pid 6868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6867] <... futex resumed>) = 0 [pid 6865] close(4 [pid 6862] <... mkdir resumed>) = 0 [pid 6869] <... set_robust_list resumed>) = 0 [pid 6868] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6867] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6865] <... close resumed>) = 0 [pid 6869] rt_sigprocmask(SIG_SETMASK, [], [pid 6868] <... futex resumed>) = 0 [pid 6867] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6865] mkdir("./file0", 0777 [pid 6862] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6869] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6868] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 163.483615][ T6865] loop3: detected capacity change from 0 to 4096 [ 163.491134][ T6862] loop2: detected capacity change from 0 to 4096 [pid 6867] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6869] memfd_create("syzkaller", 0 [pid 6867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6865] <... mkdir resumed>) = 0 [pid 6869] <... memfd_create resumed>) = 3 [pid 6867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6865] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6867] <... mmap resumed>) = 0x7fe7c3226000 [pid 6866] <... munmap resumed>) = 0 [pid 6869] <... mmap resumed>) = 0x7fe7bae00000 [pid 6867] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6867] <... mprotect resumed>) = 0 [pid 6866] <... openat resumed>) = 4 [pid 6866] ioctl(4, LOOP_SET_FD, 3 [pid 6867] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6866] <... ioctl resumed>) = 0 [pid 6866] close(3./strace-static-x86_64: Process 6870 attached ) = 0 [pid 6867] <... clone3 resumed> => {parent_tid=[6870]}, 88) = 6870 [pid 6866] close(4 [pid 6870] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6866] <... close resumed>) = 0 [pid 6870] <... rseq resumed>) = 0 [pid 6867] rt_sigprocmask(SIG_SETMASK, [], [pid 6866] mkdir("./file0", 0777 [pid 6870] set_robust_list(0x7fe7c32469a0, 24 [pid 6867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6870] <... set_robust_list resumed>) = 0 [pid 6867] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6866] <... mkdir resumed>) = 0 [pid 6870] rt_sigprocmask(SIG_SETMASK, [], [pid 6867] <... futex resumed>) = 0 [pid 6866] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6870] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 163.535035][ T6865] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 163.547806][ T6862] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 163.569657][ T6866] loop0: detected capacity change from 0 to 4096 [pid 6869] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6870] memfd_create("syzkaller", 0 [pid 6867] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6870] <... memfd_create resumed>) = 3 [pid 6870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6862] <... mount resumed>) = 0 [pid 6862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6869] <... write resumed>) = 2097152 [pid 6862] <... openat resumed>) = 3 [pid 6862] chdir("./file0" [pid 6869] munmap(0x7fe7bae00000, 138412032 [pid 6865] <... mount resumed>) = 0 [pid 6862] <... chdir resumed>) = 0 [pid 6862] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6862] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6865] <... openat resumed>) = 3 [ 163.610046][ T6866] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6862] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] chdir("./file0" [pid 6862] <... futex resumed>) = 1 [pid 6861] <... futex resumed>) = 0 [pid 6862] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6861] exit_group(0 [pid 6869] <... munmap resumed>) = 0 [pid 6865] <... chdir resumed>) = 0 [pid 6862] <... futex resumed>) = ? [pid 6861] <... exit_group resumed>) = ? [pid 6865] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6862] +++ exited with 0 +++ [pid 6865] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6865] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6861] +++ exited with 0 +++ [pid 6865] <... futex resumed>) = 1 [pid 6865] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6861, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6863] <... futex resumed>) = 0 [pid 6869] <... openat resumed>) = 4 [pid 6863] exit_group(0) = ? [pid 6869] ioctl(4, LOOP_SET_FD, 3 [pid 6865] <... futex resumed>) = ? [pid 6865] +++ exited with 0 +++ [pid 5061] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6863] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6863, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] newfstatat(AT_FDCWD, "./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./180/binderfs") = 0 [pid 5062] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6869] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6869] close(3 [pid 5062] <... openat resumed>) = 3 [pid 5061] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6869] <... close resumed>) = 0 [pid 6866] <... mount resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 6869] close(4 [pid 6866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6869] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6869] mkdir("./file0", 0777 [pid 6866] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(AT_FDCWD, "./180/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6866] chdir("./file0" [pid 5062] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6866] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6869] <... mkdir resumed>) = 0 [pid 6866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./178/binderfs", [pid 6869] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6866] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6866] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] unlink("./178/binderfs" [pid 5061] newfstatat(4, "", [pid 6866] <... futex resumed>) = 1 [pid 6864] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6866] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... unlink resumed>) = 0 [pid 6864] exit_group(0 [pid 5061] getdents64(4, [pid 6866] <... futex resumed>) = ? [pid 6864] <... exit_group resumed>) = ? [pid 5062] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6866] +++ exited with 0 +++ [pid 6864] +++ exited with 0 +++ [ 163.688142][ T6869] loop4: detected capacity change from 0 to 4096 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6864, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5059] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 5059] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5059] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./180/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5059] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(3 [pid 5059] unlink("./180/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5061] rmdir("./180") = 0 [pid 5061] mkdir("./181", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5062] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 6870] <... write resumed>) = 2097152 [pid 6870] munmap(0x7fe7bae00000, 138412032 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./178/file0", [pid 5059] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./180/file0", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6870] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6870] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5059] openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6870] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5062] getdents64(4, [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6870] <... ioctl resumed>) = 0 [pid 6869] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5059] getdents64(4, [pid 6870] close(3 [pid 6869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6870] <... close resumed>) = 0 [pid 6869] <... openat resumed>) = 3 [pid 5062] close(4) = 0 [pid 5062] rmdir("./178/file0" [pid 5059] getdents64(4, [pid 5062] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6870] close(4 [pid 6869] chdir("./file0" [pid 5062] getdents64(3, [pid 5059] close(4 [pid 6870] <... close resumed>) = 0 [pid 6869] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6870] mkdir("./file0", 0777 [pid 6869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] close(3 [pid 6869] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... close resumed>) = 0 [pid 6870] <... mkdir resumed>) = 0 [pid 6870] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./178") = 0 [pid 5062] mkdir("./179", 0777) = 0 [pid 6869] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6868] <... futex resumed>) = 0 [pid 6869] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 163.731906][ T6869] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 163.758275][ T6870] loop1: detected capacity change from 0 to 4096 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6868] exit_group(0 [pid 5059] rmdir("./180/file0" [pid 6869] <... futex resumed>) = ? [pid 6868] <... exit_group resumed>) = ? [pid 5059] <... rmdir resumed>) = 0 [pid 6869] +++ exited with 0 +++ [pid 5059] getdents64(3, [pid 6868] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6868, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5059] <... close resumed>) = 0 [pid 5063] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./180") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./181", 0777 [pid 5063] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5059] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./177/binderfs", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6871 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6871 [pid 6871] set_robust_list(0x55558e6e36a0, 24 [pid 5063] unlink("./177/binderfs" [pid 6871] <... set_robust_list resumed>) = 0 [pid 6871] chdir("./181" [pid 5063] <... unlink resumed>) = 0 [pid 6871] <... chdir resumed>) = 0 [pid 5063] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6870] <... mount resumed>) = 0 [pid 6871] <... prctl resumed>) = 0 [pid 6871] setpgid(0, 0) = 0 [ 163.805249][ T6870] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6870] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 6870] chdir("./file0") = 0 [pid 6870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6871] <... openat resumed>) = 3 [pid 6871] write(3, "1000", 4 [pid 6870] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6871] <... write resumed>) = 4 [pid 6870] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 5062] close(3 [pid 5059] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./177/file0" [pid 6871] close(3 [pid 6870] <... futex resumed>) = 1 [pid 6867] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] close(3 [pid 6871] <... close resumed>) = 0 [pid 6870] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6867] exit_group(0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6871] symlink("/dev/binderfs", "./binderfs" [pid 6870] <... futex resumed>) = ? [pid 6867] <... exit_group resumed>) = ? [pid 5063] getdents64(3, [pid 6870] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6872 attached [pid 6871] <... symlink resumed>) = 0 [pid 6867] +++ exited with 0 +++ [pid 5063] close(3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6872 [pid 5059] <... close resumed>) = 0 [pid 6871] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6867, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6872] set_robust_list(0x55558e6e36a0, 24 [pid 6871] <... futex resumed>) = 0 [pid 5063] rmdir("./177" [pid 6872] <... set_robust_list resumed>) = 0 [pid 6871] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6872] chdir("./179" [pid 6871] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6871] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] mkdir("./178", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6872] <... chdir resumed>) = 0 [pid 6871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6872] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... openat resumed>) = 3 [pid 6872] <... prctl resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 6872] setpgid(0, 0 [pid 6871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6872] <... setpgid resumed>) = 0 [pid 5060] getdents64(3, [pid 6872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6871] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6873 attached [pid 6871] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6873] set_robust_list(0x55558e6e36a0, 24 [pid 5060] newfstatat(AT_FDCWD, "./178/binderfs", [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6873 [pid 6873] <... set_robust_list resumed>) = 0 [pid 6872] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6873] chdir("./181" [pid 6872] write(3, "1000", 4 [pid 6871] <... mprotect resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] unlink("./178/binderfs" [pid 6873] <... chdir resumed>) = 0 [pid 6872] <... write resumed>) = 4 [pid 6871] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... unlink resumed>) = 0 [pid 6873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6872] close(3 [pid 5060] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6873] <... prctl resumed>) = 0 [pid 6872] <... close resumed>) = 0 [pid 6871] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6873] setpgid(0, 0 [pid 6872] symlink("/dev/binderfs", "./binderfs" [pid 6871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6874 attached [pid 6873] <... setpgid resumed>) = 0 [pid 6872] <... symlink resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6874] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6871] <... clone3 resumed> => {parent_tid=[6874]}, 88) = 6874 [pid 5060] <... umount2 resumed>) = 0 [pid 6874] <... rseq resumed>) = 0 [pid 6872] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6871] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6874] set_robust_list(0x7fe7c32469a0, 24 [pid 6873] <... openat resumed>) = 3 [pid 6872] <... futex resumed>) = 0 [pid 6871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6874] <... set_robust_list resumed>) = 0 [pid 6873] write(3, "1000", 4 [pid 6872] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6871] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(AT_FDCWD, "./178/file0", [pid 6874] rt_sigprocmask(SIG_SETMASK, [], [pid 6873] <... write resumed>) = 4 [pid 6872] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6871] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6874] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6873] close(3 [pid 6872] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6871] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6873] <... close resumed>) = 0 [pid 6873] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6873] <... symlink resumed>) = 0 [pid 6872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] newfstatat(4, "", [pid 6874] memfd_create("syzkaller", 0 [pid 6873] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6872] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6874] <... memfd_create resumed>) = 3 [pid 6873] <... futex resumed>) = 0 [pid 6872] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] getdents64(4, [pid 6874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6873] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6874] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6873] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6872] <... mprotect resumed>) = 0 [pid 6873] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] getdents64(4, [pid 6873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6872] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] close(4 [pid 6873] <... mmap resumed>) = 0x7fe7c3226000 [pid 6872] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6873] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] <... close resumed>) = 0 [pid 6873] <... mprotect resumed>) = 0 [pid 5060] rmdir("./178/file0"./strace-static-x86_64: Process 6875 attached [pid 6873] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6872] <... clone3 resumed> => {parent_tid=[6875]}, 88) = 6875 [pid 6875] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5060] <... rmdir resumed>) = 0 [pid 6875] <... rseq resumed>) = 0 [pid 6873] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6872] rt_sigprocmask(SIG_SETMASK, [], [pid 6875] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6873] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] getdents64(3, ./strace-static-x86_64: Process 6876 attached [pid 6872] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6876] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6873] <... clone3 resumed> => {parent_tid=[6876]}, 88) = 6876 [pid 6872] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6876] <... rseq resumed>) = 0 [pid 6873] rt_sigprocmask(SIG_SETMASK, [], [pid 6872] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] close(3 [pid 6876] set_robust_list(0x7fe7c32469a0, 24 [pid 6873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 6876] <... set_robust_list resumed>) = 0 [pid 6873] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6876] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] rmdir("./178" [pid 6876] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6875] memfd_create("syzkaller", 0 [pid 6873] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6876] memfd_create("syzkaller", 0 [pid 6875] <... memfd_create resumed>) = 3 [pid 6873] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5060] mkdir("./179", 0777) = 0 [pid 6876] <... memfd_create resumed>) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... openat resumed>) = 3 [pid 6876] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6874] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6876] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 6875] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6874] <... write resumed>) = 2097152 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6874] munmap(0x7fe7bae00000, 138412032./strace-static-x86_64: Process 6877 attached [pid 6876] <... write resumed>) = 2097152 [pid 6877] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6877 [pid 6877] chdir("./178") = 0 [pid 6877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6877] setpgid(0, 0) = 0 [pid 6876] munmap(0x7fe7bae00000, 138412032 [pid 6877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6876] <... munmap resumed>) = 0 [pid 6877] <... openat resumed>) = 3 [pid 6877] write(3, "1000", 4 [pid 6876] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6875] <... write resumed>) = 2097152 [pid 6874] <... munmap resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6877] <... write resumed>) = 4 [pid 6876] <... openat resumed>) = 4 [pid 6875] munmap(0x7fe7bae00000, 138412032 [pid 6874] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] close(3 [pid 6877] close(3 [pid 6874] <... openat resumed>) = 4 [pid 6877] <... close resumed>) = 0 [pid 6876] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... close resumed>) = 0 [pid 6877] symlink("/dev/binderfs", "./binderfs" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6877] <... symlink resumed>) = 0 [pid 6877] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] ioctl(4, LOOP_SET_FD, 3 [pid 6877] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6878 attached [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6878 [pid 6878] set_robust_list(0x55558e6e36a0, 24 [pid 6877] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6876] <... ioctl resumed>) = 0 [pid 6877] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6876] close(3 [pid 6877] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6876] <... close resumed>) = 0 [pid 6877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6876] close(4 [pid 6877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6878] <... set_robust_list resumed>) = 0 [pid 6877] <... mmap resumed>) = 0x7fe7c3226000 [pid 6875] <... munmap resumed>) = 0 [pid 6878] chdir("./179" [pid 6877] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6878] <... chdir resumed>) = 0 [pid 6877] <... mprotect resumed>) = 0 [pid 6876] <... close resumed>) = 0 [pid 6878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6877] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6876] mkdir("./file0", 0777 [pid 6878] <... prctl resumed>) = 0 [pid 6877] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6878] setpgid(0, 0 [pid 6876] <... mkdir resumed>) = 0 [pid 6877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6878] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6879 attached [pid 6878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6879] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6878] <... openat resumed>) = 3 [pid 6877] <... clone3 resumed> => {parent_tid=[6879]}, 88) = 6879 [pid 6876] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6879] <... rseq resumed>) = 0 [pid 6878] write(3, "1000", 4 [pid 6877] rt_sigprocmask(SIG_SETMASK, [], [pid 6879] set_robust_list(0x7fe7c32469a0, 24 [pid 6878] <... write resumed>) = 4 [pid 6877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6879] <... set_robust_list resumed>) = 0 [pid 6878] close(3 [pid 6879] rt_sigprocmask(SIG_SETMASK, [], [pid 6878] <... close resumed>) = 0 [pid 6877] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6878] symlink("/dev/binderfs", "./binderfs" [pid 6877] <... futex resumed>) = 0 [pid 6875] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6878] <... symlink resumed>) = 0 [pid 6875] <... openat resumed>) = 4 [pid 6878] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6877] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6875] ioctl(4, LOOP_SET_FD, 3 [pid 6879] memfd_create("syzkaller", 0 [pid 6878] <... futex resumed>) = 0 [pid 6878] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6878] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6878] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6878] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6878] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6880]}, 88) = 6880 [pid 6878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6878] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6878] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6875] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6880 attached [pid 6879] <... memfd_create resumed>) = 3 [pid 6875] close(3 [pid 6880] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6875] <... close resumed>) = 0 [pid 6880] <... rseq resumed>) = 0 [pid 6879] <... mmap resumed>) = 0x7fe7bae00000 [pid 6875] close(4 [pid 6874] <... ioctl resumed>) = 0 [pid 6880] set_robust_list(0x7fe7c32469a0, 24 [pid 6875] <... close resumed>) = 0 [pid 6874] close(3 [pid 6875] mkdir("./file0", 0777 [pid 6880] <... set_robust_list resumed>) = 0 [pid 6875] <... mkdir resumed>) = 0 [pid 6874] <... close resumed>) = 0 [pid 6880] rt_sigprocmask(SIG_SETMASK, [], [pid 6874] close(4 [pid 6880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6875] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6874] <... close resumed>) = 0 [pid 6880] memfd_create("syzkaller", 0) = 3 [pid 6874] mkdir("./file0", 0777 [ 164.082296][ T6876] loop0: detected capacity change from 0 to 4096 [ 164.082550][ T6874] loop2: detected capacity change from 0 to 4096 [ 164.112385][ T6875] loop3: detected capacity change from 0 to 4096 [ 164.120478][ T6876] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6874] <... mkdir resumed>) = 0 [pid 6874] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 164.141769][ T6875] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 164.155012][ T6874] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6879] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6876] <... mount resumed>) = 0 [pid 6876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6876] chdir("./file0") = 0 [pid 6879] <... write resumed>) = 2097152 [pid 6876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6880] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6879] munmap(0x7fe7bae00000, 138412032 [pid 6876] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6875] <... mount resumed>) = 0 [pid 6874] <... mount resumed>) = 0 [pid 6879] <... munmap resumed>) = 0 [pid 6876] <... futex resumed>) = 1 [pid 6875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6873] <... futex resumed>) = 0 [pid 6876] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6875] <... openat resumed>) = 3 [pid 6874] <... openat resumed>) = 3 [pid 6873] exit_group(0 [pid 6876] <... futex resumed>) = ? [pid 6875] chdir("./file0" [pid 6874] chdir("./file0" [pid 6873] <... exit_group resumed>) = ? [pid 6879] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6876] +++ exited with 0 +++ [pid 6875] <... chdir resumed>) = 0 [pid 6874] <... chdir resumed>) = 0 [pid 6873] +++ exited with 0 +++ [pid 6879] <... openat resumed>) = 4 [pid 6875] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6874] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6873, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6879] ioctl(4, LOOP_SET_FD, 3 [pid 6875] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 6879] <... ioctl resumed>) = 0 [pid 6875] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... restart_syscall resumed>) = 0 [pid 6874] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6871] <... futex resumed>) = 0 [pid 6875] <... futex resumed>) = 1 [pid 6875] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6872] <... futex resumed>) = 0 [pid 6872] exit_group(0 [pid 6871] exit_group(0 [pid 6875] <... futex resumed>) = ? [pid 6872] <... exit_group resumed>) = ? [pid 6871] <... exit_group resumed>) = ? [pid 5059] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6875] +++ exited with 0 +++ [pid 6874] <... futex resumed>) = ? [pid 6872] +++ exited with 0 +++ [pid 6874] +++ exited with 0 +++ [pid 6871] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6871, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6872, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5062] <... restart_syscall resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5061] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6879] close(3 [pid 6880] <... write resumed>) = 2097152 [pid 5059] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6880] munmap(0x7fe7bae00000, 138412032 [pid 6879] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6879] close(4 [pid 5061] newfstatat(3, "", [pid 5059] newfstatat(AT_FDCWD, "./181/binderfs", [pid 6879] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(3, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6879] mkdir("./file0", 0777 [pid 5061] getdents64(3, [pid 5059] unlink("./181/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6879] <... mkdir resumed>) = 0 [pid 6880] <... munmap resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... unlink resumed>) = 0 [pid 6879] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 164.270189][ T6879] loop4: detected capacity change from 0 to 4096 [pid 6880] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./181/binderfs", [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./181/binderfs" [pid 5062] newfstatat(AT_FDCWD, "./179/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./181/file0", [pid 5062] unlink("./179/binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 6880] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6880] ioctl(4, LOOP_SET_FD, 3 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6880] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5059] close(4 [pid 5061] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 6880] close(3 [pid 5061] newfstatat(AT_FDCWD, "./181/file0", [pid 5059] rmdir("./181/file0" [pid 6880] <... close resumed>) = 0 [pid 6880] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6880] <... close resumed>) = 0 [pid 5062] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./179/file0", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6880] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 6880] <... mkdir resumed>) = 0 [pid 6879] <... mount resumed>) = 0 [pid 5062] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 6880] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 164.312864][ T6879] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 164.330937][ T6880] loop1: detected capacity change from 0 to 4096 [pid 5061] openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6879] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 5059] rmdir("./181" [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5059] mkdir("./182", 0777 [pid 5062] newfstatat(4, "", [pid 5061] rmdir("./181/file0") = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] getdents64(4, [pid 5061] getdents64(3, [pid 5059] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6879] chdir("./file0" [pid 5062] close(4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] close(3 [pid 5062] rmdir("./179/file0") = 0 [pid 5061] <... close resumed>) = 0 [pid 6879] <... chdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] rmdir("./181" [pid 6879] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5062] close(3 [pid 6879] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... close resumed>) = 0 [pid 5061] mkdir("./182", 0777 [pid 6879] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] rmdir("./179") = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 6879] <... futex resumed>) = 1 [pid 6877] <... futex resumed>) = 0 [pid 5062] mkdir("./180", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6877] exit_group(0 [pid 5062] <... mkdir resumed>) = 0 [pid 6877] <... exit_group resumed>) = ? [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6879] +++ exited with 0 +++ [pid 6877] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6877, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6880] <... mount resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6880] <... openat resumed>) = 3 [pid 6880] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6880] <... chdir resumed>) = 0 [pid 6880] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6880] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] unlink("./178/binderfs" [pid 6880] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... unlink resumed>) = 0 [pid 6880] <... futex resumed>) = 1 [pid 6878] <... futex resumed>) = 0 [pid 6880] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6878] exit_group(0 [pid 6880] <... futex resumed>) = ? [pid 6878] <... exit_group resumed>) = ? [pid 6880] +++ exited with 0 +++ [pid 6878] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6878, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 164.370941][ T6880] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./178/file0", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6881 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6881 [pid 6881] set_robust_list(0x55558e6e36a0, 24 [pid 5063] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5060] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6881] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 6881] chdir("./182" [pid 5063] openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(3, "", ./strace-static-x86_64: Process 6882 attached [pid 6881] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 6882] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(4, "", [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6883 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6882 ./strace-static-x86_64: Process 6883 attached [pid 6881] <... prctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 6883] set_robust_list(0x55558e6e36a0, 24 [pid 6881] setpgid(0, 0 [pid 5063] getdents64(4, [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6883] <... set_robust_list resumed>) = 0 [pid 6881] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6883] chdir("./180") = 0 [pid 6881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./179/binderfs", [pid 6883] <... prctl resumed>) = 0 [pid 6882] chdir("./182" [pid 6881] <... openat resumed>) = 3 [pid 5063] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6883] setpgid(0, 0 [pid 6882] <... chdir resumed>) = 0 [pid 6883] <... setpgid resumed>) = 0 [pid 6882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6881] write(3, "1000", 4 [pid 5063] <... close resumed>) = 0 [pid 5060] unlink("./179/binderfs" [pid 6883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6881] <... write resumed>) = 4 [pid 6882] <... prctl resumed>) = 0 [pid 5063] rmdir("./178/file0" [pid 5060] <... unlink resumed>) = 0 [pid 6883] <... openat resumed>) = 3 [pid 6882] setpgid(0, 0 [pid 6881] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 6881] <... close resumed>) = 0 [pid 5060] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6882] <... setpgid resumed>) = 0 [pid 6883] write(3, "1000", 4 [pid 6881] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(3, [pid 6882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6883] <... write resumed>) = 4 [pid 6883] close(3 [pid 6881] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6883] <... close resumed>) = 0 [pid 6882] <... openat resumed>) = 3 [pid 5063] close(3 [pid 6883] symlink("/dev/binderfs", "./binderfs" [pid 6882] write(3, "1000", 4 [pid 6881] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 6882] <... write resumed>) = 4 [pid 5063] rmdir("./178" [pid 5060] <... umount2 resumed>) = 0 [pid 6883] <... symlink resumed>) = 0 [pid 6882] close(3 [pid 6881] <... futex resumed>) = 0 [pid 5060] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6883] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6882] <... close resumed>) = 0 [pid 6881] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... rmdir resumed>) = 0 [pid 6882] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6883] <... futex resumed>) = 0 [pid 6881] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6883] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6882] <... symlink resumed>) = 0 [pid 6881] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] mkdir("./179", 0777 [pid 5060] newfstatat(AT_FDCWD, "./179/file0", [pid 6883] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6882] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6882] <... futex resumed>) = 0 [pid 6882] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... mkdir resumed>) = 0 [pid 6883] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6882] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6881] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6882] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6881] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6883] <... mmap resumed>) = 0x7fe7c3226000 [pid 6882] <... mmap resumed>) = 0x7fe7c3226000 [pid 6881] <... mprotect resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6883] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6882] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6883] <... mprotect resumed>) = 0 [pid 6882] <... mprotect resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6883] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6882] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6883] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6881] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] newfstatat(4, "", [pid 6883] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6882] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6881] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6884 attached [pid 6882] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] getdents64(4, ./strace-static-x86_64: Process 6886 attached ./strace-static-x86_64: Process 6885 attached [pid 6884] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6883] <... clone3 resumed> => {parent_tid=[6884]}, 88) = 6884 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6886] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6885] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6884] <... rseq resumed>) = 0 [pid 6883] rt_sigprocmask(SIG_SETMASK, [], [pid 6886] <... rseq resumed>) = 0 [pid 6885] <... rseq resumed>) = 0 [pid 6884] set_robust_list(0x7fe7c32469a0, 24 [pid 6883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6882] <... clone3 resumed> => {parent_tid=[6886]}, 88) = 6886 [pid 6881] <... clone3 resumed> => {parent_tid=[6885]}, 88) = 6885 [pid 5060] getdents64(4, [pid 6886] set_robust_list(0x7fe7c32469a0, 24 [pid 6885] set_robust_list(0x7fe7c32469a0, 24 [pid 6884] <... set_robust_list resumed>) = 0 [pid 6883] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6882] rt_sigprocmask(SIG_SETMASK, [], [pid 6881] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6886] <... set_robust_list resumed>) = 0 [pid 6885] <... set_robust_list resumed>) = 0 [pid 6884] rt_sigprocmask(SIG_SETMASK, [], [pid 6883] <... futex resumed>) = 0 [pid 6882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] close(4 [pid 6886] rt_sigprocmask(SIG_SETMASK, [], [pid 6885] rt_sigprocmask(SIG_SETMASK, [], [pid 6884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6883] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6882] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6881] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 6886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6881] <... futex resumed>) = 0 [pid 6886] memfd_create("syzkaller", 0 [pid 6885] memfd_create("syzkaller", 0 [pid 6882] <... futex resumed>) = 0 [pid 6881] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] rmdir("./179/file0" [pid 6884] memfd_create("syzkaller", 0 [pid 6886] <... memfd_create resumed>) = 3 [pid 6882] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6884] <... memfd_create resumed>) = 3 [pid 6886] <... mmap resumed>) = 0x7fe7bae00000 [pid 6885] <... memfd_create resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 6884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] getdents64(3, [pid 6885] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6884] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] close(3) = 0 [pid 5060] rmdir("./179") = 0 [pid 5060] mkdir("./180", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6885] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6886] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6887 ./strace-static-x86_64: Process 6887 attached [pid 6887] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6887] chdir("./179") = 0 [pid 6887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6887] setpgid(0, 0 [pid 6884] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6887] <... setpgid resumed>) = 0 [pid 6887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6887] write(3, "1000", 4) = 4 [pid 6887] close(3) = 0 [pid 6887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6887] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6887] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6887] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6887] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6887] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6888]}, 88) = 6888 [pid 6886] <... write resumed>) = 2097152 [pid 6885] <... write resumed>) = 2097152 [pid 5060] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6888 attached [pid 6887] rt_sigprocmask(SIG_SETMASK, [], [pid 6888] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6888] <... rseq resumed>) = 0 [pid 6887] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] set_robust_list(0x7fe7c32469a0, 24 [pid 6887] <... futex resumed>) = 0 [pid 5060] close(3 [pid 6888] <... set_robust_list resumed>) = 0 [pid 6887] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... close resumed>) = 0 [pid 6888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6888] memfd_create("syzkaller", 0 [pid 6886] munmap(0x7fe7bae00000, 138412032 [pid 6888] <... memfd_create resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6889 ./strace-static-x86_64: Process 6889 attached [pid 6888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6889] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6888] <... mmap resumed>) = 0x7fe7bae00000 [pid 6889] chdir("./180") = 0 [pid 6885] munmap(0x7fe7bae00000, 138412032 [pid 6889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6885] <... munmap resumed>) = 0 [pid 6889] <... prctl resumed>) = 0 [pid 6886] <... munmap resumed>) = 0 [pid 6889] setpgid(0, 0) = 0 [pid 6886] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6886] <... openat resumed>) = 4 [pid 6884] <... write resumed>) = 2097152 [pid 6889] <... openat resumed>) = 3 [pid 6886] ioctl(4, LOOP_SET_FD, 3 [pid 6885] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6885] ioctl(4, LOOP_SET_FD, 3 [pid 6889] write(3, "1000", 4 [pid 6886] <... ioctl resumed>) = 0 [pid 6884] munmap(0x7fe7bae00000, 138412032 [pid 6889] <... write resumed>) = 4 [pid 6885] <... ioctl resumed>) = 0 [pid 6889] close(3 [pid 6888] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6886] close(3 [pid 6884] <... munmap resumed>) = 0 [pid 6889] <... close resumed>) = 0 [pid 6886] <... close resumed>) = 0 [pid 6885] close(3 [pid 6884] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6889] symlink("/dev/binderfs", "./binderfs" [pid 6886] close(4 [pid 6885] <... close resumed>) = 0 [pid 6884] <... openat resumed>) = 4 [pid 6886] <... close resumed>) = 0 [pid 6885] close(4 [pid 6884] ioctl(4, LOOP_SET_FD, 3 [pid 6889] <... symlink resumed>) = 0 [pid 6886] mkdir("./file0", 0777 [pid 6885] <... close resumed>) = 0 [pid 6886] <... mkdir resumed>) = 0 [pid 6885] mkdir("./file0", 0777) = 0 [pid 6885] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6889] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 164.709614][ T6886] loop0: detected capacity change from 0 to 4096 [ 164.710442][ T6885] loop2: detected capacity change from 0 to 4096 [ 164.738141][ T6884] loop3: detected capacity change from 0 to 4096 [ 164.749297][ T6885] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6889] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6886] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6884] <... ioctl resumed>) = 0 [pid 6889] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6884] close(3 [pid 6889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6884] <... close resumed>) = 0 [pid 6889] <... mmap resumed>) = 0x7fe7c3226000 [pid 6884] close(4 [pid 6889] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6884] <... close resumed>) = 0 [pid 6884] mkdir("./file0", 0777) = 0 [pid 6889] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6884] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6889] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6890 attached [pid 6888] <... write resumed>) = 2097152 [pid 6890] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6889] <... clone3 resumed> => {parent_tid=[6890]}, 88) = 6890 [pid 6890] <... rseq resumed>) = 0 [pid 6889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6890] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6889] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] munmap(0x7fe7bae00000, 138412032 [pid 6890] rt_sigprocmask(SIG_SETMASK, [], [pid 6889] <... futex resumed>) = 0 [pid 6890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6889] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6890] memfd_create("syzkaller", 0 [pid 6885] <... mount resumed>) = 0 [pid 6885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6885] chdir("./file0") = 0 [pid 6885] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6890] <... memfd_create resumed>) = 3 [pid 6885] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6885] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6881] <... futex resumed>) = 0 [pid 6885] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] exit_group(0 [pid 6885] <... futex resumed>) = ? [pid 6881] <... exit_group resumed>) = ? [pid 6888] <... munmap resumed>) = 0 [pid 6885] +++ exited with 0 +++ [pid 6881] +++ exited with 0 +++ [pid 6888] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6881, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6888] <... openat resumed>) = 4 [ 164.762500][ T6886] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 164.780827][ T6884] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6888] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6886] <... mount resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 6886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6886] chdir("./file0") = 0 [pid 5061] getdents64(3, [pid 6886] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6888] <... ioctl resumed>) = 0 [pid 6886] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6888] close(3 [pid 6886] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6888] <... close resumed>) = 0 [pid 6886] <... futex resumed>) = 1 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6888] close(4 [pid 5061] newfstatat(AT_FDCWD, "./182/binderfs", [pid 6888] <... close resumed>) = 0 [pid 6886] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6888] mkdir("./file0", 0777 [pid 5061] unlink("./182/binderfs" [pid 6884] <... mount resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6890] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6888] <... mkdir resumed>) = 0 [pid 6882] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6888] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6882] exit_group(0 [pid 5061] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6884] <... openat resumed>) = 3 [pid 6882] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./182/file0", [pid 6886] <... futex resumed>) = ? [pid 6884] chdir("./file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 164.844127][ T6888] loop4: detected capacity change from 0 to 4096 [pid 6886] +++ exited with 0 +++ [pid 6884] <... chdir resumed>) = 0 [pid 6882] +++ exited with 0 +++ [pid 5061] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6884] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6884] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6883] <... futex resumed>) = 0 [pid 6884] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6883] exit_group(0 [pid 6884] <... futex resumed>) = ? [pid 6883] <... exit_group resumed>) = ? [pid 6884] +++ exited with 0 +++ [pid 6883] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6882, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6883, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 4 [pid 5062] newfstatat(3, "", [pid 5059] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5061] getdents64(4, [pid 5059] newfstatat(3, "", [pid 6890] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6890] munmap(0x7fe7bae00000, 138412032 [pid 5062] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5059] getdents64(3, [pid 6890] <... munmap resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5062] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [ 164.898136][ T6888] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5062] unlink("./180/binderfs" [pid 5061] rmdir("./182/file0" [pid 5059] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... rmdir resumed>) = 0 [pid 5062] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 6890] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./182/binderfs", [pid 6890] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5059] unlink("./182/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./182" [pid 5059] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./180/file0", [pid 5061] <... rmdir resumed>) = 0 [pid 5059] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] mkdir("./183", 0777 [pid 6890] <... ioctl resumed>) = 0 [pid 6890] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 6890] <... close resumed>) = 0 [pid 6890] close(4 [pid 5062] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5059] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5059] newfstatat(AT_FDCWD, "./182/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(4, [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5062] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5059] close(4 [pid 6890] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6890] mkdir("./file0", 0777 [pid 5062] <... close resumed>) = 0 [pid 5059] rmdir("./182/file0" [pid 6890] <... mkdir resumed>) = 0 [pid 5062] rmdir("./180/file0" [pid 5059] <... rmdir resumed>) = 0 [pid 6890] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5062] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5059] rmdir("./182" [pid 5062] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5062] rmdir("./180") = 0 [pid 5059] mkdir("./183", 0777 [pid 5062] mkdir("./181", 0777 [pid 5059] <... mkdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6888] <... mount resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6888] chdir("./file0") = 0 [pid 6890] <... mount resumed>) = 0 [pid 6888] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 6888] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6888] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6887] <... futex resumed>) = 0 [pid 6890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6887] exit_group(0 [pid 6890] <... openat resumed>) = 3 [pid 6887] <... exit_group resumed>) = ? [ 164.941421][ T6890] loop1: detected capacity change from 0 to 4096 [ 164.964872][ T6890] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6890] chdir("./file0") = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6888] +++ exited with 0 +++ [pid 6887] +++ exited with 0 +++ [pid 5061] close(3 [pid 6890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6887, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./179/binderfs") = 0 [pid 6890] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6891 [pid 5063] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6890] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6891 attached [pid 6889] <... futex resumed>) = 0 [pid 6891] set_robust_list(0x55558e6e36a0, 24 [pid 6890] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6889] exit_group(0 [pid 5063] <... umount2 resumed>) = 0 [pid 6891] <... set_robust_list resumed>) = 0 [pid 6889] <... exit_group resumed>) = ? [pid 5063] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6890] <... futex resumed>) = ? [pid 6891] chdir("./183" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6891] <... chdir resumed>) = 0 [pid 6890] +++ exited with 0 +++ [pid 6889] +++ exited with 0 +++ [pid 5063] getdents64(4, [pid 6891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6889, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6891] <... prctl resumed>) = 0 [pid 5063] close(4 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 6891] setpgid(0, 0 [pid 5063] <... close resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 6891] <... setpgid resumed>) = 0 [pid 5063] rmdir("./179/file0" [pid 6891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 5060] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6891] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6891] write(3, "1000", 4 [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6891] <... write resumed>) = 4 [pid 6891] close(3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... openat resumed>) = 3 [pid 5059] close(3 [pid 6891] <... close resumed>) = 0 [pid 6891] symlink("/dev/binderfs", "./binderfs" [pid 5060] newfstatat(3, "", [pid 5059] <... close resumed>) = 0 [pid 5063] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6891] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6892 attached [pid 6892] set_robust_list(0x55558e6e36a0, 24 [pid 6891] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5060] getdents64(3, ./strace-static-x86_64: Process 6893 attached [pid 6892] <... set_robust_list resumed>) = 0 [pid 6891] <... futex resumed>) = 0 [pid 6893] set_robust_list(0x55558e6e36a0, 24 [pid 6892] chdir("./181" [pid 6891] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] rmdir("./179" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6892 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6893 [pid 6893] <... set_robust_list resumed>) = 0 [pid 6892] <... chdir resumed>) = 0 [pid 6891] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6891] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6893] chdir("./183" [pid 6892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6893] <... chdir resumed>) = 0 [pid 6892] <... prctl resumed>) = 0 [pid 6891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] mkdir("./180", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./180/binderfs" [pid 6892] setpgid(0, 0 [pid 6891] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] <... unlink resumed>) = 0 [pid 6892] <... setpgid resumed>) = 0 [pid 6891] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6891] <... mprotect resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6893] <... prctl resumed>) = 0 [pid 6892] <... openat resumed>) = 3 [pid 6891] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6893] setpgid(0, 0 [pid 6892] write(3, "1000", 4 [pid 6891] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] <... setpgid resumed>) = 0 [pid 6892] <... write resumed>) = 4 [pid 6891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] newfstatat(AT_FDCWD, "./180/file0", [pid 6892] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6894 attached [pid 6893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6892] <... close resumed>) = 0 [pid 6891] <... clone3 resumed> => {parent_tid=[6894]}, 88) = 6894 [pid 6894] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6892] symlink("/dev/binderfs", "./binderfs" [pid 6891] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6894] <... rseq resumed>) = 0 [pid 6892] <... symlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6894] set_robust_list(0x7fe7c32469a0, 24 [pid 6893] <... openat resumed>) = 3 [pid 6892] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6894] <... set_robust_list resumed>) = 0 [pid 6893] write(3, "1000", 4 [pid 6892] <... futex resumed>) = 0 [pid 6891] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6894] rt_sigprocmask(SIG_SETMASK, [], [pid 6893] <... write resumed>) = 4 [pid 6892] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6891] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 6894] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6893] close(3 [pid 6892] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6891] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6892] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] newfstatat(4, "", [pid 6893] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6893] symlink("/dev/binderfs", "./binderfs" [pid 6892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6894] memfd_create("syzkaller", 0 [pid 6893] <... symlink resumed>) = 0 [pid 6892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6894] <... memfd_create resumed>) = 3 [pid 6893] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6892] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] getdents64(4, [pid 6894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6893] <... futex resumed>) = 0 [pid 6892] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6894] <... mmap resumed>) = 0x7fe7bae00000 [pid 6893] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6892] <... mprotect resumed>) = 0 [pid 5060] close(4 [pid 6892] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... close resumed>) = 0 [pid 6893] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6892] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] rmdir("./180/file0" [pid 6893] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] <... rmdir resumed>) = 0 [pid 6893] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6895 attached [pid 6894] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6893] <... mmap resumed>) = 0x7fe7c3226000 [pid 5060] getdents64(3, [pid 6895] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6893] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6895] <... rseq resumed>) = 0 [pid 6893] <... mprotect resumed>) = 0 [pid 6895] set_robust_list(0x7fe7c32469a0, 24 [pid 6893] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] close(3 [pid 6895] <... set_robust_list resumed>) = 0 [pid 6892] <... clone3 resumed> => {parent_tid=[6895]}, 88) = 6895 [pid 5060] <... close resumed>) = 0 [pid 6895] rt_sigprocmask(SIG_SETMASK, [], [pid 6893] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6892] rt_sigprocmask(SIG_SETMASK, [], [pid 6895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6893] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] rmdir("./180"./strace-static-x86_64: Process 6896 attached [pid 6895] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6892] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... rmdir resumed>) = 0 [pid 6896] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6896] <... rseq resumed>) = 0 [pid 6892] <... futex resumed>) = 0 [pid 6896] set_robust_list(0x7fe7c32469a0, 24 [pid 6892] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6895] memfd_create("syzkaller", 0 [pid 6893] <... clone3 resumed> => {parent_tid=[6896]}, 88) = 6896 [pid 5060] mkdir("./181", 0777) = 0 [pid 6893] rt_sigprocmask(SIG_SETMASK, [], [pid 6895] <... memfd_create resumed>) = 3 [pid 6893] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6893] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6896] <... set_robust_list resumed>) = 0 [pid 6895] <... mmap resumed>) = 0x7fe7bae00000 [pid 6893] <... futex resumed>) = 0 [pid 6896] rt_sigprocmask(SIG_SETMASK, [], [pid 6893] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6896] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6896] memfd_create("syzkaller", 0) = 3 [pid 6896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6897 ./strace-static-x86_64: Process 6897 attached [pid 6896] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6895] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6894] <... write resumed>) = 2097152 [pid 6894] munmap(0x7fe7bae00000, 138412032 [pid 6897] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6897] chdir("./180") = 0 [pid 6897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6897] setpgid(0, 0) = 0 [pid 6897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6894] <... munmap resumed>) = 0 [pid 6897] write(3, "1000", 4) = 4 [pid 6897] close(3) = 0 [pid 6897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6897] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6894] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 6897] <... futex resumed>) = 0 [pid 6897] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6894] <... openat resumed>) = 4 [pid 6894] ioctl(4, LOOP_SET_FD, 3 [pid 6897] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6897] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6897] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6897] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6897] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6898 attached => {parent_tid=[6898]}, 88) = 6898 [pid 6898] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6897] rt_sigprocmask(SIG_SETMASK, [], [pid 6898] <... rseq resumed>) = 0 [pid 6897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6898] set_robust_list(0x7fe7c32469a0, 24 [pid 6897] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... set_robust_list resumed>) = 0 [pid 6897] <... futex resumed>) = 0 [pid 6898] rt_sigprocmask(SIG_SETMASK, [], [pid 6897] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6898] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] close(3 [pid 6898] memfd_create("syzkaller", 0) = 3 [pid 5060] <... close resumed>) = 0 [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6898] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6899 [pid 6896] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 6899 attached [pid 6894] <... ioctl resumed>) = 0 [pid 6899] set_robust_list(0x55558e6e36a0, 24 [pid 6895] <... write resumed>) = 2097152 [pid 6894] close(3 [pid 6899] <... set_robust_list resumed>) = 0 [pid 6894] <... close resumed>) = 0 [pid 6894] close(4 [pid 6899] chdir("./181" [pid 6894] <... close resumed>) = 0 [pid 6899] <... chdir resumed>) = 0 [pid 6894] mkdir("./file0", 0777 [pid 6899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6896] munmap(0x7fe7bae00000, 138412032 [pid 6899] <... prctl resumed>) = 0 [pid 6898] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 165.250586][ T6894] loop2: detected capacity change from 0 to 4096 [pid 6895] munmap(0x7fe7bae00000, 138412032 [pid 6894] <... mkdir resumed>) = 0 [pid 6899] setpgid(0, 0 [pid 6896] <... munmap resumed>) = 0 [pid 6895] <... munmap resumed>) = 0 [pid 6899] <... setpgid resumed>) = 0 [pid 6896] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6894] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6896] <... openat resumed>) = 4 [pid 6899] <... openat resumed>) = 3 [pid 6896] ioctl(4, LOOP_SET_FD, 3 [pid 6895] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6895] ioctl(4, LOOP_SET_FD, 3 [pid 6899] write(3, "1000", 4 [pid 6895] <... ioctl resumed>) = 0 [pid 6895] close(3) = 0 [pid 6895] close(4 [pid 6899] <... write resumed>) = 4 [pid 6895] <... close resumed>) = 0 [pid 6899] close(3 [pid 6895] mkdir("./file0", 0777) = 0 [pid 6899] <... close resumed>) = 0 [pid 6895] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6899] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6896] <... ioctl resumed>) = 0 [pid 6899] <... futex resumed>) = 0 [pid 6896] close(3 [pid 6899] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6896] <... close resumed>) = 0 [pid 6899] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6896] close(4 [pid 6899] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6896] <... close resumed>) = 0 [pid 6899] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6896] mkdir("./file0", 0777 [pid 6899] <... mmap resumed>) = 0x7fe7c3226000 [pid 6896] <... mkdir resumed>) = 0 [pid 6899] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6896] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6898] <... write resumed>) = 2097152 [pid 6898] munmap(0x7fe7bae00000, 138412032 [pid 6899] <... mprotect resumed>) = 0 [pid 6899] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6898] <... munmap resumed>) = 0 [ 165.321095][ T6894] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 165.322050][ T6895] loop3: detected capacity change from 0 to 4096 [ 165.330486][ T6896] loop0: detected capacity change from 0 to 4096 [ 165.351921][ T6895] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6899] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6900 attached [pid 6900] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6900] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6900] rt_sigprocmask(SIG_SETMASK, [], [pid 6899] <... clone3 resumed> => {parent_tid=[6900]}, 88) = 6900 [pid 6900] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6899] rt_sigprocmask(SIG_SETMASK, [], [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6895] <... mount resumed>) = 0 [pid 6900] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6898] <... openat resumed>) = 4 [pid 6899] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] ioctl(4, LOOP_SET_FD, 3 [pid 6895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6899] <... futex resumed>) = 1 [pid 6900] <... futex resumed>) = 0 [pid 6899] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6898] <... ioctl resumed>) = 0 [pid 6895] <... openat resumed>) = 3 [pid 6894] <... mount resumed>) = 0 [pid 6895] chdir("./file0" [pid 6894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6894] chdir("./file0") = 0 [pid 6894] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6900] memfd_create("syzkaller", 0 [pid 6894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6895] <... chdir resumed>) = 0 [pid 6894] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6895] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6894] <... futex resumed>) = 1 [pid 6891] <... futex resumed>) = 0 [pid 6898] close(3 [pid 6895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6894] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6891] exit_group(0 [pid 6898] <... close resumed>) = 0 [pid 6895] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6894] <... futex resumed>) = ? [pid 6900] <... memfd_create resumed>) = 3 [pid 6891] <... exit_group resumed>) = ? [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6898] close(4 [pid 6895] <... futex resumed>) = 1 [pid 6894] +++ exited with 0 +++ [pid 6892] <... futex resumed>) = 0 [pid 6891] +++ exited with 0 +++ [pid 6900] <... mmap resumed>) = 0x7fe7bae00000 [pid 6895] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6892] exit_group(0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6891, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6892] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6895] <... futex resumed>) = ? [pid 5061] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 6898] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6898] mkdir("./file0", 0777 [pid 5061] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6895] +++ exited with 0 +++ [pid 6898] <... mkdir resumed>) = 0 [pid 6892] +++ exited with 0 +++ [ 165.400602][ T6896] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 165.416385][ T6898] loop4: detected capacity change from 0 to 4096 [pid 6898] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6892, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./183/binderfs") = 0 [pid 5061] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./181/binderfs", [pid 5061] newfstatat(AT_FDCWD, "./183/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./181/binderfs" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6896] <... mount resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5061] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6896] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6896] chdir("./file0" [pid 5061] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6896] <... chdir resumed>) = 0 [pid 6896] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 6896] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6896] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6893] <... futex resumed>) = 0 [pid 5061] getdents64(4, [pid 6893] exit_group(0 [pid 6896] <... futex resumed>) = ? [pid 6893] <... exit_group resumed>) = ? [pid 5062] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6896] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./181/file0", [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 6900] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./183/file0" [pid 5062] openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5061] <... rmdir resumed>) = 0 [pid 6893] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6893, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 5061] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5061] close(3) = 0 [ 165.460875][ T6898] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./183" [pid 5059] newfstatat(AT_FDCWD, "./183/binderfs", [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./183/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] mkdir("./184", 0777 [pid 5059] <... unlink resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5062] rmdir("./181/file0" [pid 5059] <... umount2 resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 6898] <... mount resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6898] <... openat resumed>) = 3 [pid 6898] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6898] <... chdir resumed>) = 0 [pid 5062] close(3 [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 6898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./181" [pid 6898] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6897] <... futex resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./183/file0", [pid 6898] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] exit_group(0 [pid 5062] <... rmdir resumed>) = 0 [pid 6898] <... futex resumed>) = ? [pid 6897] <... exit_group resumed>) = ? [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6898] +++ exited with 0 +++ [pid 5062] mkdir("./182", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6900] <... write resumed>) = 2097152 [pid 6897] +++ exited with 0 +++ [pid 5059] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6897, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(4, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 5063] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(4 [pid 5063] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] rmdir("./183/file0" [pid 6900] <... munmap resumed>) = 0 [pid 5063] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... openat resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./180/binderfs", [pid 5059] getdents64(3, [pid 6900] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 6900] <... ioctl resumed>) = 0 [pid 5063] unlink("./180/binderfs" [pid 5059] <... close resumed>) = 0 [pid 6900] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5059] rmdir("./183" [pid 6900] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6900] close(4) = 0 [pid 5063] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6900] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 6900] <... mkdir resumed>) = 0 [pid 5059] mkdir("./184", 0777) = 0 [pid 6900] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./180/file0", [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6901 ./strace-static-x86_64: Process 6901 attached [pid 5063] openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6901] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 6901] <... set_robust_list resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6901] chdir("./184") = 0 [pid 6901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6901] setpgid(0, 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6901] <... setpgid resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 5062] close(3 [pid 6901] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... close resumed>) = 0 [pid 6901] write(3, "1000", 4) = 4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6902 attached [pid 6901] close(3 [pid 5063] getdents64(4, [pid 6901] <... close resumed>) = 0 [pid 6901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6901] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6901] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6901] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6902] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6902 [ 165.557698][ T6900] loop1: detected capacity change from 0 to 4096 [ 165.580338][ T6900] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5063] close(4 [pid 6902] <... set_robust_list resumed>) = 0 [pid 6901] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./180/file0" [pid 6901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6902] chdir("./182" [pid 5063] getdents64(3, [pid 6902] <... chdir resumed>) = 0 [pid 6901] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6901] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] close(3 [pid 6902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6901] <... mprotect resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 6901] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6901] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6900] <... mount resumed>) = 0 [pid 6901] <... clone3 resumed> => {parent_tid=[6903]}, 88) = 6903 ./strace-static-x86_64: Process 6903 attached [pid 6901] rt_sigprocmask(SIG_SETMASK, [], [pid 6900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6903] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6901] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6903] <... rseq resumed>) = 0 [pid 6901] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6900] <... openat resumed>) = 3 [pid 6903] set_robust_list(0x7fe7c32469a0, 24 [pid 6901] <... futex resumed>) = 0 [pid 6903] <... set_robust_list resumed>) = 0 [pid 6901] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6900] chdir("./file0" [pid 6903] rt_sigprocmask(SIG_SETMASK, [], [pid 6900] <... chdir resumed>) = 0 [pid 6903] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6903] memfd_create("syzkaller", 0 [pid 6900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] rmdir("./180" [pid 6900] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 6900] <... futex resumed>) = 1 [pid 6900] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] <... futex resumed>) = 0 [pid 5063] mkdir("./181", 0777 [pid 6903] <... memfd_create resumed>) = 3 [pid 6903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6899] exit_group(0 [pid 6903] <... mmap resumed>) = 0x7fe7bae00000 [pid 6900] <... futex resumed>) = ? [pid 6899] <... exit_group resumed>) = ? [pid 5063] <... mkdir resumed>) = 0 [pid 6900] +++ exited with 0 +++ [pid 6899] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6902] <... prctl resumed>) = 0 [pid 6902] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6899, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6902] <... setpgid resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6902] write(3, "1000", 4) = 4 [pid 6902] close(3) = 0 [pid 6902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./181/binderfs", [pid 6902] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6902] <... futex resumed>) = 0 [pid 5060] unlink("./181/binderfs") = 0 [pid 5060] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6902] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./181/file0", [pid 6902] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 6902] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5060] getdents64(4, [pid 6902] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6902] <... mprotect resumed>) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./181/file0" [pid 6902] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] close(3 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./181") = 0 [pid 5060] mkdir("./182", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6902] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 6905 ./strace-static-x86_64: Process 6905 attached [pid 6905] set_robust_list(0x55558e6e36a0, 24./strace-static-x86_64: Process 6904 attached ) = 0 [pid 6905] chdir("./182" [pid 6904] set_robust_list(0x55558e6e36a0, 24 [pid 6905] <... chdir resumed>) = 0 [pid 6904] <... set_robust_list resumed>) = 0 [pid 6905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6904] chdir("./184" [pid 6905] <... prctl resumed>) = 0 [pid 6904] <... chdir resumed>) = 0 [pid 6905] setpgid(0, 0 [pid 6904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6905] <... setpgid resumed>) = 0 [pid 6904] <... prctl resumed>) = 0 [pid 6905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6904] setpgid(0, 0 [pid 6902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6905] <... openat resumed>) = 3 [pid 6904] <... setpgid resumed>) = 0 [pid 6904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 6906 attached [pid 6905] write(3, "1000", 4 [pid 6904] write(3, "1000", 4 [pid 6902] <... clone3 resumed> => {parent_tid=[6906]}, 88) = 6906 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6904 [pid 6906] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6904] <... write resumed>) = 4 [pid 6902] rt_sigprocmask(SIG_SETMASK, [], [pid 6906] <... rseq resumed>) = 0 [pid 6905] <... write resumed>) = 4 [pid 6904] close(3 [pid 6902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6906] set_robust_list(0x7fe7c32469a0, 24 [pid 6905] close(3 [pid 6904] <... close resumed>) = 0 [pid 6903] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6902] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = 0 [pid 6906] <... set_robust_list resumed>) = 0 [pid 6906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6905] <... close resumed>) = 0 [pid 6905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6904] symlink("/dev/binderfs", "./binderfs" [pid 6905] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] <... symlink resumed>) = 0 [pid 6906] memfd_create("syzkaller", 0 [pid 6905] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6904] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6904] <... futex resumed>) = 0 [pid 6905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6904] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6902] <... futex resumed>) = 0 [pid 6905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6904] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6902] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6905] <... mmap resumed>) = 0x7fe7c3226000 [pid 6904] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6905] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6905] <... mprotect resumed>) = 0 [pid 6904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] close(3 [pid 6905] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6904] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... close resumed>) = 0 [pid 6906] <... memfd_create resumed>) = 3 [pid 6905] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6904] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6905] <... clone3 resumed> => {parent_tid=[6908]}, 88) = 6908 [pid 6904] <... mprotect resumed>) = 0 [pid 6905] rt_sigprocmask(SIG_SETMASK, [], [pid 6904] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6904] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6905] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6908 attached ./strace-static-x86_64: Process 6907 attached [pid 6905] <... futex resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6907 [pid 6907] set_robust_list(0x55558e6e36a0, 24./strace-static-x86_64: Process 6909 attached [pid 6908] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6905] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6904] <... clone3 resumed> => {parent_tid=[6909]}, 88) = 6909 [pid 6909] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6908] <... rseq resumed>) = 0 [pid 6904] rt_sigprocmask(SIG_SETMASK, [], [pid 6909] <... rseq resumed>) = 0 [pid 6908] set_robust_list(0x7fe7c32469a0, 24 [pid 6904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6909] set_robust_list(0x7fe7c32469a0, 24 [pid 6908] <... set_robust_list resumed>) = 0 [pid 6907] <... set_robust_list resumed>) = 0 [pid 6904] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] <... set_robust_list resumed>) = 0 [pid 6908] rt_sigprocmask(SIG_SETMASK, [], [pid 6909] rt_sigprocmask(SIG_SETMASK, [], [pid 6908] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6904] <... futex resumed>) = 0 [pid 6909] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6908] memfd_create("syzkaller", 0 [pid 6907] chdir("./181" [pid 6904] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6909] memfd_create("syzkaller", 0 [pid 6908] <... memfd_create resumed>) = 3 [pid 6907] <... chdir resumed>) = 0 [pid 6909] <... memfd_create resumed>) = 3 [pid 6908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6908] <... mmap resumed>) = 0x7fe7bae00000 [pid 6909] <... mmap resumed>) = 0x7fe7bae00000 [pid 6907] <... prctl resumed>) = 0 [pid 6907] setpgid(0, 0) = 0 [pid 6907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6903] <... write resumed>) = 2097152 [pid 6907] write(3, "1000", 4) = 4 [pid 6907] close(3) = 0 [pid 6907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6903] munmap(0x7fe7bae00000, 138412032 [pid 6907] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6907] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6903] <... munmap resumed>) = 0 [pid 6907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6906] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6907] <... mmap resumed>) = 0x7fe7c3226000 [pid 6907] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6907] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6903] <... openat resumed>) = 4 [pid 6903] ioctl(4, LOOP_SET_FD, 3 [pid 6907] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6909] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6908] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6910 attached => {parent_tid=[6910]}, 88) = 6910 [pid 6906] <... write resumed>) = 2097152 [pid 6903] <... ioctl resumed>) = 0 [pid 6910] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6907] rt_sigprocmask(SIG_SETMASK, [], [pid 6906] munmap(0x7fe7bae00000, 138412032 [pid 6903] close(3 [pid 6910] <... rseq resumed>) = 0 [pid 6907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6910] set_robust_list(0x7fe7c32469a0, 24 [pid 6907] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] <... set_robust_list resumed>) = 0 [pid 6907] <... futex resumed>) = 0 [pid 6903] <... close resumed>) = 0 [pid 6910] rt_sigprocmask(SIG_SETMASK, [], [pid 6907] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6903] close(4 [pid 6910] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6903] <... close resumed>) = 0 [pid 6910] memfd_create("syzkaller", 0 [pid 6903] mkdir("./file0", 0777) = 0 [pid 6903] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6910] <... memfd_create resumed>) = 3 [pid 6906] <... munmap resumed>) = 0 [ 165.833070][ T6903] loop2: detected capacity change from 0 to 4096 [pid 6909] <... write resumed>) = 2097152 [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6908] <... write resumed>) = 2097152 [pid 6910] <... mmap resumed>) = 0x7fe7bae00000 [pid 6906] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6909] munmap(0x7fe7bae00000, 138412032 [pid 6906] <... openat resumed>) = 4 [pid 6906] ioctl(4, LOOP_SET_FD, 3 [pid 6908] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6906] <... ioctl resumed>) = 0 [pid 6906] close(3) = 0 [pid 6906] close(4) = 0 [pid 6906] mkdir("./file0", 0777 [pid 6909] <... munmap resumed>) = 0 [pid 6906] <... mkdir resumed>) = 0 [ 165.884892][ T6903] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 165.910420][ T6906] loop3: detected capacity change from 0 to 4096 [pid 6906] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6909] ioctl(4, LOOP_SET_FD, 3 [pid 6908] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6908] ioctl(4, LOOP_SET_FD, 3 [pid 6910] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6909] <... ioctl resumed>) = 0 [pid 6909] close(3) = 0 [pid 6909] close(4) = 0 [pid 6909] mkdir("./file0", 0777) = 0 [pid 6909] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6908] <... ioctl resumed>) = 0 [pid 6908] close(3) = 0 [ 165.930378][ T6909] loop0: detected capacity change from 0 to 4096 [ 165.937266][ T6906] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 165.939141][ T6908] loop1: detected capacity change from 0 to 4096 [ 165.972424][ T6909] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6908] close(4) = 0 [pid 6908] mkdir("./file0", 0777) = 0 [pid 6908] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6910] <... write resumed>) = 2097152 [pid 6910] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6909] <... mount resumed>) = 0 [pid 6909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6909] chdir("./file0") = 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 165.993711][ T6908] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6910] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6909] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6903] <... mount resumed>) = 0 [pid 6910] <... openat resumed>) = 4 [pid 6909] <... futex resumed>) = 1 [pid 6904] <... futex resumed>) = 0 [pid 6903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6910] ioctl(4, LOOP_SET_FD, 3 [pid 6904] exit_group(0 [pid 6903] <... openat resumed>) = 3 [pid 6904] <... exit_group resumed>) = ? [pid 6909] +++ exited with 0 +++ [pid 6904] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6904, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 6903] chdir("./file0") = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6903] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 3 [pid 6903] <... futex resumed>) = 1 [pid 5059] newfstatat(3, "", [pid 6901] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6903] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6901] exit_group(0 [pid 5059] getdents64(3, [pid 6901] <... exit_group resumed>) = ? [pid 6903] <... futex resumed>) = ? [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6903] +++ exited with 0 +++ [pid 6901] +++ exited with 0 +++ [pid 5059] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6901, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... restart_syscall resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./184/binderfs" [pid 5061] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6910] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 6910] close(3 [pid 5061] newfstatat(3, "", [pid 6910] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6910] close(4 [pid 5061] getdents64(3, [pid 6910] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6910] mkdir("./file0", 0777 [pid 6906] <... mount resumed>) = 0 [pid 5061] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6910] <... mkdir resumed>) = 0 [pid 6906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./184/binderfs", [pid 6910] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6908] <... mount resumed>) = 0 [pid 6906] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 166.054666][ T6910] loop4: detected capacity change from 0 to 4096 [pid 6908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6906] chdir("./file0" [pid 5061] unlink("./184/binderfs") = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5061] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6908] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 6908] chdir("./file0" [pid 6906] <... chdir resumed>) = 0 [pid 5061] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6908] <... chdir resumed>) = 0 [pid 6906] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6908] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(AT_FDCWD, "./184/file0", [pid 6908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6906] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6908] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6906] <... futex resumed>) = 1 [pid 6902] <... futex resumed>) = 0 [pid 5061] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6908] <... futex resumed>) = 1 [pid 6906] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6905] <... futex resumed>) = 0 [pid 6902] exit_group(0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6908] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6906] <... futex resumed>) = ? [pid 6905] exit_group(0 [pid 6902] <... exit_group resumed>) = ? [pid 5061] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6908] <... futex resumed>) = ? [pid 6906] +++ exited with 0 +++ [pid 6905] <... exit_group resumed>) = ? [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./184/file0" [pid 6908] +++ exited with 0 +++ [pid 6905] +++ exited with 0 +++ [pid 5061] <... rmdir resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6905, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] newfstatat(AT_FDCWD, "./184/file0", [pid 6902] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6902, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] close(3 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5059] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... restart_syscall resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 4 [pid 6910] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./184" [pid 5060] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5062] newfstatat(3, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5059] newfstatat(4, "", [pid 5062] getdents64(3, [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6910] <... openat resumed>) = 3 [pid 5062] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./182/binderfs", [pid 6910] chdir("./file0" [pid 5062] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, [pid 5060] unlink("./182/binderfs" [pid 6910] <... chdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] mkdir("./185", 0777 [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6910] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] unlink("./182/binderfs" [pid 5060] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 6910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [ 166.096298][ T6910] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6910] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6910] <... futex resumed>) = 1 [pid 6907] <... futex resumed>) = 0 [pid 5059] close(4 [pid 6910] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6907] exit_group(0 [pid 5059] <... close resumed>) = 0 [pid 6910] <... futex resumed>) = ? [pid 6907] <... exit_group resumed>) = ? [pid 5059] rmdir("./184/file0" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./182/file0", [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 6910] +++ exited with 0 +++ [pid 6907] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6907, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] close(4 [pid 5059] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./182/file0" [pid 5063] getdents64(3, [pid 5062] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./184" [pid 5062] newfstatat(AT_FDCWD, "./182/file0", [pid 5063] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./181/binderfs", [pid 5060] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./181/binderfs" [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5060] close(3) = 0 [pid 5063] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] rmdir("./182" [pid 5059] mkdir("./185", 0777 [pid 5062] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] mkdir("./183", 0777 [pid 5063] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 5062] newfstatat(4, "", [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(AT_FDCWD, "./181/file0", [pid 5062] getdents64(4, [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(4 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./182/file0" [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5061] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./182") = 0 [pid 5062] mkdir("./183", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] close(3 [pid 5063] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./181/file0" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, ./strace-static-x86_64: Process 6911 attached 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6911] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6911 [pid 6911] <... set_robust_list resumed>) = 0 [pid 5063] close(3) = 0 [pid 6911] chdir("./185") = 0 [pid 5063] rmdir("./181" [pid 6911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... rmdir resumed>) = 0 [pid 6911] <... prctl resumed>) = 0 [pid 5063] mkdir("./182", 0777 [pid 6911] setpgid(0, 0) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 3 [pid 5060] close(3 [pid 6911] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6911] write(3, "1000", 4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 6912 attached [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6912 ./strace-static-x86_64: Process 6913 attached [pid 6912] set_robust_list(0x55558e6e36a0, 24 [pid 6911] <... write resumed>) = 4 [pid 6912] <... set_robust_list resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6913 [pid 6911] close(3 [pid 6913] set_robust_list(0x55558e6e36a0, 24 [pid 6911] <... close resumed>) = 0 [pid 6912] chdir("./183" [pid 6911] symlink("/dev/binderfs", "./binderfs" [pid 6913] <... set_robust_list resumed>) = 0 [pid 6913] chdir("./185") = 0 [pid 6912] <... chdir resumed>) = 0 [pid 6913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6913] <... prctl resumed>) = 0 [pid 6911] <... symlink resumed>) = 0 [pid 6913] setpgid(0, 0) = 0 [pid 6913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6912] <... prctl resumed>) = 0 [pid 6913] write(3, "1000", 4 [pid 6912] setpgid(0, 0 [pid 6913] <... write resumed>) = 4 [pid 6912] <... setpgid resumed>) = 0 [pid 6911] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] close(3 [pid 6912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6911] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6913] <... close resumed>) = 0 [pid 6911] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6913] symlink("/dev/binderfs", "./binderfs" [pid 6911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6912] <... openat resumed>) = 3 [pid 6911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6913] <... symlink resumed>) = 0 [pid 6912] write(3, "1000", 4 [pid 6913] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6912] <... write resumed>) = 4 [pid 6911] <... mmap resumed>) = 0x7fe7c3226000 [pid 6911] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6912] close(3 [pid 6913] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6912] <... close resumed>) = 0 [pid 6913] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6912] symlink("/dev/binderfs", "./binderfs" [pid 6913] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6912] <... symlink resumed>) = 0 [pid 6911] <... mprotect resumed>) = 0 [pid 6913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6912] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... ioctl resumed>) = 0 [pid 6912] <... futex resumed>) = 0 [pid 6911] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6912] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6912] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6913] <... mmap resumed>) = 0x7fe7c3226000 [pid 6912] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6913] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6912] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6914 attached [pid 6913] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6911] <... clone3 resumed> => {parent_tid=[6914]}, 88) = 6914 [pid 5062] close(3 [pid 6914] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6912] <... mmap resumed>) = 0x7fe7c3226000 [pid 6914] <... rseq resumed>) = 0 [pid 6913] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6912] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6911] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... close resumed>) = 0 [pid 6914] set_robust_list(0x7fe7c32469a0, 24 [pid 6911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6914] <... set_robust_list resumed>) = 0 [pid 6911] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6914] rt_sigprocmask(SIG_SETMASK, [], [pid 6912] <... mprotect resumed>) = 0 [pid 6911] <... futex resumed>) = 0 [pid 6914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6911] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6914] memfd_create("syzkaller", 0 [pid 6913] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6915 attached [pid 6914] <... memfd_create resumed>) = 3 [pid 6912] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6915] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] <... clone3 resumed> => {parent_tid=[6915]}, 88) = 6915 [pid 6912] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6916 attached [pid 6915] <... rseq resumed>) = 0 [pid 6914] <... mmap resumed>) = 0x7fe7bae00000 [pid 6913] rt_sigprocmask(SIG_SETMASK, [], [pid 6916] set_robust_list(0x55558e6e36a0, 24 [pid 6915] set_robust_list(0x7fe7c32469a0, 24 [pid 6913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6916 [pid 6915] <... set_robust_list resumed>) = 0 [pid 6913] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6915] rt_sigprocmask(SIG_SETMASK, [], [pid 6913] <... futex resumed>) = 0 [pid 6916] <... set_robust_list resumed>) = 0 [pid 6915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6913] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6917 attached [pid 6916] chdir("./183" [pid 6915] memfd_create("syzkaller", 0 [pid 6917] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6916] <... chdir resumed>) = 0 [pid 6915] <... memfd_create resumed>) = 3 [pid 6912] <... clone3 resumed> => {parent_tid=[6917]}, 88) = 6917 [pid 6917] set_robust_list(0x7fe7c32469a0, 24 [pid 6916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6912] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] close(3 [pid 6917] <... set_robust_list resumed>) = 0 [pid 6916] <... prctl resumed>) = 0 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 6917] rt_sigprocmask(SIG_SETMASK, [], [pid 6915] <... mmap resumed>) = 0x7fe7bae00000 [pid 6917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6917] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6916] setpgid(0, 0 [pid 6912] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6916] <... setpgid resumed>) = 0 [pid 6912] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6918 attached [pid 6917] memfd_create("syzkaller", 0 [pid 6916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6912] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6918] set_robust_list(0x55558e6e36a0, 24 [pid 6916] <... openat resumed>) = 3 [pid 6916] write(3, "1000", 4) = 4 [pid 6918] <... set_robust_list resumed>) = 0 [pid 6917] <... memfd_create resumed>) = 3 [pid 6916] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6918 [pid 6918] chdir("./182") = 0 [pid 6918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6918] setpgid(0, 0 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6918] <... setpgid resumed>) = 0 [pid 6917] <... mmap resumed>) = 0x7fe7bae00000 [pid 6918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6918] write(3, "1000", 4) = 4 [pid 6918] close(3) = 0 [pid 6918] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6916] <... close resumed>) = 0 [pid 6916] symlink("/dev/binderfs", "./binderfs" [pid 6918] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] <... symlink resumed>) = 0 [pid 6916] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6918] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6916] <... futex resumed>) = 0 [pid 6914] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6916] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6918] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6916] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6916] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6918] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6916] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6916] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6918] <... mmap resumed>) = 0x7fe7c3226000 [pid 6916] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6918] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6918] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6916] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6918] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6919 attached [pid 6919] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6916] <... clone3 resumed> => {parent_tid=[6919]}, 88) = 6919 [pid 6919] set_robust_list(0x7fe7c32469a0, 24 [pid 6916] rt_sigprocmask(SIG_SETMASK, [], [pid 6919] <... set_robust_list resumed>) = 0 [pid 6916] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6920 attached [pid 6916] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6919] rt_sigprocmask(SIG_SETMASK, [], [pid 6918] <... clone3 resumed> => {parent_tid=[6920]}, 88) = 6920 [pid 6916] <... futex resumed>) = 0 [pid 6914] <... write resumed>) = 2097152 [pid 6920] <... rseq resumed>) = 0 [pid 6919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6918] rt_sigprocmask(SIG_SETMASK, [], [pid 6916] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6920] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6920] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] munmap(0x7fe7bae00000, 138412032 [pid 6919] memfd_create("syzkaller", 0 [pid 6918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6917] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6915] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6919] <... memfd_create resumed>) = 3 [pid 6918] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] <... munmap resumed>) = 0 [pid 6919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6918] <... futex resumed>) = 1 [pid 6919] <... mmap resumed>) = 0x7fe7bae00000 [pid 6918] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 0 [pid 6920] memfd_create("syzkaller", 0) = 3 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6914] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6920] <... mmap resumed>) = 0x7fe7bae00000 [pid 6914] <... openat resumed>) = 4 [pid 6914] ioctl(4, LOOP_SET_FD, 3 [pid 6919] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6915] <... write resumed>) = 2097152 [pid 6915] munmap(0x7fe7bae00000, 138412032 [pid 6914] <... ioctl resumed>) = 0 [pid 6917] <... write resumed>) = 2097152 [pid 6915] <... munmap resumed>) = 0 [pid 6917] munmap(0x7fe7bae00000, 138412032 [pid 6914] close(3 [pid 6917] <... munmap resumed>) = 0 [pid 6914] <... close resumed>) = 0 [pid 6915] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6915] ioctl(4, LOOP_SET_FD, 3 [pid 6914] close(4) = 0 [pid 6914] mkdir("./file0", 0777) = 0 [pid 6914] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6919] <... write resumed>) = 2097152 [pid 6917] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6915] <... ioctl resumed>) = 0 [pid 6915] close(3) = 0 [pid 6915] close(4) = 0 [pid 6919] munmap(0x7fe7bae00000, 138412032 [pid 6915] mkdir("./file0", 0777 [pid 6919] <... munmap resumed>) = 0 [pid 6917] <... openat resumed>) = 4 [pid 6915] <... mkdir resumed>) = 0 [ 166.469441][ T6914] loop2: detected capacity change from 0 to 4096 [ 166.495255][ T6915] loop0: detected capacity change from 0 to 4096 [ 166.502323][ T6914] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6920] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6917] ioctl(4, LOOP_SET_FD, 3 [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6915] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6919] <... openat resumed>) = 4 [pid 6919] ioctl(4, LOOP_SET_FD, 3 [pid 6917] <... ioctl resumed>) = 0 [pid 6917] close(3) = 0 [pid 6917] close(4) = 0 [pid 6917] mkdir("./file0", 0777) = 0 [ 166.523352][ T6917] loop1: detected capacity change from 0 to 4096 [ 166.530763][ T6915] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 166.549130][ T6919] loop3: detected capacity change from 0 to 4096 [pid 6917] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6920] <... write resumed>) = 2097152 [pid 6919] <... ioctl resumed>) = 0 [pid 6920] munmap(0x7fe7bae00000, 138412032 [pid 6919] close(3) = 0 [pid 6919] close(4) = 0 [pid 6919] mkdir("./file0", 0777) = 0 [pid 6920] <... munmap resumed>) = 0 [pid 6919] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6914] <... mount resumed>) = 0 [pid 6914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6914] <... openat resumed>) = 3 [ 166.570298][ T6917] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 166.609306][ T6919] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6920] <... openat resumed>) = 4 [pid 6914] chdir("./file0" [pid 6920] ioctl(4, LOOP_SET_FD, 3 [pid 6914] <... chdir resumed>) = 0 [pid 6914] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6914] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6914] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6911] <... futex resumed>) = 0 [pid 6911] exit_group(0 [pid 6914] <... futex resumed>) = ? [pid 6911] <... exit_group resumed>) = ? [pid 6915] <... mount resumed>) = 0 [pid 6914] +++ exited with 0 +++ [pid 6911] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6911, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6920] <... ioctl resumed>) = 0 [pid 6917] <... mount resumed>) = 0 [pid 6915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6920] close(3 [pid 5061] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6920] <... close resumed>) = 0 [pid 6917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6920] close(4 [pid 6917] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6915] <... openat resumed>) = 3 [pid 5061] unlink("./185/binderfs" [pid 6920] <... close resumed>) = 0 [pid 6915] chdir("./file0" [pid 6920] mkdir("./file0", 0777 [pid 6917] chdir("./file0" [pid 5061] <... unlink resumed>) = 0 [pid 6915] <... chdir resumed>) = 0 [pid 6917] <... chdir resumed>) = 0 [pid 5061] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6915] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6920] <... mkdir resumed>) = 0 [pid 6917] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = 0 [pid 6920] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6917] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6915] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [ 166.622704][ T6920] loop4: detected capacity change from 0 to 4096 [pid 5061] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6917] <... futex resumed>) = 1 [pid 6915] <... futex resumed>) = 1 [pid 6913] <... futex resumed>) = 0 [pid 6912] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6912] exit_group(0) = ? [pid 6915] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6913] exit_group(0 [pid 5061] newfstatat(AT_FDCWD, "./185/file0", [pid 6917] +++ exited with 0 +++ [pid 6915] <... futex resumed>) = ? [pid 6913] <... exit_group resumed>) = ? [pid 6912] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6912, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5061] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./183/binderfs") = 0 [pid 5060] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6915] +++ exited with 0 +++ [pid 6913] +++ exited with 0 +++ [pid 5061] close(4 [pid 5060] <... umount2 resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6913, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5061] rmdir("./185/file0" [pid 6919] <... mount resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(3, [pid 5060] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6919] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6919] chdir("./file0" [pid 5060] newfstatat(AT_FDCWD, "./183/file0", [pid 5061] close(3) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6919] <... chdir resumed>) = 0 [pid 5060] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] rmdir("./185" [pid 5059] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 4 [pid 5059] newfstatat(3, "", [pid 5060] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5060] getdents64(4, [pid 6919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6919] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 6916] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 [ 166.660740][ T6920] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6916] exit_group(0 [pid 6919] <... futex resumed>) = 231 [pid 6916] <... exit_group resumed>) = ? [pid 5061] mkdir("./186", 0777 [pid 5060] rmdir("./183/file0" [pid 5059] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5059] newfstatat(AT_FDCWD, "./185/binderfs", [pid 6919] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6916] +++ exited with 0 +++ [pid 5061] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5059] unlink("./185/binderfs" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] rmdir("./183" [pid 5059] <... unlink resumed>) = 0 [pid 6920] <... mount resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6916, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5060] <... rmdir resumed>) = 0 [pid 5062] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./184", 0777 [pid 5059] <... umount2 resumed>) = 0 [pid 6920] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 6920] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6920] <... chdir resumed>) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(3, [pid 6920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6920] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6920] <... futex resumed>) = 1 [pid 6918] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6920] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6918] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6920] <... futex resumed>) = ? [pid 6918] <... exit_group resumed>) = ? [pid 5062] newfstatat(AT_FDCWD, "./183/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6920] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5062] unlink("./183/binderfs" [pid 5059] newfstatat(AT_FDCWD, "./185/file0", [pid 5062] <... unlink resumed>) = 0 [pid 6918] +++ exited with 0 +++ [pid 5062] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6918, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... restart_syscall resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(AT_FDCWD, "./183/file0", [pid 5063] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./182/binderfs", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./182/binderfs" [pid 5062] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", [pid 5063] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... ioctl resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5062] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6921 attached [pid 5059] close(4 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6921] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... close resumed>) = 0 [pid 5062] close(4 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6921 [pid 5059] rmdir("./185/file0" [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./183/file0") = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 6921] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5063] newfstatat(AT_FDCWD, "./182/file0", [pid 5062] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./183" [pid 5063] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] mkdir("./184", 0777 [pid 5063] getdents64(4, [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./182/file0") = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] close(3 [pid 6921] chdir("./186" [pid 5059] close(3 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./182") = 0 [pid 5063] mkdir("./183", 0777 [pid 5059] <... close resumed>) = 0 [pid 6921] <... chdir resumed>) = 0 [pid 5059] rmdir("./185" [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 6921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6921] <... prctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] close(3 [pid 5059] mkdir("./186", 0777 [pid 6921] setpgid(0, 0 [pid 5060] <... close resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6921] <... setpgid resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... openat resumed>) = 3 [pid 6921] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6922 attached [pid 6921] write(3, "1000", 4) = 4 [pid 6921] close(3) = 0 [pid 6921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6921] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6921] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6921] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6921] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6921] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6922] set_robust_list(0x55558e6e36a0, 24 [pid 6921] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6922 [pid 6921] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6921] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6923 attached [pid 6923] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6921] <... clone3 resumed> => {parent_tid=[6923]}, 88) = 6923 [pid 6923] <... rseq resumed>) = 0 [pid 6921] rt_sigprocmask(SIG_SETMASK, [], [pid 6923] set_robust_list(0x7fe7c32469a0, 24 [pid 6922] <... set_robust_list resumed>) = 0 [pid 6921] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6923] <... set_robust_list resumed>) = 0 [pid 6921] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6923] rt_sigprocmask(SIG_SETMASK, [], [pid 6921] <... futex resumed>) = 0 [pid 6923] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6922] chdir("./184" [pid 6921] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6923] memfd_create("syzkaller", 0 [pid 6922] <... chdir resumed>) = 0 [pid 6922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6922] setpgid(0, 0) = 0 [pid 6922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6923] <... memfd_create resumed>) = 3 [pid 6922] <... openat resumed>) = 3 [pid 6923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6922] write(3, "1000", 4 [pid 5062] <... ioctl resumed>) = 0 [pid 6922] <... write resumed>) = 4 [pid 6922] close(3) = 0 [pid 6922] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 6922] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6924 attached [pid 6924] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6924] chdir("./184") = 0 [pid 6922] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6922] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6924] setpgid(0, 0) = 0 [pid 6924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6922] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6924 [pid 6924] <... openat resumed>) = 3 [pid 6924] write(3, "1000", 4) = 4 [pid 6924] close(3) = 0 [pid 6924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6924] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6922] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... ioctl resumed>) = 0 [pid 6922] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6924] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6924] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6922] <... mmap resumed>) = 0x7fe7c3226000 [pid 6924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6922] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6922] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6924] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6924] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6922] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] close(3 [pid 6924] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6923] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 6925 attached [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6924] <... clone3 resumed> => {parent_tid=[6925]}, 88) = 6925 [pid 6924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6924] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6925] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6925] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6925] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6926 attached [pid 6925] memfd_create("syzkaller", 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6926 [pid 6922] <... clone3 resumed> => {parent_tid=[6927]}, 88) = 6927 [pid 6922] rt_sigprocmask(SIG_SETMASK, [], [pid 6926] set_robust_list(0x55558e6e36a0, 24./strace-static-x86_64: Process 6927 attached [pid 6925] <... memfd_create resumed>) = 3 [pid 6927] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6926] <... set_robust_list resumed>) = 0 [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6927] <... rseq resumed>) = 0 [pid 6925] <... mmap resumed>) = 0x7fe7bae00000 [pid 6926] chdir("./183" [pid 6922] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6926] <... chdir resumed>) = 0 [pid 6922] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 6922] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6927] set_robust_list(0x7fe7c32469a0, 24 [pid 6922] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6927] <... set_robust_list resumed>) = 0 [pid 6927] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6928 attached [pid 6927] memfd_create("syzkaller", 0 [pid 6926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6928] set_robust_list(0x55558e6e36a0, 24 [pid 6927] <... memfd_create resumed>) = 3 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6928 [pid 6927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6926] <... prctl resumed>) = 0 [pid 6928] <... set_robust_list resumed>) = 0 [pid 6927] <... mmap resumed>) = 0x7fe7bae00000 [pid 6926] setpgid(0, 0 [pid 6928] chdir("./186" [pid 6925] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6928] <... chdir resumed>) = 0 [pid 6928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6926] <... setpgid resumed>) = 0 [pid 6928] setpgid(0, 0 [pid 6923] <... write resumed>) = 2097152 [pid 6928] <... setpgid resumed>) = 0 [pid 6926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6927] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6926] <... openat resumed>) = 3 [pid 6925] <... write resumed>) = 2097152 [pid 6923] munmap(0x7fe7bae00000, 138412032 [pid 6928] <... openat resumed>) = 3 [pid 6928] write(3, "1000", 4 [pid 6926] write(3, "1000", 4 [pid 6925] munmap(0x7fe7bae00000, 138412032 [pid 6928] <... write resumed>) = 4 [pid 6928] close(3 [pid 6926] <... write resumed>) = 4 [pid 6928] <... close resumed>) = 0 [pid 6926] close(3) = 0 [pid 6928] symlink("/dev/binderfs", "./binderfs" [pid 6926] symlink("/dev/binderfs", "./binderfs" [pid 6928] <... symlink resumed>) = 0 [pid 6926] <... symlink resumed>) = 0 [pid 6925] <... munmap resumed>) = 0 [pid 6923] <... munmap resumed>) = 0 [pid 6928] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6928] <... futex resumed>) = 0 [pid 6928] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6926] <... futex resumed>) = 0 [pid 6928] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6926] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6926] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6925] <... openat resumed>) = 4 [pid 6923] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6926] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6925] ioctl(4, LOOP_SET_FD, 3 [pid 6923] <... openat resumed>) = 4 [pid 6928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6926] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6928] <... mmap resumed>) = 0x7fe7c3226000 [pid 6926] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6927] <... write resumed>) = 2097152 [pid 6928] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6926] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6925] <... ioctl resumed>) = 0 [pid 6923] ioctl(4, LOOP_SET_FD, 3 [pid 6927] munmap(0x7fe7bae00000, 138412032 [pid 6928] <... mprotect resumed>) = 0 [pid 6925] close(3 [pid 6926] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6926] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6929 attached [pid 6929] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6926] <... clone3 resumed> => {parent_tid=[6929]}, 88) = 6929 [pid 6929] <... rseq resumed>) = 0 [pid 6926] rt_sigprocmask(SIG_SETMASK, [], [pid 6929] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6926] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6929] rt_sigprocmask(SIG_SETMASK, [], [pid 6926] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6929] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6926] <... futex resumed>) = 0 [pid 6926] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6929] memfd_create("syzkaller", 0 [pid 6928] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6927] <... munmap resumed>) = 0 [pid 6925] <... close resumed>) = 0 [pid 6923] <... ioctl resumed>) = 0 [pid 6929] <... memfd_create resumed>) = 3 [pid 6928] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6927] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6925] close(4 [pid 6923] close(3 [pid 6929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6927] <... openat resumed>) = 4 [pid 6925] <... close resumed>) = 0 [pid 6923] <... close resumed>) = 0 ./strace-static-x86_64: Process 6930 attached [pid 6929] <... mmap resumed>) = 0x7fe7bae00000 [pid 6927] ioctl(4, LOOP_SET_FD, 3 [pid 6925] mkdir("./file0", 0777 [pid 6923] close(4 [pid 6930] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6928] <... clone3 resumed> => {parent_tid=[6930]}, 88) = 6930 [pid 6925] <... mkdir resumed>) = 0 [pid 6923] <... close resumed>) = 0 [pid 6928] rt_sigprocmask(SIG_SETMASK, [], [pid 6925] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6923] mkdir("./file0", 0777 [pid 6928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6923] <... mkdir resumed>) = 0 [pid 6923] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 167.021919][ T6925] loop3: detected capacity change from 0 to 4096 [ 167.032093][ T6923] loop2: detected capacity change from 0 to 4096 [ 167.052486][ T6927] loop1: detected capacity change from 0 to 4096 [ 167.060288][ T6923] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6928] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6930] <... rseq resumed>) = 0 [pid 6928] <... futex resumed>) = 0 [pid 6930] set_robust_list(0x7fe7c32469a0, 24 [pid 6927] <... ioctl resumed>) = 0 [pid 6930] <... set_robust_list resumed>) = 0 [pid 6927] close(3 [pid 6930] rt_sigprocmask(SIG_SETMASK, [], [pid 6928] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6927] <... close resumed>) = 0 [pid 6930] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6927] close(4 [pid 6930] memfd_create("syzkaller", 0 [pid 6927] <... close resumed>) = 0 [pid 6927] mkdir("./file0", 0777) = 0 [pid 6927] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6930] <... memfd_create resumed>) = 3 [pid 6930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [ 167.073971][ T6925] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 167.090898][ T6927] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6929] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6925] <... mount resumed>) = 0 [pid 6925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6925] chdir("./file0") = 0 [pid 6925] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6925] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6924] <... futex resumed>) = 0 [pid 6925] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6924] exit_group(0 [pid 6925] <... futex resumed>) = ? [pid 6924] <... exit_group resumed>) = ? [pid 6925] +++ exited with 0 +++ [pid 6924] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6924, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6923] <... mount resumed>) = 0 [pid 6923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6927] <... mount resumed>) = 0 [pid 6923] <... openat resumed>) = 3 [pid 5062] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6923] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6923] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6927] <... openat resumed>) = 3 [pid 6923] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] <... openat resumed>) = 3 [pid 6923] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(3, "", [pid 6927] chdir("./file0" [pid 6923] <... futex resumed>) = 1 [pid 6921] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6927] <... chdir resumed>) = 0 [pid 6923] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6921] exit_group(0 [pid 5062] getdents64(3, [pid 6923] <... futex resumed>) = ? [pid 6921] <... exit_group resumed>) = ? [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6927] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6923] +++ exited with 0 +++ [pid 6921] +++ exited with 0 +++ [pid 6930] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6921, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6927] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] newfstatat(AT_FDCWD, "./184/binderfs", [pid 6927] <... futex resumed>) = 1 [pid 6922] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6922] exit_group(0 [pid 5062] unlink("./184/binderfs" [pid 6929] <... write resumed>) = 2097152 [pid 5062] <... unlink resumed>) = 0 [pid 6927] <... futex resumed>) = ? [pid 6922] <... exit_group resumed>) = ? [pid 5062] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6929] munmap(0x7fe7bae00000, 138412032 [pid 6927] +++ exited with 0 +++ [pid 6922] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 5061] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6922, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6929] <... munmap resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./184/file0", [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5060] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 6930] <... write resumed>) = 2097152 [pid 6929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6930] munmap(0x7fe7bae00000, 138412032 [pid 6929] <... openat resumed>) = 4 [pid 5062] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... openat resumed>) = 3 [pid 6929] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(3, "", [pid 6930] <... munmap resumed>) = 0 [pid 5061] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6930] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 6930] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./186/binderfs", [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6930] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6929] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6929] close(3 [pid 5062] <... openat resumed>) = 4 [pid 6929] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 6929] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6929] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 6929] mkdir("./file0", 0777 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./184/file0") = 0 [pid 5062] getdents64(3, [pid 6929] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 6929] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] rmdir("./184") = 0 [pid 6930] <... ioctl resumed>) = 0 [pid 5061] unlink("./186/binderfs" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] mkdir("./185", 0777 [pid 6930] close(3 [pid 5061] <... unlink resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./184/binderfs", [pid 5061] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./184/binderfs" [pid 6930] <... close resumed>) = 0 [pid 6930] close(4 [pid 5060] <... unlink resumed>) = 0 [pid 6930] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6930] mkdir("./file0", 0777) = 0 [pid 6929] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6930] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... openat resumed>) = 3 [ 167.244437][ T6929] loop4: detected capacity change from 0 to 4096 [ 167.249304][ T6930] loop0: detected capacity change from 0 to 4096 [ 167.266705][ T6929] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./184/file0", [pid 6929] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6929] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6929] <... chdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./186/file0", [pid 6929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(4, "", [pid 6929] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6929] <... futex resumed>) = 1 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 4 [pid 6929] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] getdents64(4, [pid 6926] <... futex resumed>) = 0 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./186/file0" [pid 6926] exit_group(0 [pid 5061] <... rmdir resumed>) = 0 [pid 6929] <... futex resumed>) = ? [pid 6926] <... exit_group resumed>) = ? [pid 6929] +++ exited with 0 +++ [pid 6926] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6926, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] getdents64(3, [pid 5060] getdents64(4, [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 5063] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5060] rmdir("./184/file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./183/binderfs", [pid 5061] rmdir("./186" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./183/binderfs") = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] mkdir("./187", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5060] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./183/file0", [pid 5060] rmdir("./184" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] mkdir("./185", 0777 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... mkdir resumed>) = 0 [ 167.299032][ T6930] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6930] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5060] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(4) = 0 [pid 5063] rmdir("./183/file0" [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6930] <... openat resumed>) = 3 [pid 6930] chdir("./file0" [pid 5063] <... rmdir resumed>) = 0 [pid 6930] <... chdir resumed>) = 0 [pid 6930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6930] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... ioctl resumed>) = 0 [pid 6930] <... futex resumed>) = 1 [pid 6928] <... futex resumed>) = 0 [pid 5063] getdents64(3, [pid 6930] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6928] exit_group(0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6930] <... futex resumed>) = ? [pid 6928] <... exit_group resumed>) = ? [pid 5063] close(3 [pid 6930] +++ exited with 0 +++ [pid 5062] close(3 [pid 6928] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./183" [pid 5062] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6928, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./184", 0777) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6931 attached [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6931 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] set_robust_list(0x55558e6e36a0, 24 [pid 5059] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] <... set_robust_list resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6931] chdir("./185" [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6931] <... chdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] setpgid(0, 0 [pid 5059] newfstatat(AT_FDCWD, "./186/binderfs", [pid 6931] <... setpgid resumed>) = 0 [pid 6931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./186/binderfs" [pid 6931] <... openat resumed>) = 3 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6931] write(3, "1000", 4) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 6931] close(3 [pid 5061] close(3 [pid 5059] <... umount2 resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6931] <... close resumed>) = 0 [pid 6931] symlink("/dev/binderfs", "./binderfs" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6931] <... symlink resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6932 ./strace-static-x86_64: Process 6932 attached [pid 5059] newfstatat(AT_FDCWD, "./186/file0", [pid 6931] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6931] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6931] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6931] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6932] chdir("./187" [pid 5059] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6932] <... chdir resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 6932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] newfstatat(4, "", [pid 6932] setpgid(0, 0 [pid 6931] <... mmap resumed>) = 0x7fe7c3226000 ./strace-static-x86_64: Process 6933 attached [pid 6931] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6933 [pid 6933] set_robust_list(0x55558e6e36a0, 24 [pid 6932] <... setpgid resumed>) = 0 [pid 6931] <... mprotect resumed>) = 0 [pid 5059] getdents64(4, [pid 6933] <... set_robust_list resumed>) = 0 [pid 6932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6931] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 6931] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6933] chdir("./185" [pid 6931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6933] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6934 attached [pid 6933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6932] <... openat resumed>) = 3 [pid 5059] close(4 [pid 6934] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6933] <... prctl resumed>) = 0 [pid 6932] write(3, "1000", 4 [pid 5059] <... close resumed>) = 0 [pid 6934] <... rseq resumed>) = 0 [pid 6933] setpgid(0, 0 [pid 6932] <... write resumed>) = 4 [pid 5059] rmdir("./186/file0" [pid 6934] set_robust_list(0x7fe7c32469a0, 24 [pid 6933] <... setpgid resumed>) = 0 [pid 6932] close(3) = 0 [pid 6932] symlink("/dev/binderfs", "./binderfs" [pid 6934] <... set_robust_list resumed>) = 0 [pid 6933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6932] <... symlink resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6932] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6932] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6934] rt_sigprocmask(SIG_SETMASK, [], [pid 6932] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6934] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6933] <... openat resumed>) = 3 [pid 6932] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... ioctl resumed>) = 0 [pid 5059] getdents64(3, [pid 6934] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6933] write(3, "1000", 4 [pid 6932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6933] <... write resumed>) = 4 [pid 6932] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] close(3 [pid 6933] close(3 [pid 6932] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6933] <... close resumed>) = 0 [pid 6932] <... mprotect resumed>) = 0 [pid 6933] symlink("/dev/binderfs", "./binderfs" [pid 6932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] close(3 [pid 6932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 6935 attached [pid 6935] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6932] <... clone3 resumed> => {parent_tid=[6935]}, 88) = 6935 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6932] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] <... close resumed>) = 0 [pid 6933] <... symlink resumed>) = 0 [pid 6932] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] rmdir("./186" [pid 6935] <... rseq resumed>) = 0 [pid 6935] set_robust_list(0x7fe7c32469a0, 24) = 0 ./strace-static-x86_64: Process 6936 attached [pid 6935] rt_sigprocmask(SIG_SETMASK, [], [pid 6931] <... clone3 resumed> => {parent_tid=[6934]}, 88) = 6934 [pid 6936] set_robust_list(0x55558e6e36a0, 24 [pid 6935] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6936] <... set_robust_list resumed>) = 0 [pid 6935] memfd_create("syzkaller", 0 [pid 6933] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6931] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6936 [pid 5059] <... rmdir resumed>) = 0 [pid 6936] chdir("./184" [pid 6933] <... futex resumed>) = 0 [pid 6931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6931] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] mkdir("./187", 0777 [pid 6934] <... futex resumed>) = 0 [pid 6931] <... futex resumed>) = 1 [pid 6936] <... chdir resumed>) = 0 [pid 6936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6936] setpgid(0, 0) = 0 [pid 6936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6935] <... memfd_create resumed>) = 3 [pid 6934] memfd_create("syzkaller", 0 [pid 6933] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6931] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... mkdir resumed>) = 0 [pid 6936] <... openat resumed>) = 3 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6934] <... memfd_create resumed>) = 3 [pid 6933] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6936] write(3, "1000", 4 [pid 6935] <... mmap resumed>) = 0x7fe7bae00000 [pid 6934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6933] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6936] <... write resumed>) = 4 [pid 6934] <... mmap resumed>) = 0x7fe7bae00000 [pid 6933] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6936] close(3 [pid 6933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6936] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6933] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6933] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6933] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6936] symlink("/dev/binderfs", "./binderfs" [pid 6933] <... clone3 resumed> => {parent_tid=[6937]}, 88) = 6937 [pid 6933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6933] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6933] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6936] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6937 attached [pid 6936] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6937] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6936] <... futex resumed>) = 0 [pid 6937] <... rseq resumed>) = 0 [pid 6936] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6937] set_robust_list(0x7fe7c32469a0, 24 [pid 6936] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6937] <... set_robust_list resumed>) = 0 [pid 6936] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6937] rt_sigprocmask(SIG_SETMASK, [], [pid 6936] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6937] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6937] memfd_create("syzkaller", 0 [pid 6936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6936] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6935] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6937] <... memfd_create resumed>) = 3 [pid 6936] <... mprotect resumed>) = 0 [pid 6936] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6936] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6937] <... mmap resumed>) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6938 attached [pid 6938] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6936] <... clone3 resumed> => {parent_tid=[6938]}, 88) = 6938 [pid 6938] set_robust_list(0x7fe7c32469a0, 24 [pid 6936] rt_sigprocmask(SIG_SETMASK, [], [pid 6934] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6938] <... set_robust_list resumed>) = 0 [pid 6938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6938] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6936] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6936] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6938] <... futex resumed>) = 0 [pid 6936] <... futex resumed>) = 1 [pid 6938] memfd_create("syzkaller", 0 [pid 6936] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6938] <... memfd_create resumed>) = 3 [pid 6938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6938] <... mmap resumed>) = 0x7fe7bae00000 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6935] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 6939 attached [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6939 [pid 6939] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6939] chdir("./187") = 0 [pid 6937] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6939] setpgid(0, 0) = 0 [pid 6939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6935] munmap(0x7fe7bae00000, 138412032 [pid 6939] write(3, "1000", 4) = 4 [pid 6939] close(3 [pid 6935] <... munmap resumed>) = 0 [pid 6934] <... write resumed>) = 2097152 [pid 6939] <... close resumed>) = 0 [pid 6939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6935] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6935] ioctl(4, LOOP_SET_FD, 3 [pid 6939] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6939] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6939] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6939] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6939] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6935] <... ioctl resumed>) = 0 [pid 6939] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6939] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6940 attached [pid 6940] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6939] <... clone3 resumed> => {parent_tid=[6940]}, 88) = 6940 [pid 6934] munmap(0x7fe7bae00000, 138412032 [pid 6940] set_robust_list(0x7fe7c32469a0, 24 [pid 6939] rt_sigprocmask(SIG_SETMASK, [], [pid 6940] <... set_robust_list resumed>) = 0 [pid 6938] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6940] rt_sigprocmask(SIG_SETMASK, [], [pid 6939] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6940] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6939] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] memfd_create("syzkaller", 0 [pid 6939] <... futex resumed>) = 0 [pid 6934] <... munmap resumed>) = 0 [pid 6939] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6940] <... memfd_create resumed>) = 3 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6935] close(3) = 0 [pid 6935] close(4) = 0 [pid 6934] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6935] mkdir("./file0", 0777 [pid 6934] <... openat resumed>) = 4 [pid 6934] ioctl(4, LOOP_SET_FD, 3 [pid 6935] <... mkdir resumed>) = 0 [pid 6934] <... ioctl resumed>) = 0 [pid 6935] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 167.610170][ T6935] loop2: detected capacity change from 0 to 4096 [ 167.650159][ T6934] loop3: detected capacity change from 0 to 4096 [pid 6934] close(3) = 0 [pid 6934] close(4) = 0 [pid 6934] mkdir("./file0", 0777) = 0 [pid 6934] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6937] <... write resumed>) = 2097152 [pid 6937] munmap(0x7fe7bae00000, 138412032) = 0 [pid 6937] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6937] ioctl(4, LOOP_SET_FD, 3 [pid 6940] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6938] <... write resumed>) = 2097152 [pid 6937] <... ioctl resumed>) = 0 [pid 6938] munmap(0x7fe7bae00000, 138412032 [pid 6937] close(3 [pid 6938] <... munmap resumed>) = 0 [pid 6937] <... close resumed>) = 0 [pid 6937] close(4) = 0 [pid 6934] <... mount resumed>) = 0 [ 167.671456][ T6935] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 167.677878][ T6934] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 167.704789][ T6937] loop1: detected capacity change from 0 to 4096 [pid 6937] mkdir("./file0", 0777) = 0 [pid 6934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6934] chdir("./file0" [pid 6940] <... write resumed>) = 2097152 [pid 6938] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6937] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6934] <... chdir resumed>) = 0 [pid 6934] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6940] munmap(0x7fe7bae00000, 138412032 [pid 6938] <... openat resumed>) = 4 [pid 6935] <... mount resumed>) = 0 [pid 6935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6938] ioctl(4, LOOP_SET_FD, 3 [pid 6934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6935] chdir("./file0" [pid 6940] <... munmap resumed>) = 0 [pid 6938] <... ioctl resumed>) = 0 [pid 6935] <... chdir resumed>) = 0 [pid 6934] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6938] close(3 [pid 6935] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6934] <... futex resumed>) = 1 [pid 6931] <... futex resumed>) = 0 [pid 6940] <... openat resumed>) = 4 [pid 6938] <... close resumed>) = 0 [pid 6935] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6934] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6931] exit_group(0 [pid 6940] ioctl(4, LOOP_SET_FD, 3 [pid 6938] close(4 [pid 6935] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] <... futex resumed>) = ? [pid 6931] <... exit_group resumed>) = ? [pid 6934] +++ exited with 0 +++ [pid 6938] <... close resumed>) = 0 [pid 6935] <... futex resumed>) = 1 [pid 6932] <... futex resumed>) = 0 [pid 6938] mkdir("./file0", 0777 [pid 6935] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6932] exit_group(0 [pid 6935] <... futex resumed>) = ? [pid 6932] <... exit_group resumed>) = ? [pid 6931] +++ exited with 0 +++ [pid 6938] <... mkdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6931, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6935] +++ exited with 0 +++ [pid 6938] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 167.767303][ T6937] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 167.781449][ T6938] loop4: detected capacity change from 0 to 4096 [ 167.797813][ T6940] loop0: detected capacity change from 0 to 4096 [pid 5062] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 6932] +++ exited with 0 +++ [pid 6940] <... ioctl resumed>) = 0 [pid 6940] close(3) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6940] close(4 [pid 5062] getdents64(3, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6932, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6940] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6940] mkdir("./file0", 0777 [pid 5061] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6940] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6940] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] newfstatat(AT_FDCWD, "./185/binderfs", [pid 5061] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(3, "", [pid 5062] unlink("./185/binderfs") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6937] <... mount resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./187/binderfs", [pid 6937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6937] <... openat resumed>) = 3 [pid 5061] unlink("./187/binderfs" [pid 6937] chdir("./file0" [pid 5062] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6937] <... chdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./185/file0", [pid 6937] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6937] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6933] <... futex resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6937] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6933] exit_group(0 [pid 5062] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6937] <... futex resumed>) = ? [pid 6933] <... exit_group resumed>) = ? [pid 5062] <... openat resumed>) = 4 [pid 6937] +++ exited with 0 +++ [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 6933] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5061] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6933, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4) = 0 [pid 5061] newfstatat(AT_FDCWD, "./187/file0", [pid 5062] rmdir("./185/file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6938] <... mount resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 167.811354][ T6938] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 167.833517][ T6940] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6938] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6938] <... chdir resumed>) = 0 [pid 5062] close(3 [pid 5061] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6938] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] <... openat resumed>) = 3 [pid 6938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./185" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", [pid 6938] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6938] <... futex resumed>) = 1 [pid 6936] <... futex resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] getdents64(4, [pid 5060] getdents64(3, [pid 6938] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6936] exit_group(0 [pid 6938] <... futex resumed>) = ? [pid 6936] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6938] +++ exited with 0 +++ [pid 6936] +++ exited with 0 +++ [pid 5060] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6936, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] getdents64(4, [pid 5060] newfstatat(AT_FDCWD, "./185/binderfs", [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] close(4 [pid 5060] unlink("./185/binderfs" [pid 5062] mkdir("./186", 0777 [pid 5061] <... close resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] rmdir("./187/file0" [pid 5060] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 5063] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(3, "", [pid 5061] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] rmdir("./187" [pid 5060] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6940] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./185/file0", [pid 5063] newfstatat(AT_FDCWD, "./184/binderfs", [pid 5061] mkdir("./188", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6940] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5060] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./184/binderfs" [pid 6940] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6940] chdir("./file0" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... openat resumed>) = 4 [pid 6940] <... chdir resumed>) = 0 [pid 6940] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5060] newfstatat(4, "", [pid 6940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6940] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] <... futex resumed>) = 0 [pid 6940] <... futex resumed>) = 1 [pid 6939] exit_group(0 [pid 5063] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 6940] getdents64(4, [pid 6939] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6940] +++ exited with 0 +++ [pid 5063] newfstatat(AT_FDCWD, "./184/file0", [pid 5060] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5063] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./185/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5060] close(3 [pid 6939] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6939, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5060] rmdir("./185" [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5059] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] rmdir("./184/file0" [pid 5060] mkdir("./186", 0777 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./187/binderfs") = 0 [pid 5059] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./187/file0", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./187/file0") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5059] rmdir("./187" [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./184") = 0 [pid 5059] mkdir("./188", 0777 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6941 attached [pid 5063] mkdir("./185", 0777 [pid 5061] <... ioctl resumed>) = 0 [pid 6941] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6941 [pid 5061] close(3 [pid 6941] <... set_robust_list resumed>) = 0 [pid 6941] chdir("./186" [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 6941] <... chdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6942 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6942 [pid 6942] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6942] chdir("./188" [pid 6941] <... prctl resumed>) = 0 [pid 6941] setpgid(0, 0 [pid 6942] <... chdir resumed>) = 0 [pid 6942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6942] setpgid(0, 0) = 0 [pid 6942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6942] write(3, "1000", 4) = 4 [pid 6942] close(3) = 0 [pid 6942] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6941] <... setpgid resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 6942] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6942] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6942] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6942] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6941] <... openat resumed>) = 3 [pid 5060] close(3 [pid 6942] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6942] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6942] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6943]}, 88) = 6943 [pid 6942] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6942] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6942] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6943 attached [pid 6943] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6943] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6943] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6944 ./strace-static-x86_64: Process 6944 attached [pid 6943] memfd_create("syzkaller", 0 [pid 6941] write(3, "1000", 4 [pid 6944] set_robust_list(0x55558e6e36a0, 24 [pid 6941] <... write resumed>) = 4 [pid 6944] <... set_robust_list resumed>) = 0 [pid 6941] close(3 [pid 6944] chdir("./186" [pid 6941] <... close resumed>) = 0 [pid 6944] <... chdir resumed>) = 0 [pid 6941] symlink("/dev/binderfs", "./binderfs" [pid 6944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6941] <... symlink resumed>) = 0 [pid 6944] <... prctl resumed>) = 0 [pid 6941] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6944] setpgid(0, 0 [pid 6941] <... futex resumed>) = 0 [pid 6944] <... setpgid resumed>) = 0 [pid 6941] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6941] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6944] <... openat resumed>) = 3 [pid 6941] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6944] write(3, "1000", 4 [pid 6941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6944] <... write resumed>) = 4 [pid 6941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6944] close(3 [pid 6943] <... memfd_create resumed>) = 3 [pid 6941] <... mmap resumed>) = 0x7fe7c3226000 [pid 6944] <... close resumed>) = 0 [pid 6943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6944] symlink("/dev/binderfs", "./binderfs" [pid 6943] <... mmap resumed>) = 0x7fe7bae00000 [pid 6941] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6944] <... symlink resumed>) = 0 [pid 6941] <... mprotect resumed>) = 0 [pid 6944] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6941] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6944] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6941] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6944] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6944] <... mmap resumed>) = 0x7fe7c3226000 [pid 6944] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6945 attached ) = 0 [pid 6945] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6944] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6941] <... clone3 resumed> => {parent_tid=[6945]}, 88) = 6945 [pid 6945] <... rseq resumed>) = 0 [pid 6945] set_robust_list(0x7fe7c32469a0, 24 [pid 6941] rt_sigprocmask(SIG_SETMASK, [], [pid 6945] <... set_robust_list resumed>) = 0 [pid 6941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6945] rt_sigprocmask(SIG_SETMASK, [], [pid 6944] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6941] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6944] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6941] <... futex resumed>) = 0 [pid 6945] memfd_create("syzkaller", 0 [pid 6941] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6944] <... clone3 resumed> => {parent_tid=[6946]}, 88) = 6946 [pid 6944] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6944] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6946 attached [pid 6945] <... memfd_create resumed>) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6946] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5063] close(3 [pid 6946] <... rseq resumed>) = 0 [pid 6944] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 6946] set_robust_list(0x7fe7c32469a0, 24 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6946] <... set_robust_list resumed>) = 0 [pid 6946] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6946] memfd_create("syzkaller", 0) = 3 [pid 5059] <... ioctl resumed>) = 0 [pid 6946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6947 [pid 6946] <... mmap resumed>) = 0x7fe7bae00000 ./strace-static-x86_64: Process 6947 attached [pid 5059] close(3 [pid 6947] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... close resumed>) = 0 [pid 6947] <... set_robust_list resumed>) = 0 [pid 6943] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6947] chdir("./185"./strace-static-x86_64: Process 6948 attached ) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6948 [pid 6947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6948] set_robust_list(0x55558e6e36a0, 24 [pid 6947] <... prctl resumed>) = 0 [pid 6948] <... set_robust_list resumed>) = 0 [pid 6947] setpgid(0, 0) = 0 [pid 6947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6948] chdir("./188" [pid 6947] <... openat resumed>) = 3 [pid 6948] <... chdir resumed>) = 0 [pid 6947] write(3, "1000", 4 [pid 6948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6947] <... write resumed>) = 4 [pid 6948] <... prctl resumed>) = 0 [pid 6947] close(3) = 0 [pid 6948] setpgid(0, 0 [pid 6947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6947] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6948] <... setpgid resumed>) = 0 [pid 6947] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6947] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6947] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6948] <... openat resumed>) = 3 [pid 6947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6947] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6948] write(3, "1000", 4 [pid 6947] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6948] <... write resumed>) = 4 [pid 6947] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6948] close(3 [pid 6947] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6948] <... close resumed>) = 0 ./strace-static-x86_64: Process 6949 attached [pid 6948] symlink("/dev/binderfs", "./binderfs" [pid 6949] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6948] <... symlink resumed>) = 0 [pid 6947] <... clone3 resumed> => {parent_tid=[6949]}, 88) = 6949 [pid 6945] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6949] set_robust_list(0x7fe7c32469a0, 24 [pid 6948] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6947] rt_sigprocmask(SIG_SETMASK, [], [pid 6943] <... write resumed>) = 2097152 [pid 6949] <... set_robust_list resumed>) = 0 [pid 6948] <... futex resumed>) = 0 [pid 6947] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6949] rt_sigprocmask(SIG_SETMASK, [], [pid 6948] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6947] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6943] munmap(0x7fe7bae00000, 138412032 [pid 6949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6948] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6947] <... futex resumed>) = 0 [pid 6948] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6947] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6949] memfd_create("syzkaller", 0 [pid 6948] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6946] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6948] <... mmap resumed>) = 0x7fe7c3226000 [pid 6948] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6948] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6949] <... memfd_create resumed>) = 3 [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6948] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6949] <... mmap resumed>) = 0x7fe7bae00000 [pid 6948] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6950 attached [pid 6950] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6950] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6948] <... clone3 resumed> => {parent_tid=[6950]}, 88) = 6950 [pid 6950] rt_sigprocmask(SIG_SETMASK, [], [pid 6948] rt_sigprocmask(SIG_SETMASK, [], [pid 6950] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6950] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6943] <... munmap resumed>) = 0 [pid 6950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6948] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] memfd_create("syzkaller", 0 [pid 6948] <... futex resumed>) = 0 [pid 6948] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6943] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6950] <... memfd_create resumed>) = 3 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6943] <... openat resumed>) = 4 [pid 6943] ioctl(4, LOOP_SET_FD, 3 [pid 6950] <... mmap resumed>) = 0x7fe7bae00000 [pid 6943] <... ioctl resumed>) = 0 [pid 6946] <... write resumed>) = 2097152 [pid 6945] <... write resumed>) = 2097152 [pid 6943] close(3) = 0 [pid 6943] close(4) = 0 [pid 6943] mkdir("./file0", 0777 [pid 6945] munmap(0x7fe7bae00000, 138412032 [pid 6943] <... mkdir resumed>) = 0 [ 168.181665][ T6943] loop2: detected capacity change from 0 to 4096 [pid 6949] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6946] munmap(0x7fe7bae00000, 138412032 [pid 6943] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6945] <... munmap resumed>) = 0 [pid 6946] <... munmap resumed>) = 0 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6945] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6946] ioctl(4, LOOP_SET_FD, 3 [pid 6945] <... openat resumed>) = 4 [pid 6945] ioctl(4, LOOP_SET_FD, 3 [pid 6950] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6946] <... ioctl resumed>) = 0 [pid 6946] close(3) = 0 [pid 6949] <... write resumed>) = 2097152 [pid 6946] close(4) = 0 [pid 6946] mkdir("./file0", 0777 [pid 6949] munmap(0x7fe7bae00000, 138412032 [pid 6946] <... mkdir resumed>) = 0 [pid 6946] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6945] <... ioctl resumed>) = 0 [ 168.238656][ T6943] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 168.257672][ T6946] loop1: detected capacity change from 0 to 4096 [ 168.258146][ T6945] loop3: detected capacity change from 0 to 4096 [pid 6945] close(3 [pid 6949] <... munmap resumed>) = 0 [pid 6945] <... close resumed>) = 0 [pid 6945] close(4 [pid 6949] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6945] <... close resumed>) = 0 [pid 6945] mkdir("./file0", 0777 [pid 6949] <... openat resumed>) = 4 [pid 6949] ioctl(4, LOOP_SET_FD, 3 [pid 6945] <... mkdir resumed>) = 0 [pid 6949] <... ioctl resumed>) = 0 [pid 6945] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6949] close(3) = 0 [pid 6949] close(4 [pid 6950] <... write resumed>) = 2097152 [pid 6949] <... close resumed>) = 0 [pid 6949] mkdir("./file0", 0777) = 0 [ 168.298137][ T6946] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 168.311811][ T6949] loop4: detected capacity change from 0 to 4096 [ 168.326569][ T6945] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6949] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6950] munmap(0x7fe7bae00000, 138412032 [pid 6943] <... mount resumed>) = 0 [pid 6943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6943] chdir("./file0") = 0 [pid 6943] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6943] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6942] <... futex resumed>) = 0 [pid 6943] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6942] exit_group(0) = ? [pid 6943] <... futex resumed>) = ? [pid 6943] +++ exited with 0 +++ [pid 6950] <... munmap resumed>) = 0 [pid 6942] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6942, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6950] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] newfstatat(3, "", [pid 6950] <... openat resumed>) = 4 [pid 6946] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [ 168.365769][ T6949] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6950] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6950] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6950] close(3 [pid 5061] unlink("./188/binderfs" [pid 6950] <... close resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 6950] close(4) = 0 [pid 6946] chdir("./file0" [pid 6950] mkdir("./file0", 0777) = 0 [pid 6946] <... chdir resumed>) = 0 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6950] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = 0 [pid 6945] <... mount resumed>) = 0 [pid 6946] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6945] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6946] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6945] <... openat resumed>) = 3 [pid 6945] chdir("./file0") = 0 [pid 6944] <... futex resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6944] exit_group(0 [pid 6945] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6946] <... futex resumed>) = ? [pid 6945] <... futex resumed>) = 1 [pid 6944] <... exit_group resumed>) = ? [pid 6941] <... futex resumed>) = 0 [pid 6946] +++ exited with 0 +++ [pid 6945] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6944] +++ exited with 0 +++ [pid 6941] exit_group(0 [pid 6945] <... futex resumed>) = ? [pid 6941] <... exit_group resumed>) = ? [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6944, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6945] +++ exited with 0 +++ [pid 6941] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6941, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", [pid 5061] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./188/file0", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5061] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(3, "", [pid 5061] newfstatat(4, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6949] <... mount resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] getdents64(4, [pid 6949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6949] <... openat resumed>) = 3 [pid 5062] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(AT_FDCWD, "./186/binderfs", [pid 6949] chdir("./file0" [pid 5062] newfstatat(AT_FDCWD, "./186/binderfs", [pid 5061] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] <... chdir resumed>) = 0 [ 168.426949][ T6950] loop0: detected capacity change from 0 to 4096 [ 168.443083][ T6950] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5060] unlink("./186/binderfs" [pid 6949] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] unlink("./186/binderfs" [pid 5060] <... unlink resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5060] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./188/file0") = 0 [pid 6950] <... mount resumed>) = 0 [pid 6949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 6950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6949] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5060] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6950] <... openat resumed>) = 3 [pid 6949] <... futex resumed>) = 1 [pid 6947] <... futex resumed>) = 0 [pid 5062] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./188" [pid 5060] newfstatat(AT_FDCWD, "./186/file0", [pid 6950] chdir("./file0" [pid 6949] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6947] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6950] <... chdir resumed>) = 0 [pid 6949] <... futex resumed>) = ? [pid 6947] <... exit_group resumed>) = ? [pid 6950] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6949] +++ exited with 0 +++ [pid 5062] newfstatat(AT_FDCWD, "./186/file0", [pid 5060] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6947] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] mkdir("./189", 0777 [pid 6950] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6947, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6950] <... futex resumed>) = 1 [pid 5060] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6950] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6948] <... futex resumed>) = 0 [pid 5063] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 4 [pid 6948] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] newfstatat(4, "", [pid 6950] <... futex resumed>) = ? [pid 6948] <... exit_group resumed>) = ? [pid 5063] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(4, "", [pid 5061] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(4, [pid 5063] newfstatat(3, "", [pid 5062] getdents64(4, [pid 6950] +++ exited with 0 +++ [pid 6948] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6948, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] getdents64(4, [pid 5063] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./185/binderfs", [pid 5059] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./185/binderfs" [pid 5059] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5059] newfstatat(3, "", [pid 5062] close(4 [pid 5060] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5060] rmdir("./186/file0" [pid 5059] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5062] rmdir("./186/file0" [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] getdents64(3, [pid 5063] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./185/file0", [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] rmdir("./186" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3) = 0 [pid 5063] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./188/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] rmdir("./186" [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] mkdir("./187", 0777 [pid 5063] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5059] unlink("./188/binderfs" [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5059] <... unlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5062] mkdir("./187", 0777 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(4, [pid 5060] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(4 [pid 5062] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./185/file0") = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 5061] close(3 [pid 5063] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] rmdir("./185" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6951 attached [pid 5059] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6951] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./188/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./186", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6951 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5059] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6951] <... set_robust_list resumed>) = 0 [pid 5059] close(4 [pid 6951] chdir("./189") = 0 [pid 5059] <... close resumed>) = 0 [pid 6951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6951] setpgid(0, 0) = 0 [pid 6951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 6951] write(3, "1000", 4 [pid 5060] close(3 [pid 6951] <... write resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 6951] close(3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6951] <... close resumed>) = 0 [pid 6951] symlink("/dev/binderfs", "./binderfs" [pid 5059] rmdir("./188/file0" [pid 6951] <... symlink resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6951] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(3, [pid 6951] <... futex resumed>) = 0 [pid 6951] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6951] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] close(3 [pid 6951] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 6952 attached NULL, 8) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6952 [pid 5059] <... close resumed>) = 0 [pid 6951] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6952] set_robust_list(0x55558e6e36a0, 24 [pid 6951] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] rmdir("./188" [pid 6951] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6952] <... set_robust_list resumed>) = 0 [pid 6952] chdir("./187" [pid 6951] <... mprotect resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 6952] <... chdir resumed>) = 0 [pid 6951] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] mkdir("./189", 0777 [pid 6952] <... prctl resumed>) = 0 [pid 6951] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6952] setpgid(0, 0 [pid 6951] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 6952] <... setpgid resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6953 attached [pid 6951] <... clone3 resumed> => {parent_tid=[6953]}, 88) = 6953 [pid 6953] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6951] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] close(3 [pid 5062] close(3 [pid 6953] <... rseq resumed>) = 0 [pid 6953] set_robust_list(0x7fe7c32469a0, 24 [pid 6952] <... openat resumed>) = 3 [pid 6951] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 6953] <... set_robust_list resumed>) = 0 [pid 6952] write(3, "1000", 4 [pid 6951] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6953] rt_sigprocmask(SIG_SETMASK, [], [pid 6952] <... write resumed>) = 4 [pid 6951] <... futex resumed>) = 0 [pid 6953] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6952] close(3 [pid 6951] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6955 attached ./strace-static-x86_64: Process 6954 attached [pid 6953] memfd_create("syzkaller", 0 [pid 6952] <... close resumed>) = 0 [pid 6955] set_robust_list(0x55558e6e36a0, 24 [pid 6954] set_robust_list(0x55558e6e36a0, 24 [pid 6955] <... set_robust_list resumed>) = 0 [pid 6954] <... set_robust_list resumed>) = 0 [pid 6952] symlink("/dev/binderfs", "./binderfs" [pid 6954] chdir("./186" [pid 6952] <... symlink resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6955 [pid 6952] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6955] chdir("./187" [pid 6953] <... memfd_create resumed>) = 3 [pid 6952] <... futex resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6954 [pid 6955] <... chdir resumed>) = 0 [pid 6954] <... chdir resumed>) = 0 [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6952] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6953] <... mmap resumed>) = 0x7fe7bae00000 [pid 6952] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6955] <... prctl resumed>) = 0 [pid 6954] <... prctl resumed>) = 0 [pid 6952] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6954] setpgid(0, 0) = 0 [pid 6952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6955] setpgid(0, 0 [pid 6952] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6954] <... openat resumed>) = 3 [pid 6955] <... setpgid resumed>) = 0 [pid 6955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6952] <... mprotect resumed>) = 0 [pid 6954] write(3, "1000", 4) = 4 [pid 6954] close(3 [pid 6955] <... openat resumed>) = 3 [pid 6952] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6956 attached [pid 6954] <... close resumed>) = 0 [pid 6955] write(3, "1000", 4 [pid 6956] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6952] <... clone3 resumed> => {parent_tid=[6956]}, 88) = 6956 [pid 6956] <... rseq resumed>) = 0 [pid 6952] rt_sigprocmask(SIG_SETMASK, [], [pid 6956] set_robust_list(0x7fe7c32469a0, 24 [pid 6952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6956] <... set_robust_list resumed>) = 0 [pid 6952] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] rt_sigprocmask(SIG_SETMASK, [], [pid 6952] <... futex resumed>) = 0 [pid 6956] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6952] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6956] memfd_create("syzkaller", 0 [pid 6955] <... write resumed>) = 4 [pid 6954] symlink("/dev/binderfs", "./binderfs" [pid 6956] <... memfd_create resumed>) = 3 [pid 6956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6955] close(3 [pid 6954] <... symlink resumed>) = 0 [pid 6956] <... mmap resumed>) = 0x7fe7bae00000 [pid 6955] <... close resumed>) = 0 [pid 6954] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6955] symlink("/dev/binderfs", "./binderfs" [pid 6954] <... futex resumed>) = 0 [pid 6955] <... symlink resumed>) = 0 [pid 6954] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6955] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6954] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6955] <... futex resumed>) = 0 [pid 6954] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6955] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6955] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6954] <... mmap resumed>) = 0x7fe7c3226000 [pid 6955] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6954] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6955] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6954] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6953] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] <... ioctl resumed>) = 0 [pid 6955] <... mmap resumed>) = 0x7fe7c3226000 [pid 6954] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6955] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6954] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6957 attached [pid 6955] <... mprotect resumed>) = 0 [pid 6957] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6956] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6954] <... clone3 resumed> => {parent_tid=[6957]}, 88) = 6957 [pid 5059] close(3 [pid 6957] <... rseq resumed>) = 0 [pid 6955] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6954] rt_sigprocmask(SIG_SETMASK, [], [pid 6957] set_robust_list(0x7fe7c32469a0, 24 [pid 6955] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6957] <... set_robust_list resumed>) = 0 [pid 6955] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6954] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... close resumed>) = 0 [pid 6957] rt_sigprocmask(SIG_SETMASK, [], [pid 6954] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6957] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6954] <... futex resumed>) = 0 [pid 6955] <... clone3 resumed> => {parent_tid=[6958]}, 88) = 6958 [pid 6955] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6955] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6959 attached ./strace-static-x86_64: Process 6958 attached [pid 6957] memfd_create("syzkaller", 0 [pid 6955] <... futex resumed>) = 0 [pid 6954] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6959] set_robust_list(0x55558e6e36a0, 24 [pid 6957] <... memfd_create resumed>) = 3 [pid 6959] <... set_robust_list resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6959 [pid 6958] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6955] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6959] chdir("./189" [pid 6958] <... rseq resumed>) = 0 [pid 6957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6959] <... chdir resumed>) = 0 [pid 6958] set_robust_list(0x7fe7c32469a0, 24 [pid 6959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6958] <... set_robust_list resumed>) = 0 [pid 6957] <... mmap resumed>) = 0x7fe7bae00000 [pid 6959] <... prctl resumed>) = 0 [pid 6958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6959] setpgid(0, 0 [pid 6958] memfd_create("syzkaller", 0 [pid 6959] <... setpgid resumed>) = 0 [pid 6958] <... memfd_create resumed>) = 3 [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6953] <... write resumed>) = 2097152 [pid 6959] <... openat resumed>) = 3 [pid 6959] write(3, "1000", 4) = 4 [pid 6959] close(3) = 0 [pid 6959] symlink("/dev/binderfs", "./binderfs" [pid 6957] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6953] munmap(0x7fe7bae00000, 138412032 [pid 6959] <... symlink resumed>) = 0 [pid 6956] <... write resumed>) = 2097152 [pid 6956] munmap(0x7fe7bae00000, 138412032 [pid 6959] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] <... munmap resumed>) = 0 [pid 6953] <... munmap resumed>) = 0 [pid 6959] <... futex resumed>) = 0 [pid 6956] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6959] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6958] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6957] <... write resumed>) = 2097152 [pid 6953] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6959] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6957] munmap(0x7fe7bae00000, 138412032 [pid 6956] <... openat resumed>) = 4 [pid 6953] <... openat resumed>) = 4 [pid 6959] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6957] <... munmap resumed>) = 0 [pid 6953] ioctl(4, LOOP_SET_FD, 3 [pid 6956] ioctl(4, LOOP_SET_FD, 3 [pid 6959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6959] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6959] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6959] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6960 attached [pid 6958] <... write resumed>) = 2097152 [pid 6957] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6956] <... ioctl resumed>) = 0 [pid 6953] <... ioctl resumed>) = 0 [pid 6960] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6959] <... clone3 resumed> => {parent_tid=[6960]}, 88) = 6960 [pid 6958] munmap(0x7fe7bae00000, 138412032 [pid 6957] <... openat resumed>) = 4 [pid 6956] close(3 [pid 6953] close(3 [pid 6960] <... rseq resumed>) = 0 [pid 6959] rt_sigprocmask(SIG_SETMASK, [], [pid 6957] ioctl(4, LOOP_SET_FD, 3 [pid 6956] <... close resumed>) = 0 [pid 6953] <... close resumed>) = 0 [pid 6960] set_robust_list(0x7fe7c32469a0, 24 [pid 6959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6958] <... munmap resumed>) = 0 [pid 6960] <... set_robust_list resumed>) = 0 [pid 6960] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6960] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6959] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] close(4 [pid 6957] <... ioctl resumed>) = 0 [pid 6953] close(4 [pid 6959] <... futex resumed>) = 1 [pid 6958] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6957] close(3 [pid 6956] <... close resumed>) = 0 [pid 6953] <... close resumed>) = 0 [pid 6959] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6958] <... openat resumed>) = 4 [pid 6957] <... close resumed>) = 0 [pid 6956] mkdir("./file0", 0777 [pid 6953] mkdir("./file0", 0777 [pid 6958] ioctl(4, LOOP_SET_FD, 3 [pid 6957] close(4 [pid 6956] <... mkdir resumed>) = 0 [pid 6953] <... mkdir resumed>) = 0 [pid 6960] <... futex resumed>) = 0 [pid 6957] <... close resumed>) = 0 [pid 6956] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 168.854741][ T6956] loop1: detected capacity change from 0 to 4096 [ 168.855459][ T6953] loop2: detected capacity change from 0 to 4096 [ 168.883682][ T6957] loop4: detected capacity change from 0 to 4096 [pid 6953] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6960] memfd_create("syzkaller", 0 [pid 6957] mkdir("./file0", 0777 [pid 6960] <... memfd_create resumed>) = 3 [pid 6958] <... ioctl resumed>) = 0 [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6958] close(3 [pid 6957] <... mkdir resumed>) = 0 [pid 6958] <... close resumed>) = 0 [pid 6958] close(4) = 0 [pid 6958] mkdir("./file0", 0777 [pid 6957] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6958] <... mkdir resumed>) = 0 [ 168.897004][ T6953] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 168.906181][ T6958] loop3: detected capacity change from 0 to 4096 [ 168.906740][ T6956] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 168.936795][ T6957] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 168.946229][ T6958] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6958] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"...) = 0 [pid 6958] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6960] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6958] <... openat resumed>) = 3 [pid 6958] chdir("./file0") = 0 [pid 6958] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6958] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6955] <... futex resumed>) = 0 [pid 6958] <... futex resumed>) = 1 [pid 6958] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6955] exit_group(0 [pid 6953] <... mount resumed>) = 0 [pid 6955] <... exit_group resumed>) = ? [pid 6958] <... futex resumed>) = ? [pid 6953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6953] chdir("./file0") = 0 [pid 6953] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6958] +++ exited with 0 +++ [pid 6955] +++ exited with 0 +++ [pid 6953] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6955, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6953] <... futex resumed>) = 1 [pid 6951] <... futex resumed>) = 0 [pid 6953] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6951] exit_group(0 [pid 5062] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6960] <... write resumed>) = 2097152 [pid 6956] <... mount resumed>) = 0 [pid 6953] <... futex resumed>) = ? [pid 6951] <... exit_group resumed>) = ? [pid 6960] munmap(0x7fe7bae00000, 138412032 [pid 6956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6953] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6956] <... openat resumed>) = 3 [pid 6951] +++ exited with 0 +++ [pid 5062] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6956] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6956] <... chdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./187/binderfs", [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6951, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6956] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 6957] <... mount resumed>) = 0 [pid 5062] unlink("./187/binderfs" [pid 6956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6957] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6956] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 6957] <... openat resumed>) = 3 [pid 5062] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6956] <... futex resumed>) = 1 [pid 6952] <... futex resumed>) = 0 [pid 6957] chdir("./file0" [pid 6956] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6952] exit_group(0 [pid 6957] <... chdir resumed>) = 0 [pid 6956] <... futex resumed>) = ? [pid 6952] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = 0 [pid 5061] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6957] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6956] +++ exited with 0 +++ [pid 6952] +++ exited with 0 +++ [pid 5062] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./187/file0", [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6952, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5062] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 5060] <... restart_syscall resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6957] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6957] <... futex resumed>) = 1 [pid 6954] <... futex resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 5060] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6957] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6954] exit_group(0 [pid 5062] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6957] <... futex resumed>) = ? [pid 6954] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6957] +++ exited with 0 +++ [pid 5062] getdents64(4, [pid 5060] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(3, "", [pid 5062] getdents64(4, [pid 5061] newfstatat(AT_FDCWD, "./189/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(3, [pid 5062] close(4 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./187/file0" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6960] <... munmap resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./189/binderfs" [pid 5060] unlink("./187/binderfs" [pid 6960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] getdents64(3, [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 6960] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6960] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(3 [pid 5061] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 6954] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./187" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6954, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] <... rmdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./187/file0", [pid 5063] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] mkdir("./188", 0777 [pid 5060] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./187/file0") = 0 [pid 5060] getdents64(3, [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] close(3) = 0 [pid 5060] rmdir("./187" [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5060] <... rmdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5060] mkdir("./188", 0777 [pid 5062] close(3 [pid 5060] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6961 attached ) = 3 [pid 6961] set_robust_list(0x55558e6e36a0, 24 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6961] <... set_robust_list resumed>) = 0 [pid 6961] chdir("./188" [pid 5063] <... openat resumed>) = 3 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6961 [pid 6961] <... chdir resumed>) = 0 [pid 6960] <... ioctl resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = 0 [pid 6960] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6960] <... close resumed>) = 0 [pid 5061] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6960] close(4 [pid 5063] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6960] <... close resumed>) = 0 [pid 6960] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(AT_FDCWD, "./189/file0", [pid 6961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6961] setpgid(0, 0) = 0 [pid 6961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6960] <... mkdir resumed>) = 0 [pid 5063] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6961] <... openat resumed>) = 3 [pid 6961] write(3, "1000", 4) = 4 [pid 6961] close(3) = 0 [pid 6961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6961] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6961] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6961] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6961] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6962 attached [pid 6961] <... clone3 resumed> => {parent_tid=[6962]}, 88) = 6962 [pid 6961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] newfstatat(AT_FDCWD, "./186/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6960] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6962] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6961] <... futex resumed>) = 0 [pid 6962] <... rseq resumed>) = 0 [pid 6961] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6962] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6962] <... set_robust_list resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6962] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... ioctl resumed>) = 0 [pid 6962] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6962] memfd_create("syzkaller", 0) = 3 [pid 6962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5060] close(3 [pid 5063] unlink("./186/binderfs" [pid 5061] <... openat resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5063] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] getdents64(4, ./strace-static-x86_64: Process 6963 attached [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6963] set_robust_list(0x55558e6e36a0, 24 [pid 5063] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6963 [pid 5063] newfstatat(AT_FDCWD, "./186/file0", [pid 5061] close(4 [pid 6963] <... set_robust_list resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 6963] chdir("./188" [pid 5063] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./189/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6963] <... chdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 5063] <... openat resumed>) = 4 [ 169.089620][ T6960] loop0: detected capacity change from 0 to 4096 [ 169.128248][ T6960] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6963] <... prctl resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] close(3 [pid 6963] setpgid(0, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./189" [pid 6963] <... setpgid resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 6963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] mkdir("./190", 0777 [pid 6963] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 6963] write(3, "1000", 4 [pid 5063] getdents64(4, [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6963] <... write resumed>) = 4 [pid 6963] close(3) = 0 [pid 6963] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 6963] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./186/file0" [pid 6963] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6963] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6963] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6963] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6962] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 6963] <... mprotect resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6963] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 6963] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6963] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6964 attached [pid 5063] rmdir("./186" [pid 6963] <... clone3 resumed> => {parent_tid=[6964]}, 88) = 6964 [pid 6964] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6963] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 6964] <... rseq resumed>) = 0 [pid 6964] set_robust_list(0x7fe7c32469a0, 24 [pid 6963] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6960] <... mount resumed>) = 0 [pid 5063] mkdir("./187", 0777 [pid 6964] <... set_robust_list resumed>) = 0 [pid 6963] <... futex resumed>) = 0 [pid 6960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 6964] rt_sigprocmask(SIG_SETMASK, [], [pid 6963] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6960] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 6964] memfd_create("syzkaller", 0 [pid 6960] chdir("./file0" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6964] <... memfd_create resumed>) = 3 [pid 6960] <... chdir resumed>) = 0 [pid 6964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6964] <... mmap resumed>) = 0x7fe7bae00000 [pid 6960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6960] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6959] <... futex resumed>) = 0 [pid 6960] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6959] exit_group(0 [pid 6960] <... futex resumed>) = ? [pid 6959] <... exit_group resumed>) = ? [pid 6960] +++ exited with 0 +++ [pid 6959] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6959, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5059] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./189/binderfs") = 0 [pid 5059] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] rmdir("./189/file0" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./189" [pid 6962] <... write resumed>) = 2097152 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./190", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6965 [pid 5059] <... openat resumed>) = 3 [pid 6962] munmap(0x7fe7bae00000, 138412032./strace-static-x86_64: Process 6965 attached [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6965] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... ioctl resumed>) = 0 [pid 6965] <... set_robust_list resumed>) = 0 [pid 6964] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] close(3 [pid 6965] chdir("./190" [pid 6962] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6962] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6965] <... chdir resumed>) = 0 [pid 6962] <... openat resumed>) = 4 [pid 6965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6966 ./strace-static-x86_64: Process 6966 attached [pid 6966] set_robust_list(0x55558e6e36a0, 24 [pid 6962] ioctl(4, LOOP_SET_FD, 3 [pid 6966] <... set_robust_list resumed>) = 0 [pid 6966] chdir("./190" [pid 6965] <... prctl resumed>) = 0 [pid 6966] <... chdir resumed>) = 0 [pid 6965] setpgid(0, 0 [pid 6966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6965] <... setpgid resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6966] <... prctl resumed>) = 0 [pid 6965] write(3, "1000", 4 [pid 6966] setpgid(0, 0 [pid 6965] <... write resumed>) = 4 [pid 6966] <... setpgid resumed>) = 0 [pid 6965] close(3 [pid 6966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6965] <... close resumed>) = 0 [pid 6965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6966] <... openat resumed>) = 3 [pid 6966] write(3, "1000", 4 [pid 6965] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] <... write resumed>) = 4 [pid 6965] <... futex resumed>) = 0 [pid 5063] close(3 [pid 6966] close(3 [pid 6965] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... close resumed>) = 0 [pid 6966] <... close resumed>) = 0 [pid 6965] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6966] symlink("/dev/binderfs", "./binderfs" [pid 6965] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6966] <... symlink resumed>) = 0 [pid 6965] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6967 attached ) = 0 [pid 6966] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6965] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6967] set_robust_list(0x55558e6e36a0, 24 [pid 6966] <... futex resumed>) = 0 [pid 6965] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6967] <... set_robust_list resumed>) = 0 [pid 6966] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6967 [pid 6967] chdir("./187" [pid 6966] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6967] <... chdir resumed>) = 0 [pid 6966] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6965] <... clone3 resumed> => {parent_tid=[6968]}, 88) = 6968 ./strace-static-x86_64: Process 6968 attached [pid 6966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6967] <... prctl resumed>) = 0 [pid 6966] <... mmap resumed>) = 0x7fe7c3226000 [pid 6965] rt_sigprocmask(SIG_SETMASK, [], [pid 6968] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6967] setpgid(0, 0 [pid 6966] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6968] <... rseq resumed>) = 0 [pid 6966] <... mprotect resumed>) = 0 [pid 6965] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] set_robust_list(0x7fe7c32469a0, 24 [pid 6966] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6965] <... futex resumed>) = 0 [pid 6968] <... set_robust_list resumed>) = 0 [pid 6965] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6967] <... setpgid resumed>) = 0 [pid 6968] rt_sigprocmask(SIG_SETMASK, [], [pid 6967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6966] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6968] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6967] <... openat resumed>) = 3 [pid 6966] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6962] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6969 attached [pid 6967] write(3, "1000", 4 [pid 6969] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6967] <... write resumed>) = 4 [pid 6966] <... clone3 resumed> => {parent_tid=[6969]}, 88) = 6969 [pid 6969] <... rseq resumed>) = 0 [pid 6968] memfd_create("syzkaller", 0 [pid 6967] close(3 [pid 6966] rt_sigprocmask(SIG_SETMASK, [], [pid 6962] close(3 [pid 6969] set_robust_list(0x7fe7c32469a0, 24 [pid 6967] <... close resumed>) = 0 [pid 6966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6962] <... close resumed>) = 0 [pid 6969] <... set_robust_list resumed>) = 0 [pid 6968] <... memfd_create resumed>) = 3 [pid 6969] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6967] symlink("/dev/binderfs", "./binderfs" [pid 6969] memfd_create("syzkaller", 0 [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6967] <... symlink resumed>) = 0 [pid 6966] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6962] close(4 [pid 6966] <... futex resumed>) = 0 [pid 6966] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6967] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6962] <... close resumed>) = 0 [pid 6968] <... mmap resumed>) = 0x7fe7bae00000 [pid 6969] <... memfd_create resumed>) = 3 [pid 6967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6962] mkdir("./file0", 0777 [pid 6969] <... mmap resumed>) = 0x7fe7bae00000 [pid 6967] <... mmap resumed>) = 0x7fe7c3226000 [ 169.300574][ T6962] loop3: detected capacity change from 0 to 4096 [pid 6964] <... write resumed>) = 2097152 [pid 6962] <... mkdir resumed>) = 0 [pid 6967] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6962] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6964] munmap(0x7fe7bae00000, 138412032 [pid 6967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[6970]}, 88) = 6970 [pid 6967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6967] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6970 attached [pid 6970] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 6970] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6970] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6970] memfd_create("syzkaller", 0 [pid 6964] <... munmap resumed>) = 0 [pid 6964] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6970] <... memfd_create resumed>) = 3 [pid 6964] ioctl(4, LOOP_SET_FD, 3 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6964] <... ioctl resumed>) = 0 [pid 6964] close(3) = 0 [pid 6964] close(4) = 0 [pid 6964] mkdir("./file0", 0777) = 0 [ 169.372025][ T6962] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 169.379974][ T6964] loop1: detected capacity change from 0 to 4096 [pid 6964] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6968] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6969] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 169.414396][ T6964] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6970] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6968] <... write resumed>) = 2097152 [pid 6962] <... mount resumed>) = 0 [pid 6964] <... mount resumed>) = 0 [pid 6962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6968] munmap(0x7fe7bae00000, 138412032 [pid 6964] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6962] <... openat resumed>) = 3 [pid 6962] chdir("./file0") = 0 [pid 6962] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6969] <... write resumed>) = 2097152 [pid 6962] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6969] munmap(0x7fe7bae00000, 138412032 [pid 6968] <... munmap resumed>) = 0 [pid 6962] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6962] <... futex resumed>) = 1 [pid 6968] <... openat resumed>) = 4 [pid 6964] <... openat resumed>) = 3 [pid 6962] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6961] <... futex resumed>) = 0 [pid 6964] chdir("./file0" [pid 6961] exit_group(0 [pid 6964] <... chdir resumed>) = 0 [pid 6970] <... write resumed>) = 2097152 [pid 6968] ioctl(4, LOOP_SET_FD, 3 [pid 6962] <... futex resumed>) = ? [pid 6961] <... exit_group resumed>) = ? [pid 6970] munmap(0x7fe7bae00000, 138412032 [pid 6964] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6969] <... munmap resumed>) = 0 [pid 6968] <... ioctl resumed>) = 0 [pid 6964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6962] +++ exited with 0 +++ [pid 6961] +++ exited with 0 +++ [pid 6964] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6963] <... futex resumed>) = 0 [pid 6968] close(3 [pid 6963] exit_group(0 [pid 6968] <... close resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6961, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6963] <... exit_group resumed>) = ? [pid 6968] close(4 [pid 6970] <... munmap resumed>) = 0 [pid 6969] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6968] <... close resumed>) = 0 [pid 6964] +++ exited with 0 +++ [pid 6963] +++ exited with 0 +++ [pid 6968] mkdir("./file0", 0777 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6963, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5060] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6968] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6968] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6969] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 6969] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] getdents64(3, [pid 6970] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6970] ioctl(4, LOOP_SET_FD, 3 [pid 5060] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6970] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./188/binderfs", [pid 5062] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] unlink("./188/binderfs") = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(3, "", [pid 5060] <... umount2 resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./188/binderfs", [pid 5060] newfstatat(AT_FDCWD, "./188/file0", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./188/binderfs" [pid 5060] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./188/file0", [pid 5060] close(4 [pid 6970] close(3 [pid 6969] <... ioctl resumed>) = 0 [pid 6968] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 6970] <... close resumed>) = 0 [pid 6969] close(3 [pid 6968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./188/file0" [pid 6970] close(4 [pid 6969] <... close resumed>) = 0 [pid 6968] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] getdents64(3, [pid 5062] newfstatat(4, "", [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(3 [pid 5062] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [ 169.528005][ T6968] loop2: detected capacity change from 0 to 4096 [ 169.552795][ T6968] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 169.553627][ T6969] loop0: detected capacity change from 0 to 4096 [ 169.571631][ T6970] loop4: detected capacity change from 0 to 4096 [pid 5060] rmdir("./188" [pid 5062] getdents64(4, [pid 5060] <... rmdir resumed>) = 0 [pid 6970] <... close resumed>) = 0 [pid 6969] close(4 [pid 6968] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6970] mkdir("./file0", 0777 [pid 6969] <... close resumed>) = 0 [pid 6968] <... chdir resumed>) = 0 [pid 5062] close(4 [pid 5060] mkdir("./189", 0777 [pid 6970] <... mkdir resumed>) = 0 [pid 6969] mkdir("./file0", 0777 [pid 6968] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 6970] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6969] <... mkdir resumed>) = 0 [pid 6968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./188/file0" [pid 5060] <... mkdir resumed>) = 0 [pid 6969] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6968] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5060] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./188" [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] <... rmdir resumed>) = 0 [pid 6968] <... futex resumed>) = 1 [pid 6965] <... futex resumed>) = 0 [pid 6965] exit_group(0) = ? [pid 5062] mkdir("./189", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6968] +++ exited with 0 +++ [pid 6965] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6965, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5060] close(3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./190/binderfs") = 0 [ 169.615793][ T6970] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 169.629809][ T6969] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6971 attached [pid 6971] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6971 [pid 6971] chdir("./189") = 0 [pid 6971] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6969] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 6971] <... prctl resumed>) = 0 [pid 6971] setpgid(0, 0) = 0 [pid 6971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6969] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6971] write(3, "1000", 4 [pid 6969] <... chdir resumed>) = 0 [pid 6971] <... write resumed>) = 4 [pid 6969] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./190/file0", [pid 6971] close(3 [pid 6969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6971] <... close resumed>) = 0 [pid 6969] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6971] symlink("/dev/binderfs", "./binderfs" [pid 6969] <... futex resumed>) = 1 [pid 6966] <... futex resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6969] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6971] <... symlink resumed>) = 0 [pid 6966] exit_group(0 [pid 5061] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6969] <... futex resumed>) = ? [pid 6966] <... exit_group resumed>) = ? [pid 5061] <... openat resumed>) = 4 [pid 6971] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] +++ exited with 0 +++ [pid 5061] newfstatat(4, "", [pid 6971] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6971] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6971] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] getdents64(4, [pid 6971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] getdents64(4, [pid 6971] <... mmap resumed>) = 0x7fe7c3226000 [pid 6966] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6966, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] close(4 [pid 5059] <... openat resumed>) = 3 [pid 6971] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 6971] <... mprotect resumed>) = 0 [pid 5061] rmdir("./190/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6971] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] <... rmdir resumed>) = 0 [pid 6970] <... mount resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6970] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6971] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6970] <... openat resumed>) = 3 [pid 6971] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] getdents64(3, [pid 5059] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6970] chdir("./file0" [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6972 attached [pid 6970] <... chdir resumed>) = 0 [pid 5061] close(3 [pid 5059] newfstatat(AT_FDCWD, "./190/binderfs", [pid 6970] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6972] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] unlink("./190/binderfs" [pid 6972] <... rseq resumed>) = 0 [pid 6971] <... clone3 resumed> => {parent_tid=[6972]}, 88) = 6972 [pid 6970] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] set_robust_list(0x7fe7c32469a0, 24 [pid 6971] rt_sigprocmask(SIG_SETMASK, [], [pid 6970] <... futex resumed>) = 1 [pid 6967] <... futex resumed>) = 0 [pid 5061] rmdir("./190" [pid 5059] <... unlink resumed>) = 0 [pid 6972] <... set_robust_list resumed>) = 0 [pid 6971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6970] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6967] exit_group(0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6972] rt_sigprocmask(SIG_SETMASK, [], [pid 6971] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6970] <... futex resumed>) = ? [pid 6967] <... exit_group resumed>) = ? [pid 5061] mkdir("./191", 0777 [pid 6972] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6971] <... futex resumed>) = 0 [pid 6970] +++ exited with 0 +++ [pid 6967] +++ exited with 0 +++ [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 6971] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6967, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5063] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 6972] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6972] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5059] newfstatat(AT_FDCWD, "./190/file0", [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] newfstatat(AT_FDCWD, "./187/binderfs", [pid 5062] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6972] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./187/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6973 attached [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6973 [pid 5059] rmdir("./190/file0" [pid 6973] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... rmdir resumed>) = 0 [pid 6973] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 6973] chdir("./189" [pid 5059] getdents64(3, [pid 5063] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 5063] newfstatat(AT_FDCWD, "./187/file0", [pid 5059] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6973] <... chdir resumed>) = 0 [pid 5063] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./190" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(4, "", [pid 6973] <... prctl resumed>) = 0 [pid 6973] setpgid(0, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6973] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 6973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6973] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5059] <... rmdir resumed>) = 0 [pid 6973] write(3, "1000", 4) = 4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] mkdir("./191", 0777 [pid 6973] close(3) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6973] symlink("/dev/binderfs", "./binderfs" [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6973] <... symlink resumed>) = 0 [pid 5063] close(4 [pid 5059] <... openat resumed>) = 3 [pid 6973] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6973] <... futex resumed>) = 0 [pid 6973] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6973] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6973] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] rmdir("./187/file0" [pid 6973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./187") = 0 [pid 5063] mkdir("./188", 0777 [pid 6973] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6973] <... mprotect resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 6973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6974 attached [pid 5061] close(3 [pid 6973] <... clone3 resumed> => {parent_tid=[6974]}, 88) = 6974 [pid 5061] <... close resumed>) = 0 [pid 6974] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6973] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6973] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6973] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6974] <... rseq resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6975 [pid 6974] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6974] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6974] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6975 attached [pid 6975] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6975] chdir("./191") = 0 [pid 6975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6974] <... memfd_create resumed>) = 3 [pid 6972] <... write resumed>) = 2097152 [pid 6975] setpgid(0, 0 [pid 6972] munmap(0x7fe7bae00000, 138412032 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6975] <... setpgid resumed>) = 0 [pid 6975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6975] write(3, "1000", 4) = 4 [pid 6975] close(3) = 0 [pid 6975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6972] <... munmap resumed>) = 0 [pid 6975] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6975] <... futex resumed>) = 0 [pid 6972] <... openat resumed>) = 4 [pid 6975] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6972] ioctl(4, LOOP_SET_FD, 3 [pid 6975] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6975] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6975] <... mmap resumed>) = 0x7fe7c3226000 [pid 6974] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6972] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6975] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6972] close(3 [pid 5063] close(3 [pid 5059] close(3 [pid 6975] <... mprotect resumed>) = 0 [pid 6972] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 6975] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6972] close(4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6975] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6972] <... close resumed>) = 0 ./strace-static-x86_64: Process 6977 attached [pid 6975] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6972] mkdir("./file0", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6976 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6977 ./strace-static-x86_64: Process 6976 attached [ 169.847110][ T6972] loop1: detected capacity change from 0 to 4096 [pid 6972] <... mkdir resumed>) = 0 [pid 6976] set_robust_list(0x55558e6e36a0, 24) = 0 ./strace-static-x86_64: Process 6978 attached [pid 6977] set_robust_list(0x55558e6e36a0, 24 [pid 6976] chdir("./188" [pid 6975] <... clone3 resumed> => {parent_tid=[6978]}, 88) = 6978 [pid 6972] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6978] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6977] <... set_robust_list resumed>) = 0 [pid 6975] rt_sigprocmask(SIG_SETMASK, [], [pid 6978] <... rseq resumed>) = 0 [pid 6976] <... chdir resumed>) = 0 [pid 6975] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6978] set_robust_list(0x7fe7c32469a0, 24 [pid 6977] chdir("./191" [pid 6976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6976] setpgid(0, 0) = 0 [pid 6976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6976] write(3, "1000", 4) = 4 [pid 6976] close(3) = 0 [pid 6976] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6976] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6976] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6978] <... set_robust_list resumed>) = 0 [pid 6977] <... chdir resumed>) = 0 [pid 6976] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6975] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] <... write resumed>) = 2097152 [pid 6978] rt_sigprocmask(SIG_SETMASK, [], [pid 6977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6975] <... futex resumed>) = 0 [pid 6977] <... prctl resumed>) = 0 [pid 6975] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6977] setpgid(0, 0 [pid 6978] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6976] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6978] memfd_create("syzkaller", 0 [pid 6977] <... setpgid resumed>) = 0 [pid 6976] <... mprotect resumed>) = 0 [pid 6977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6976] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6977] <... openat resumed>) = 3 [pid 6976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6977] write(3, "1000", 4) = 4 [pid 6976] <... clone3 resumed> => {parent_tid=[6979]}, 88) = 6979 [pid 6977] close(3 [pid 6976] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6979 attached [pid 6978] <... memfd_create resumed>) = 3 [pid 6977] <... close resumed>) = 0 [pid 6976] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6979] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6977] symlink("/dev/binderfs", "./binderfs" [pid 6976] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6979] <... rseq resumed>) = 0 [pid 6978] <... mmap resumed>) = 0x7fe7bae00000 [pid 6977] <... symlink resumed>) = 0 [pid 6976] <... futex resumed>) = 0 [pid 6974] munmap(0x7fe7bae00000, 138412032 [pid 6979] set_robust_list(0x7fe7c32469a0, 24 [pid 6976] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6974] <... munmap resumed>) = 0 [pid 6979] <... set_robust_list resumed>) = 0 [pid 6977] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6979] memfd_create("syzkaller", 0 [pid 6977] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6977] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6979] <... memfd_create resumed>) = 3 [pid 6977] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6979] <... mmap resumed>) = 0x7fe7bae00000 [pid 6977] <... mmap resumed>) = 0x7fe7c3226000 [pid 6977] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [ 169.913060][ T6972] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6974] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6977] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6974] <... openat resumed>) = 4 [pid 6974] ioctl(4, LOOP_SET_FD, 3 [pid 6977] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6977] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6980 attached [pid 6980] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6977] <... clone3 resumed> => {parent_tid=[6980]}, 88) = 6980 [pid 6977] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6977] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6977] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6980] <... rseq resumed>) = 0 [pid 6980] set_robust_list(0x7fe7c32469a0, 24 [pid 6978] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6974] <... ioctl resumed>) = 0 [pid 6980] <... set_robust_list resumed>) = 0 [pid 6974] close(3 [pid 6980] rt_sigprocmask(SIG_SETMASK, [], [pid 6974] <... close resumed>) = 0 [pid 6980] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6974] close(4) = 0 [pid 6974] mkdir("./file0", 0777) = 0 [pid 6980] memfd_create("syzkaller", 0 [pid 6974] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6980] <... memfd_create resumed>) = 3 [ 169.976264][ T6974] loop3: detected capacity change from 0 to 4096 [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6972] <... mount resumed>) = 0 [pid 6980] <... mmap resumed>) = 0x7fe7bae00000 [pid 6972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6972] chdir("./file0") = 0 [pid 6972] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6972] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6972] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6979] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6971] <... futex resumed>) = 0 [pid 6971] exit_group(0 [pid 6972] <... futex resumed>) = ? [pid 6971] <... exit_group resumed>) = ? [pid 6972] +++ exited with 0 +++ [pid 6971] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6971, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5060] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6978] <... write resumed>) = 2097152 [pid 5060] unlink("./189/binderfs" [pid 6978] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6978] <... munmap resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [ 170.020233][ T6974] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6978] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6978] ioctl(4, LOOP_SET_FD, 3 [pid 6974] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./189/file0", [pid 6974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6974] <... openat resumed>) = 3 [pid 5060] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6974] chdir("./file0" [pid 5060] <... openat resumed>) = 4 [pid 6974] <... chdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6974] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6974] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6980] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6974] <... futex resumed>) = 1 [pid 6973] <... futex resumed>) = 0 [pid 6979] <... write resumed>) = 2097152 [pid 6978] <... ioctl resumed>) = 0 [pid 5060] getdents64(4, [pid 6979] munmap(0x7fe7bae00000, 138412032 [pid 6978] close(3 [pid 6974] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6973] exit_group(0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6978] <... close resumed>) = 0 [pid 5060] close(4 [pid 6973] <... exit_group resumed>) = ? [pid 6974] <... futex resumed>) = ? [pid 5060] <... close resumed>) = 0 [pid 6978] close(4) = 0 [pid 5060] rmdir("./189/file0" [pid 6978] mkdir("./file0", 0777 [pid 5060] <... rmdir resumed>) = 0 [pid 6978] <... mkdir resumed>) = 0 [pid 6974] +++ exited with 0 +++ [pid 6973] +++ exited with 0 +++ [pid 5060] getdents64(3, [pid 6980] <... write resumed>) = 2097152 [pid 6979] <... munmap resumed>) = 0 [pid 6978] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6973, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5062] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 5060] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 6980] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] rmdir("./189" [pid 5062] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./189/binderfs") = 0 [ 170.090810][ T6978] loop2: detected capacity change from 0 to 4096 [pid 5062] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6979] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6980] <... munmap resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6980] ioctl(4, LOOP_SET_FD, 3 [pid 5060] mkdir("./190", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6979] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 6979] ioctl(4, LOOP_SET_FD, 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./189/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./189") = 0 [pid 5062] mkdir("./190", 0777 [pid 6980] <... ioctl resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 6980] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6980] close(4 [pid 6979] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 6980] <... close resumed>) = 0 [pid 6979] close(3 [pid 6980] mkdir("./file0", 0777 [pid 6979] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6980] <... mkdir resumed>) = 0 [pid 6979] close(4 [pid 6980] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6979] <... close resumed>) = 0 [ 170.136786][ T6978] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 170.150475][ T6980] loop0: detected capacity change from 0 to 4096 [ 170.160814][ T6979] loop4: detected capacity change from 0 to 4096 [pid 6979] mkdir("./file0", 0777) = 0 [pid 6979] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6978] <... mount resumed>) = 0 [pid 6978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6978] chdir("./file0") = 0 [pid 6978] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6978] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6975] <... futex resumed>) = 0 [pid 6978] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6975] exit_group(0 [pid 6978] <... futex resumed>) = ? [pid 6975] <... exit_group resumed>) = ? [pid 6978] +++ exited with 0 +++ [pid 6975] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6975, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 170.185780][ T6980] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 170.197535][ T6979] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5061] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6980] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 6980] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 5060] close(3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... close resumed>) = 0 [pid 5061] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6980] chdir("./file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] <... chdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./191/binderfs", [pid 6980] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6981 [pid 6980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] unlink("./191/binderfs") = 0 ./strace-static-x86_64: Process 6981 attached [pid 5061] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] set_robust_list(0x55558e6e36a0, 24 [pid 6980] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... umount2 resumed>) = 0 [pid 6981] <... set_robust_list resumed>) = 0 [pid 6980] <... futex resumed>) = 1 [pid 6981] chdir("./190" [pid 6980] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] <... chdir resumed>) = 0 [pid 6977] <... futex resumed>) = 0 [pid 6981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6977] exit_group(0 [pid 6981] <... prctl resumed>) = 0 [pid 6980] <... futex resumed>) = ? [pid 6977] <... exit_group resumed>) = ? [pid 6981] setpgid(0, 0) = 0 [pid 6980] +++ exited with 0 +++ [pid 6977] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6979] <... mount resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6977, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... ioctl resumed>) = 0 [pid 5061] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6979] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6979] chdir("./file0" [pid 6981] <... openat resumed>) = 3 [pid 6979] <... chdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6981] write(3, "1000", 4 [pid 6979] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 5059] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 6979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6981] <... write resumed>) = 4 [pid 6979] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6981] close(3 [pid 6979] <... futex resumed>) = 1 [pid 6976] <... futex resumed>) = 0 [pid 5059] getdents64(3, [pid 6981] <... close resumed>) = 0 [pid 6976] exit_group(0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6981] symlink("/dev/binderfs", "./binderfs" [pid 6976] <... exit_group resumed>) = ? [pid 6981] <... symlink resumed>) = 0 [pid 5059] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] newfstatat(4, "", [pid 6981] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6981] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] close(3 [pid 6981] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] newfstatat(AT_FDCWD, "./191/binderfs", [pid 6981] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6981] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] unlink("./191/binderfs" [pid 6981] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 6981] <... mmap resumed>) = 0x7fe7c3226000 [pid 5059] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] getdents64(4, ./strace-static-x86_64: Process 6982 attached [pid 6981] <... mprotect resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6982 [pid 6981] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6979] +++ exited with 0 +++ [pid 6976] +++ exited with 0 +++ [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6982] set_robust_list(0x55558e6e36a0, 24 [pid 6981] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6976, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] <... umount2 resumed>) = 0 [pid 6982] <... set_robust_list resumed>) = 0 [pid 6981] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5061] getdents64(4, [pid 5059] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6983 attached [pid 6982] chdir("./190" [pid 5063] <... restart_syscall resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6983] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6982] <... chdir resumed>) = 0 [pid 6981] <... clone3 resumed> => {parent_tid=[6983]}, 88) = 6983 [pid 5061] close(4 [pid 5059] newfstatat(AT_FDCWD, "./191/file0", [pid 6983] <... rseq resumed>) = 0 [pid 6982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6981] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6981] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6982] <... prctl resumed>) = 0 [pid 6981] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6983] set_robust_list(0x7fe7c32469a0, 24 [pid 5061] rmdir("./191/file0" [pid 5059] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6983] <... set_robust_list resumed>) = 0 [pid 6982] setpgid(0, 0 [pid 6981] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 4 [pid 6983] rt_sigprocmask(SIG_SETMASK, [], [pid 6982] <... setpgid resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5059] newfstatat(4, "", [pid 6983] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5059] getdents64(4, [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(AT_FDCWD, "./188/binderfs", [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(3 [pid 5059] <... close resumed>) = 0 [pid 5063] unlink("./188/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5059] rmdir("./191/file0" [pid 6983] memfd_create("syzkaller", 0 [pid 6982] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5061] rmdir("./191" [pid 5059] <... rmdir resumed>) = 0 [pid 5063] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 6983] <... memfd_create resumed>) = 3 [pid 6982] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] mkdir("./192", 0777 [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6982] <... write resumed>) = 4 [pid 6983] <... mmap resumed>) = 0x7fe7bae00000 [pid 6982] close(3 [pid 5063] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 6982] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6982] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] close(3 [pid 6982] <... symlink resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./188/file0", [pid 5061] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 6982] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] rmdir("./191" [pid 6982] <... futex resumed>) = 0 [pid 5063] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... rmdir resumed>) = 0 [pid 6982] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6982] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6982] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... openat resumed>) = 4 [pid 5059] mkdir("./192", 0777 [pid 6982] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 6982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 6982] <... mmap resumed>) = 0x7fe7c3226000 [pid 6982] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6982] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6982] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] close(4 [pid 5059] <... openat resumed>) = 3 [pid 6982] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 6984 attached [pid 5063] rmdir("./188/file0" [pid 5059] ioctl(3, LOOP_CLR_FD [pid 6984] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6982] <... clone3 resumed> => {parent_tid=[6984]}, 88) = 6984 [pid 5063] <... rmdir resumed>) = 0 [pid 6984] <... rseq resumed>) = 0 [pid 6982] rt_sigprocmask(SIG_SETMASK, [], [pid 6984] set_robust_list(0x7fe7c32469a0, 24 [pid 6982] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6984] <... set_robust_list resumed>) = 0 [pid 6982] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6984] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] getdents64(3, [pid 6984] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6982] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 6982] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./188") = 0 [pid 6984] memfd_create("syzkaller", 0) = 3 [pid 5063] mkdir("./189", 0777 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6983] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6985 attached [pid 6985] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6985 [pid 6985] chdir("./192" [pid 6984] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6983] <... write resumed>) = 2097152 [pid 6985] <... chdir resumed>) = 0 [pid 6983] munmap(0x7fe7bae00000, 138412032 [pid 6985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... ioctl resumed>) = 0 [pid 6985] <... prctl resumed>) = 0 [pid 6983] <... munmap resumed>) = 0 [pid 6985] setpgid(0, 0 [pid 6983] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6985] <... setpgid resumed>) = 0 [pid 6985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6983] <... openat resumed>) = 4 [pid 6985] <... openat resumed>) = 3 [pid 5063] close(3 [pid 6985] write(3, "1000", 4 [pid 6983] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 6985] <... write resumed>) = 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6985] close(3 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6987 attached [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6986 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6987 [pid 6987] set_robust_list(0x55558e6e36a0, 24 [pid 6985] <... close resumed>) = 0 [pid 6985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6987] <... set_robust_list resumed>) = 0 [pid 6987] chdir("./192" [pid 6985] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6986 attached [pid 6987] <... chdir resumed>) = 0 [pid 6985] <... futex resumed>) = 0 [pid 6983] <... ioctl resumed>) = 0 [pid 6987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6986] set_robust_list(0x55558e6e36a0, 24 [pid 6985] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6983] close(3 [pid 6987] <... prctl resumed>) = 0 [pid 6986] <... set_robust_list resumed>) = 0 [pid 6985] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6983] <... close resumed>) = 0 [pid 6987] setpgid(0, 0 [pid 6986] chdir("./189" [pid 6985] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6983] close(4 [pid 6987] <... setpgid resumed>) = 0 [pid 6986] <... chdir resumed>) = 0 [pid 6985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6983] <... close resumed>) = 0 [pid 6986] <... prctl resumed>) = 0 [pid 6985] <... mmap resumed>) = 0x7fe7c3226000 [pid 6987] <... openat resumed>) = 3 [pid 6986] setpgid(0, 0 [pid 6985] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6983] mkdir("./file0", 0777 [pid 6987] write(3, "1000", 4 [pid 6986] <... setpgid resumed>) = 0 [pid 6985] <... mprotect resumed>) = 0 [pid 6984] <... write resumed>) = 2097152 [pid 6987] <... write resumed>) = 4 [pid 6985] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6987] close(3 [pid 6985] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6986] <... openat resumed>) = 3 [pid 6986] write(3, "1000", 4 [pid 6985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6983] <... mkdir resumed>) = 0 [pid 6986] <... write resumed>) = 4 [pid 6983] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6986] close(3./strace-static-x86_64: Process 6988 attached ) = 0 [pid 6987] <... close resumed>) = 0 [pid 6986] symlink("/dev/binderfs", "./binderfs" [pid 6985] <... clone3 resumed> => {parent_tid=[6988]}, 88) = 6988 [pid 6988] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6987] symlink("/dev/binderfs", "./binderfs" [pid 6986] <... symlink resumed>) = 0 [pid 6985] rt_sigprocmask(SIG_SETMASK, [], [pid 6988] <... rseq resumed>) = 0 [pid 6987] <... symlink resumed>) = 0 [pid 6987] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6987] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6987] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6987] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6984] munmap(0x7fe7bae00000, 138412032 [pid 6987] <... mmap resumed>) = 0x7fe7c3226000 [pid 6987] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6988] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 6987] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6985] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6988] rt_sigprocmask(SIG_SETMASK, [], [pid 6987] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6986] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] <... futex resumed>) = 0 [pid 6984] <... munmap resumed>) = 0 [pid 6988] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6987] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6986] <... futex resumed>) = 0 [pid 6985] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6989 attached [pid 6987] <... clone3 resumed> => {parent_tid=[6989]}, 88) = 6989 [pid 6989] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6987] rt_sigprocmask(SIG_SETMASK, [], [pid 6988] memfd_create("syzkaller", 0 [pid 6987] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6986] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6989] <... rseq resumed>) = 0 [pid 6987] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6989] set_robust_list(0x7fe7c32469a0, 24 [pid 6988] <... memfd_create resumed>) = 3 [pid 6987] <... futex resumed>) = 0 [pid 6986] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6989] <... set_robust_list resumed>) = 0 [pid 6988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6987] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6986] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6989] rt_sigprocmask(SIG_SETMASK, [], [pid 6988] <... mmap resumed>) = 0x7fe7bae00000 [pid 6986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6986] <... mmap resumed>) = 0x7fe7c3226000 [pid 6984] <... openat resumed>) = 4 [pid 6989] memfd_create("syzkaller", 0 [pid 6986] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6984] ioctl(4, LOOP_SET_FD, 3 [pid 6986] <... mprotect resumed>) = 0 [ 170.461679][ T6983] loop1: detected capacity change from 0 to 4096 [ 170.493953][ T6983] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 6986] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6989] <... memfd_create resumed>) = 3 [pid 6986] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6986] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 6990 attached => {parent_tid=[6990]}, 88) = 6990 [pid 6990] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6986] rt_sigprocmask(SIG_SETMASK, [], [pid 6990] <... rseq resumed>) = 0 [pid 6990] set_robust_list(0x7fe7c32469a0, 24 [pid 6986] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6990] <... set_robust_list resumed>) = 0 [pid 6986] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6986] <... futex resumed>) = 0 [pid 6990] memfd_create("syzkaller", 0 [pid 6986] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6990] <... memfd_create resumed>) = 3 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6984] <... ioctl resumed>) = 0 [pid 6984] close(3) = 0 [pid 6984] close(4) = 0 [pid 6984] mkdir("./file0", 0777) = 0 [pid 6984] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 170.525392][ T6984] loop3: detected capacity change from 0 to 4096 [ 170.559332][ T6984] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6989] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6988] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6990] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6984] <... mount resumed>) = 0 [pid 6984] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6984] chdir("./file0") = 0 [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6984] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6984] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6982] <... futex resumed>) = 0 [pid 6982] exit_group(0 [pid 6984] <... futex resumed>) = ? [pid 6982] <... exit_group resumed>) = ? [pid 6984] +++ exited with 0 +++ [pid 6983] <... mount resumed>) = 0 [pid 6982] +++ exited with 0 +++ [pid 6983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6982, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6983] chdir("./file0" [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 6983] <... chdir resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 6983] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6983] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6981] <... futex resumed>) = 0 [pid 5062] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6983] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6981] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6989] <... write resumed>) = 2097152 [pid 6983] <... futex resumed>) = ? [pid 6981] <... exit_group resumed>) = ? [pid 5062] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./190/binderfs") = 0 [pid 5062] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6989] munmap(0x7fe7bae00000, 138412032 [pid 6990] <... write resumed>) = 2097152 [pid 6988] <... write resumed>) = 2097152 [pid 6983] +++ exited with 0 +++ [pid 6981] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 6990] munmap(0x7fe7bae00000, 138412032 [pid 6988] munmap(0x7fe7bae00000, 138412032 [pid 5062] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6981, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6990] <... munmap resumed>) = 0 [pid 6989] <... munmap resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./190/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6990] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6988] <... munmap resumed>) = 0 [pid 5062] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6990] <... openat resumed>) = 4 [pid 6989] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6988] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6990] ioctl(4, LOOP_SET_FD, 3 [pid 6989] <... openat resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6989] ioctl(4, LOOP_SET_FD, 3 [pid 6988] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./190/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./190") = 0 [pid 6990] <... ioctl resumed>) = 0 [pid 6989] <... ioctl resumed>) = 0 [pid 6988] ioctl(4, LOOP_SET_FD, 3 [pid 5060] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6990] close(3 [pid 5062] mkdir("./191", 0777 [pid 6990] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6990] close(4) = 0 [pid 5060] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6990] mkdir("./file0", 0777 [pid 5060] <... openat resumed>) = 3 [pid 6990] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6990] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6989] close(3 [pid 6988] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5060] getdents64(3, [pid 6989] <... close resumed>) = 0 [pid 6988] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6989] close(4 [pid 6988] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 6989] <... close resumed>) = 0 [pid 6988] close(4 [pid 6989] mkdir("./file0", 0777 [pid 6988] <... close resumed>) = 0 [pid 5060] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6989] <... mkdir resumed>) = 0 [pid 6988] mkdir("./file0", 0777) = 0 [pid 6989] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./190/binderfs") = 0 [ 170.689614][ T6990] loop4: detected capacity change from 0 to 4096 [ 170.696283][ T6989] loop0: detected capacity change from 0 to 4096 [ 170.706579][ T6988] loop2: detected capacity change from 0 to 4096 [ 170.717690][ T6990] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6990] <... mount resumed>) = 0 [pid 5062] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 6990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6988] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... close resumed>) = 0 [pid 6990] <... openat resumed>) = 3 [pid 6990] chdir("./file0" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6991 attached [pid 6990] <... chdir resumed>) = 0 [pid 5060] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6991] set_robust_list(0x55558e6e36a0, 24 [pid 6990] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6991 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6991] <... set_robust_list resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./190/file0", [pid 6991] chdir("./191" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6991] <... chdir resumed>) = 0 [pid 5060] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6991] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6991] <... prctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6991] setpgid(0, 0 [pid 5060] <... openat resumed>) = 4 [pid 6991] <... setpgid resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 6991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6991] <... openat resumed>) = 3 [pid 6990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./190/file0" [pid 6990] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... rmdir resumed>) = 0 [pid 6991] write(3, "1000", 4 [pid 5060] getdents64(3, [pid 6991] <... write resumed>) = 4 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6991] close(3 [pid 6990] <... futex resumed>) = 1 [pid 6986] <... futex resumed>) = 0 [pid 5060] close(3 [pid 6991] <... close resumed>) = 0 [pid 6990] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6986] exit_group(0 [pid 5060] <... close resumed>) = 0 [pid 6991] symlink("/dev/binderfs", "./binderfs" [pid 6990] <... futex resumed>) = ? [pid 6986] <... exit_group resumed>) = ? [pid 5060] rmdir("./190" [pid 6991] <... symlink resumed>) = 0 [pid 6990] +++ exited with 0 +++ [pid 6986] +++ exited with 0 +++ [pid 5060] <... rmdir resumed>) = 0 [pid 6991] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6986, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] mkdir("./191", 0777 [pid 6991] <... futex resumed>) = 0 [pid 6991] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... mkdir resumed>) = 0 [pid 6991] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 170.765840][ T6989] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 170.789094][ T6988] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 6991] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6991] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] newfstatat(3, "", [pid 6991] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 6991] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 6991] <... mprotect resumed>) = 0 [pid 5063] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./189/binderfs", [pid 6991] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./189/binderfs" [pid 6991] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 6991] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6992 attached [pid 6992] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6989] <... mount resumed>) = 0 [pid 6988] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 6991] <... clone3 resumed> => {parent_tid=[6992]}, 88) = 6992 [pid 6992] <... rseq resumed>) = 0 [pid 6989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6988] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6992] set_robust_list(0x7fe7c32469a0, 24 [pid 6991] rt_sigprocmask(SIG_SETMASK, [], [pid 6989] <... openat resumed>) = 3 [pid 6988] <... openat resumed>) = 3 [pid 5063] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6992] <... set_robust_list resumed>) = 0 [pid 6991] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6989] chdir("./file0" [pid 6988] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6992] rt_sigprocmask(SIG_SETMASK, [], [pid 6991] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... chdir resumed>) = 0 [pid 6988] <... chdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./189/file0", [pid 6992] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6991] <... futex resumed>) = 0 [pid 6988] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6991] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6989] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6988] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6988] <... futex resumed>) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6992] memfd_create("syzkaller", 0 [pid 6989] <... futex resumed>) = 1 [pid 6988] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6987] <... futex resumed>) = 0 [pid 6985] exit_group(0 [pid 6989] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6988] <... futex resumed>) = ? [pid 6985] <... exit_group resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6992] <... memfd_create resumed>) = 3 [pid 6988] +++ exited with 0 +++ [pid 6987] exit_group(0) = ? [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6992] <... mmap resumed>) = 0x7fe7bae00000 [pid 6989] <... futex resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6985] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6989] +++ exited with 0 +++ [pid 6987] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6985, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6987, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] <... openat resumed>) = 4 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5059] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5061] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(3, "", [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(4 [pid 5059] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./189/file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./192/binderfs" [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... unlink resumed>) = 0 [pid 5059] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./192/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./192/file0", [pid 5063] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] unlink("./192/binderfs" [pid 5059] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./189" [pid 5061] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5061] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] mkdir("./190", 0777 [pid 5059] newfstatat(4, "", [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] close(4) = 0 [pid 5059] rmdir("./192/file0" [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = 0 [pid 5060] close(3 [pid 5059] getdents64(3, [pid 5061] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(AT_FDCWD, "./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6993 ./strace-static-x86_64: Process 6993 attached [pid 6993] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6993] <... set_robust_list resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 6993] chdir("./191" [pid 5059] close(3 [pid 6993] <... chdir resumed>) = 0 [pid 6993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 6993] <... prctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 6993] setpgid(0, 0 [pid 5059] rmdir("./192" [pid 6993] <... setpgid resumed>) = 0 [pid 6992] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] close(4 [pid 5059] <... rmdir resumed>) = 0 [pid 6993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... close resumed>) = 0 [pid 5059] mkdir("./193", 0777 [pid 5061] rmdir("./192/file0" [pid 5059] <... mkdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] getdents64(3, [pid 5059] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] close(3) = 0 [pid 5061] rmdir("./192" [pid 6993] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./193", 0777 [pid 6993] write(3, "1000", 4 [pid 5061] <... mkdir resumed>) = 0 [pid 6993] <... write resumed>) = 4 [pid 6993] close(3 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6993] <... close resumed>) = 0 [pid 6993] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 6993] <... symlink resumed>) = 0 [pid 6992] <... write resumed>) = 2097152 [pid 6993] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6992] munmap(0x7fe7bae00000, 138412032 [pid 6993] <... futex resumed>) = 0 [pid 6993] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 6993] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6992] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 6993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5059] <... ioctl resumed>) = 0 [pid 6993] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6992] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3 [pid 6993] <... mprotect resumed>) = 0 [pid 6992] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6992] ioctl(4, LOOP_SET_FD, 3 [pid 5059] close(3./strace-static-x86_64: Process 6994 attached [pid 6993] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6992] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6994 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6994] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 6993] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6992] close(3 [pid 6994] chdir("./190"./strace-static-x86_64: Process 6995 attached ) = 0 [pid 6993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6992] <... close resumed>) = 0 [pid 5061] close(3./strace-static-x86_64: Process 6996 attached [pid 6995] set_robust_list(0x55558e6e36a0, 24 [pid 6994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6992] close(4 [pid 5061] <... close resumed>) = 0 [pid 6996] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6995] <... set_robust_list resumed>) = 0 [pid 6994] <... prctl resumed>) = 0 [pid 6993] <... clone3 resumed> => {parent_tid=[6996]}, 88) = 6996 [pid 6992] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6995 [pid 6996] <... rseq resumed>) = 0 [pid 6995] chdir("./193" [pid 6994] setpgid(0, 0 [pid 6993] rt_sigprocmask(SIG_SETMASK, [], [pid 6992] mkdir("./file0", 0777 [pid 6996] set_robust_list(0x7fe7c32469a0, 24 [pid 6995] <... chdir resumed>) = 0 [pid 6996] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6997 attached [pid 6996] rt_sigprocmask(SIG_SETMASK, [], [pid 6995] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6994] <... setpgid resumed>) = 0 [pid 6993] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6992] <... mkdir resumed>) = 0 [pid 6997] set_robust_list(0x55558e6e36a0, 24 [pid 6996] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6995] <... prctl resumed>) = 0 [pid 6993] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... set_robust_list resumed>) = 0 [pid 6993] <... futex resumed>) = 0 [pid 6995] setpgid(0, 0 [pid 6993] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6995] <... setpgid resumed>) = 0 [pid 6994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6997] chdir("./193" [pid 6995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6994] <... openat resumed>) = 3 [pid 6992] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 6997 [pid 6997] <... chdir resumed>) = 0 [ 170.993110][ T6992] loop3: detected capacity change from 0 to 4096 [pid 6996] memfd_create("syzkaller", 0 [pid 6995] <... openat resumed>) = 3 [pid 6994] write(3, "1000", 4 [pid 6997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6996] <... memfd_create resumed>) = 3 [pid 6995] write(3, "1000", 4 [pid 6994] <... write resumed>) = 4 [pid 6997] <... prctl resumed>) = 0 [pid 6996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6995] <... write resumed>) = 4 [pid 6994] close(3 [pid 6997] setpgid(0, 0 [pid 6996] <... mmap resumed>) = 0x7fe7bae00000 [pid 6995] close(3 [pid 6994] <... close resumed>) = 0 [pid 6995] <... close resumed>) = 0 [pid 6995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6995] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... setpgid resumed>) = 0 [pid 6994] <... futex resumed>) = 0 [pid 6995] <... futex resumed>) = 0 [pid 6994] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6995] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6994] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6994] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6997] <... openat resumed>) = 3 [pid 6995] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6994] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6995] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 6994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6995] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6994] <... mmap resumed>) = 0x7fe7c3226000 [pid 6994] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 6995] <... mprotect resumed>) = 0 [pid 6997] write(3, "1000", 4 [pid 6995] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6994] <... mprotect resumed>) = 0 [pid 6997] <... write resumed>) = 4 [pid 6995] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6994] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6997] close(3 [pid 6995] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6997] <... close resumed>) = 0 ./strace-static-x86_64: Process 6998 attached [pid 6997] symlink("/dev/binderfs", "./binderfs" [pid 6998] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6997] <... symlink resumed>) = 0 [pid 6995] <... clone3 resumed> => {parent_tid=[6998]}, 88) = 6998 [pid 6994] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6998] <... rseq resumed>) = 0 [pid 6994] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6995] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6999 attached [pid 6998] set_robust_list(0x7fe7c32469a0, 24 [pid 6997] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6999] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6998] <... set_robust_list resumed>) = 0 [pid 6997] <... futex resumed>) = 0 [pid 6995] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6999] <... rseq resumed>) = 0 [pid 6998] rt_sigprocmask(SIG_SETMASK, [], [pid 6997] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6995] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] <... clone3 resumed> => {parent_tid=[6999]}, 88) = 6999 [pid 6999] set_robust_list(0x7fe7c32469a0, 24 [pid 6998] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6997] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6995] <... futex resumed>) = 0 [pid 6994] rt_sigprocmask(SIG_SETMASK, [], [pid 6999] <... set_robust_list resumed>) = 0 [pid 6994] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6999] rt_sigprocmask(SIG_SETMASK, [], [pid 6998] memfd_create("syzkaller", 0 [pid 6997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6995] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6994] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6994] <... futex resumed>) = 0 [pid 6997] <... mmap resumed>) = 0x7fe7c3226000 [pid 6998] <... memfd_create resumed>) = 3 [pid 6997] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6999] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6994] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6999] memfd_create("syzkaller", 0 [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6997] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6998] <... mmap resumed>) = 0x7fe7bae00000 [pid 6997] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 6999] <... memfd_create resumed>) = 3 [pid 6999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 ./strace-static-x86_64: Process 7000 attached [pid 7000] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 6997] <... clone3 resumed> => {parent_tid=[7000]}, 88) = 7000 [pid 7000] <... rseq resumed>) = 0 [pid 6997] rt_sigprocmask(SIG_SETMASK, [], [pid 7000] set_robust_list(0x7fe7c32469a0, 24 [pid 6997] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7000] <... set_robust_list resumed>) = 0 [pid 6997] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6997] <... futex resumed>) = 0 [ 171.040866][ T6992] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 6997] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7000] memfd_create("syzkaller", 0) = 3 [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 6992] <... mount resumed>) = 0 [pid 6992] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6992] chdir("./file0") = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6996] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6992] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6991] <... futex resumed>) = 0 [pid 6992] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6991] exit_group(0 [pid 6992] <... futex resumed>) = ? [pid 6991] <... exit_group resumed>) = ? [pid 6992] +++ exited with 0 +++ [pid 6999] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7000] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6998] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6996] <... write resumed>) = 2097152 [pid 6991] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6991, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6996] munmap(0x7fe7bae00000, 138412032 [pid 5062] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6996] <... munmap resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./191/binderfs") = 0 [pid 5062] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6996] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6996] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 6996] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./191/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./191") = 0 [pid 5062] mkdir("./192", 0777) = 0 [pid 7000] <... write resumed>) = 2097152 [pid 6999] <... write resumed>) = 2097152 [pid 6998] <... write resumed>) = 2097152 [pid 6996] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6998] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... openat resumed>) = 3 [pid 7000] munmap(0x7fe7bae00000, 138412032 [pid 6999] munmap(0x7fe7bae00000, 138412032 [pid 6996] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 6998] <... munmap resumed>) = 0 [pid 6996] <... close resumed>) = 0 [pid 6998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6998] ioctl(4, LOOP_SET_FD, 3 [pid 6999] <... munmap resumed>) = 0 [pid 6996] close(4) = 0 [pid 6996] mkdir("./file0", 0777 [pid 7000] <... munmap resumed>) = 0 [pid 6996] <... mkdir resumed>) = 0 [pid 7000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6999] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6998] <... ioctl resumed>) = 0 [pid 6996] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [ 171.195127][ T6996] loop1: detected capacity change from 0 to 4096 [ 171.224831][ T6998] loop0: detected capacity change from 0 to 4096 [pid 7000] ioctl(4, LOOP_SET_FD, 3 [pid 6999] <... openat resumed>) = 4 [pid 6998] close(3 [pid 7000] <... ioctl resumed>) = 0 [pid 6999] ioctl(4, LOOP_SET_FD, 3 [pid 6998] <... close resumed>) = 0 [pid 6998] close(4) = 0 [pid 6998] mkdir("./file0", 0777) = 0 [pid 6998] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7000] close(3) = 0 [pid 6999] <... ioctl resumed>) = 0 [pid 7000] close(4 [pid 6999] close(3 [pid 7000] <... close resumed>) = 0 [pid 6999] <... close resumed>) = 0 [pid 7000] mkdir("./file0", 0777 [pid 6999] close(4 [pid 7000] <... mkdir resumed>) = 0 [pid 7000] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 6999] <... close resumed>) = 0 [ 171.239724][ T7000] loop2: detected capacity change from 0 to 4096 [ 171.247867][ T6996] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 171.260680][ T6999] loop4: detected capacity change from 0 to 4096 [ 171.273146][ T6998] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 6999] mkdir("./file0", 0777 [pid 5062] <... ioctl resumed>) = 0 [pid 6999] <... mkdir resumed>) = 0 [pid 6999] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7001 attached [pid 7001] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7001 [pid 7001] <... set_robust_list resumed>) = 0 [pid 7001] chdir("./192") = 0 [pid 7001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7001] setpgid(0, 0) = 0 [pid 7001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7001] write(3, "1000", 4) = 4 [pid 7001] close(3) = 0 [pid 7001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7001] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... mount resumed>) = 0 [pid 7001] <... futex resumed>) = 0 [pid 6996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7001] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 6996] <... openat resumed>) = 3 [pid 7001] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6996] chdir("./file0" [pid 7001] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6996] <... chdir resumed>) = 0 [pid 7001] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 171.289627][ T7000] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 171.305426][ T6999] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 6996] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7001] <... mmap resumed>) = 0x7fe7c3226000 [pid 6996] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6993] <... futex resumed>) = 0 [pid 7001] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6996] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6993] exit_group(0 [pid 7001] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6996] <... futex resumed>) = ? [pid 6993] <... exit_group resumed>) = ? [pid 7001] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6996] +++ exited with 0 +++ [pid 6993] +++ exited with 0 +++ [pid 7001] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6993, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 7002 attached [pid 7000] <... mount resumed>) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7002] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7001] <... clone3 resumed> => {parent_tid=[7002]}, 88) = 7002 [pid 7000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6998] <... mount resumed>) = 0 [pid 7002] <... rseq resumed>) = 0 [pid 7001] rt_sigprocmask(SIG_SETMASK, [], [pid 7000] <... openat resumed>) = 3 [pid 6998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7002] set_robust_list(0x7fe7c32469a0, 24 [pid 7001] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6998] <... openat resumed>) = 3 [pid 5060] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7002] <... set_robust_list resumed>) = 0 [pid 7001] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] chdir("./file0" [pid 6998] chdir("./file0" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] rt_sigprocmask(SIG_SETMASK, [], [pid 7001] <... futex resumed>) = 0 [pid 7000] <... chdir resumed>) = 0 [pid 6998] <... chdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7002] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7001] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 7000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(3, "", [pid 7000] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7000] <... futex resumed>) = 1 [pid 6998] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... futex resumed>) = 0 [pid 5060] getdents64(3, [pid 7002] memfd_create("syzkaller", 0 [pid 7000] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] exit_group(0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7000] <... futex resumed>) = ? [pid 6998] <... futex resumed>) = 1 [pid 6997] <... exit_group resumed>) = ? [pid 6995] <... futex resumed>) = 0 [pid 5060] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7000] +++ exited with 0 +++ [pid 6998] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6995] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] <... memfd_create resumed>) = 3 [pid 6998] <... futex resumed>) = ? [pid 6997] +++ exited with 0 +++ [pid 6995] <... exit_group resumed>) = ? [pid 5060] newfstatat(AT_FDCWD, "./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6997, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] unlink("./191/binderfs" [pid 7002] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./191/file0", [pid 5061] newfstatat(AT_FDCWD, "./193/binderfs", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./193/binderfs") = 0 [pid 5061] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6998] +++ exited with 0 +++ [pid 6995] +++ exited with 0 +++ [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6995, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] rmdir("./191/file0") = 0 [pid 6999] <... mount resumed>) = 0 [pid 5060] getdents64(3, [pid 5059] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 6999] <... openat resumed>) = 3 [pid 5060] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6999] chdir("./file0" [pid 5061] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7002] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6999] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./191" [pid 6999] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./193/file0", [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 6999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6999] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6994] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] mkdir("./192", 0777 [pid 6999] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6994] exit_group(0 [pid 5061] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [pid 6999] <... futex resumed>) = ? [pid 6994] <... exit_group resumed>) = ? [pid 5059] newfstatat(3, "", [pid 6999] +++ exited with 0 +++ [pid 6994] +++ exited with 0 +++ [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6994, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(4, [pid 5059] getdents64(3, [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(3, "", [pid 5061] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] rmdir("./193/file0" [pid 5059] newfstatat(AT_FDCWD, "./193/binderfs", [pid 5061] <... rmdir resumed>) = 0 [pid 5063] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./193/binderfs" [pid 5063] newfstatat(AT_FDCWD, "./190/binderfs", [pid 5061] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5063] unlink("./190/binderfs" [pid 5061] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5063] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./193" [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mkdir("./194", 0777 [pid 7002] <... write resumed>) = 2097152 [pid 5063] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 7002] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mkdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./190/file0", [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5063] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... ioctl resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./193/file0", [pid 7002] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 7002] <... openat resumed>) = 4 [pid 7002] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(4, "", [pid 5060] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7002] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7002] close(3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7002] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5059] <... openat resumed>) = 4 [pid 7002] close(4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7002] <... close resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 7002] mkdir("./file0", 0777 [pid 5063] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7003 [pid 5059] getdents64(4, [pid 5063] rmdir("./190/file0" [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7002] <... mkdir resumed>) = 0 [pid 7002] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] <... rmdir resumed>) = 0 [pid 5059] getdents64(4, ./strace-static-x86_64: Process 7003 attached [pid 5063] getdents64(3, [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7003] set_robust_list(0x55558e6e36a0, 24 [pid 5063] close(3 [pid 5059] close(4 [pid 7003] <... set_robust_list resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] rmdir("./190" [pid 5059] rmdir("./193/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./193" [pid 7003] chdir("./192" [pid 5063] mkdir("./191", 0777 [pid 7003] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 7003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] mkdir("./194", 0777 [pid 7003] <... prctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... mkdir resumed>) = 0 [pid 7003] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7003] <... setpgid resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... openat resumed>) = 3 [pid 7003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... ioctl resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 7003] <... openat resumed>) = 3 [pid 5061] close(3 [pid 7003] write(3, "1000", 4 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7003] <... write resumed>) = 4 [pid 7003] close(3) = 0 [pid 7003] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 7004 attached [pid 7003] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7003] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7004 [pid 7004] set_robust_list(0x55558e6e36a0, 24 [pid 7003] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7004] <... set_robust_list resumed>) = 0 [pid 7003] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 171.511925][ T7002] loop3: detected capacity change from 0 to 4096 [ 171.536007][ T7002] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 7004] chdir("./194" [pid 7003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7004] <... chdir resumed>) = 0 [pid 7003] <... mmap resumed>) = 0x7fe7c3226000 [pid 7003] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7003] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7004] setpgid(0, 0) = 0 [pid 7004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7003] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7004] write(3, "1000", 4 [pid 7003] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7004] <... write resumed>) = 4 [pid 7004] close(3 [pid 7003] <... clone3 resumed> => {parent_tid=[7005]}, 88) = 7005 ./strace-static-x86_64: Process 7005 attached [pid 7004] <... close resumed>) = 0 [pid 7003] rt_sigprocmask(SIG_SETMASK, [], [pid 7005] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 7004] symlink("/dev/binderfs", "./binderfs" [pid 7003] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7005] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 7004] <... symlink resumed>) = 0 [pid 7003] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7005] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7004] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7003] <... futex resumed>) = 0 [pid 7004] <... futex resumed>) = 0 [pid 7003] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7005] memfd_create("syzkaller", 0 [pid 7004] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 7004] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7004] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7004] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7004] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 7006 attached => {parent_tid=[7006]}, 88) = 7006 [pid 7006] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7004] rt_sigprocmask(SIG_SETMASK, [], [pid 7006] <... rseq resumed>) = 0 [pid 7004] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7004] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] set_robust_list(0x7fe7c32469a0, 24 [pid 7004] <... futex resumed>) = 0 [pid 7006] <... set_robust_list resumed>) = 0 [pid 7004] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7006] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7006] memfd_create("syzkaller", 0 [pid 7005] <... memfd_create resumed>) = 3 [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 7006] <... memfd_create resumed>) = 3 [pid 7006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 5063] <... ioctl resumed>) = 0 [pid 7002] <... mount resumed>) = 0 [pid 7002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7002] chdir("./file0") = 0 [pid 7002] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7002] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7001] <... futex resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7001] exit_group(0) = ? [pid 5059] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7007 attached [pid 7007] set_robust_list(0x55558e6e36a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7007 [pid 7007] <... set_robust_list resumed>) = 0 [pid 7007] chdir("./191" [pid 7002] +++ exited with 0 +++ [pid 7001] +++ exited with 0 +++ [pid 7007] <... chdir resumed>) = 0 [pid 7007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7007] setpgid(0, 0) = 0 [pid 7007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7001, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 7007] <... openat resumed>) = 3 [pid 7007] write(3, "1000", 4) = 4 [pid 5062] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 7007] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7007] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 7007] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7007] <... symlink resumed>) = 0 [pid 5062] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7007] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./192/binderfs", [pid 5059] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./192/binderfs" [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7007] <... futex resumed>) = 0 [pid 7007] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 7007] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 ./strace-static-x86_64: Process 7008 attached [pid 7007] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7008 [pid 7008] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7007] <... mprotect resumed>) = 0 [pid 7007] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7007] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7008] chdir("./194" [pid 5062] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7009 attached [pid 7008] <... chdir resumed>) = 0 [pid 7007] <... clone3 resumed> => {parent_tid=[7009]}, 88) = 7009 [pid 5062] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7009] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053) = 0 [pid 7009] set_robust_list(0x7fe7c32469a0, 24) = 0 [pid 7009] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7009] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7008] <... prctl resumed>) = 0 [pid 7007] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] newfstatat(AT_FDCWD, "./192/file0", [pid 7009] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7007] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7007] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7008] setpgid(0, 0 [pid 7007] <... futex resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7008] <... setpgid resumed>) = 0 [pid 7007] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7009] memfd_create("syzkaller", 0 [pid 7008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7008] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7008] write(3, "1000", 4 [pid 5062] <... openat resumed>) = 4 [pid 7008] <... write resumed>) = 4 [pid 7009] <... memfd_create resumed>) = 3 [pid 7008] close(3 [pid 5062] newfstatat(4, "", [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7008] <... close resumed>) = 0 [pid 7006] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7008] symlink("/dev/binderfs", "./binderfs" [pid 5062] getdents64(4, [pid 7009] <... mmap resumed>) = 0x7fe7bae00000 [pid 7008] <... symlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7008] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 7008] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7008] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] close(4) = 0 [pid 7008] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] rmdir("./192/file0" [pid 7005] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... rmdir resumed>) = 0 [pid 7008] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5062] getdents64(3, [pid 7008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 7008] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] <... close resumed>) = 0 [pid 7008] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7008] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] rmdir("./192") = 0 [pid 7008] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] mkdir("./193", 0777 [pid 7008] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... mkdir resumed>) = 0 [pid 7008] <... clone3 resumed> => {parent_tid=[7010]}, 88) = 7010 ./strace-static-x86_64: Process 7010 attached [pid 7008] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7010] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7008] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 7010] <... rseq resumed>) = 0 [pid 7008] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 7010] set_robust_list(0x7fe7c32469a0, 24 [pid 7008] <... futex resumed>) = 0 [pid 7010] <... set_robust_list resumed>) = 0 [pid 7008] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7005] <... write resumed>) = 2097152 [pid 7010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7010] memfd_create("syzkaller", 0) = 3 [pid 7005] munmap(0x7fe7bae00000, 138412032 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 7009] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7006] <... write resumed>) = 2097152 [pid 7005] <... munmap resumed>) = 0 [pid 7006] munmap(0x7fe7bae00000, 138412032 [pid 7005] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7010] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7005] <... openat resumed>) = 4 [pid 7005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7006] <... munmap resumed>) = 0 [pid 7006] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7005] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 7006] ioctl(4, LOOP_SET_FD, 3 [pid 7005] <... close resumed>) = 0 [pid 5062] close(3 [pid 7005] close(4 [pid 7009] <... write resumed>) = 2097152 [pid 7010] <... write resumed>) = 2097152 [pid 7009] munmap(0x7fe7bae00000, 138412032 [pid 7006] <... ioctl resumed>) = 0 [pid 7005] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 7010] munmap(0x7fe7bae00000, 138412032 [pid 7009] <... munmap resumed>) = 0 [pid 7006] close(3 [pid 7005] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7010] <... munmap resumed>) = 0 [pid 7005] <... mkdir resumed>) = 0 [ 171.799028][ T7005] loop1: detected capacity change from 0 to 4096 [ 171.834592][ T7006] loop2: detected capacity change from 0 to 4096 [pid 7005] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7006] <... close resumed>) = 0 [pid 7006] close(4) = 0 [pid 7006] mkdir("./file0", 0777) = 0 [pid 7006] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7010] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7010] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7011 attached [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7011 [pid 7011] set_robust_list(0x55558e6e36a0, 24 [pid 7009] <... openat resumed>) = 4 [pid 7009] ioctl(4, LOOP_SET_FD, 3 [pid 7011] <... set_robust_list resumed>) = 0 [pid 7011] chdir("./193") = 0 [pid 7011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7010] <... ioctl resumed>) = 0 [pid 7011] setpgid(0, 0 [pid 7010] close(3 [pid 7011] <... setpgid resumed>) = 0 [pid 7010] <... close resumed>) = 0 [pid 7011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7010] close(4) = 0 [pid 7010] mkdir("./file0", 0777) = 0 [ 171.866435][ T7005] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 171.876150][ T7010] loop0: detected capacity change from 0 to 4096 [ 171.882884][ T7006] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 171.895873][ T7009] loop4: detected capacity change from 0 to 4096 [pid 7010] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7011] <... openat resumed>) = 3 [pid 7011] write(3, "1000", 4) = 4 [pid 7011] close(3 [pid 7009] <... ioctl resumed>) = 0 [pid 7011] <... close resumed>) = 0 [pid 7011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7009] close(3) = 0 [pid 7011] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] close(4) = 0 [pid 7009] mkdir("./file0", 0777) = 0 [pid 7009] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7011] <... futex resumed>) = 0 [pid 7011] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 7011] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7005] <... mount resumed>) = 0 [pid 7011] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7011] <... mprotect resumed>) = 0 [pid 7005] <... openat resumed>) = 3 [pid 7011] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7005] chdir("./file0") = 0 [pid 7005] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7011] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7005] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7011] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7005] <... futex resumed>) = 1 [pid 7003] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7012 attached [pid 7005] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7003] exit_group(0 [pid 7011] <... clone3 resumed> => {parent_tid=[7012]}, 88) = 7012 [pid 7003] <... exit_group resumed>) = ? [pid 7005] <... futex resumed>) = ? [pid 7012] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7011] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7012] <... rseq resumed>) = 0 [pid 7011] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] set_robust_list(0x7fe7c32469a0, 24 [pid 7011] <... futex resumed>) = 0 [pid 7012] <... set_robust_list resumed>) = 0 [pid 7011] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7012] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7005] +++ exited with 0 +++ [pid 7003] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7003, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 7012] memfd_create("syzkaller", 0 [pid 5060] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7012] <... memfd_create resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7012] <... mmap resumed>) = 0x7fe7bae00000 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7006] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./192/binderfs", [pid 7006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7006] <... openat resumed>) = 3 [pid 5060] unlink("./192/binderfs" [ 171.920057][ T7010] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 171.941341][ T7009] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 7006] chdir("./file0") = 0 [pid 5060] <... unlink resumed>) = 0 [pid 7006] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7006] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7006] <... futex resumed>) = 1 [pid 7004] <... futex resumed>) = 0 [pid 7006] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7004] exit_group(0) = ? [pid 7006] <... futex resumed>) = ? [pid 5060] <... umount2 resumed>) = 0 [pid 7006] +++ exited with 0 +++ [pid 7004] +++ exited with 0 +++ [pid 5060] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7004, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7010] <... mount resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7010] <... openat resumed>) = 3 [pid 7010] chdir("./file0") = 0 [pid 7010] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] newfstatat(3, "", [pid 5060] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 5061] getdents64(3, [pid 7009] <... mount resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7010] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7008] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 7010] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7009] <... openat resumed>) = 3 [pid 7008] exit_group(0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7012] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7010] <... futex resumed>) = ? [pid 7009] chdir("./file0" [pid 7008] <... exit_group resumed>) = ? [pid 5061] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7010] +++ exited with 0 +++ [pid 7009] <... chdir resumed>) = 0 [pid 5060] getdents64(4, [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 7009] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] newfstatat(AT_FDCWD, "./194/binderfs", [pid 5060] <... close resumed>) = 0 [pid 7009] <... futex resumed>) = 1 [pid 7007] <... futex resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] rmdir("./192/file0" [pid 7009] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7007] exit_group(0 [pid 7009] <... futex resumed>) = ? [pid 7007] <... exit_group resumed>) = ? [pid 5060] <... rmdir resumed>) = 0 [pid 7008] +++ exited with 0 +++ [pid 5061] unlink("./194/binderfs" [pid 5060] getdents64(3, [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7008, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5060] close(3 [pid 5059] <... restart_syscall resumed>) = 0 [pid 7009] +++ exited with 0 +++ [pid 7007] +++ exited with 0 +++ [pid 5061] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7007, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./192" [pid 5059] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5060] <... rmdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] mkdir("./193", 0777 [pid 5059] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./191/binderfs", [pid 5059] newfstatat(3, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] unlink("./191/binderfs") = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] newfstatat(AT_FDCWD, "./194/binderfs", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./194/file0", [pid 5060] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] unlink("./194/binderfs") = 0 [pid 5063] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./191/file0", [pid 5061] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7012] <... write resumed>) = 2097152 [pid 5061] newfstatat(4, "", [pid 5059] <... umount2 resumed>) = 0 [pid 7012] munmap(0x7fe7bae00000, 138412032 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] newfstatat(AT_FDCWD, "./194/file0", [pid 5061] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 5059] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7012] <... munmap resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] rmdir("./194/file0" [pid 5059] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7012] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 7012] ioctl(4, LOOP_SET_FD, 3 [pid 5059] newfstatat(4, "", [pid 5063] getdents64(4, [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 5063] close(4 [pid 5061] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./191/file0" [pid 5061] rmdir("./194" [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 7012] <... ioctl resumed>) = 0 [pid 5061] mkdir("./195", 0777 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(4, [pid 5061] <... mkdir resumed>) = 0 [pid 7012] close(3 [pid 5063] close(3 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7012] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 7012] close(4 [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./191" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5059] <... close resumed>) = 0 [pid 5063] mkdir("./192", 0777 [pid 5059] rmdir("./194/file0" [pid 7012] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 7012] mkdir("./file0", 0777 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 7012] <... mkdir resumed>) = 0 [pid 5060] close(3 [pid 7012] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5059] rmdir("./194") = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] mkdir("./195", 0777./strace-static-x86_64: Process 7013 attached ) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7013 [pid 7013] set_robust_list(0x55558e6e36a0, 24 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7013] <... set_robust_list resumed>) = 0 [pid 7013] chdir("./193" [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 7013] <... chdir resumed>) = 0 [pid 7013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7013] setpgid(0, 0) = 0 [pid 7013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7013] write(3, "1000", 4) = 4 [pid 7013] close(3) = 0 [pid 7013] symlink("/dev/binderfs", "./binderfs") = 0 [ 172.102923][ T7012] loop3: detected capacity change from 0 to 4096 [ 172.141913][ T7012] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 7012] <... mount resumed>) = 0 [pid 7013] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... ioctl resumed>) = 0 [pid 7013] <... futex resumed>) = 0 [pid 7013] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 7013] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7013] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] close(3 [pid 7013] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7012] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 7012] chdir("./file0" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7012] <... chdir resumed>) = 0 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7013] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7012] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7011] <... futex resumed>) = 0 [pid 7011] exit_group(0) = ? [pid 7013] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 7015 attached [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7014 [pid 7013] <... clone3 resumed> => {parent_tid=[7015]}, 88) = 7015 [pid 7012] +++ exited with 0 +++ [pid 7011] +++ exited with 0 +++ ./strace-static-x86_64: Process 7014 attached [pid 7015] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7013] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7011, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 7015] <... rseq resumed>) = 0 [pid 7013] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7015] set_robust_list(0x7fe7c32469a0, 24 [pid 7013] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] <... set_robust_list resumed>) = 0 [pid 7013] <... futex resumed>) = 0 [pid 7015] rt_sigprocmask(SIG_SETMASK, [], [pid 7013] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7015] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7015] memfd_create("syzkaller", 0 [pid 5059] <... ioctl resumed>) = 0 [pid 7014] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7015] <... memfd_create resumed>) = 3 [pid 7014] chdir("./195" [pid 5062] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7014] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 5062] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7014] <... prctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5059] <... close resumed>) = 0 [pid 7014] setpgid(0, 0 [pid 5062] newfstatat(3, "", [pid 7014] <... setpgid resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7015] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7016 attached [pid 7014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] getdents64(3, [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7017 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7016 ./strace-static-x86_64: Process 7017 attached [pid 7016] set_robust_list(0x55558e6e36a0, 24 [pid 7014] <... openat resumed>) = 3 [pid 5062] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7017] set_robust_list(0x55558e6e36a0, 24 [pid 7016] <... set_robust_list resumed>) = 0 [pid 7014] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./193/binderfs", [pid 7016] chdir("./195" [pid 7017] <... set_robust_list resumed>) = 0 [pid 7014] <... write resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7017] chdir("./192" [pid 7016] <... chdir resumed>) = 0 [pid 7014] close(3 [pid 5062] unlink("./193/binderfs" [pid 7017] <... chdir resumed>) = 0 [pid 7014] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 7017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7014] symlink("/dev/binderfs", "./binderfs" [pid 5062] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7017] <... prctl resumed>) = 0 [pid 7016] <... prctl resumed>) = 0 [pid 7014] <... symlink resumed>) = 0 [pid 7017] setpgid(0, 0) = 0 [pid 7016] setpgid(0, 0 [pid 7014] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7016] <... setpgid resumed>) = 0 [pid 7014] <... futex resumed>) = 0 [pid 7017] <... openat resumed>) = 3 [pid 7017] write(3, "1000", 4) = 4 [pid 7016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7014] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7017] close(3) = 0 [pid 7016] <... openat resumed>) = 3 [pid 7014] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 7017] symlink("/dev/binderfs", "./binderfs" [pid 7016] write(3, "1000", 4 [pid 7014] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7017] <... symlink resumed>) = 0 [pid 7016] <... write resumed>) = 4 [pid 7014] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7017] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] close(3 [pid 7014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] newfstatat(AT_FDCWD, "./193/file0", [pid 7017] <... futex resumed>) = 0 [pid 7016] <... close resumed>) = 0 [pid 7014] <... mmap resumed>) = 0x7fe7c3226000 [pid 7017] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7016] symlink("/dev/binderfs", "./binderfs" [pid 7014] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7017] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7016] <... symlink resumed>) = 0 [pid 7014] <... mprotect resumed>) = 0 [pid 5062] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7017] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7014] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7017] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7014] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7016] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7014] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... openat resumed>) = 4 [pid 7017] <... mmap resumed>) = 0x7fe7c3226000 [pid 5062] newfstatat(4, "", ./strace-static-x86_64: Process 7018 attached [pid 7017] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7016] <... futex resumed>) = 0 [pid 7018] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7017] <... mprotect resumed>) = 0 [pid 7018] <... rseq resumed>) = 0 [pid 7017] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7016] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7014] <... clone3 resumed> => {parent_tid=[7018]}, 88) = 7018 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7018] set_robust_list(0x7fe7c32469a0, 24 [pid 7017] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7016] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7014] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] getdents64(4, [pid 7018] <... set_robust_list resumed>) = 0 [pid 7017] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7016] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7014] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7019 attached [pid 7018] rt_sigprocmask(SIG_SETMASK, [], [pid 7016] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7014] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(4, [pid 7019] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7018] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7017] <... clone3 resumed> => {parent_tid=[7019]}, 88) = 7019 [pid 7016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7015] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7014] <... futex resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7019] <... rseq resumed>) = 0 [pid 7018] memfd_create("syzkaller", 0 [pid 7017] rt_sigprocmask(SIG_SETMASK, [], [pid 7016] <... mmap resumed>) = 0x7fe7c3226000 [pid 7014] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] close(4 [pid 7019] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] <... close resumed>) = 0 [pid 7019] <... set_robust_list resumed>) = 0 [pid 7017] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] rmdir("./193/file0" [pid 7017] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] rt_sigprocmask(SIG_SETMASK, [], [pid 7017] <... futex resumed>) = 0 [pid 7019] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7017] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... rmdir resumed>) = 0 [pid 7019] memfd_create("syzkaller", 0 [pid 7018] <... memfd_create resumed>) = 3 [pid 7016] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5062] getdents64(3, [pid 7016] <... mprotect resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7016] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7018] <... mmap resumed>) = 0x7fe7bae00000 [pid 5062] close(3 [pid 7016] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7019] <... memfd_create resumed>) = 3 [pid 7016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] <... close resumed>) = 0 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7020 attached ) = 0x7fe7bae00000 [pid 5062] rmdir("./193" [pid 7020] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7016] <... clone3 resumed> => {parent_tid=[7020]}, 88) = 7020 [pid 5062] <... rmdir resumed>) = 0 [pid 7020] <... rseq resumed>) = 0 [pid 7016] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] mkdir("./194", 0777 [pid 7020] set_robust_list(0x7fe7c32469a0, 24 [pid 7016] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7020] <... set_robust_list resumed>) = 0 [pid 7020] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... mkdir resumed>) = 0 [pid 7020] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7016] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] <... write resumed>) = 2097152 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7020] memfd_create("syzkaller", 0 [pid 7016] <... futex resumed>) = 0 [pid 7015] munmap(0x7fe7bae00000, 138412032 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 7016] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7020] <... memfd_create resumed>) = 3 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7018] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7015] <... munmap resumed>) = 0 [pid 7020] <... mmap resumed>) = 0x7fe7bae00000 [pid 7015] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7019] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7015] <... openat resumed>) = 4 [pid 7015] ioctl(4, LOOP_SET_FD, 3 [pid 7020] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7018] <... write resumed>) = 2097152 [pid 7015] <... ioctl resumed>) = 0 [pid 7015] close(3) = 0 [pid 7015] close(4) = 0 [pid 7015] mkdir("./file0", 0777 [pid 7018] munmap(0x7fe7bae00000, 138412032 [pid 7015] <... mkdir resumed>) = 0 [ 172.389408][ T7015] loop1: detected capacity change from 0 to 4096 [ 172.424209][ T7015] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 7015] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7018] <... munmap resumed>) = 0 [pid 7018] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7018] ioctl(4, LOOP_SET_FD, 3 [pid 7019] <... write resumed>) = 2097152 [pid 7019] munmap(0x7fe7bae00000, 138412032) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 7019] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7018] <... ioctl resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7019] <... openat resumed>) = 4 [pid 7019] ioctl(4, LOOP_SET_FD, 3 [pid 7018] close(3) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7021 ./strace-static-x86_64: Process 7021 attached [ 172.439816][ T7018] loop2: detected capacity change from 0 to 4096 [ 172.466572][ T7019] loop4: detected capacity change from 0 to 4096 [ 172.481428][ T7018] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 7021] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7018] close(4 [pid 7021] chdir("./194" [pid 7018] <... close resumed>) = 0 [pid 7018] mkdir("./file0", 0777) = 0 [pid 7018] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7021] <... chdir resumed>) = 0 [pid 7020] <... write resumed>) = 2097152 [pid 7021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7021] setpgid(0, 0) = 0 [pid 7021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7020] munmap(0x7fe7bae00000, 138412032 [pid 7021] <... openat resumed>) = 3 [pid 7020] <... munmap resumed>) = 0 [pid 7021] write(3, "1000", 4 [pid 7019] <... ioctl resumed>) = 0 [pid 7021] <... write resumed>) = 4 [pid 7019] close(3) = 0 [pid 7019] close(4) = 0 [pid 7021] close(3) = 0 [pid 7019] mkdir("./file0", 0777 [pid 7021] symlink("/dev/binderfs", "./binderfs" [pid 7019] <... mkdir resumed>) = 0 [pid 7021] <... symlink resumed>) = 0 [pid 7019] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7021] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7021] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 7020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7015] <... mount resumed>) = 0 [pid 7021] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7020] <... openat resumed>) = 4 [pid 7015] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7021] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7020] ioctl(4, LOOP_SET_FD, 3 [pid 7015] <... openat resumed>) = 3 [pid 7021] <... mmap resumed>) = 0x7fe7c3226000 [pid 7021] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7015] chdir("./file0") = 0 [pid 7021] <... mprotect resumed>) = 0 [pid 7020] <... ioctl resumed>) = 0 [pid 7015] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7021] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7021] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7015] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7021] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7015] <... futex resumed>) = 1 [pid 7013] <... futex resumed>) = 0 [pid 7020] close(3 [pid 7015] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7013] exit_group(0./strace-static-x86_64: Process 7022 attached [pid 7020] <... close resumed>) = 0 [pid 7015] <... futex resumed>) = ? [pid 7013] <... exit_group resumed>) = ? [pid 7022] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7021] <... clone3 resumed> => {parent_tid=[7022]}, 88) = 7022 [pid 7020] close(4 [pid 7015] +++ exited with 0 +++ [pid 7022] <... rseq resumed>) = 0 [pid 7021] rt_sigprocmask(SIG_SETMASK, [], [pid 7020] <... close resumed>) = 0 [pid 7013] +++ exited with 0 +++ [pid 7022] set_robust_list(0x7fe7c32469a0, 24 [pid 7021] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7013, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 7022] <... set_robust_list resumed>) = 0 [pid 7021] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7020] mkdir("./file0", 0777 [pid 7019] <... mount resumed>) = 0 [pid 7018] <... mount resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 7022] rt_sigprocmask(SIG_SETMASK, [], [pid 7021] <... futex resumed>) = 0 [pid 7020] <... mkdir resumed>) = 0 [pid 7019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 172.520815][ T7019] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 172.533057][ T7020] loop0: detected capacity change from 0 to 4096 [pid 7018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7022] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7021] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7020] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7019] <... openat resumed>) = 3 [pid 7018] <... openat resumed>) = 3 [pid 7022] memfd_create("syzkaller", 0 [pid 7019] chdir("./file0" [pid 7018] chdir("./file0") = 0 [pid 7018] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7018] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7014] <... futex resumed>) = 0 [pid 7022] <... memfd_create resumed>) = 3 [pid 7018] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] exit_group(0 [pid 7018] <... futex resumed>) = ? [pid 7014] <... exit_group resumed>) = ? [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7019] <... chdir resumed>) = 0 [pid 7018] +++ exited with 0 +++ [pid 5060] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7019] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7014] +++ exited with 0 +++ [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7019] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7014, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5060] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7019] <... futex resumed>) = 1 [pid 7017] <... futex resumed>) = 0 [pid 7019] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7017] exit_group(0 [pid 5060] <... openat resumed>) = 3 [pid 7022] <... mmap resumed>) = 0x7fe7bae00000 [pid 7019] <... futex resumed>) = ? [pid 7017] <... exit_group resumed>) = ? [pid 5060] newfstatat(3, "", [pid 7019] +++ exited with 0 +++ [pid 7017] +++ exited with 0 +++ [pid 5061] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7017, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5061] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] <... openat resumed>) = 3 [pid 5060] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(AT_FDCWD, "./193/binderfs", [pid 5063] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] unlink("./193/binderfs" [pid 5063] newfstatat(3, "", [pid 5061] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./195/binderfs", [pid 5060] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./195/binderfs" [pid 5060] newfstatat(AT_FDCWD, "./193/file0", [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 5061] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./193/file0") = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./193" [pid 5061] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5063] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] mkdir("./194", 0777 [pid 5063] newfstatat(AT_FDCWD, "./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... mkdir resumed>) = 0 [pid 5063] unlink("./192/binderfs" [pid 5061] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 172.584197][ T7020] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 7020] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... openat resumed>) = 3 [pid 7020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(4, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 7020] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7020] chdir("./file0" [pid 5061] getdents64(4, [pid 7020] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5061] close(4 [pid 7020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./195/file0") = 0 [pid 7020] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7020] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] getdents64(3, [pid 5063] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 7022] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7016] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./192/file0", [pid 7016] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 7020] <... futex resumed>) = ? [pid 7016] <... exit_group resumed>) = ? [pid 5063] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./195" [pid 7020] +++ exited with 0 +++ [pid 7016] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7016, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] <... openat resumed>) = 4 [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] newfstatat(4, "", [pid 5059] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5061] mkdir("./196", 0777 [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 7022] <... write resumed>) = 2097152 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 7022] munmap(0x7fe7bae00000, 138412032 [pid 5063] getdents64(4, [pid 5059] newfstatat(3, "", [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(4 [pid 5059] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./192/file0" [pid 5059] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7022] <... munmap resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./195/binderfs", [pid 5063] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] unlink("./195/binderfs") = 0 [pid 5063] close(3 [pid 5059] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./192") = 0 [pid 5063] mkdir("./193", 0777 [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] close(3 [pid 5059] <... umount2 resumed>) = 0 [pid 7022] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 7022] ioctl(4, LOOP_SET_FD, 3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] newfstatat(AT_FDCWD, "./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 7023 attached [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7023 [pid 7023] set_robust_list(0x55558e6e36a0, 24 [pid 5059] newfstatat(4, "", [pid 7023] <... set_robust_list resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7023] chdir("./194" [pid 5059] getdents64(4, [pid 7023] <... chdir resumed>) = 0 [pid 7023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7023] <... prctl resumed>) = 0 [pid 7023] setpgid(0, 0 [pid 5059] getdents64(4, [pid 7023] <... setpgid resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] close(4) = 0 [pid 5059] rmdir("./195/file0") = 0 [pid 7023] <... openat resumed>) = 3 [pid 5059] getdents64(3, [pid 7023] write(3, "1000", 4) = 4 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 7023] close(3) = 0 [pid 7022] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5061] close(3 [pid 5059] rmdir("./195") = 0 [pid 7023] symlink("/dev/binderfs", "./binderfs" [pid 7022] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5059] mkdir("./196", 0777 [pid 7023] <... symlink resumed>) = 0 [pid 7022] <... close resumed>) = 0 [pid 5063] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... mkdir resumed>) = 0 [pid 7023] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] close(4 [pid 7023] <... futex resumed>) = 0 [pid 7022] <... close resumed>) = 0 [ 172.717248][ T7022] loop3: detected capacity change from 0 to 4096 [pid 5063] <... close resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 7024 attached [pid 7023] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7022] mkdir("./file0", 0777 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 3 [pid 7024] set_robust_list(0x55558e6e36a0, 24 [pid 7023] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7022] <... mkdir resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7025 attached [pid 7024] <... set_robust_list resumed>) = 0 [pid 7023] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7022] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7024 [pid 7025] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7024] chdir("./196" [pid 7023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7025 [pid 7024] <... chdir resumed>) = 0 [pid 7025] chdir("./193" [pid 7024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7025] <... chdir resumed>) = 0 [pid 7024] <... prctl resumed>) = 0 [pid 7025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7025] setpgid(0, 0 [pid 7024] setpgid(0, 0 [pid 7025] <... setpgid resumed>) = 0 [pid 7024] <... setpgid resumed>) = 0 [pid 7023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7023] <... mmap resumed>) = 0x7fe7c3226000 [pid 7025] <... openat resumed>) = 3 [pid 7024] <... openat resumed>) = 3 [pid 7023] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7025] write(3, "1000", 4 [pid 7024] write(3, "1000", 4 [pid 7023] <... mprotect resumed>) = 0 [pid 7025] <... write resumed>) = 4 [pid 7024] <... write resumed>) = 4 [pid 7025] close(3 [pid 7024] close(3 [pid 7023] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7025] <... close resumed>) = 0 [pid 7024] <... close resumed>) = 0 [pid 7025] symlink("/dev/binderfs", "./binderfs" [pid 7024] symlink("/dev/binderfs", "./binderfs" [pid 7025] <... symlink resumed>) = 0 [pid 7024] <... symlink resumed>) = 0 [pid 7023] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7024] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7023] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7025] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7026 attached [pid 7025] <... futex resumed>) = 0 [pid 7024] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7026] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7025] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7024] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7026] <... rseq resumed>) = 0 [pid 7025] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7024] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7025] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7024] <... mmap resumed>) = 0x7fe7c3226000 [pid 7026] set_robust_list(0x7fe7c32469a0, 24 [pid 7025] <... mmap resumed>) = 0x7fe7c3226000 [pid 7024] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7026] <... set_robust_list resumed>) = 0 [pid 7024] <... mprotect resumed>) = 0 [pid 7023] <... clone3 resumed> => {parent_tid=[7026]}, 88) = 7026 [pid 7026] rt_sigprocmask(SIG_SETMASK, [], [pid 7025] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7024] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7023] rt_sigprocmask(SIG_SETMASK, [], [pid 7026] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7025] <... mprotect resumed>) = 0 [pid 7024] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7026] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7025] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7024] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7023] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7027 attached [pid 7026] <... futex resumed>) = 0 [pid 7025] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7024] <... clone3 resumed> => {parent_tid=[7027]}, 88) = 7027 [pid 7023] <... futex resumed>) = 1 [pid 7027] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7024] rt_sigprocmask(SIG_SETMASK, [], [pid 7027] <... rseq resumed>) = 0 [pid 7026] memfd_create("syzkaller", 0 [pid 7025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7023] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7028 attached [pid 7027] set_robust_list(0x7fe7c32469a0, 24 [pid 7026] <... memfd_create resumed>) = 3 [pid 7024] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7028] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7027] <... set_robust_list resumed>) = 0 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7025] <... clone3 resumed> => {parent_tid=[7028]}, 88) = 7028 [pid 7024] <... futex resumed>) = 0 [ 172.785456][ T7022] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 7028] <... rseq resumed>) = 0 [pid 7027] rt_sigprocmask(SIG_SETMASK, [], [pid 7026] <... mmap resumed>) = 0x7fe7bae00000 [pid 7025] rt_sigprocmask(SIG_SETMASK, [], [pid 7024] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7028] set_robust_list(0x7fe7c32469a0, 24 [pid 7027] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7028] <... set_robust_list resumed>) = 0 [pid 7027] memfd_create("syzkaller", 0 [pid 7025] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... mount resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 7028] rt_sigprocmask(SIG_SETMASK, [], [pid 7027] <... memfd_create resumed>) = 3 [pid 7025] <... futex resumed>) = 0 [pid 7022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7025] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7022] <... openat resumed>) = 3 [pid 7028] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7027] <... mmap resumed>) = 0x7fe7bae00000 [pid 7022] chdir("./file0" [pid 7028] memfd_create("syzkaller", 0 [pid 5059] close(3 [pid 7022] <... chdir resumed>) = 0 [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7028] <... memfd_create resumed>) = 3 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7022] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7029 ./strace-static-x86_64: Process 7029 attached [pid 7028] <... mmap resumed>) = 0x7fe7bae00000 [pid 7022] <... futex resumed>) = 1 [pid 7021] <... futex resumed>) = 0 [pid 7029] set_robust_list(0x55558e6e36a0, 24 [pid 7026] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7022] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7021] exit_group(0 [pid 7022] <... futex resumed>) = ? [pid 7021] <... exit_group resumed>) = ? [pid 7022] +++ exited with 0 +++ [pid 7029] <... set_robust_list resumed>) = 0 [pid 7029] chdir("./196" [pid 7021] +++ exited with 0 +++ [pid 7029] <... chdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7021, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7029] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7029] <... prctl resumed>) = 0 [pid 5062] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./194/binderfs") = 0 [pid 5062] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7029] setpgid(0, 0) = 0 [pid 7029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7029] <... openat resumed>) = 3 [pid 7027] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7029] write(3, "1000", 4) = 4 [pid 5062] newfstatat(AT_FDCWD, "./194/file0", [pid 7029] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7029] <... close resumed>) = 0 [pid 5062] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7029] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7029] <... symlink resumed>) = 0 [pid 7028] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7029] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... openat resumed>) = 4 [pid 7029] <... futex resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 7029] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7029] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7026] <... write resumed>) = 2097152 [pid 5062] getdents64(4, [pid 7029] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./194/file0") = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./194") = 0 [pid 7029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7026] munmap(0x7fe7bae00000, 138412032 [pid 5062] mkdir("./195", 0777 [pid 7029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5062] <... mkdir resumed>) = 0 [pid 7029] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7029] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... openat resumed>) = 3 [pid 7029] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7030 attached [pid 7030] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7029] <... clone3 resumed> => {parent_tid=[7030]}, 88) = 7030 [pid 7030] <... rseq resumed>) = 0 [pid 7029] rt_sigprocmask(SIG_SETMASK, [], [pid 7026] <... munmap resumed>) = 0 [pid 7030] set_robust_list(0x7fe7c32469a0, 24 [pid 7029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7026] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7030] <... set_robust_list resumed>) = 0 [pid 7029] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7027] <... write resumed>) = 2097152 [pid 7026] <... openat resumed>) = 4 [pid 7030] rt_sigprocmask(SIG_SETMASK, [], [pid 7029] <... futex resumed>) = 0 [pid 7027] munmap(0x7fe7bae00000, 138412032 [pid 7026] ioctl(4, LOOP_SET_FD, 3 [pid 7030] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7029] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7028] <... write resumed>) = 2097152 [pid 7027] <... munmap resumed>) = 0 [pid 7028] munmap(0x7fe7bae00000, 138412032 [pid 7030] memfd_create("syzkaller", 0 [pid 7027] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7026] <... ioctl resumed>) = 0 [pid 7030] <... memfd_create resumed>) = 3 [pid 7027] <... openat resumed>) = 4 [pid 7026] close(3 [pid 7030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 7026] <... close resumed>) = 0 [pid 7026] close(4) = 0 [pid 7026] mkdir("./file0", 0777) = 0 [pid 7026] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7028] <... munmap resumed>) = 0 [pid 7027] ioctl(4, LOOP_SET_FD, 3 [pid 7028] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7027] <... ioctl resumed>) = 0 [pid 7028] <... openat resumed>) = 4 [pid 7028] ioctl(4, LOOP_SET_FD, 3 [pid 7030] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7028] <... ioctl resumed>) = 0 [pid 7027] close(3 [pid 5062] <... ioctl resumed>) = 0 [pid 7028] close(3 [pid 7027] <... close resumed>) = 0 [pid 7027] close(4) = 0 [pid 7028] <... close resumed>) = 0 [pid 7027] mkdir("./file0", 0777 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7028] close(4 [pid 7027] <... mkdir resumed>) = 0 [pid 7028] <... close resumed>) = 0 [ 172.966622][ T7026] loop1: detected capacity change from 0 to 4096 [ 172.990091][ T7026] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 172.999712][ T7027] loop2: detected capacity change from 0 to 4096 [ 173.006903][ T7028] loop4: detected capacity change from 0 to 4096 [pid 7028] mkdir("./file0", 0777./strace-static-x86_64: Process 7031 attached ) = 0 [pid 7027] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7031] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7031] chdir("./195" [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7031 [pid 7031] <... chdir resumed>) = 0 [pid 7031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7028] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7026] <... mount resumed>) = 0 [pid 7026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7031] <... prctl resumed>) = 0 [pid 7026] chdir("./file0") = 0 [pid 7031] setpgid(0, 0 [pid 7026] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7031] <... setpgid resumed>) = 0 [pid 7026] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7030] <... write resumed>) = 2097152 [pid 7031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7030] munmap(0x7fe7bae00000, 138412032 [pid 7026] <... futex resumed>) = 1 [pid 7023] <... futex resumed>) = 0 [pid 7023] exit_group(0) = ? [pid 7031] write(3, "1000", 4) = 4 [pid 7030] <... munmap resumed>) = 0 [pid 7031] close(3) = 0 [pid 7030] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7026] +++ exited with 0 +++ [pid 7023] +++ exited with 0 +++ [pid 7031] symlink("/dev/binderfs", "./binderfs" [pid 7030] <... openat resumed>) = 4 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7023, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7031] <... symlink resumed>) = 0 [ 173.054109][ T7027] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 173.068744][ T7028] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 7030] ioctl(4, LOOP_SET_FD, 3 [pid 7031] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 7031] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7031] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7031] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7031] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7028] <... mount resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./194/binderfs", [pid 7031] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] unlink("./194/binderfs" [pid 7031] <... mmap resumed>) = 0x7fe7c3226000 [pid 7028] <... openat resumed>) = 3 [pid 5060] <... unlink resumed>) = 0 [pid 7031] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7028] chdir("./file0" [pid 7031] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7028] <... chdir resumed>) = 0 [pid 7028] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5060] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7028] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7030] <... ioctl resumed>) = 0 [pid 7031] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7030] close(3) = 0 [pid 7030] close(4) = 0 [pid 7028] <... futex resumed>) = 1 [pid 7025] <... futex resumed>) = 0 [pid 7030] mkdir("./file0", 0777 [pid 7028] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7030] <... mkdir resumed>) = 0 [pid 7031] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7027] <... mount resumed>) = 0 [pid 7025] exit_group(0 [pid 7030] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7028] <... futex resumed>) = ? [pid 7025] <... exit_group resumed>) = ? [pid 7028] +++ exited with 0 +++ ./strace-static-x86_64: Process 7032 attached [pid 7027] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7032] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7027] <... openat resumed>) = 3 [pid 7032] <... rseq resumed>) = 0 [pid 7027] chdir("./file0" [pid 7032] set_robust_list(0x7fe7c32469a0, 24 [pid 7031] <... clone3 resumed> => {parent_tid=[7032]}, 88) = 7032 [pid 7027] <... chdir resumed>) = 0 [pid 7032] <... set_robust_list resumed>) = 0 [pid 7031] rt_sigprocmask(SIG_SETMASK, [], [pid 7027] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7032] rt_sigprocmask(SIG_SETMASK, [], [pid 7031] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7032] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7031] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [ 173.105824][ T7030] loop0: detected capacity change from 0 to 4096 [pid 7027] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7032] memfd_create("syzkaller", 0 [pid 7031] <... futex resumed>) = 0 [pid 7027] <... futex resumed>) = 1 [pid 7024] <... futex resumed>) = 0 [pid 7024] exit_group(0 [pid 7031] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7024] <... exit_group resumed>) = ? [pid 7027] +++ exited with 0 +++ [pid 7025] +++ exited with 0 +++ [pid 7024] +++ exited with 0 +++ [pid 7032] <... memfd_create resumed>) = 3 [pid 5060] <... umount2 resumed>) = 0 [pid 7032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7025, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7024, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7032] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5060] newfstatat(AT_FDCWD, "./194/file0", [pid 5063] newfstatat(3, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5061] unlink("./196/binderfs" [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5060] getdents64(4, [pid 5061] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./194/file0" [pid 5061] <... umount2 resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5063] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./194" [pid 5063] newfstatat(AT_FDCWD, "./193/binderfs", [pid 5061] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./193/binderfs" [pid 5060] mkdir("./195", 0777 [pid 5063] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5061] <... openat resumed>) = 4 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [ 173.148479][ T7030] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./196/file0" [pid 5063] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./193/file0", [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7032] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5061] getdents64(3, [pid 5063] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./196" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] <... rmdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] mkdir("./197", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7030] <... mount resumed>) = 0 [pid 5063] getdents64(4, [pid 5061] <... mkdir resumed>) = 0 [pid 7030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7030] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 7030] chdir("./file0" [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7030] <... chdir resumed>) = 0 [pid 5063] close(4 [pid 7030] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 7030] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] rmdir("./193/file0" [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7030] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7029] <... futex resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 7030] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] getdents64(3, [pid 7029] exit_group(0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7029] <... exit_group resumed>) = ? [pid 7030] <... futex resumed>) = ? [pid 5063] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./193") = 0 [pid 7032] <... write resumed>) = 2097152 [pid 7030] +++ exited with 0 +++ [pid 7029] +++ exited with 0 +++ [pid 5063] mkdir("./194", 0777 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7029, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5060] <... ioctl resumed>) = 0 [pid 7032] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] close(3 [pid 5059] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7032] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7032] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7032] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... openat resumed>) = 3 [pid 7032] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7033 attached [pid 5059] newfstatat(3, "", [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7033 [pid 7032] <... ioctl resumed>) = 0 [pid 7033] set_robust_list(0x55558e6e36a0, 24 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7032] close(3) = 0 [pid 7032] close(4) = 0 [pid 7032] mkdir("./file0", 0777) = 0 [pid 5059] getdents64(3, [pid 7033] <... set_robust_list resumed>) = 0 [pid 7032] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7033] chdir("./195" [pid 5061] <... ioctl resumed>) = 0 [pid 7033] <... chdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5061] close(3 [pid 7033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... close resumed>) = 0 [pid 5059] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7034 attached [pid 7034] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7034 [pid 7034] <... set_robust_list resumed>) = 0 [pid 7034] chdir("./197") = 0 [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7034] setpgid(0, 0 [pid 7033] <... prctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] <... setpgid resumed>) = 0 [pid 7033] setpgid(0, 0 [pid 5059] newfstatat(AT_FDCWD, "./196/binderfs", [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7033] <... setpgid resumed>) = 0 [pid 7034] <... openat resumed>) = 3 [pid 7033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7033] <... openat resumed>) = 3 [pid 5059] unlink("./196/binderfs" [pid 7033] write(3, "1000", 4 [pid 7034] write(3, "1000", 4) = 4 [pid 7034] close(3) = 0 [pid 7033] <... write resumed>) = 4 [pid 5059] <... unlink resumed>) = 0 [pid 7034] symlink("/dev/binderfs", "./binderfs" [pid 7033] close(3 [pid 5059] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7034] <... symlink resumed>) = 0 [pid 7033] <... close resumed>) = 0 [pid 7034] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7033] symlink("/dev/binderfs", "./binderfs" [pid 7034] <... futex resumed>) = 0 [pid 7034] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7033] <... symlink resumed>) = 0 [pid 7034] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7033] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7033] <... futex resumed>) = 0 [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7033] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7034] <... mmap resumed>) = 0x7fe7c3226000 [pid 7033] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7034] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7033] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7034] <... mprotect resumed>) = 0 [pid 7033] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7034] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7033] <... mmap resumed>) = 0x7fe7c3226000 [pid 7034] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7033] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7033] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 7035 attached [pid 7034] <... clone3 resumed> => {parent_tid=[7035]}, 88) = 7035 [pid 7033] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7035] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7034] rt_sigprocmask(SIG_SETMASK, [], [pid 7033] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7035] <... rseq resumed>) = 0 [pid 7034] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7032] <... mount resumed>) = 0 [pid 7035] set_robust_list(0x7fe7c32469a0, 24 [pid 7034] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7033] <... clone3 resumed> => {parent_tid=[7036]}, 88) = 7036 [pid 7035] <... set_robust_list resumed>) = 0 [pid 7034] <... futex resumed>) = 0 [pid 7033] rt_sigprocmask(SIG_SETMASK, [], [pid 7032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7035] rt_sigprocmask(SIG_SETMASK, [], [pid 7034] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7032] <... openat resumed>) = 3 [pid 7035] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7032] chdir("./file0" [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7036 attached [pid 7033] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 173.285183][ T7032] loop3: detected capacity change from 0 to 4096 [ 173.312917][ T7032] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5059] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7033] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7032] <... chdir resumed>) = 0 [pid 7036] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7033] <... futex resumed>) = 0 [pid 7032] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] newfstatat(AT_FDCWD, "./196/file0", [pid 7033] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7035] memfd_create("syzkaller", 0 [pid 7032] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7031] <... futex resumed>) = 0 [pid 7035] <... memfd_create resumed>) = 3 [pid 7032] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] exit_group(0 [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7032] <... futex resumed>) = ? [pid 7031] <... exit_group resumed>) = ? [pid 7035] <... mmap resumed>) = 0x7fe7bae00000 [pid 7032] +++ exited with 0 +++ [pid 7031] +++ exited with 0 +++ [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7031, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5059] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7036] <... rseq resumed>) = 0 [pid 5062] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7036] set_robust_list(0x7fe7c32469a0, 24 [pid 5062] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7036] <... set_robust_list resumed>) = 0 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7036] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... openat resumed>) = 4 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(4, "", [pid 7036] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./195/binderfs" [pid 7036] memfd_create("syzkaller", 0 [pid 5062] <... unlink resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7036] <... memfd_create resumed>) = 3 [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = 0 [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 7037 attached [pid 7036] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7037 [pid 5059] rmdir("./196/file0" [pid 5062] newfstatat(AT_FDCWD, "./195/file0", [pid 5059] <... rmdir resumed>) = 0 [pid 7037] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(3, [pid 7037] <... set_robust_list resumed>) = 0 [pid 5062] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] close(3 [pid 5062] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] chdir("./194" [pid 5062] <... openat resumed>) = 4 [pid 5059] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5059] rmdir("./196") = 0 [pid 7037] <... chdir resumed>) = 0 [pid 7037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7037] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] mkdir("./197", 0777 [pid 7037] <... setpgid resumed>) = 0 [pid 7037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] <... mkdir resumed>) = 0 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7037] <... openat resumed>) = 3 [pid 5062] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5059] <... openat resumed>) = 3 [pid 7037] write(3, "1000", 4 [pid 5062] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 7037] <... write resumed>) = 4 [pid 7037] close(3) = 0 [pid 7037] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./195/file0" [pid 7037] <... symlink resumed>) = 0 [pid 7036] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 7037] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7037] <... futex resumed>) = 0 [pid 5062] close(3 [pid 7037] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] <... close resumed>) = 0 [pid 7037] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] rmdir("./195" [pid 7037] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... rmdir resumed>) = 0 [pid 7037] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] mkdir("./196", 0777 [pid 7037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5062] <... mkdir resumed>) = 0 [pid 7037] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7037] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5062] <... openat resumed>) = 3 [pid 7037] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 7037] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7035] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 7038 attached [pid 7037] <... clone3 resumed> => {parent_tid=[7038]}, 88) = 7038 [pid 7038] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7037] rt_sigprocmask(SIG_SETMASK, [], [pid 7038] <... rseq resumed>) = 0 [pid 7037] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7038] set_robust_list(0x7fe7c32469a0, 24 [pid 7037] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] <... set_robust_list resumed>) = 0 [pid 7037] <... futex resumed>) = 0 [pid 7038] rt_sigprocmask(SIG_SETMASK, [], [pid 7037] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7038] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7038] memfd_create("syzkaller", 0) = 3 [pid 7038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 7036] <... write resumed>) = 2097152 [pid 7035] <... write resumed>) = 2097152 [pid 7035] munmap(0x7fe7bae00000, 138412032 [pid 7036] munmap(0x7fe7bae00000, 138412032 [pid 7035] <... munmap resumed>) = 0 [pid 7036] <... munmap resumed>) = 0 [pid 7035] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7035] ioctl(4, LOOP_SET_FD, 3 [pid 7036] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7036] ioctl(4, LOOP_SET_FD, 3 [pid 7035] <... ioctl resumed>) = 0 [pid 7035] close(3) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 7035] close(4) = 0 [pid 7035] mkdir("./file0", 0777) = 0 [pid 7038] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7035] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7039 attached [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7039 [ 173.485051][ T7035] loop2: detected capacity change from 0 to 4096 [ 173.503832][ T7036] loop1: detected capacity change from 0 to 4096 [ 173.518885][ T7035] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 5059] close(3 [pid 7039] set_robust_list(0x55558e6e36a0, 24 [pid 7036] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 7036] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7036] <... close resumed>) = 0 [pid 7039] <... set_robust_list resumed>) = 0 [pid 7039] chdir("./196") = 0 [pid 7039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7036] close(4./strace-static-x86_64: Process 7040 attached ) = 0 [pid 7039] <... prctl resumed>) = 0 [pid 7040] set_robust_list(0x55558e6e36a0, 24 [pid 7036] mkdir("./file0", 0777 [pid 7040] <... set_robust_list resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7040 [pid 7039] setpgid(0, 0 [pid 7040] chdir("./197" [pid 7036] <... mkdir resumed>) = 0 [pid 7040] <... chdir resumed>) = 0 [pid 7036] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7039] <... setpgid resumed>) = 0 [pid 7039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7039] write(3, "1000", 4) = 4 [pid 7039] close(3) = 0 [pid 7039] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7039] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7040] setpgid(0, 0 [pid 7039] <... futex resumed>) = 0 [pid 7040] <... setpgid resumed>) = 0 [pid 7039] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7039] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7038] <... write resumed>) = 2097152 [pid 7040] <... openat resumed>) = 3 [pid 7040] write(3, "1000", 4) = 4 [pid 7039] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7040] close(3) = 0 [pid 7039] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7040] symlink("/dev/binderfs", "./binderfs" [pid 7039] <... mmap resumed>) = 0x7fe7c3226000 [pid 7039] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7040] <... symlink resumed>) = 0 [pid 7039] <... mprotect resumed>) = 0 [pid 7040] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7039] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7040] <... futex resumed>) = 0 [pid 7039] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7038] munmap(0x7fe7bae00000, 138412032 [pid 7040] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7039] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7038] <... munmap resumed>) = 0 [pid 7040] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 7041 attached [pid 7041] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7040] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7039] <... clone3 resumed> => {parent_tid=[7041]}, 88) = 7041 [pid 7041] <... rseq resumed>) = 0 [pid 7040] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7039] rt_sigprocmask(SIG_SETMASK, [], [pid 7041] set_robust_list(0x7fe7c32469a0, 24 [pid 7040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7039] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7041] <... set_robust_list resumed>) = 0 [pid 7040] <... mmap resumed>) = 0x7fe7c3226000 [pid 7039] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] rt_sigprocmask(SIG_SETMASK, [], [pid 7040] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7039] <... futex resumed>) = 0 [pid 7040] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7039] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7041] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7040] <... rt_sigprocmask resumed>[], 8) = 0 [ 173.544358][ T7036] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 7040] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7038] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7042 attached ) = 4 [pid 7042] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7041] memfd_create("syzkaller", 0 [pid 7040] <... clone3 resumed> => {parent_tid=[7042]}, 88) = 7042 [pid 7035] <... mount resumed>) = 0 [pid 7038] ioctl(4, LOOP_SET_FD, 3 [pid 7042] <... rseq resumed>) = 0 [pid 7041] <... memfd_create resumed>) = 3 [pid 7040] rt_sigprocmask(SIG_SETMASK, [], [pid 7035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7035] <... openat resumed>) = 3 [pid 7041] <... mmap resumed>) = 0x7fe7bae00000 [pid 7035] chdir("./file0") = 0 [pid 7035] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7042] set_robust_list(0x7fe7c32469a0, 24 [pid 7040] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7042] <... set_robust_list resumed>) = 0 [pid 7040] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] rt_sigprocmask(SIG_SETMASK, [], [pid 7040] <... futex resumed>) = 0 [pid 7035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7040] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7035] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7034] <... futex resumed>) = 0 [pid 7042] memfd_create("syzkaller", 0 [pid 7035] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7034] exit_group(0 [pid 7035] <... futex resumed>) = ? [pid 7034] <... exit_group resumed>) = ? [pid 7035] +++ exited with 0 +++ [pid 7034] +++ exited with 0 +++ [pid 7042] <... memfd_create resumed>) = 3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7034, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7bae00000 [pid 7038] <... ioctl resumed>) = 0 [pid 5061] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7038] close(3 [pid 5061] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7038] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7038] close(4 [pid 7036] <... mount resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] unlink("./197/binderfs") = 0 [pid 5061] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7038] <... close resumed>) = 0 [pid 7038] mkdir("./file0", 0777) = 0 [pid 7036] <... openat resumed>) = 3 [pid 7036] chdir("./file0") = 0 [pid 7036] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7038] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7036] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7033] <... futex resumed>) = 0 [pid 7033] exit_group(0 [pid 5061] <... umount2 resumed>) = 0 [pid 7036] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7036] <... futex resumed>) = ? [pid 7033] <... exit_group resumed>) = ? [ 173.613054][ T7038] loop4: detected capacity change from 0 to 4096 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./197/file0") = 0 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./197" [pid 7036] +++ exited with 0 +++ [pid 5061] <... rmdir resumed>) = 0 [pid 7042] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7041] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7033] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7033, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] mkdir("./198", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./195/binderfs") = 0 [pid 5060] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 173.673025][ T7038] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 5060] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7042] <... write resumed>) = 2097152 [pid 7041] <... write resumed>) = 2097152 [pid 7038] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 7042] munmap(0x7fe7bae00000, 138412032 [pid 7041] munmap(0x7fe7bae00000, 138412032 [pid 7038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7042] <... munmap resumed>) = 0 [pid 7038] <... openat resumed>) = 3 [pid 5060] newfstatat(4, "", [pid 7042] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7042] <... openat resumed>) = 4 [pid 7038] chdir("./file0" [pid 5060] getdents64(4, [pid 7042] ioctl(4, LOOP_SET_FD, 3 [pid 7038] <... chdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7038] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7038] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7038] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7041] <... munmap resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7037] <... futex resumed>) = 0 [pid 7041] <... openat resumed>) = 4 [pid 7037] exit_group(0 [pid 7038] <... futex resumed>) = ? [pid 7037] <... exit_group resumed>) = ? [pid 7038] +++ exited with 0 +++ [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7041] ioctl(4, LOOP_SET_FD, 3 [pid 7042] <... ioctl resumed>) = 0 [pid 5060] close(4) = 0 [pid 7042] close(3) = 0 [pid 5060] rmdir("./195/file0" [pid 7042] close(4) = 0 [pid 7037] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5061] close(3) = 0 [pid 7042] mkdir("./file0", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7037, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5060] getdents64(3, [pid 7042] <... mkdir resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5060] close(3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7042] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... close resumed>) = 0 [pid 7041] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7043 attached [pid 7041] close(3 [pid 5063] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./195" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7043] set_robust_list(0x55558e6e36a0, 24 [pid 7041] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 7043] <... set_robust_list resumed>) = 0 [pid 7041] close(4 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7043 [pid 7043] chdir("./198" [pid 7041] <... close resumed>) = 0 [pid 7043] <... chdir resumed>) = 0 [pid 7041] mkdir("./file0", 0777 [pid 7043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7041] <... mkdir resumed>) = 0 [pid 7043] <... prctl resumed>) = 0 [pid 7043] setpgid(0, 0) = 0 [pid 7041] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5063] newfstatat(3, "", [pid 5060] mkdir("./196", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 7043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [ 173.766451][ T7042] loop0: detected capacity change from 0 to 4096 [ 173.774613][ T7041] loop3: detected capacity change from 0 to 4096 [ 173.798008][ T7042] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 7043] <... openat resumed>) = 3 [pid 5063] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [pid 7043] write(3, "1000", 4) = 4 [pid 7043] close(3) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7043] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... openat resumed>) = 3 [pid 7043] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 7043] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7043] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 7043] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7043] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7043] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7043] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 7044 attached [pid 5063] newfstatat(AT_FDCWD, "./194/binderfs", [pid 7043] <... clone3 resumed> => {parent_tid=[7044]}, 88) = 7044 [pid 7044] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7043] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7044] <... rseq resumed>) = 0 [pid 7043] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7044] set_robust_list(0x7fe7c32469a0, 24 [pid 7043] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] unlink("./194/binderfs" [pid 7044] <... set_robust_list resumed>) = 0 [pid 7043] <... futex resumed>) = 0 [pid 7044] rt_sigprocmask(SIG_SETMASK, [], [pid 7043] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7042] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 7044] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7042] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7044] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = 0 [pid 7044] <... memfd_create resumed>) = 3 [pid 7042] <... openat resumed>) = 3 [pid 5063] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7042] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7044] <... mmap resumed>) = 0x7fe7bae00000 [pid 7042] <... chdir resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./194/file0", [pid 7042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7042] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7042] <... futex resumed>) = 1 [pid 7040] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7042] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7040] exit_group(0 [pid 5063] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7042] <... futex resumed>) = ? [pid 7040] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 4 [pid 7042] +++ exited with 0 +++ [pid 7040] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7040, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5063] close(4 [pid 5059] newfstatat(3, "", [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./194/file0" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5063] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [ 173.816425][ T7041] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5063] close(3 [pid 5059] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./194") = 0 [pid 5059] newfstatat(AT_FDCWD, "./197/binderfs", [pid 5063] mkdir("./195", 0777 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] unlink("./197/binderfs") = 0 [pid 5059] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7041] <... mount resumed>) = 0 [pid 7041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7041] <... openat resumed>) = 3 [pid 7041] chdir("./file0") = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 7041] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7039] <... futex resumed>) = 0 [pid 7041] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7039] exit_group(0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 7039] <... exit_group resumed>) = ? [pid 5059] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7041] <... futex resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./197/file0", [pid 7041] +++ exited with 0 +++ [pid 7039] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7039, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5062] unlink("./196/binderfs" [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5062] <... unlink resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5062] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./197/file0" [pid 5062] <... umount2 resumed>) = 0 [pid 5060] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] <... close resumed>) = 0 [pid 5059] close(3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./197"./strace-static-x86_64: Process 7045 attached [pid 5062] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 7045] set_robust_list(0x55558e6e36a0, 24 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7045] <... set_robust_list resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./196/file0", [pid 7045] chdir("./196" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7045 [pid 7045] <... chdir resumed>) = 0 [pid 5062] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7045] <... prctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7045] setpgid(0, 0 [pid 5062] <... openat resumed>) = 4 [pid 7045] <... setpgid resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 7045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7044] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] mkdir("./198", 0777 [pid 7045] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 7045] write(3, "1000", 4 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7045] <... write resumed>) = 4 [pid 5062] getdents64(4, [pid 5059] <... mkdir resumed>) = 0 [pid 7045] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] close(4 [pid 7045] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 7045] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./196/file0" [pid 7045] <... symlink resumed>) = 0 [pid 7045] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7045] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 7045] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7045] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 7046 attached => {parent_tid=[7046]}, 88) = 7046 [pid 7046] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7045] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... openat resumed>) = 3 [pid 7046] <... rseq resumed>) = 0 [pid 7045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 7046] set_robust_list(0x7fe7c32469a0, 24 [pid 7045] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] <... set_robust_list resumed>) = 0 [pid 7045] <... futex resumed>) = 0 [pid 7046] rt_sigprocmask(SIG_SETMASK, [], [pid 7045] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7046] memfd_create("syzkaller", 0) = 3 [pid 5063] close(3 [pid 5062] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] close(3 [pid 7046] <... mmap resumed>) = 0x7fe7bae00000 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 7044] <... write resumed>) = 2097152 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] rmdir("./196" [pid 7044] munmap(0x7fe7bae00000, 138412032 [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7047 [pid 7044] <... munmap resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7047 attached [pid 7044] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] mkdir("./197", 0777 [pid 7047] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7044] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 7047] chdir("./195" [pid 7044] ioctl(4, LOOP_SET_FD, 3 [pid 7047] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 7044] <... ioctl resumed>) = 0 [pid 7047] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] ioctl(3, LOOP_CLR_FD [pid 7047] <... prctl resumed>) = 0 [pid 7046] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7047] setpgid(0, 0 [pid 7044] close(3 [pid 5059] <... ioctl resumed>) = 0 [pid 7047] <... setpgid resumed>) = 0 [pid 7047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] close(3 [pid 7047] <... openat resumed>) = 3 [pid 7044] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 7047] write(3, "1000", 4 [pid 7044] close(4 [pid 7047] <... write resumed>) = 4 [pid 7044] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7047] close(3 [pid 7044] mkdir("./file0", 0777) = 0 [pid 7047] <... close resumed>) = 0 [pid 7047] symlink("/dev/binderfs", "./binderfs" [pid 7044] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7047] <... symlink resumed>) = 0 [ 174.019150][ T7044] loop2: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 7048 attached [pid 7047] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7048 [pid 7047] <... futex resumed>) = 0 [pid 7048] set_robust_list(0x55558e6e36a0, 24 [pid 7047] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 7048] <... set_robust_list resumed>) = 0 [pid 7047] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7048] chdir("./198" [pid 7047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7048] <... chdir resumed>) = 0 [pid 7047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7047] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7048] <... prctl resumed>) = 0 [pid 7047] <... mprotect resumed>) = 0 [pid 7048] setpgid(0, 0 [pid 7047] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7048] <... setpgid resumed>) = 0 [pid 7047] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7049 attached ) = 3 [pid 7047] <... clone3 resumed> => {parent_tid=[7049]}, 88) = 7049 [pid 7049] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7048] write(3, "1000", 4 [pid 7047] rt_sigprocmask(SIG_SETMASK, [], [pid 7049] <... rseq resumed>) = 0 [pid 7049] set_robust_list(0x7fe7c32469a0, 24 [pid 7048] <... write resumed>) = 4 [pid 7047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7049] <... set_robust_list resumed>) = 0 [pid 7048] close(3 [pid 7047] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7049] rt_sigprocmask(SIG_SETMASK, [], [pid 7048] <... close resumed>) = 0 [pid 7049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7048] symlink("/dev/binderfs", "./binderfs" [pid 7047] <... futex resumed>) = 0 [pid 7049] memfd_create("syzkaller", 0 [pid 7048] <... symlink resumed>) = 0 [pid 7047] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7048] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] <... write resumed>) = 2097152 [pid 7049] <... memfd_create resumed>) = 3 [pid 7048] <... futex resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 7048] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] close(3) = 0 [pid 7048] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7049] <... mmap resumed>) = 0x7fe7bae00000 [pid 7048] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7046] munmap(0x7fe7bae00000, 138412032 [pid 7048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7050 ./strace-static-x86_64: Process 7050 attached [pid 7048] <... mmap resumed>) = 0x7fe7c3226000 [pid 7048] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7050] set_robust_list(0x55558e6e36a0, 24 [pid 7048] <... mprotect resumed>) = 0 [pid 7050] <... set_robust_list resumed>) = 0 [ 174.073171][ T7044] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 7050] chdir("./197" [pid 7046] <... munmap resumed>) = 0 [pid 7046] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7050] <... chdir resumed>) = 0 [pid 7048] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7049] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7048] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7046] <... openat resumed>) = 4 [pid 7044] <... mount resumed>) = 0 [pid 7050] <... prctl resumed>) = 0 [pid 7048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7050] setpgid(0, 0 [pid 7046] ioctl(4, LOOP_SET_FD, 3 [pid 7044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7051 attached [pid 7050] <... setpgid resumed>) = 0 [pid 7048] <... clone3 resumed> => {parent_tid=[7051]}, 88) = 7051 [pid 7044] <... openat resumed>) = 3 [pid 7051] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7048] rt_sigprocmask(SIG_SETMASK, [], [pid 7051] <... rseq resumed>) = 0 [pid 7048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7051] set_robust_list(0x7fe7c32469a0, 24 [pid 7050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7044] chdir("./file0" [pid 7051] <... set_robust_list resumed>) = 0 [pid 7048] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7044] <... chdir resumed>) = 0 [pid 7051] rt_sigprocmask(SIG_SETMASK, [], [pid 7048] <... futex resumed>) = 0 [pid 7051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7044] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7048] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7044] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7051] memfd_create("syzkaller", 0 [pid 7050] <... openat resumed>) = 3 [pid 7049] <... write resumed>) = 2097152 [pid 7046] <... ioctl resumed>) = 0 [pid 7044] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7043] <... futex resumed>) = 0 [pid 7050] write(3, "1000", 4 [pid 7051] <... memfd_create resumed>) = 3 [pid 7049] munmap(0x7fe7bae00000, 138412032 [pid 7046] close(3 [pid 7044] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7043] exit_group(0 [pid 7050] <... write resumed>) = 4 [pid 7051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7050] close(3 [pid 7046] <... close resumed>) = 0 [pid 7044] <... futex resumed>) = ? [pid 7043] <... exit_group resumed>) = ? [pid 7051] <... mmap resumed>) = 0x7fe7bae00000 [pid 7046] close(4 [pid 7044] +++ exited with 0 +++ [pid 7050] <... close resumed>) = 0 [pid 7049] <... munmap resumed>) = 0 [pid 7043] +++ exited with 0 +++ [pid 7050] symlink("/dev/binderfs", "./binderfs" [pid 7049] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7046] <... close resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7043, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 7050] <... symlink resumed>) = 0 [pid 7050] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 174.158269][ T7046] loop1: detected capacity change from 0 to 4096 [pid 5061] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7050] <... futex resumed>) = 0 [pid 7049] <... openat resumed>) = 4 [pid 7046] mkdir("./file0", 0777 [pid 5061] <... openat resumed>) = 3 [pid 7049] ioctl(4, LOOP_SET_FD, 3 [pid 7046] <... mkdir resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 7051] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7050] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 7050] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7050] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7050] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] newfstatat(AT_FDCWD, "./198/binderfs", [pid 7050] <... mmap resumed>) = 0x7fe7c3226000 [pid 7046] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7050] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] unlink("./198/binderfs" [pid 7050] <... mprotect resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 7050] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7050] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7049] <... ioctl resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 7049] close(3) = 0 [pid 7049] close(4) = 0 [pid 7049] mkdir("./file0", 0777./strace-static-x86_64: Process 7052 attached [pid 7050] <... clone3 resumed> => {parent_tid=[7052]}, 88) = 7052 [pid 7049] <... mkdir resumed>) = 0 [pid 5061] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7052] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7050] rt_sigprocmask(SIG_SETMASK, [], [pid 7049] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7052] <... rseq resumed>) = 0 [pid 7050] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7052] set_robust_list(0x7fe7c32469a0, 24 [pid 7050] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] newfstatat(AT_FDCWD, "./198/file0", [pid 7050] <... futex resumed>) = 0 [ 174.215001][ T7049] loop4: detected capacity change from 0 to 4096 [ 174.226691][ T7046] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 7052] <... set_robust_list resumed>) = 0 [pid 7050] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7052] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7052] memfd_create("syzkaller", 0 [pid 5061] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7052] <... memfd_create resumed>) = 3 [pid 5061] getdents64(4, [pid 7052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7052] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] close(4 [pid 7051] <... write resumed>) = 2097152 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./198/file0") = 0 [pid 7051] munmap(0x7fe7bae00000, 138412032 [pid 5061] getdents64(3, 0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./198") = 0 [pid 5061] mkdir("./199", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 7046] <... mount resumed>) = 0 [pid 7046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7046] chdir("./file0") = 0 [pid 7046] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7046] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] <... munmap resumed>) = 0 [pid 7046] <... futex resumed>) = 1 [pid 7045] <... futex resumed>) = 0 [pid 7046] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7045] exit_group(0 [pid 7051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7045] <... exit_group resumed>) = ? [ 174.261441][ T7049] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 7051] ioctl(4, LOOP_SET_FD, 3 [pid 7052] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7051] <... ioctl resumed>) = 0 [pid 7046] <... futex resumed>) = ? [pid 7051] close(3 [pid 7046] +++ exited with 0 +++ [pid 7045] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7045, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./196/binderfs" [pid 7051] <... close resumed>) = 0 [pid 7051] close(4 [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7051] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7051] mkdir("./file0", 0777) = 0 [pid 5060] newfstatat(AT_FDCWD, "./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [ 174.310290][ T7051] loop0: detected capacity change from 0 to 4096 [pid 7051] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 7049] <... mount resumed>) = 0 [pid 5060] rmdir("./196/file0" [pid 7052] <... write resumed>) = 2097152 [pid 5060] <... rmdir resumed>) = 0 [pid 7049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] getdents64(3, [pid 7049] chdir("./file0" [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7049] <... chdir resumed>) = 0 [pid 5060] close(3) = 0 [pid 7049] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] <... ioctl resumed>) = 0 [pid 5060] rmdir("./196") = 0 [pid 7049] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] mkdir("./197", 0777 [pid 7049] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7047] <... futex resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 7047] exit_group(0 [pid 5061] close(3 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7049] <... futex resumed>) = ? [pid 7047] <... exit_group resumed>) = ? [pid 5060] <... openat resumed>) = 3 [pid 7049] +++ exited with 0 +++ [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7053 attached [pid 7052] munmap(0x7fe7bae00000, 138412032 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 7053] set_robust_list(0x55558e6e36a0, 24 [pid 7052] <... munmap resumed>) = 0 [pid 7047] +++ exited with 0 +++ [pid 7053] <... set_robust_list resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7053 [pid 7053] chdir("./199") = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7047, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 7053] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 7053] <... prctl resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 7053] setpgid(0, 0) = 0 [pid 7053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7053] <... openat resumed>) = 3 [pid 7053] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7053] <... write resumed>) = 4 [pid 7053] close(3) = 0 [pid 7053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7052] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7053] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7052] <... openat resumed>) = 4 [pid 7053] <... futex resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 7053] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7052] ioctl(4, LOOP_SET_FD, 3 [pid 7053] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7053] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7053] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7053] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7054 attached [pid 7053] <... clone3 resumed> => {parent_tid=[7054]}, 88) = 7054 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7054] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7053] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] newfstatat(AT_FDCWD, "./195/binderfs", [pid 7054] <... rseq resumed>) = 0 [pid 7053] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7054] set_robust_list(0x7fe7c32469a0, 24 [pid 7053] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7054] <... set_robust_list resumed>) = 0 [pid 7053] <... futex resumed>) = 0 [pid 7054] rt_sigprocmask(SIG_SETMASK, [], [pid 7053] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7054] memfd_create("syzkaller", 0 [pid 5063] unlink("./195/binderfs") = 0 [pid 7054] <... memfd_create resumed>) = 3 [pid 7052] <... ioctl resumed>) = 0 [pid 7052] close(3) = 0 [pid 7054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7052] close(4 [pid 7054] <... mmap resumed>) = 0x7fe7bae00000 [pid 7052] <... close resumed>) = 0 [ 174.356777][ T7051] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 174.394707][ T7052] loop3: detected capacity change from 0 to 4096 [pid 5063] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 7054] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7052] mkdir("./file0", 0777) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 7052] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e6e3690) = 7055 ./strace-static-x86_64: Process 7055 attached [pid 7051] <... mount resumed>) = 0 [pid 5063] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7051] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./195/file0", [pid 7051] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7051] chdir("./file0") = 0 [pid 5063] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7051] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7051] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7051] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7055] set_robust_list(0x55558e6e36a0, 24 [pid 7051] <... futex resumed>) = 1 [pid 7048] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 7051] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7048] exit_group(0 [pid 5063] newfstatat(4, "", [pid 7051] <... futex resumed>) = ? [pid 7048] <... exit_group resumed>) = ? [pid 7055] <... set_robust_list resumed>) = 0 [pid 7051] +++ exited with 0 +++ [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7055] chdir("./197") = 0 [pid 7055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(4, [pid 7055] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7055] setpgid(0, 0) = 0 [pid 7055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7048] +++ exited with 0 +++ [pid 5063] getdents64(4, [pid 7055] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7055] write(3, "1000", 4 [pid 5063] close(4 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7048, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 7055] <... write resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 7055] close(3 [pid 5063] rmdir("./195/file0" [pid 7055] <... close resumed>) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 7055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 7055] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7055] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7055] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] getdents64(3, [pid 5059] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7055] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 7055] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(3, "", [pid 7055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] close(3 [pid 5059] getdents64(3, [pid 7055] <... mmap resumed>) = 0x7fe7c3226000 [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7055] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7054] <... write resumed>) = 2097152 [pid 5063] rmdir("./195" [pid 5059] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7055] <... mprotect resumed>) = 0 [pid 7055] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7055] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] newfstatat(AT_FDCWD, "./198/binderfs", [pid 7055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./196", 0777 [pid 5059] unlink("./198/binderfs" [pid 7055] <... clone3 resumed> => {parent_tid=[7056]}, 88) = 7056 [pid 7055] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 7055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7055] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7056 attached [pid 7055] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 7056] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7055] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7054] munmap(0x7fe7bae00000, 138412032 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = 0 [pid 7056] <... rseq resumed>) = 0 [ 174.458720][ T7052] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [pid 5059] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7056] set_robust_list(0x7fe7c32469a0, 24 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7056] <... set_robust_list resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./198/file0", [pid 7056] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7056] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7056] memfd_create("syzkaller", 0 [pid 7054] <... munmap resumed>) = 0 [pid 7052] <... mount resumed>) = 0 [pid 7056] <... memfd_create resumed>) = 3 [pid 7054] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7054] <... openat resumed>) = 4 [pid 7052] <... openat resumed>) = 3 [pid 5059] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7056] <... mmap resumed>) = 0x7fe7bae00000 [pid 7054] ioctl(4, LOOP_SET_FD, 3 [pid 7052] chdir("./file0" [pid 5059] <... openat resumed>) = 4 [pid 7052] <... chdir resumed>) = 0 [pid 7052] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5059] newfstatat(4, "", [pid 7052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7052] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7052] <... futex resumed>) = 1 [pid 7052] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7050] <... futex resumed>) = 0 [pid 7054] <... ioctl resumed>) = 0 [pid 7050] exit_group(0 [pid 7054] close(3 [pid 5059] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 7056] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7054] <... close resumed>) = 0 [pid 7052] <... futex resumed>) = ? [pid 7050] <... exit_group resumed>) = ? [pid 5059] rmdir("./198/file0" [pid 7054] close(4 [pid 5059] <... rmdir resumed>) = 0 [pid 7054] <... close resumed>) = 0 [pid 7052] +++ exited with 0 +++ [pid 7050] +++ exited with 0 +++ [pid 5059] getdents64(3, [pid 7054] mkdir("./file0", 0777 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7050, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 7054] <... mkdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5062] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7054] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./198" [pid 5062] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./199", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 7056] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 7056] munmap(0x7fe7bae00000, 138412032) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./197/binderfs") = 0 [pid 5062] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7056] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 174.533416][ T7054] loop2: detected capacity change from 0 to 4096 [ 174.566801][ T7054] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [pid 7056] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 7056] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7057 attached , child_tidptr=0x55558e6e3690) = 7057 [pid 7056] close(3) = 0 [pid 7056] close(4) = 0 [pid 7056] mkdir("./file0", 0777) = 0 [ 174.609473][ T7056] loop1: detected capacity change from 0 to 4096 [pid 7056] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7054] <... mount resumed>) = 0 [pid 7057] set_robust_list(0x55558e6e36a0, 24 [pid 5062] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7057] <... set_robust_list resumed>) = 0 [pid 7057] chdir("./196" [pid 7054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7057] <... chdir resumed>) = 0 [pid 7054] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./197/file0", [pid 7057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7054] chdir("./file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7054] <... chdir resumed>) = 0 [pid 5062] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7057] <... prctl resumed>) = 0 [pid 7054] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7057] setpgid(0, 0 [pid 5062] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7057] <... setpgid resumed>) = 0 [pid 7054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7054] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7053] <... futex resumed>) = 0 [pid 7057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 4 [pid 7054] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7053] exit_group(0 [pid 7057] <... openat resumed>) = 3 [pid 7054] <... futex resumed>) = ? [pid 7053] <... exit_group resumed>) = ? [pid 5062] newfstatat(4, "", [pid 7057] write(3, "1000", 4 [pid 7054] +++ exited with 0 +++ [pid 7053] +++ exited with 0 +++ [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7057] <... write resumed>) = 4 [pid 5062] getdents64(4, 0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7053, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5059] <... ioctl resumed>) = 0 [pid 7057] close(3 [pid 5062] getdents64(4, [pid 7057] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7057] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(4 [pid 7057] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5059] close(3) = 0 [pid 5061] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 7058 attached [pid 5062] rmdir("./197/file0" [pid 5061] newfstatat(3, "", [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7058 [pid 7058] set_robust_list(0x55558e6e36a0, 24 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7058] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(3, [pid 7058] chdir("./199" [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 7058] <... chdir resumed>) = 0 [pid 5061] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 7058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7058] <... prctl resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./199/binderfs", [pid 7058] setpgid(0, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7058] <... setpgid resumed>) = 0 [pid 5061] unlink("./199/binderfs" [pid 7058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... unlink resumed>) = 0 [pid 7058] <... openat resumed>) = 3 [pid 7058] write(3, "1000", 4) = 4 [pid 7058] close(3 [pid 5061] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7058] <... close resumed>) = 0 [pid 7057] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getdents64(3, [pid 7058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7058] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7058] <... futex resumed>) = 0 [pid 7058] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, NULL, 8) = 0 [pid 5062] close(3 [pid 7058] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7057] <... futex resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 7058] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7057] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5062] rmdir("./197" [pid 5061] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7058] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7057] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5062] mkdir("./198", 0777 [pid 7058] <... mprotect resumed>) = 0 [pid 7057] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5062] <... mkdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./199/file0", [pid 7058] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7057] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7058] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 7058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7058] <... clone3 resumed> => {parent_tid=[7059]}, 88) = 7059 [pid 7057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 174.652034][ T7056] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 5061] newfstatat(4, "", ./strace-static-x86_64: Process 7059 attached [pid 7058] rt_sigprocmask(SIG_SETMASK, [], [pid 7057] <... mmap resumed>) = 0x7fe7c3226000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7059] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7058] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7057] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 5061] getdents64(4, [pid 7059] <... rseq resumed>) = 0 [pid 7058] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] <... mprotect resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7059] set_robust_list(0x7fe7c32469a0, 24 [pid 7058] <... futex resumed>) = 0 [pid 7057] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7059] <... set_robust_list resumed>) = 0 [pid 7058] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7057] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7059] rt_sigprocmask(SIG_SETMASK, [], [pid 7057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0}./strace-static-x86_64: Process 7060 attached [pid 7059] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] getdents64(4, [pid 7060] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7057] <... clone3 resumed> => {parent_tid=[7060]}, 88) = 7060 [pid 7060] <... rseq resumed>) = 0 [pid 7057] rt_sigprocmask(SIG_SETMASK, [], [pid 7060] set_robust_list(0x7fe7c32469a0, 24 [pid 7057] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7060] <... set_robust_list resumed>) = 0 [pid 7057] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7060] rt_sigprocmask(SIG_SETMASK, [], [pid 7057] <... futex resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 7060] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7057] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] close(4 [pid 7059] memfd_create("syzkaller", 0 [pid 7060] memfd_create("syzkaller", 0 [pid 5061] <... close resumed>) = 0 [pid 7060] <... memfd_create resumed>) = 3 [pid 7060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7059] <... memfd_create resumed>) = 3 [pid 5061] rmdir("./199/file0" [pid 7060] <... mmap resumed>) = 0x7fe7bae00000 [pid 7059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... rmdir resumed>) = 0 [pid 7059] <... mmap resumed>) = 0x7fe7bae00000 [pid 5061] getdents64(3, [pid 7056] <... mount resumed>) = 0 [pid 7056] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 7056] chdir("./file0" [pid 5061] close(3 [pid 7056] <... chdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 7056] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] rmdir("./199" [pid 7056] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... rmdir resumed>) = 0 [pid 7056] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] mkdir("./200", 0777 [pid 7056] <... futex resumed>) = 1 [pid 7055] <... futex resumed>) = 0 [pid 7055] exit_group(0 [pid 5061] <... mkdir resumed>) = 0 [pid 7055] <... exit_group resumed>) = ? [pid 5061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7056] +++ exited with 0 +++ [pid 7055] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7055, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5060] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./197/binderfs") = 0 [pid 5060] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7059] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = 0 [pid 7060] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5062] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5060] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7061 attached [pid 5060] newfstatat(AT_FDCWD, "./197/file0", [pid 5062] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7061 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7061] set_robust_list(0x55558e6e36a0, 24 [pid 5060] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 7061] <... set_robust_list resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7061] chdir("./198" [pid 5060] getdents64(4, [pid 7061] <... chdir resumed>) = 0 [pid 7061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 7061] <... prctl resumed>) = 0 [pid 5060] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 7061] setpgid(0, 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./197/file0" [pid 7059] <... write resumed>) = 2097152 [pid 7061] <... setpgid resumed>) = 0 [pid 7059] munmap(0x7fe7bae00000, 138412032 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 7061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 7061] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 7061] write(3, "1000", 4) = 4 [pid 5060] rmdir("./197" [pid 7061] close(3) = 0 [pid 7061] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... rmdir resumed>) = 0 [pid 7060] <... write resumed>) = 2097152 [pid 7060] munmap(0x7fe7bae00000, 138412032 [pid 7061] <... symlink resumed>) = 0 [pid 5060] mkdir("./198", 0777 [pid 7061] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7060] <... munmap resumed>) = 0 [pid 7059] <... munmap resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7061] <... futex resumed>) = 0 [pid 7059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 7061] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7060] <... openat resumed>) = 4 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 7059] <... openat resumed>) = 4 [pid 7061] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7060] ioctl(4, LOOP_SET_FD, 3 [pid 7059] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 7061] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5061] <... close resumed>) = 0 [pid 7060] <... ioctl resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7060] close(3) = 0 ./strace-static-x86_64: Process 7062 attached [pid 7060] close(4) = 0 [pid 7062] set_robust_list(0x55558e6e36a0, 24 [pid 7060] mkdir("./file0", 0777 [pid 7061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7062 [pid 7061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7061] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7062] <... set_robust_list resumed>) = 0 [pid 7061] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7060] <... mkdir resumed>) = 0 [pid 7062] chdir("./200") = 0 [pid 7061] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7059] <... ioctl resumed>) = 0 [pid 7062] <... prctl resumed>) = 0 [pid 7061] <... clone3 resumed> => {parent_tid=[7063]}, 88) = 7063 [pid 7059] close(3) = 0 [pid 7061] rt_sigprocmask(SIG_SETMASK, [], [pid 7059] close(4./strace-static-x86_64: Process 7063 attached [pid 7062] setpgid(0, 0 [pid 7061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7060] mount("/dev/loop4", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7059] <... close resumed>) = 0 [pid 7063] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7062] <... setpgid resumed>) = 0 [pid 7061] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] mkdir("./file0", 0777 [pid 7063] <... rseq resumed>) = 0 [pid 7062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7061] <... futex resumed>) = 0 [pid 7059] <... mkdir resumed>) = 0 [ 174.862640][ T7060] loop4: detected capacity change from 0 to 4096 [ 174.863443][ T7059] loop0: detected capacity change from 0 to 4096 [ 174.898095][ T7060] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [pid 7061] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7059] mount("/dev/loop0", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7063] set_robust_list(0x7fe7c32469a0, 24 [pid 7062] <... openat resumed>) = 3 [pid 7063] <... set_robust_list resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7064 attached [pid 7064] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7063] rt_sigprocmask(SIG_SETMASK, [], [pid 7062] write(3, "1000", 4 [pid 7063] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7062] <... write resumed>) = 4 [pid 7064] chdir("./198" [pid 7063] memfd_create("syzkaller", 0 [pid 7062] close(3) = 0 [pid 7062] symlink("/dev/binderfs", "./binderfs" [pid 7063] <... memfd_create resumed>) = 3 [pid 7062] <... symlink resumed>) = 0 [pid 7063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7062] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] <... mmap resumed>) = 0x7fe7bae00000 [pid 7062] <... futex resumed>) = 0 [pid 7062] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5060] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7064 [pid 7062] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7062] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7064] <... chdir resumed>) = 0 [pid 7064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7062] <... mmap resumed>) = 0x7fe7c3226000 [pid 7064] <... prctl resumed>) = 0 [pid 7064] setpgid(0, 0 [pid 7062] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE [pid 7064] <... setpgid resumed>) = 0 [pid 7062] <... mprotect resumed>) = 0 [pid 7064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7062] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7064] write(3, "1000", 4) = 4 [pid 7064] close(3) = 0 [pid 7064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7064] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7062] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7064] <... futex resumed>) = 0 [pid 7062] <... clone3 resumed> => {parent_tid=[7065]}, 88) = 7065 ./strace-static-x86_64: Process 7065 attached [pid 7064] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 7062] rt_sigprocmask(SIG_SETMASK, [], [pid 7065] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7064] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7064] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7062] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] <... rseq resumed>) = 0 [pid 7062] <... futex resumed>) = 0 [pid 7064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7062] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7065] set_robust_list(0x7fe7c32469a0, 24 [pid 7064] <... mmap resumed>) = 0x7fe7c3226000 [ 174.910652][ T7059] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [pid 7064] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7065] <... set_robust_list resumed>) = 0 [pid 7065] rt_sigprocmask(SIG_SETMASK, [], [pid 7064] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7065] memfd_create("syzkaller", 0) = 3 [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7064] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7059] <... mount resumed>) = 0 [pid 7065] <... mmap resumed>) = 0x7fe7bae00000 [pid 7064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} [pid 7059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7064] <... clone3 resumed> => {parent_tid=[7066]}, 88) = 7066 ./strace-static-x86_64: Process 7066 attached [pid 7064] rt_sigprocmask(SIG_SETMASK, [], [pid 7060] <... mount resumed>) = 0 [pid 7059] <... openat resumed>) = 3 [pid 7066] rseq(0x7fe7c3246fe0, 0x20, 0, 0x53053053 [pid 7064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7060] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7066] <... rseq resumed>) = 0 [pid 7064] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7060] <... openat resumed>) = 3 [pid 7066] set_robust_list(0x7fe7c32469a0, 24 [pid 7064] <... futex resumed>) = 0 [pid 7060] chdir("./file0" [pid 7066] <... set_robust_list resumed>) = 0 [pid 7064] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7060] <... chdir resumed>) = 0 [pid 7059] chdir("./file0" [pid 7066] rt_sigprocmask(SIG_SETMASK, [], [pid 7060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7059] <... chdir resumed>) = 0 [pid 7066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7059] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7059] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] memfd_create("syzkaller", 0 [pid 7063] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7060] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] <... futex resumed>) = 1 [pid 7058] <... futex resumed>) = 0 [pid 7066] <... memfd_create resumed>) = 3 [pid 7060] <... futex resumed>) = 1 [pid 7059] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7058] exit_group(0 [pid 7057] <... futex resumed>) = 0 [pid 7066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7060] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7058] <... exit_group resumed>) = ? [pid 7057] exit_group(0 [pid 7066] <... mmap resumed>) = 0x7fe7bae00000 [pid 7060] <... futex resumed>) = ? [pid 7059] <... futex resumed>) = ? [pid 7057] <... exit_group resumed>) = ? [pid 7060] +++ exited with 0 +++ [pid 7059] +++ exited with 0 +++ [pid 7058] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7058, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5059] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7057] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7057, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5059] newfstatat(AT_FDCWD, "./199/binderfs", [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7065] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5059] unlink("./199/binderfs" [pid 5063] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55558e6e4730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./196/binderfs") = 0 [pid 5063] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./199/file0", [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7066] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5063] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7065] <... write resumed>) = 2097152 [pid 5059] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./196/file0", [pid 5059] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(4, "", [pid 5063] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 5063] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 4 [pid 5059] getdents64(4, [pid 5063] newfstatat(4, "", [pid 5059] <... getdents64 resumed>0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(4 [pid 5063] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6ec770 /* 2 entries */, 32768) = 48 [pid 5059] rmdir("./199/file0" [pid 7065] munmap(0x7fe7bae00000, 138412032 [pid 5063] getdents64(4, 0x55558e6ec770 /* 0 entries */, 32768) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] close(4 [pid 7063] <... write resumed>) = 2097152 [pid 5063] <... close resumed>) = 0 [pid 5059] getdents64(3, [pid 5063] rmdir("./196/file0") = 0 [pid 5059] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 7065] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55558e6e4730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] close(3) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] rmdir("./196" [pid 5059] rmdir("./199" [pid 5063] <... rmdir resumed>) = 0 [pid 7063] munmap(0x7fe7bae00000, 138412032 [pid 7066] <... write resumed>) = 2097152 [pid 7065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] mkdir("./197", 0777 [pid 5059] <... rmdir resumed>) = 0 [pid 7066] munmap(0x7fe7bae00000, 138412032 [pid 7065] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 7065] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] mkdir("./200", 0777 [pid 7066] <... munmap resumed>) = 0 [pid 7063] <... munmap resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 7063] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7063] ioctl(4, LOOP_SET_FD, 3 [pid 7066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7065] <... ioctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... mkdir resumed>) = 0 [pid 7066] <... openat resumed>) = 4 [pid 7065] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7065] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 7066] ioctl(4, LOOP_SET_FD, 3 [pid 7065] close(4 [pid 7066] <... ioctl resumed>) = 0 [pid 7065] <... close resumed>) = 0 [pid 7065] mkdir("./file0", 0777) = 0 [pid 7063] <... ioctl resumed>) = 0 [pid 7066] close(3) = 0 [pid 7066] close(4) = 0 [pid 7066] mkdir("./file0", 0777) = 0 [pid 7066] mount("/dev/loop1", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7065] mount("/dev/loop2", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 7063] close(3) = 0 [pid 7063] close(4) = 0 [pid 7063] mkdir("./file0", 0777) = 0 [ 175.101394][ T7065] loop2: detected capacity change from 0 to 4096 [ 175.106485][ T7063] loop3: detected capacity change from 0 to 4096 [ 175.114259][ T7066] loop1: detected capacity change from 0 to 4096 [ 175.128988][ T7065] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 175.129682][ T7066] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [pid 7063] mount("/dev/loop3", "./file0", "ntfs3", MS_NODEV|MS_NODIRATIME|MS_LAZYTIME, "sparse,sys_immutable,iocharset=iso8859-15,gid=0x0000000000000000,discard,prealloc,dmask=000000000000"... [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7067 attached [pid 7067] set_robust_list(0x55558e6e36a0, 24) = 0 [pid 7067] chdir("./200") = 0 [pid 7067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7067 [pid 7067] <... prctl resumed>) = 0 [pid 7067] setpgid(0, 0) = 0 [pid 7067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7067] write(3, "1000", 4) = 4 [pid 7067] close(3) = 0 [pid 7067] symlink("/dev/binderfs", "./binderfs") = 0 [ 175.181159][ T7063] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 175.192516][ C1] ================================================================== [ 175.200620][ C1] BUG: KASAN: out-of-bounds in end_buffer_read_sync+0xc1/0xd0 [ 175.208318][ C1] Write of size 4 at addr ffffc9000b9076c0 by task ksoftirqd/1/23 [ 175.216145][ C1] [ 175.218489][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [pid 7067] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = 0 [pid 7067] <... futex resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7067] rt_sigaction(SIGRT_1, {sa_handler=0x7fe7c32b5fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe7c32a7190}, [pid 5063] <... clone resumed>, child_tidptr=0x55558e6e3690) = 7068 [pid 7067] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe7c3226000 [pid 7067] mprotect(0x7fe7c3227000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fe7c3246990, parent_tid=0x7fe7c3246990, exit_signal=0, stack=0x7fe7c3226000, stack_size=0x20300, tls=0x7fe7c32466c0} => {parent_tid=[7069]}, 88) = 7069 [pid 7067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7067] futex(0x7fe7c33366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 175.228053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 175.238130][ C1] Call Trace: [ 175.241449][ C1] [ 175.244434][ C1] dump_stack_lvl+0x241/0x360 [ 175.249241][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.254475][ C1] ? __pfx__printk+0x10/0x10 [ 175.259163][ C1] ? _printk+0xd5/0x120 [ 175.263357][ C1] print_report+0x169/0x550 [ 175.267913][ C1] ? __virt_addr_valid+0xbd/0x520 [ 175.273047][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 175.278289][ C1] kasan_report+0x143/0x180 [ 175.282864][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 175.288115][ C1] kasan_check_range+0x282/0x290 [ 175.293354][ C1] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 175.299150][ C1] end_buffer_read_sync+0xc1/0xd0 [ 175.304231][ C1] end_bio_bh_io_sync+0xbf/0x120 [ 175.309199][ C1] blk_update_request+0x55d/0x1050 [ 175.314406][ C1] blk_mq_end_request+0x3e/0x70 [ 175.319300][ C1] blk_done_softirq+0x100/0x150 [ 175.324265][ C1] __do_softirq+0x2bc/0x943 [ 175.328909][ C1] ? run_ksoftirqd+0xc5/0x130 [ 175.333635][ C1] ? __pfx___do_softirq+0x10/0x10 [ 175.338787][ C1] run_ksoftirqd+0xc5/0x130 [ 175.343335][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 175.348485][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 175.353630][ C1] smpboot_thread_fn+0x544/0xa30 [ 175.358622][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 175.363691][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 175.369220][ C1] kthread+0x2f0/0x390 [ 175.373290][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 175.378763][ C1] ? __pfx_kthread+0x10/0x10 [ 175.383345][ C1] ret_from_fork+0x4b/0x80 [ 175.387779][ C1] ? __pfx_kthread+0x10/0x10 [ 175.392360][ C1] ret_from_fork_asm+0x1a/0x30 [ 175.397135][ C1] [ 175.400161][ C1] [ 175.402473][ C1] The buggy address belongs to the virtual mapping at [ 175.402473][ C1] [ffffc9000b900000, ffffc9000b909000) created by: [ 175.402473][ C1] copy_process+0x5d1/0x3df0 [ 175.420170][ C1] [ 175.422508][ C1] The buggy address belongs to the physical page: [ 175.428916][ C1] page:ffffea0000af55c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bd57 [ 175.439052][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 175.446260][ C1] page_type: 0xffffffff() [ 175.450599][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 175.459189][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 175.467808][ C1] page dumped because: kasan: bad access detected [ 175.474232][ C1] page_owner tracks the page as allocated [ 175.479960][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 7064, tgid 7064 (syz-executor353), ts 174984207085, free_ts 159794166950 [ 175.499573][ C1] post_alloc_hook+0x1ea/0x210 [ 175.504355][ C1] get_page_from_freelist+0x33ea/0x3580 [ 175.509895][ C1] __alloc_pages+0x256/0x680 [ 175.514511][ C1] alloc_pages_mpol+0x3de/0x650 [ 175.519367][ C1] __vmalloc_node_range+0x9a4/0x14a0 [ 175.524649][ C1] dup_task_struct+0x3e9/0x7d0 [ 175.529403][ C1] copy_process+0x5d1/0x3df0 [ 175.534000][ C1] kernel_clone+0x223/0x840 [ 175.538492][ C1] __se_sys_clone3+0x2cb/0x350 [ 175.543246][ C1] do_syscall_64+0xfb/0x240 [ 175.547738][ C1] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 175.553695][ C1] page last free pid 6796 tgid 6796 stack trace: [ 175.560006][ C1] free_unref_page_prepare+0x95d/0xa80 [ 175.565458][ C1] free_unref_page+0x37/0x3f0 [ 175.570233][ C1] __mmdrop+0xb9/0x3d0 [ 175.574291][ C1] exit_mm+0x220/0x310 [ 175.578349][ C1] do_exit+0x99e/0x27e0 [ 175.582498][ C1] do_group_exit+0x207/0x2c0 [ 175.587115][ C1] __x64_sys_exit_group+0x3f/0x40 [ 175.592653][ C1] do_syscall_64+0xfb/0x240 [ 175.597155][ C1] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 175.603055][ C1] [ 175.605366][ C1] Memory state around the buggy address: [ 175.611030][ C1] ffffc9000b907580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 175.619958][ C1] ffffc9000b907600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [pid 7067] futex(0x7fe7c33366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7066] <... mount resumed>) = 0 [ 175.628166][ C1] >ffffc9000b907680: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 00 00 f2 [ 175.636229][ C1] ^ [ 175.642638][ C1] ffffc9000b907700: f2 f2 f2 f2 00 f2 f2 f2 01 f3 f3 f3 00 00 00 00 [ 175.650705][ C1] ffffc9000b907780: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 175.658763][ C1] ================================================================== [ 175.666912][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [pid 7066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7066] chdir("./file0") = 0 [pid 7066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7066] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 175.674123][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 175.683868][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 175.693951][ C1] Call Trace: [ 175.697253][ C1] [ 175.700204][ C1] dump_stack_lvl+0x241/0x360 [ 175.704908][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.710412][ C1] ? __pfx__printk+0x10/0x10 [ 175.715058][ C1] ? vscnprintf+0x5d/0x90 [ 175.719492][ C1] panic+0x349/0x860 [ 175.723426][ C1] ? check_panic_on_warn+0x21/0xb0 [ 175.728572][ C1] ? __pfx_panic+0x10/0x10 [pid 7066] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7065] <... mount resumed>) = 0 [pid 7065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7065] chdir("./file0") = 0 [pid 7065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7065] futex(0x7fe7c33366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7062] <... futex resumed>) = 0 [pid 7065] futex(0x7fe7c33366a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 175.733022][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 175.739025][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 175.744958][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.751339][ C1] ? print_report+0x502/0x550 [ 175.756046][ C1] check_panic_on_warn+0x86/0xb0 [ 175.761026][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 175.766261][ C1] end_report+0x6e/0x140 [ 175.770507][ C1] kasan_report+0x154/0x180 [ 175.775022][ C1] ? end_buffer_read_sync+0xc1/0xd0 [ 175.780218][ C1] kasan_check_range+0x282/0x290 [ 175.785148][ C1] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 175.790881][ C1] end_buffer_read_sync+0xc1/0xd0 [ 175.795898][ C1] end_bio_bh_io_sync+0xbf/0x120 [ 175.800826][ C1] blk_update_request+0x55d/0x1050 [ 175.805934][ C1] blk_mq_end_request+0x3e/0x70 [ 175.810776][ C1] blk_done_softirq+0x100/0x150 [ 175.815616][ C1] __do_softirq+0x2bc/0x943 [ 175.820116][ C1] ? run_ksoftirqd+0xc5/0x130 [ 175.824784][ C1] ? __pfx___do_softirq+0x10/0x10 [ 175.829801][ C1] run_ksoftirqd+0xc5/0x130 [ 175.834293][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 175.839501][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 175.844605][ C1] smpboot_thread_fn+0x544/0xa30 [ 175.849628][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 175.854906][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 175.860365][ C1] kthread+0x2f0/0x390 [ 175.864428][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 175.869871][ C1] ? __pfx_kthread+0x10/0x10 [ 175.874449][ C1] ret_from_fork+0x4b/0x80 [ 175.878871][ C1] ? __pfx_kthread+0x10/0x10 [ 175.883451][ C1] ret_from_fork_asm+0x1a/0x30 [ 175.888215][ C1] [ 175.891324][ C1] Kernel Offset: disabled [ 175.895675][ C1] Rebooting in 86400 seconds..